last executing test programs: 9m55.495208972s ago: executing program 2 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getpgid(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x55fd, &(0x7f0000000180)={0x0, 0x5a3, 0xc6, 0x80002, 0x382}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 9m51.23777543s ago: executing program 2 (id=1593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) semtimedop(0x0, 0x0, 0x0, 0x0) 9m50.908242415s ago: executing program 2 (id=1599): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="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", 0xfe}, {&(0x7f00000000c0)="6015a0208a448099488fd57f984484afaca1cda0b7a21822486103a507d416784fb8531088e316062e9f9ac9e942148531e38c545eeae59cdd7eb04e30c495560e90a4db067214305dc27f9574c2", 0x4e}, {&(0x7f0000000680)="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", 0x385}], 0x3, 0x0, 0x0, 0x44844}, 0x40001) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) close(r1) 9m50.76979333s ago: executing program 2 (id=1602): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0xb109a, 0x0) 9m49.616901554s ago: executing program 2 (id=1606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 9m49.204697748s ago: executing program 2 (id=1609): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) 9m48.655439976s ago: executing program 32 (id=1609): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) 4m38.541686955s ago: executing program 4 (id=2325): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_open(0x0, 0x0, 0x42, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x2, 0x3, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 4m36.971539695s ago: executing program 4 (id=2328): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3a6}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r9, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x20801a, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',w', @ANYRESHEX=r9, @ANYBLOB=',directio,k']) read$FUSE(r6, &(0x7f00000022c0)={0x2020}, 0x2020) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4m31.222256869s ago: executing program 4 (id=2335): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_clone3(&(0x7f0000000640)={0x20000, &(0x7f0000000300), &(0x7f0000000340)=0x0, 0x0, {0x17}, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, {r0}}, 0x58) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', 0x0, 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) unlink(0x0) clock_gettime(0x0, &(0x7f0000000940)) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) utimes(0x0, 0x0) prlimit64(r4, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) bind$bt_hci(r0, 0x0, 0x0) gettid() mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x92dcd0, 0x0) bind$inet(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) 4m28.355954902s ago: executing program 4 (id=2340): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000008009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x6) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r7, r6, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 4m23.239954718s ago: executing program 4 (id=2346): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ce6a743e21f04a4a63b96d68c90bace01a"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) syz_open_procfs(r1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0xab, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0205649, &(0x7f0000000600)=0x2) r5 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) sendmsg$nl_generic(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a00010000"], 0x18}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @multicast2}, {0x6, @random}, 0xc4, {0x2, 0x4e21, @private=0xa010102}, 'pimreg0\x00'}) socket(0x1e, 0x4, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 4m19.78273712s ago: executing program 4 (id=2352): r0 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffff48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2, 0x6}}}, 0x24}}, 0x4004080) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x11, 0x9, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4m18.629086847s ago: executing program 33 (id=2352): r0 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffff48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2, 0x6}}}, 0x24}}, 0x4004080) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x11, 0x9, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 19.208893735s ago: executing program 0 (id=3194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x93, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x8c, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0xf968, 0x1e}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x5, 0x80}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x3, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x60, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x0, 0x81, 0x2, 0x8, 0x5}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x406}}]}) 14.419789391s ago: executing program 0 (id=3202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000095fe"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000420000000e0000006e657464657673696d0000000f0002006e657464657673696d300000c69c87de6b325f64726f707300"/70], 0x4c}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r3) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/vmstat\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1, 0x10001, 0x4) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000440)=@ethtool_coalesce={0xe, 0x401, 0x8, 0x6, 0xffff, 0x0, 0x7, 0x5, 0xa999, 0x6698, 0x4, 0xffff, 0x1, 0xfffffffb, 0x5, 0xf, 0x40, 0x1fe0, 0x2, 0x5, 0x27b7, 0x7, 0x60}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYRES8=r7], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc8, &(0x7f0000000640)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r10, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) 12.988388959s ago: executing program 5 (id=3204): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1}, 0x18) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x3, r3, 0x0, &(0x7f0000fb3000/0xf000)=nil, 0xf000}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r5 = syz_io_uring_setup(0x5026, &(0x7f0000000240)={0x0, 0xaba5, 0x8, 0x1, 0x24f}, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20004050, &(0x7f0000000440)={0x11, 0x18, 0x0, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_io_uring_setup(0x48fb, &(0x7f0000000080)={0x0, 0x8cf9, 0x400, 0x2, 0x11c, 0x0, r5}, &(0x7f0000000000), &(0x7f0000000100)) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64", @ANYRES8], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000015c0)={0x28, 0x5, r3, r3, 0xa92, 0x910a0000, 0x3fff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r3}) futex(&(0x7f0000000340), 0x4, 0x2, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)=0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000005984bb75000000000000000000000000000008f2a7ae36f63f5332df84ed0923dda43c36d6161fdcb702036685d1b3929d6a445182"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.897023747s ago: executing program 0 (id=3206): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map, 0xffffffffffffffff, 0x14, 0x30, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001ac0)={0x29, 0x5}, 0x29) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f00000002c0)={0x5, 0x1, 0x6}, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}]) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x519102, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000280)=0x9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) 11.560336097s ago: executing program 3 (id=3207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "cef74e445a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.20517461s ago: executing program 6 (id=3208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) 10.906531477s ago: executing program 3 (id=3209): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/prev\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x3, 'team0\x00', {0x9}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0001000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xc1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000630162000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x20) lseek(r5, 0x200000002, 0x0) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0x80885659, &(0x7f0000000080)={0x8, 0x980902, 0x0, 0x4, 0x2, 0x0, 0xfffffffc}) 10.076708349s ago: executing program 6 (id=3210): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) clock_getres(0xfffffffffffffff1, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0], 0x48}}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) 9.991556936s ago: executing program 1 (id=3211): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x7, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="ec0e3dd931de0bc4b2331e8ab29e651b821b1fe70513f756ec61f1617b5a6fe9ff37ab8600"/51], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd08, @void, @value}, 0x94) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000000)="adbcc72ca6d732549f13db1a0206c4583a651644a810e3241e5547ad229e6b5c", 0x20) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, &(0x7f0000000140)) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x3}, 0x8) 7.363872928s ago: executing program 1 (id=3212): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0xffffffff, @loopback}, 0x80, 0x0}, 0xff87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="020bf400030000002cbd7000fcdadf250100080000008000"], 0x18}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e000406a80016c008000e400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/180, 0x10002}], 0x1, 0x0, 0xe}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{}, "24eaf7a2ee66e95b", "3055fbfe96bf1afd87dc98fde2ee85b3", '\x00', "4e694600000000e4"}, 0x28) 7.314431653s ago: executing program 6 (id=3213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 7.305223383s ago: executing program 3 (id=3214): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x20, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000140)={{0x6, @rose, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) listen(r6, 0x1ad72f7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) 6.965684864s ago: executing program 5 (id=3215): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) 5.671828196s ago: executing program 3 (id=3216): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x6f, 0x4d, 0x21, 0x40, 0xf3d, 0x68aa, 0x8e4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2, 0x20, 0x9, [{{0x9, 0x4, 0x14, 0x9, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) 5.31403753s ago: executing program 1 (id=3217): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200035c0, 0x0, 0x0, 0x200035f0, 0x20003620], 0x0, 0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000a07debbd2251d47700000000000000000000000000000000ffffffff100000000000000000000000ddffff80"]}, 0xe4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r1 = socket(0x29, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) socket(0x15, 0x5, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@none}]}) socket$inet_smc(0x2b, 0x1, 0x0) 5.144648819s ago: executing program 0 (id=3218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000039c0)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x10, 0x28, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0600", "008c5a775bddcf9d002e18ce8031eb1b", '\x00', "3a8ddd39f176b647"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x0, 0x6, "df3f0400000000000000000000000609000040"}) syz_open_pts(r2, 0x88380) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) 3.895659022s ago: executing program 1 (id=3219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = syz_usb_connect$cdc_ncm(0x5, 0x93, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x8c, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0xf968, 0x1e}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x5, 0x80}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x3, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x60, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x0, 0x81, 0x2, 0x8, 0x5}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_disconnect(r4) shutdown(r3, 0x0) 3.858421627s ago: executing program 5 (id=3220): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000000c300)=""/102400, 0x19000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xb, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) setpriority(0x1, 0x0, 0x9) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000100)={0x46, 0xa, 0x3, "5065723549960c629f09123d045a1ad2fc594b090725c27bc56e0a2cc1211512", 0x34343459}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x1b, 0xffffffff, 0x3e}, 0x2c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000040)=0x5f, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200000000a254fe946c8d0cd41489ea16bfca9e7962f109d9da012d09928eafb166345b9a521ac4899666f492f473d18d5559cb9ddc91ba8e82fc1f00890fe50fa0732ecda5740c61a39b8f3a57f95294f883616a0afe5f75ad38da522d893c3bda5d02f2c5e1713329d19931995edc1b4e73f5aa541b05574a1561e0090703e9fd16d612f8b9939d28c79fae42271d4ae510bcd303f1952feab97c45937bbe858f6526f4061adf03e216648de38d409c0eef68"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) 3.370209787s ago: executing program 3 (id=3221): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000500)=""/60, 0x50, 0x3c, 0x0, 0x7, 0x0, @void, @value}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x3800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x13, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x5}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xa, &(0x7f0000000400)=""/10, 0x40f00, 0x11, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r5, r6], &(0x7f0000000680)=[{0x1, 0x4, 0x2, 0x1}, {0x0, 0x1, 0x10, 0x7}, {0x4, 0x4, 0x7, 0x8}, {0x5, 0x1, 0x3, 0x1}], 0x10, 0x1ff, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r7 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000080)="69ff", 0x2}], 0x1) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = memfd_create(&(0x7f0000001140)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\x061] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16\x00\x00\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r11, 0x409, 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000016, 0x11, r11, 0x80000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, r10}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000d00)=ANY=[@ANYBLOB="ffffffffffff00000600000000000086dd64619100000000bb00000000000000000000005190782200ae34072355ce0000000000"], 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r13, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6}]}) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[], 0x0) 3.369528308s ago: executing program 6 (id=3222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x38ba00, 0x144) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r5, 0x6}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x140, 0x12) r7 = syz_open_procfs(0x0, 0x0) getdents64(r7, &(0x7f0000002140)=""/245, 0xf5) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r8, 0x0, 0x20000000}, 0x20) madvise(&(0x7f00006d2000/0x2000)=nil, 0x2000, 0xc) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r9, &(0x7f0000000300)='1\x00', 0xffffff4a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r9, &(0x7f0000000000)='2\x00', 0x2) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) 3.129840267s ago: executing program 1 (id=3223): socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000300)={{0x2f, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e24, 0x2, 'rr\x00', 0x4, 0x401, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x10000, 0x5, 0xfc, 0xe}}, 0x44) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002b00b99f000000000000000001"], 0x114}], 0x1}, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000100)={0x8}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000024c0)=ANY=[@ANYBLOB="240000000104010100b180b5db5a66b04500000605000100010000000800034000002028"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x7, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 2.347527059s ago: executing program 5 (id=3224): syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2ec, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "cef74e445a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.220202856s ago: executing program 6 (id=3225): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_usb_connect$cdc_ncm(0x5, 0x93, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x8c, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0xf968, 0x1e}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x5, 0x80}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x3, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x60, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x0, 0x81, 0x2, 0x8, 0x5}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_disconnect(r2) shutdown(0xffffffffffffffff, 0x0) 2.099746217s ago: executing program 3 (id=3226): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0xb01}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000000)={0x0, 0xffa1, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.064115652s ago: executing program 0 (id=3227): syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2ec, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "cef74e445a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.918484736s ago: executing program 5 (id=3228): syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2ec, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "cef74e445a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.70908153s ago: executing program 0 (id=3229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 159.694314ms ago: executing program 1 (id=3230): ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x5, 0x0, 0x0, 0x9, 0xbffffffffffffffd, 0x5}, {0x800000fa, 0x8, 0xb56f, 0x5}, 0x401, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x4d2, 0x32}, 0x2, @in6=@local, 0x3506, 0x1, 0x0, 0x0, 0xff, 0xfffffffd}}, 0xe8) socket$key(0xf, 0x3, 0x2) write$binfmt_script(r2, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 140.888945ms ago: executing program 5 (id=3231): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x6f, 0x4d, 0x21, 0x40, 0xf3d, 0x68aa, 0x8e4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2, 0x20, 0x9, [{{0x9, 0x4, 0x14, 0x9, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) 0s ago: executing program 6 (id=3232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): umber=0 [ 808.077140][ T5903] usb 5-1: config 0 descriptor?? [ 808.278552][T12171] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 808.318049][T12171] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 808.400360][T12171] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 808.723941][T12171] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 809.008948][ T5903] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 809.054688][ T5903] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 809.196228][ T5903] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 809.289552][ T5903] usb 5-1: USB disconnect, device number 15 [ 809.410469][T12171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.518012][T12171] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.558083][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.565262][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.628732][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.635939][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.662511][T11276] Bluetooth: hci3: command tx timeout [ 809.911015][T12252] hsr0: entered promiscuous mode [ 810.163194][T12255] netlink: 'syz.1.1639': attribute type 5 has an invalid length. [ 810.454010][T12171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.618078][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 810.650814][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'. [ 810.757724][T12171] veth0_vlan: entered promiscuous mode [ 810.769020][T12171] veth1_vlan: entered promiscuous mode [ 810.805182][T12171] veth0_macvtap: entered promiscuous mode [ 810.817108][T12171] veth1_macvtap: entered promiscuous mode [ 810.833566][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.844531][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.856024][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.866889][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.877288][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.888994][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.900032][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.911829][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.922165][T12240] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 810.930647][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.942044][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.960212][T12171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.979230][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.990674][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.001924][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.013038][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.024249][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.035342][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.046711][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.064584][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.084321][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.095034][T12240] usb 4-1: Using ep0 maxpacket: 16 [ 811.113909][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.125554][T12240] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.138313][T12171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.146438][T12240] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.160879][T12240] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 811.174628][T12171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.185529][T12171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.195508][T12240] usb 4-1: config 0 interface 0 has no altsetting 0 [ 811.205105][T12171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.214387][T12240] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 811.223866][T12171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.233169][T12240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.260706][T12240] usb 4-1: config 0 descriptor?? [ 811.373639][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.383314][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.433164][ T8262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.441749][ T8262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.667496][T11276] Bluetooth: hci3: command tx timeout [ 811.699262][T12240] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5010.0007/input/input13 [ 811.737216][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1650'. [ 811.783876][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1650'. [ 811.808475][T12240] kye 0003:0458:5010.0007: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 811.882060][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1650'. [ 811.904531][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1650'. [ 812.154285][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 812.154303][ T29] audit: type=1326 audit(2000000369.225:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12307 comm="syz.5.1655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8116d7ff19 code=0x0 [ 812.337762][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 812.347560][T12316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1658'. [ 812.725658][ C1] kye 0003:0458:5010.0007: usb_submit_urb(ctrl) failed: -1 [ 813.486054][ T5873] usb 4-1: USB disconnect, device number 16 [ 813.606319][ T29] audit: type=1800 audit(2000000370.730:588): pid=12339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1666" name="/" dev="9p" ino=2 res=0 errno=0 [ 813.650144][T11276] Bluetooth: hci3: command tx timeout [ 813.785680][T12327] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 813.937921][T12327] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 813.950089][T12327] usb 5-1: config 0 has no interface number 0 [ 813.958896][T12327] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 51141, setting to 1024 [ 813.977061][T12327] usb 5-1: config 0 interface 120 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 813.995212][T12327] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 814.016112][T12327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.043420][T12327] usb 5-1: config 0 descriptor?? [ 814.052721][T12337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 814.076966][T12327] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input14 [ 814.288383][ T5874] usb 5-1: USB disconnect, device number 16 [ 814.400624][T12327] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 814.572620][T12327] usb 6-1: Using ep0 maxpacket: 8 [ 814.581978][T12327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 814.597128][T12327] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 814.621428][T12327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.647026][T12327] usb 6-1: config 0 descriptor?? [ 814.879572][T12327] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 814.940662][T12367] tipc: Started in network mode [ 814.946222][T12367] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 814.964036][T12367] tipc: Enabled bearer , priority 10 [ 815.149076][T12240] usb 6-1: USB disconnect, device number 2 [ 815.898139][T12390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.447640][ T1051] kworker/u8:5 (1051) used greatest stack depth: 18416 bytes left [ 816.548328][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1684'. [ 816.599346][T12393] netlink: 507 bytes leftover after parsing attributes in process `syz.1.1685'. [ 816.623737][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1684'. [ 816.641321][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 816.751709][T12327] tipc: Node number set to 15444650 [ 816.790539][T12396] ipip0: entered promiscuous mode [ 817.912903][T12411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1691'. [ 818.486192][T12433] : renamed from ipvlan1 [ 818.747523][T12439] syz.4.1700: attempt to access beyond end of device [ 818.747523][T12439] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 818.793520][T12439] FAT-fs (loop9): unable to read boot sector [ 818.842114][T12240] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 818.870081][ T29] audit: type=1326 audit(2000000376.069:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 818.939157][ T29] audit: type=1326 audit(2000000376.069:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 819.008015][T12240] usb 6-1: Using ep0 maxpacket: 32 [ 819.025114][T12240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.026872][ T29] audit: type=1326 audit(2000000376.069:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 819.080621][T12240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.107574][T12240] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 819.121239][ T29] audit: type=1326 audit(2000000376.069:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 819.131949][T12240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.195925][ T29] audit: type=1326 audit(2000000376.069:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 819.222203][T12240] usb 6-1: config 0 descriptor?? [ 819.256437][ T29] audit: type=1326 audit(2000000376.069:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 819.261133][T12240] hub 6-1:0.0: USB hub found [ 819.335840][ T29] audit: type=1326 audit(2000000376.069:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 819.400222][ T29] audit: type=1326 audit(2000000376.069:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 819.473866][ T29] audit: type=1326 audit(2000000376.069:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 819.474263][T12240] hub 6-1:0.0: 1 port detected [ 819.546672][ T29] audit: type=1326 audit(2000000376.716:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12441 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 820.186529][ T5903] hub 6-1:0.0: activate --> -90 [ 820.404476][T12240] usb 6-1: USB disconnect, device number 3 [ 820.650917][T12466] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1710'. [ 824.894607][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1737'. [ 826.010555][T12554] pim6reg1: entered promiscuous mode [ 826.030439][T12554] pim6reg1: entered allmulticast mode [ 827.149704][T12568] input: syz0 as /devices/virtual/input/input15 [ 827.796401][ T5873] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 827.955106][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 828.007241][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.203626][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.470574][ T5873] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 828.534677][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.582153][ T5873] usb 6-1: config 0 descriptor?? [ 828.643711][ T5873] hub 6-1:0.0: USB hub found [ 828.671148][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 828.684107][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 828.877162][T12590] serio: Serial port ptm0 [ 829.400897][ T5873] hub 6-1:0.0: 1 port detected [ 830.849906][ T5873] hub 6-1:0.0: activate --> -90 [ 831.092781][T12327] usb 6-1: USB disconnect, device number 4 [ 831.343831][ T5873] usb 6-1-port1: config error [ 831.663325][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 831.663395][ T29] audit: type=1804 audit(2000000388.540:610): pid=12614 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1761" name="/newroot/371/file0/file0" dev="ramfs" ino=33846 res=1 errno=0 [ 833.313250][T12622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.369585][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1768'. [ 833.379377][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 833.735046][T12643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.822634][T12643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.895353][T12643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.383570][ T29] audit: type=1326 audit(2000000391.136:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12651 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 834.410589][ T29] audit: type=1326 audit(2000000391.164:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12651 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 834.438215][ T29] audit: type=1326 audit(2000000391.164:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12651 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 834.483227][ T29] audit: type=1326 audit(2000000391.164:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12651 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 834.544128][ T29] audit: type=1326 audit(2000000391.164:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12651 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 834.771088][ T29] audit: type=1326 audit(2000000391.164:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12651 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 834.824739][ T29] audit: type=1326 audit(2000000391.164:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12651 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 834.849565][ T29] audit: type=1326 audit(2000000391.164:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12651 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 835.408132][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 835.417501][ T29] audit: type=1326 audit(2000000391.183:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12651 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 836.481905][T12679] batman_adv: batadv0: Adding interface: dummy0 [ 836.508084][T12679] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.534481][T12679] batman_adv: batadv0: Interface activated: dummy0 [ 836.549605][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 836.594258][T12685] batadv0: mtu less than device minimum [ 836.598397][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1785'. [ 836.611123][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.623328][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.635761][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.648159][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.660284][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.671978][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.683747][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.696302][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.708513][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 836.912940][T12692] random: crng reseeded on system resumption [ 838.307748][T12709] syz.1.1792: attempt to access beyond end of device [ 838.307748][T12709] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 838.435531][T12709] SQUASHFS error: Failed to read block 0x0: -5 [ 838.451110][T12714] fuse: Bad value for 'fd' [ 838.518736][T12709] unable to read squashfs_super_block [ 838.700987][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 838.701033][ T29] audit: type=1326 audit(2000000395.381:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 838.955379][ T29] audit: type=1326 audit(2000000395.392:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 839.048286][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 839.063542][ T29] audit: type=1326 audit(2000000395.402:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 839.086202][ T29] audit: type=1326 audit(2000000395.482:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 839.108552][T12716] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1794'. [ 839.117694][ T5874] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 839.164578][ T29] audit: type=1326 audit(2000000395.492:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 839.233887][ T29] audit: type=1326 audit(2000000395.532:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 839.276570][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 839.302344][ T5874] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 839.312246][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.327268][ T5874] usb 5-1: Product: syz [ 839.331497][ T5874] usb 5-1: Manufacturer: syz [ 839.336109][ T5874] usb 5-1: SerialNumber: syz [ 839.342084][ T29] audit: type=1326 audit(2000000395.532:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 839.393928][ T5874] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 839.406758][ T29] audit: type=1326 audit(2000000395.552:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 839.429277][ T29] audit: type=1326 audit(2000000395.552:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 839.455863][ T29] audit: type=1326 audit(2000000395.552:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 839.459089][ T5903] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 839.767361][ T5903] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 839.788671][ T5903] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 839.823376][ T5903] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 839.850339][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.876645][T12720] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 839.890030][ T5903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 840.939704][T12327] usb 4-1: USB disconnect, device number 17 [ 841.088812][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1805'. [ 842.157922][ T5874] gspca_stk1135: reg_w 0x2ff err -71 [ 842.164630][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 842.171067][ T5874] gspca_stk1135: Sensor write failed [ 842.195427][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 842.204068][ T5874] gspca_stk1135: Sensor write failed [ 842.218810][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 842.236375][ T5874] gspca_stk1135: Sensor read failed [ 842.246578][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 842.264303][ T5874] gspca_stk1135: Sensor read failed [ 842.274779][ T5874] gspca_stk1135: Detected sensor type unknown (0x0) [ 842.306497][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 842.327097][ T5874] gspca_stk1135: Sensor read failed [ 842.332983][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 842.339895][ T5874] gspca_stk1135: Sensor read failed [ 842.345398][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 842.353135][ T5874] gspca_stk1135: Sensor write failed [ 842.358505][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 842.364977][ T5874] gspca_stk1135: Sensor write failed [ 842.370353][ T5874] stk1135 5-1:64.0: probe with driver stk1135 failed with error -71 [ 842.401617][ T5874] usb 5-1: USB disconnect, device number 17 [ 842.703625][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 842.744074][T12767] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1809'. [ 844.422095][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 844.455025][T12792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 845.558296][T12804] syzkaller0: entered promiscuous mode [ 845.586480][T12804] syzkaller0: entered allmulticast mode [ 847.133378][ T5903] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 847.323072][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 847.337449][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.366722][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.394092][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 847.436298][ T5903] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 847.452085][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.510573][ T5903] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 847.521304][ T5903] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 847.543748][ T5903] usb 6-1: Manufacturer: syz [ 847.553077][ T5903] usb 6-1: config 0 descriptor?? [ 847.865187][ T5903] rc_core: IR keymap rc-hauppauge not found [ 847.871165][ T5903] Registered IR keymap rc-empty [ 847.886175][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 847.907319][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 847.940180][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 847.967792][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 848.003503][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.026738][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.056320][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.109254][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.158796][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.195082][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.275814][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.290250][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.349927][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.379097][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.413723][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 848.454419][ T5903] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 848.463897][ T5903] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 848.491301][ T5903] usb 6-1: USB disconnect, device number 5 [ 851.967984][T12871] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 851.979180][T12871] qnx6: wrong signature (magic) in superblock #1. [ 851.985627][T12871] qnx6: unable to read the first superblock [ 852.030150][T12837] vlan0: entered promiscuous mode [ 852.035250][T12837] vlan0: entered allmulticast mode [ 852.452761][T12879] xt_socket: unknown flags 0x8 [ 855.949603][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 856.004992][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1851'. [ 856.359159][T12915] xt_cgroup: xt_cgroup: no path or classid specified [ 859.823195][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 859.832938][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1866'. [ 864.764966][T12986] xt_cgroup: xt_cgroup: no path or classid specified [ 872.541271][T13046] bridge_slave_0: left allmulticast mode [ 872.585579][T13046] bridge_slave_0: left promiscuous mode [ 872.597078][T13046] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.062454][T13046] bridge_slave_1: left allmulticast mode [ 873.068553][T13046] bridge_slave_1: left promiscuous mode [ 873.090098][T13046] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.370021][T13046] bond0: (slave bond_slave_0): Releasing backup interface [ 873.440770][T13046] bond_slave_0: left promiscuous mode [ 873.822232][T13046] bond0: (slave bond_slave_1): Releasing backup interface [ 874.498710][T13046] bond_slave_1: left promiscuous mode [ 874.632120][T13046] team_slave_0: left promiscuous mode [ 874.736248][T13046] team0: Port device team_slave_0 removed [ 874.768848][T13046] team_slave_1: left promiscuous mode [ 874.817239][T13046] team0: Port device team_slave_1 removed [ 874.848650][T13046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.882700][T13046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.938114][T13046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.976328][T13046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.075954][T13046] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 875.119491][T13046] team0: Port device netdevsim0 removed [ 875.183067][T13046] bond0: (slave macvlan2): Releasing backup interface [ 875.221552][T13046] macvlan2: left promiscuous mode [ 875.235221][T13046] team0: left promiscuous mode [ 875.257410][T13049] team0: Mode changed to "activebackup" [ 875.841246][ T5874] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 876.012290][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 876.022950][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 876.040572][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 876.059415][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 876.075263][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.097685][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 876.542490][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.785757][ T5874] usb 4-1: GET_CAPABILITIES returned 0 [ 877.847067][ T5874] usbtmc 4-1:16.0: can't read capabilities [ 879.036963][T12327] usb 4-1: USB disconnect, device number 18 [ 881.132037][ T5903] IPVS: starting estimator thread 0... [ 881.255168][T13108] IPVS: using max 20 ests per chain, 48000 per kthread [ 883.988686][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 884.233064][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'. [ 884.269969][ T5903] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 885.427824][ T5903] usb 6-1: unable to get BOS descriptor or descriptor too short [ 885.437143][ T5903] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 885.445952][ T5903] usb 6-1: can't read configurations, error -71 [ 886.513297][T13166] tipc: Enabling of bearer rejected, failed to enable media [ 888.449535][T13195] syzkaller0: entered allmulticast mode [ 891.939465][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1936'. [ 891.966623][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 892.448566][T13224] kvm: kvm [13223]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 892.469142][T13224] kvm: kvm [13223]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 894.525514][T13241] nfs: Unknown parameter ' ' [ 896.029008][T13252] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1944'. [ 900.719170][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 900.719189][ T29] audit: type=1326 audit(2000000454.192:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.1.1954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x0 [ 902.391044][T10645] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 903.151202][T13306] nvme_fabrics: missing parameter 'transport=%s' [ 903.158024][T13306] nvme_fabrics: missing parameter 'nqn=%s' [ 905.143079][T10645] usb 4-1: device descriptor read/all, error -71 [ 906.324863][T13326] overlayfs: overlapping lowerdir path [ 906.543947][T13331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 906.551289][T13331] IPv6: NLM_F_CREATE should be set when creating new route [ 906.558620][T13331] IPv6: NLM_F_CREATE should be set when creating new route [ 906.565881][T13331] IPv6: NLM_F_CREATE should be set when creating new route [ 910.080442][ T29] audit: type=1326 audit(2000000462.947:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 910.179935][ T29] audit: type=1326 audit(2000000462.957:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaa317fb1b code=0x7ffc0000 [ 910.253888][ T29] audit: type=1326 audit(2000000462.957:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaa317fb1b code=0x7ffc0000 [ 910.469449][ T29] audit: type=1326 audit(2000000462.957:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaa317fb1b code=0x7ffc0000 [ 910.599219][ T29] audit: type=1326 audit(2000000462.957:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaa317fb1b code=0x7ffc0000 [ 911.687899][ T29] audit: type=1326 audit(2000000462.957:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaa317fb1b code=0x7ffc0000 [ 911.713623][ T29] audit: type=1326 audit(2000000462.957:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaa317fb1b code=0x7ffc0000 [ 911.967467][ T29] audit: type=1326 audit(2000000462.957:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaa317fb1b code=0x7ffc0000 [ 912.116305][ T29] audit: type=1326 audit(2000000462.957:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaa317fb1b code=0x7ffc0000 [ 912.214350][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'. [ 912.223456][ T29] audit: type=1326 audit(2000000462.994:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13367 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcaa317fb1b code=0x7ffc0000 [ 912.572829][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1980'. [ 918.050467][ T5874] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 918.257224][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 918.264460][ T5874] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 918.276420][ T5874] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 918.311319][ T5874] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 918.331241][ T5874] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.346714][ T5874] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 918.363528][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.480537][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'. [ 918.517105][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1994'. [ 918.638590][ T5874] usb 6-1: GET_CAPABILITIES returned 0 [ 918.653577][ T5874] usbtmc 6-1:16.0: can't read capabilities [ 918.859014][T13472] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -71 [ 918.883337][ T5903] usb 6-1: USB disconnect, device number 8 [ 920.629414][T13521] xt_cgroup: xt_cgroup: no path or classid specified [ 925.031598][T10645] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 925.308303][T13555] lo speed is unknown, defaulting to 1000 [ 925.325756][T10645] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.336022][T10645] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 925.396119][T10645] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 925.405835][T10645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.413866][T10645] usb 5-1: Product: syz [ 925.418261][T10645] usb 5-1: Manufacturer: syz [ 925.422972][T10645] usb 5-1: SerialNumber: syz [ 925.490110][T13555] lo speed is unknown, defaulting to 1000 [ 925.729565][T10645] usb 5-1: 0:2 : does not exist [ 925.751279][T10645] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 925.778164][T10645] usb 5-1: USB disconnect, device number 18 [ 925.983941][T10514] udevd[10514]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.386123][T13596] syz.0.2015 (13596): drop_caches: 2 [ 934.535548][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 934.653429][T11276] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 935.198696][T13630] syz.0.2024 (13630): drop_caches: 2 [ 936.277912][ T5903] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 936.438359][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 936.580060][ T5903] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 936.715974][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.724537][ T5903] usb 4-1: Product: syz [ 936.728837][ T5903] usb 4-1: Manufacturer: syz [ 936.733750][ T5903] usb 4-1: SerialNumber: syz [ 936.745925][ T5903] usb 4-1: config 0 descriptor?? [ 937.477961][ T5903] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 937.930731][T13654] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 938.850161][ T5903] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 939.049324][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 939.075758][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 939.133982][T12327] usb 4-1: USB disconnect, device number 21 [ 940.318893][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 940.318916][ T29] audit: type=1326 audit(2000000490.616:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13666 comm="syz.1.2033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x0 [ 941.063434][T13686] input: syz1 as /devices/virtual/input/input18 [ 942.434940][ T5874] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 943.639504][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 943.677690][ T5874] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 943.685205][ T5874] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 943.739865][ T5874] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 943.780017][ T5874] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 943.803927][ T5874] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 943.850646][ T5874] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 943.875764][ T5874] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 943.943034][ T5874] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 943.986193][ T5874] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 944.007252][ T5874] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 945.053647][ T5874] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 946.387061][ T5874] usb 4-1: can't read configurations, error -71 [ 946.479717][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 946.489600][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 946.716700][T13737] net_ratelimit: 10 callbacks suppressed [ 946.716717][T13737] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 953.353865][T13817] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 954.666831][T13823] can: request_module (can-proto-3) failed. [ 954.675437][T13826] block nbd4: Device being setup by another task [ 954.742237][T13823] block nbd4: shutting down sockets [ 956.366587][ T29] audit: type=1800 audit(2000000506.247:765): pid=13841 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2064" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 956.516944][T13846] xt_cgroup: xt_cgroup: no path or classid specified [ 959.891996][T13870] trusted_key: syz.3.2078 sent an empty control message without MSG_MORE. [ 962.480984][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2085'. [ 962.490149][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2085'. [ 965.495437][T13909] ISOFS: Unable to identify CD-ROM format. [ 967.834791][T13922] xt_cgroup: xt_cgroup: no path or classid specified [ 971.845802][T13934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 981.019489][T13997] binder: transaction release 24 bad handle 1, ret = -22 [ 981.186850][T13999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 983.039907][T14012] vlan0: entered promiscuous mode [ 983.131718][T14012] vlan0: entered allmulticast mode [ 983.204699][T14012] hsr_slave_1: entered allmulticast mode [ 987.600440][T14056] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 988.448895][T14068] syz.5.2125[14068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.448995][T14068] syz.5.2125[14068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.460641][T14068] syz.5.2125[14068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.508365][T14072] No buffer was provided with the request [ 989.778516][T14077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 990.260771][T14079] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 990.638478][T14087] No control pipe specified [ 990.669237][ T5903] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 990.905610][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.976208][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.369835][ T5903] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 991.388182][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 991.400053][ T5903] usb 4-1: SerialNumber: syz [ 991.615491][ T29] audit: type=1326 audit(2000000539.229:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8116d7ff19 code=0x7ffc0000 [ 991.694067][T14096] fuse: Unknown parameter '' [ 992.588355][ T29] audit: type=1326 audit(2000000539.229:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8116d7ff19 code=0x7ffc0000 [ 992.825764][ T29] audit: type=1326 audit(2000000540.174:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8116d7ff19 code=0x7ffc0000 [ 992.852863][ T29] audit: type=1326 audit(2000000540.174:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8116d7ff19 code=0x7ffc0000 [ 992.874641][ T29] audit: type=1326 audit(2000000540.174:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8116d7ff19 code=0x7ffc0000 [ 993.994720][ T5903] usb 4-1: 0:2 : does not exist [ 994.133938][ T29] audit: type=1326 audit(2000000540.183:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8116d7e880 code=0x7ffc0000 [ 994.839071][ T29] audit: type=1326 audit(2000000540.183:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8116d7ff19 code=0x7ffc0000 [ 994.860959][ T29] audit: type=1326 audit(2000000540.183:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8116d7ff19 code=0x7ffc0000 [ 994.887690][ T5903] usb 4-1: USB disconnect, device number 25 [ 994.894594][ T29] audit: type=1326 audit(2000000540.183:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8116d7ff19 code=0x7ffc0000 [ 994.916460][ T29] audit: type=1326 audit(2000000540.183:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14093 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8116d7ff19 code=0x7ffc0000 [ 995.174063][T10514] udevd[10514]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.789210][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2137'. [ 998.001300][T14120] batadv0: entered promiscuous mode [ 999.097284][T14120] batadv0: left promiscuous mode [ 999.531319][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'. [ 999.838061][T14144] bond1: entered promiscuous mode [ 999.844984][T14144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.269226][T14161] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 1002.931960][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2153'. [ 1002.965711][T14170] batadv0: entered promiscuous mode [ 1002.971656][T14170] macvtap1: entered promiscuous mode [ 1002.977825][T14170] macvtap1: entered allmulticast mode [ 1002.983254][T14170] batadv0: entered allmulticast mode [ 1003.008229][T14170] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1003.280909][T14171] batadv0: left allmulticast mode [ 1003.286838][T14171] batadv0: left promiscuous mode [ 1010.780166][T14196] syz.3.2158 (14196): drop_caches: 2 [ 1011.671614][T14196] syz.3.2158 (14196): drop_caches: 2 [ 1014.504912][ T5903] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1014.693737][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 1014.710153][ T5903] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1014.719944][ T5903] usb 4-1: config 0 has no interface number 0 [ 1014.780683][ T5903] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1014.809519][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.852159][ T5903] usb 4-1: Product: syz [ 1015.833688][ T5903] usb 4-1: Manufacturer: syz [ 1015.838446][ T5903] usb 4-1: SerialNumber: syz [ 1017.234693][ T5903] usb 4-1: config 0 descriptor?? [ 1017.248361][ T5903] smsc95xx v2.0.0 [ 1017.602339][ T5904] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1017.662641][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1017.818795][ T5903] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1017.844090][ T5903] usb 4-1: USB disconnect, device number 26 [ 1018.905627][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 1018.914336][ T5904] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1018.924303][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.318351][ T5904] usb 6-1: Product: syz [ 1019.402262][ T5904] usb 6-1: Manufacturer: syz [ 1019.495708][ T5904] usb 6-1: SerialNumber: syz [ 1019.697906][ T5904] usb 6-1: config 0 descriptor?? [ 1020.113244][ T5904] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1021.268348][ T5904] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1021.533384][ T5904] usb 6-1: USB disconnect, device number 9 [ 1026.517468][T14313] UBIFS error (pid: 14313): cannot open "c:::", error -22 [ 1027.291735][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2188'. [ 1030.494353][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 1030.546787][T14350] 9pnet_fd: Insufficient options for proto=fd [ 1032.067166][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1032.067184][ T29] audit: type=1326 audit(2000000577.066:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1032.893075][ T29] audit: type=1326 audit(2000000577.066:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1033.038854][ T29] audit: type=1326 audit(2000000577.066:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1033.213579][ T29] audit: type=1326 audit(2000000577.066:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1034.191765][ T29] audit: type=1326 audit(2000000577.066:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1034.216325][ T29] audit: type=1326 audit(2000000577.085:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1034.238434][ T29] audit: type=1326 audit(2000000577.085:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1034.260680][ T29] audit: type=1326 audit(2000000577.085:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1034.282859][ T29] audit: type=1326 audit(2000000577.085:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1034.305785][ T29] audit: type=1326 audit(2000000577.085:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14342 comm="syz.3.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa317ff19 code=0x7ffc0000 [ 1044.862714][T14413] vivid-001: disconnect [ 1045.540141][T14412] vivid-001: reconnect [ 1047.271442][T14445] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2217'. [ 1048.056142][T14453] xt_cgroup: xt_cgroup: no path or classid specified [ 1057.196702][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1057.261103][T14517] Invalid ELF header magic: != ELF [ 1057.299075][ T29] audit: type=1804 audit(2000000599.983:816): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2235" name="/newroot/477/file1" dev="fuse" ino=1 res=1 errno=0 [ 1057.327644][ T29] audit: type=1800 audit(2000000599.983:817): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2235" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1057.346957][ T29] audit: type=1804 audit(2000000599.993:818): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2235" name="/newroot/477/file1" dev="fuse" ino=1 res=1 errno=0 [ 1057.366858][ T29] audit: type=1804 audit(2000000599.993:819): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2235" name="/newroot/477/file1" dev="fuse" ino=1 res=1 errno=0 [ 1057.386985][ T29] audit: type=1800 audit(2000000599.993:820): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2235" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1057.406318][ T29] audit: type=1804 audit(2000000600.629:821): pid=14517 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2233" name="/newroot/420/bus/bus" dev="overlay" ino=2276 res=1 errno=0 [ 1057.602158][T14524] xt_cgroup: xt_cgroup: no path or classid specified [ 1058.152923][ T29] audit: type=1326 audit(2000000601.461:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14522 comm="syz.1.2237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x0 [ 1059.236139][T14523] sp0: Synchronizing with TNC [ 1060.542427][T14543] ALSA: mixer_oss: invalid OSS volume '' [ 1063.691589][T14574] block device autoloading is deprecated and will be removed. [ 1067.351759][T14603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'. [ 1067.510563][T14605] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1069.071096][T14624] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1069.080049][T14624] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1072.119849][ T29] audit: type=1326 audit(2000000614.529:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1072.149094][ T29] audit: type=1326 audit(2000000614.557:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1072.229411][T14652] 9pnet_fd: Insufficient options for proto=fd [ 1073.032187][ T29] audit: type=1326 audit(2000000615.361:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1073.064582][T14646] binder: 14645:14646 ioctl c0306201 0 returned -14 [ 1073.081135][ T29] audit: type=1326 audit(2000000615.361:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1073.102918][ T29] audit: type=1326 audit(2000000615.361:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1073.124899][ T29] audit: type=1326 audit(2000000615.361:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe05097e880 code=0x7ffc0000 [ 1073.146915][ T29] audit: type=1326 audit(2000000615.361:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1073.168944][ T29] audit: type=1326 audit(2000000615.361:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1073.191082][ T29] audit: type=1326 audit(2000000615.361:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1073.212882][ T29] audit: type=1326 audit(2000000615.361:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14650 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1074.427022][T14646] binder: 14645:14646 ioctl c0306201 0 returned -14 [ 1074.549228][T14666] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2261'. [ 1077.904542][T14673] overlayfs: missing 'workdir' [ 1079.193405][T14700] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1079.993659][ T5904] IPVS: starting estimator thread 0... [ 1081.265359][T14705] IPVS: using max 28 ests per chain, 67200 per kthread [ 1086.681345][T14750] sp0: Synchronizing with TNC [ 1087.024845][T14751] Invalid ELF header type: 0 != 1 [ 1087.198542][T14745] [U] è [ 1088.878899][T14763] netlink: 'syz.0.2282': attribute type 3 has an invalid length. [ 1088.886805][T14763] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2282'. [ 1089.202830][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1089.202874][ T29] audit: type=1804 audit(2000000630.487:869): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2280" name="/newroot/488/file1" dev="fuse" ino=1 res=1 errno=0 [ 1089.549258][ T29] audit: type=1804 audit(2000000630.487:870): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2280" name="/newroot/488/file1" dev="fuse" ino=1 res=1 errno=0 [ 1094.386838][T14795] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2290'. [ 1094.402479][T14798] netlink: 'syz.3.2292': attribute type 21 has an invalid length. [ 1096.748685][T14805] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1097.858841][T14813] syz.5.2291: attempt to access beyond end of device [ 1097.858841][T14813] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1097.872284][T14813] SQUASHFS error: Failed to read block 0x0: -5 [ 1097.878840][T14813] unable to read squashfs_super_block [ 1098.824331][T14836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2298'. [ 1098.833488][T14836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2298'. [ 1098.879580][ T29] audit: type=1326 audit(2000000639.551:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14829 comm="syz.0.2298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16e0b7ff19 code=0x0 [ 1099.491394][ T5874] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1100.744067][ T5874] usb 4-1: device descriptor read/all, error -71 [ 1100.882395][T14849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2302'. [ 1101.966226][T14857] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1104.618487][T14881] gfs2: not a GFS2 filesystem [ 1104.626815][T14881] No such timeout policy "syz0" [ 1104.636266][T14881] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1106.691242][T14892] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.700857][T14892] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.709772][T14892] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.718651][T14892] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.817586][ T29] audit: type=1800 audit(2000000646.912:872): pid=14895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2309" name="/" dev="9p" ino=2 res=0 errno=0 [ 1106.843524][T14889] netfs: Couldn't get user pages (rc=-14) [ 1107.679757][T14902] xt_cgroup: xt_cgroup: no path or classid specified [ 1107.949494][ T29] audit: type=1326 audit(2000000648.044:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1108.071283][ T29] audit: type=1326 audit(2000000648.156:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1108.199251][ T29] audit: type=1326 audit(2000000648.184:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1108.221627][ T29] audit: type=1326 audit(2000000648.184:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1108.268994][ T29] audit: type=1326 audit(2000000648.184:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1108.333018][ T29] audit: type=1326 audit(2000000648.194:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1108.349161][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'. [ 1108.395557][ T29] audit: type=1326 audit(2000000648.194:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1108.418303][T14904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2312'. [ 1108.448133][ T29] audit: type=1326 audit(2000000648.194:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1108.513467][ T29] audit: type=1326 audit(2000000648.203:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe05097ff19 code=0x7ffc0000 [ 1115.137368][T14944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2321'. [ 1115.157688][T14944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2321'. [ 1115.265909][T14944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2321'. [ 1115.292922][T14944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2321'. [ 1120.975994][T14974] 9pnet: Unknown protocol version 9p2000.„?ÒUÎ6ïu [ 1121.793542][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2332'. [ 1123.225178][T15002] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 1124.430806][T15014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2336'. [ 1131.651783][T13893] bridge0: port 1(syz_tun) entered disabled state [ 1131.786976][T13893] syz_tun (unregistering): left allmulticast mode [ 1131.793582][T13893] syz_tun (unregistering): left promiscuous mode [ 1131.800126][T13893] bridge0: port 1(syz_tun) entered disabled state [ 1133.213618][T15067] lo speed is unknown, defaulting to 1000 [ 1133.225453][T15067] lo speed is unknown, defaulting to 1000 [ 1134.190532][T15078] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1138.413130][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2356'. [ 1138.747939][T11276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1138.771460][T15094] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2356'. [ 1138.801009][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1138.801029][ T29] audit: type=1804 audit(2000000676.406:912): pid=15098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2355" name="/newroot/486/file1" dev="fuse" ino=1 res=1 errno=0 [ 1138.944901][ T29] audit: type=1800 audit(2000000676.406:913): pid=15098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2355" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1138.972122][T15109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1138.999744][T15109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1139.010907][T15109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1139.020444][T15109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1139.036481][T15109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1139.053879][ T29] audit: type=1804 audit(2000000676.406:914): pid=15098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2355" name="/newroot/486/file1" dev="fuse" ino=1 res=1 errno=0 [ 1139.196445][ T29] audit: type=1804 audit(2000000676.406:915): pid=15098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2355" name="/newroot/486/file1" dev="fuse" ino=1 res=1 errno=0 [ 1139.269193][T15113] tmpfs: Bad value for 'mpol' [ 1139.583907][ T29] audit: type=1800 audit(2000000676.406:916): pid=15098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2355" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1139.892200][T15108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1140.909446][T15090] lo speed is unknown, defaulting to 1000 [ 1140.916179][T15090] lo speed is unknown, defaulting to 1000 [ 1141.111344][T15113] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2358'. [ 1141.120861][T15113] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1141.808125][T15109] Bluetooth: hci1: command tx timeout [ 1142.276809][T15136] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2364'. [ 1142.292447][T15136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2364'. [ 1143.628656][T15136] fuse: Unknown parameter '184467440737095516150x000000000000000d' [ 1144.252171][T15109] Bluetooth: hci1: command tx timeout [ 1144.363500][T15090] chnl_net:caif_netlink_parms(): no params data found [ 1144.727977][T15157] 9pnet_fd: p9_fd_create_tcp (15157): problem connecting socket to 127.0.0.1 [ 1147.154738][T15109] Bluetooth: hci1: command tx timeout [ 1147.173752][T15164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1148.657330][T15181] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1149.826260][T15090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.844557][T15090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.852152][T15109] Bluetooth: hci1: command tx timeout [ 1149.859346][T15090] bridge_slave_0: entered allmulticast mode [ 1149.903241][T15090] bridge_slave_0: entered promiscuous mode [ 1149.916885][T15090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.943587][T15090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.968603][T15090] bridge_slave_1: entered allmulticast mode [ 1149.980405][T15090] bridge_slave_1: entered promiscuous mode [ 1150.074670][T15090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.103565][T15090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.192615][T15090] team0: Port device team_slave_0 added [ 1150.202894][T15090] team0: Port device team_slave_1 added [ 1150.232478][T15090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.239577][T15090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.266421][T15090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.279486][T15090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.286704][T15090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.312876][T15090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.393719][T15090] hsr_slave_0: entered promiscuous mode [ 1150.410981][T15090] hsr_slave_1: entered promiscuous mode [ 1150.438164][T15090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1150.471378][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 1150.486743][T15090] Cannot create hsr debugfs directory [ 1153.705008][T15210] block nbd1: NBD_DISCONNECT [ 1153.711594][T15210] block nbd1: Disconnected due to user request. [ 1153.719574][T15210] block nbd1: shutting down sockets [ 1153.811661][T15090] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1153.862501][T15090] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1153.915004][T15090] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1155.236904][T15090] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1156.569663][T15239] ax25_connect(): syz.5.2381 uses autobind, please contact jreuter@yaina.de [ 1156.697945][T15090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.385321][T15090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.418688][T15090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1157.429419][T15090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1157.448114][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.455290][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.464514][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.471686][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.253067][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2382'. [ 1158.801253][T15090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.096348][T15270] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2388'. [ 1159.478974][T15272] xt_cgroup: xt_cgroup: no path or classid specified [ 1159.508560][T15272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2390'. [ 1160.623719][T15277] No control pipe specified [ 1161.020879][T15109] Bluetooth: hci3: command 0x0406 tx timeout [ 1161.211356][T15264] fuse: Bad value for 'fd' [ 1161.502443][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2391'. [ 1161.694586][T15090] veth0_vlan: entered promiscuous mode [ 1162.964723][T15289] veth0_to_team: entered promiscuous mode [ 1162.970518][T15289] veth0_to_team: entered allmulticast mode [ 1163.468990][T15090] veth1_vlan: entered promiscuous mode [ 1163.612846][T15090] veth0_macvtap: entered promiscuous mode [ 1163.768985][T15090] veth1_macvtap: entered promiscuous mode [ 1163.903269][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.964190][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.291971][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.710659][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.720658][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.733166][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.743316][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.753819][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.763787][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.774402][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.785583][T15090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.795652][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.806423][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.816378][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.826992][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.838510][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.850961][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.860946][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.871447][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.881379][T15090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.891903][T15090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.902956][T15090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.961496][T15090] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.970246][T15090] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.002571][T15090] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.025758][T15090] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.168052][ T8262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.186663][ T8262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.277184][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.597195][T15322] input: syz0 as /devices/virtual/input/input20 [ 1166.607380][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.983407][T15326] random: crng reseeded on system resumption [ 1172.308164][T15354] xt_cgroup: xt_cgroup: no path or classid specified [ 1172.701640][T15355] binder: 15347:15355 unknown command 0 [ 1172.707262][T15355] binder: 15347:15355 ioctl c0306201 200001c0 returned -22 [ 1173.139754][T15364] loop7: detected capacity change from 16384 to 16383 [ 1173.193869][T15308] buffer_io_error: 4 callbacks suppressed [ 1173.193890][T15308] Buffer I/O error on dev loop7, logical block 2047, async page read [ 1173.492489][ T29] audit: type=1326 audit(2000000709.182:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1173.582251][ T29] audit: type=1326 audit(2000000709.182:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1173.617310][T15361] blk_print_req_error: 34 callbacks suppressed [ 1173.617344][T15361] I/O error, dev loop7, sector 4104 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 1173.686751][ T29] audit: type=1326 audit(2000000709.182:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1173.904527][ T29] audit: type=1326 audit(2000000709.182:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1173.926485][ T29] audit: type=1326 audit(2000000709.182:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15368 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1174.002214][T15361] I/O error, dev loop7, sector 4360 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 1174.012568][T15361] I/O error, dev loop7, sector 4104 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1174.022152][T15361] Buffer I/O error on dev loop7, logical block 513, async page read [ 1174.030538][T15361] I/O error, dev loop7, sector 4104 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1174.040158][T15361] Buffer I/O error on dev loop7, logical block 513, async page read [ 1174.048773][T15361] I/O error, dev loop7, sector 4104 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1174.058428][T15361] Buffer I/O error on dev loop7, logical block 513, async page read [ 1174.306184][T15360] I/O error, dev loop7, sector 1920 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1174.316349][T15360] Buffer I/O error on dev loop7, logical block 240, lost async page write [ 1174.325097][T15360] Buffer I/O error on dev loop7, logical block 241, lost async page write [ 1174.334072][T15360] Buffer I/O error on dev loop7, logical block 242, lost async page write [ 1174.342857][T15360] Buffer I/O error on dev loop7, logical block 243, lost async page write [ 1174.352116][T15360] Buffer I/O error on dev loop7, logical block 244, lost async page write [ 1174.361243][T15360] Buffer I/O error on dev loop7, logical block 245, lost async page write [ 1174.384395][T15360] I/O error, dev loop7, sector 2944 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1174.404407][T15360] I/O error, dev loop7, sector 3968 op 0x1:(WRITE) flags 0x800 phys_seg 17 prio class 0 [ 1175.663985][T15386] hub 2-0:1.0: USB hub found [ 1175.669303][T15386] hub 2-0:1.0: 1 port detected [ 1179.255421][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 1179.349645][T15416] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2421'. [ 1179.359296][T15416] openvswitch: netlink: Message has 44053 unknown bytes. [ 1179.594123][T15414] veth3: entered allmulticast mode [ 1180.434494][T15418] netlink: 211132 bytes leftover after parsing attributes in process `syz.5.2424'. [ 1182.287778][ T1221] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1184.859511][ T1221] usb 2-1: device descriptor read/all, error -71 [ 1187.759132][T15447] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1187.862304][T15447] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1187.938455][T15456] netlink: 'syz.1.2437': attribute type 21 has an invalid length. [ 1187.947015][T15456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2437'. [ 1188.063369][T15447] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1188.171168][T15468] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.2441'. [ 1188.242691][T15468] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.2441'. [ 1189.333576][T15482] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1189.348491][T15482] batman_adv: batadv0: Adding interface: gretap1 [ 1189.354904][T15482] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.380512][T15482] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1190.051415][T15447] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1190.075876][T15447] usb 6-1: no configurations [ 1190.080532][T15447] usb 6-1: can't read configurations, error -22 [ 1191.157875][ T29] audit: type=1326 audit(2000000725.879:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aec57ff19 code=0x7ffc0000 [ 1191.300063][ T29] audit: type=1326 audit(2000000725.898:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aec57ff19 code=0x7ffc0000 [ 1191.435304][T15512] 9pnet_virtio: no channels available for device syz [ 1191.751213][ T29] audit: type=1326 audit(2000000725.916:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f7aec57ff19 code=0x7ffc0000 [ 1191.774805][ T29] audit: type=1326 audit(2000000725.916:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aec57ff19 code=0x7ffc0000 [ 1191.807407][ T29] audit: type=1326 audit(2000000725.916:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15503 comm="syz.6.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aec57ff19 code=0x7ffc0000 [ 1192.120946][T15509] libceph: resolve 'c' (ret=-3): failed [ 1193.005363][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2456'. [ 1193.082541][T15531] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2460'. [ 1193.435338][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1193.611797][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 1193.697948][T15550] netlink: 'syz.5.2467': attribute type 29 has an invalid length. [ 1193.721752][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 175 [ 1193.758667][ T5903] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1193.768236][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.799487][T15552] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2469'. [ 1193.810779][T15552] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1193.829411][ T5903] usb 2-1: Product: syz [ 1193.844014][ T5903] usb 2-1: Manufacturer: syz [ 1193.851205][ T5903] usb 2-1: SerialNumber: syz [ 1193.852209][T15550] netlink: 'syz.5.2467': attribute type 29 has an invalid length. [ 1193.871615][ T5903] usb 2-1: config 0 descriptor?? [ 1193.894310][T15539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1193.967680][ T5903] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1194.184283][ T3530] usb 2-1: Failed to submit usb control message: -71 [ 1194.184479][ T5903] usb 2-1: USB disconnect, device number 11 [ 1194.213785][ T3530] usb 2-1: unable to send the bmi data to the device: -71 [ 1194.244858][ T3530] usb 2-1: unable to get target info from device [ 1194.251245][ T3530] usb 2-1: could not get target info (-71) [ 1194.271693][ T3530] usb 2-1: could not probe fw (-71) [ 1194.281304][T15568] lo speed is unknown, defaulting to 1000 [ 1194.288421][T15568] lo speed is unknown, defaulting to 1000 [ 1194.392685][T15574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2475'. [ 1194.587536][T15447] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1194.767297][T15447] usb 6-1: Using ep0 maxpacket: 16 [ 1194.776875][T15447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1194.803814][T15447] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1194.821317][T15447] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.837175][T15447] usb 6-1: Product: syz [ 1194.992220][T15447] usb 6-1: Manufacturer: syz [ 1195.014559][T15447] usb 6-1: SerialNumber: syz [ 1195.025863][T15447] usb 6-1: config 0 descriptor?? [ 1195.880709][T15591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2481'. [ 1196.010356][T15590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2481'. [ 1196.056823][ T1221] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1196.066138][T15447] hub 6-1:0.0: bad descriptor, ignoring hub [ 1196.073037][T15447] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1196.083466][T15447] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21 [ 1196.567481][ T1221] usb 4-1: Using ep0 maxpacket: 8 [ 1196.585793][ T1221] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1196.593427][ T1221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1196.612163][ T1221] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1196.693443][ T1221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1196.726561][ T1221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1196.750328][ T1221] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1196.758499][ T1221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1196.778748][ T1221] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1196.841133][ T1221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1196.881629][ T1221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1196.923593][ T1221] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1196.935782][ T1221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1196.991028][ T1221] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1197.020557][ T1221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1197.064345][ T1221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1197.115636][ T1221] usb 4-1: string descriptor 0 read error: -22 [ 1197.119465][T15618] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 1197.128762][ T1221] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1197.145101][T15617] IPVS: stopping master sync thread 15618 ... [ 1197.150572][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.175680][ T1221] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1197.419369][ T1221] usb 4-1: USB disconnect, device number 29 [ 1197.980770][T15657] lo speed is unknown, defaulting to 1000 [ 1198.023055][T15657] lo speed is unknown, defaulting to 1000 [ 1198.468968][T15684] tipc: Started in network mode [ 1198.473955][T15684] tipc: Node identity 2d2e14aa, cluster identity 4711 [ 1198.548793][T15684] tipc: Enabling of bearer rejected, failed to enable media [ 1199.070934][ T5873] kernel write not supported for file /1785/attr/keycreate (pid: 5873 comm: kworker/0:5) [ 1199.126311][T15714] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2531'. [ 1199.152821][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 1199.186748][ T29] audit: type=1326 audit(2000000733.430:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1199.228331][ T29] audit: type=1326 audit(2000000733.473:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1199.299296][ T29] audit: type=1326 audit(2000000733.473:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1199.351207][ T29] audit: type=1326 audit(2000000733.473:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1199.392760][ T29] audit: type=1326 audit(2000000733.473:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.1.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1199.596268][T15734] program syz.1.2541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1199.613349][T15733] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2543'. [ 1199.634295][ T1221] kernel write not supported for file /1763/attr/keycreate (pid: 1221 comm: kworker/0:3) [ 1199.771300][T15742] IPv6: syztnl0: Disabled Multicast RS [ 1199.836132][T15447] usb 6-1: USB disconnect, device number 12 [ 1200.557833][T15781] Smack: duplicate mount options [ 1200.671915][ T5904] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1200.824422][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 1200.842822][ T5904] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1200.862791][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1200.892399][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1200.925138][ T5904] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.983366][ T5904] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1201.039337][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.851692][ T5904] usb 2-1: GET_CAPABILITIES returned 0 [ 1201.857386][ T5904] usbtmc 2-1:16.0: can't read capabilities [ 1201.875978][ T5904] usb 2-1: USB disconnect, device number 12 [ 1202.255036][T15109] Bluetooth: hci1: command tx timeout [ 1202.310600][T15819] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2576'. [ 1202.820242][T15837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1203.401103][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2589'. [ 1203.421737][T15851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2589'. [ 1203.539240][ T5904] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1203.720345][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 1203.729137][ T5904] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1203.738546][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.746738][ T5904] usb 2-1: Product: syz [ 1203.751144][ T5904] usb 2-1: Manufacturer: syz [ 1203.756270][ T5904] usb 2-1: SerialNumber: syz [ 1203.763300][ T5904] usb 2-1: config 0 descriptor?? [ 1204.413415][ T5904] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3a:85:2f:d9:d6:80 [ 1204.489596][ T5904] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 1204.507564][ T5904] usb 2-1: USB disconnect, device number 13 [ 1204.612286][T15882] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 1204.849708][T15890] block device autoloading is deprecated and will be removed. [ 1204.869478][T15890] syz.5.2607: attempt to access beyond end of device [ 1204.869478][T15890] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1205.177677][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1205.218901][T15907] IPVS: Error joining to the multicast group [ 1205.301952][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2615'. [ 1205.755276][T15923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2620'. [ 1206.583645][T15934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2623'. [ 1206.768314][T15942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2627'. [ 1207.305276][T15959] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1207.775640][T15965] vlan2: entered promiscuous mode [ 1207.808733][T15965] vlan2: entered allmulticast mode [ 1207.830136][T15965] vlan0: entered allmulticast mode [ 1207.835656][T15965] veth0_vlan: entered allmulticast mode [ 1207.841472][T15965] vlan0: entered promiscuous mode [ 1207.855424][T15965] team0: Port device vlan2 added [ 1208.047758][T15967] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1208.064837][T15967] batman_adv: batadv0: Adding interface: gretap1 [ 1208.071357][T15967] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.096960][T15967] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1208.722574][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.109556][ T5904] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 1209.130986][ T5904] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 1209.149716][ T5904] hid-generic 0000:0003:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1209.360776][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1209.362304][ T5904] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1209.486287][ T29] audit: type=1326 audit(2000000744.017:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16012 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1209.523028][ T29] audit: type=1326 audit(2000000744.017:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16012 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1209.550076][ T29] audit: type=1326 audit(2000000744.017:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16012 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1209.572934][ T29] audit: type=1326 audit(2000000744.017:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16012 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1209.611027][ T29] audit: type=1326 audit(2000000744.017:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16012 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1209.644203][ T5904] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1209.663697][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.672247][ T5904] usb 4-1: Product: syz [ 1209.677033][ T5904] usb 4-1: Manufacturer: syz [ 1209.681652][ T5904] usb 4-1: SerialNumber: syz [ 1209.687712][ T29] audit: type=1326 audit(2000000744.017:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16012 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1209.716402][ T5904] usb 4-1: config 0 descriptor?? [ 1209.746127][ T29] audit: type=1326 audit(2000000744.017:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16012 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1209.819916][ T29] audit: type=1326 audit(2000000744.367:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16019 comm="syz.0.2657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x0 [ 1209.949600][ T5904] usb 4-1: USB disconnect, device number 30 [ 1211.344664][T16057] netlink: 'syz.5.2668': attribute type 10 has an invalid length. [ 1211.361023][T16055] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2667'. [ 1211.370572][T16055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2667'. [ 1211.391369][T16055] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2667'. [ 1211.648920][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2673'. [ 1211.845612][T16067] syz.3.2670: attempt to access beyond end of device [ 1211.845612][T16067] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1211.859726][T16067] SQUASHFS error: Failed to read block 0x0: -5 [ 1211.876732][T16067] unable to read squashfs_super_block [ 1213.046569][T16109] overlay: ./file1 is not a directory [ 1213.319726][T16119] netlink: 'syz.5.2695': attribute type 21 has an invalid length. [ 1213.349850][T16119] netlink: 'syz.5.2695': attribute type 20 has an invalid length. [ 1213.377102][T16119] IPv6: NLM_F_CREATE should be specified when creating new route [ 1215.002556][T16168] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 1216.396666][T16199] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 1216.420356][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.456086][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.681131][T16211] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2726'. [ 1217.350908][T15447] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1217.390221][T16244] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1217.516553][T15447] usb 4-1: Using ep0 maxpacket: 8 [ 1217.524155][T15447] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1217.557917][T15447] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1217.587419][T15447] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1217.606479][T15447] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1217.626902][T15447] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1217.639930][T15447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.863772][T15447] usb 4-1: GET_CAPABILITIES returned 0 [ 1217.869329][T15447] usbtmc 4-1:16.0: can't read capabilities [ 1218.087898][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1218.105732][T15447] usb 4-1: USB disconnect, device number 31 [ 1218.384571][T16279] 9pnet: p9_errstr2errno: server reported unknown error n [ 1218.969245][T16296] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1218.986938][T16296] batman_adv: batadv0: Adding interface: gretap1 [ 1218.993433][T16296] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.019136][T16296] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1220.019844][T16307] syz.0.2766: attempt to access beyond end of device [ 1220.019844][T16307] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1220.035014][T16307] SQUASHFS error: Failed to read block 0x0: -5 [ 1220.042255][T16307] unable to read squashfs_super_block [ 1220.866129][T15447] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1220.908150][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1220.953544][ T1221] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1221.034422][T15447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.045831][T15447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.057604][T15447] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1221.071095][T15447] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1221.080219][T15447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.090070][T15447] usb 2-1: config 0 descriptor?? [ 1221.115479][ T1221] usb 6-1: Using ep0 maxpacket: 8 [ 1221.126654][ T1221] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1221.137537][ T1221] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1221.151980][ T1221] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1221.167772][ T1221] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1221.178689][ T1221] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1221.198478][ T1221] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1221.207632][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.426196][ T1221] usb 6-1: usb_control_msg returned -32 [ 1221.438314][ T1221] usbtmc 6-1:16.0: can't read capabilities [ 1221.506260][T15447] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 1221.514488][T15109] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1221.581489][T15447] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1221.722196][ T5873] usb 2-1: USB disconnect, device number 14 [ 1221.989939][T16345] syz.3.2782[16345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1221.990046][T16345] syz.3.2782[16345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1222.015455][T16345] syz.3.2782[16345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1222.997598][T16370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1223.016344][T16370] IPv6: NLM_F_CREATE should be set when creating new route [ 1223.419753][T15109] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1223.429857][T15109] Bluetooth: hci3: Injecting HCI hardware error event [ 1223.440276][T15109] Bluetooth: hci3: hardware error 0x00 [ 1223.660996][T16390] ipip1: entered promiscuous mode [ 1223.671330][T10645] usb 6-1: USB disconnect, device number 13 [ 1223.966695][T16403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.410344][T15109] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1225.586140][T12240] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1225.673445][T10645] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1225.741750][T12240] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.754242][T12240] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1225.767195][T12240] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1225.776507][T12240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.784875][T12240] usb 6-1: Product: syz [ 1225.789317][T12240] usb 6-1: Manufacturer: syz [ 1225.794001][T12240] usb 6-1: SerialNumber: syz [ 1225.825913][T10645] usb 2-1: Using ep0 maxpacket: 16 [ 1225.832420][T10645] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.843599][T10645] usb 2-1: config 0 has no interfaces? [ 1225.855188][T10645] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1225.864326][T10645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.877863][T10645] usb 2-1: config 0 descriptor?? [ 1226.010543][T12240] usb 6-1: 0:2 : does not exist [ 1226.024974][T12240] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1226.049873][T12240] usb 6-1: USB disconnect, device number 14 [ 1226.135089][T10645] usb 2-1: USB disconnect, device number 15 [ 1226.235451][T15485] udevd[15485]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1226.514747][T16449] netlink: 'syz.3.2823': attribute type 7 has an invalid length. [ 1226.540102][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2823'. [ 1227.242394][T16474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.271198][T16474] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1227.306601][T16477] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2834'. [ 1227.787912][T16501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1229.338700][T15447] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1229.548396][T15447] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.561172][T15447] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1229.593787][T15447] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1229.616573][T15447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1229.635394][T15447] usb 6-1: SerialNumber: syz [ 1229.874811][T15447] usb 6-1: 0:2 : does not exist [ 1229.895057][T15447] usb 6-1: USB disconnect, device number 15 [ 1230.114686][T15485] udevd[15485]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.865088][T16626] kernel profiling enabled (shift: 62) [ 1231.870610][T16626] profiling shift: 62 too large [ 1231.965973][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 1231.976011][T16626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.983348][T16626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.004170][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'. [ 1232.107556][T16626] bridge_slave_1: left allmulticast mode [ 1232.116769][T16626] bridge_slave_1: left promiscuous mode [ 1232.137426][T16626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.176036][T16626] bridge_slave_0: left allmulticast mode [ 1232.185535][T16626] bridge_slave_0: left promiscuous mode [ 1232.195063][T16626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.315901][T16649] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2883'. [ 1233.847170][T16667] input: syz0 as /devices/virtual/input/input22 [ 1233.976424][T16671] netlink: 'syz.0.2892': attribute type 1 has an invalid length. [ 1234.001039][T16671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1234.028955][T16671] bond2: (slave bridge16): making interface the new active one [ 1234.037697][T16671] bond2: (slave bridge16): Enslaving as an active interface with an up link [ 1234.063967][T16671] vlan2: entered promiscuous mode [ 1234.069211][T16671] bond2: entered promiscuous mode [ 1234.080154][T16671] bridge16: entered promiscuous mode [ 1234.089582][T16671] vlan2: entered allmulticast mode [ 1234.094822][T16671] bond2: entered allmulticast mode [ 1234.100270][T16671] bridge16: entered allmulticast mode [ 1234.499748][T16684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.605492][T16688] sctp: [Deprecated]: syz.5.2899 (pid 16688) Use of int in max_burst socket option. [ 1234.605492][T16688] Use struct sctp_assoc_value instead [ 1235.304490][T16696] random: crng reseeded on system resumption [ 1235.705805][T16700] syzkaller0: entered promiscuous mode [ 1235.711863][T16700] syzkaller0: entered allmulticast mode [ 1241.387228][T16745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1244.441876][ T29] audit: type=1326 audit(2000000778.854:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1244.683478][ T29] audit: type=1326 audit(2000000778.883:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1244.832847][ T29] audit: type=1326 audit(2000000778.892:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1244.887409][ T29] audit: type=1326 audit(2000000778.892:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1244.909201][ T29] audit: type=1326 audit(2000000778.892:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1244.940500][ T29] audit: type=1326 audit(2000000778.892:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1244.965787][ T29] audit: type=1326 audit(2000000778.892:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1244.992945][ T29] audit: type=1326 audit(2000000778.892:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1245.024998][ T29] audit: type=1326 audit(2000000778.892:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1245.049373][ T29] audit: type=1326 audit(2000000778.892:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16779 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1246.063946][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2931'. [ 1246.174186][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2931'. [ 1250.330572][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2948'. [ 1250.359321][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 1252.900252][T16907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1252.928184][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.242269][T16925] nvme_fabrics: missing parameter 'transport=%s' [ 1254.248769][T16925] nvme_fabrics: missing parameter 'nqn=%s' [ 1255.879878][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1255.879923][ T29] audit: type=1326 audit(2000000789.258:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16936 comm="syz.1.2967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x0 [ 1256.412061][T16951] netlink: 'syz.1.2970': attribute type 2 has an invalid length. [ 1256.426621][T16951] netlink: 'syz.1.2970': attribute type 9 has an invalid length. [ 1256.464680][T16951] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2970'. [ 1257.888971][T16977] block nbd6: not configured, cannot reconfigure [ 1258.423343][T16978] kvm: kvm [16974]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1258.465592][T16978] kvm: kvm [16974]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1262.064672][T17004] fuse: Bad value for 'fd' [ 1264.698462][T17030] xt_cgroup: xt_cgroup: no path or classid specified [ 1270.634147][T17074] binder: 17071:17074 ioctl c0306201 200002c0 returned -22 [ 1271.584485][T17082] xt_cgroup: xt_cgroup: no path or classid specified [ 1272.985329][ T29] audit: type=1326 audit(2000000805.553:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17068 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1272.990997][T17093] erspan0: left allmulticast mode [ 1273.017276][ T29] audit: type=1326 audit(2000000805.553:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17068 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1273.034379][T17093] erspan0: left promiscuous mode [ 1273.039401][ T29] audit: type=1326 audit(2000000805.553:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17068 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1273.065723][ T29] audit: type=1326 audit(2000000805.553:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17068 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1273.069865][T17093] bridge0: port 1(erspan0) entered disabled state [ 1273.099821][ T29] audit: type=1326 audit(2000000805.656:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17068 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1273.121565][ T29] audit: type=1326 audit(2000000805.656:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17068 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1273.152779][ T29] audit: type=1326 audit(2000000805.656:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17068 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c617ff19 code=0x7ffc0000 [ 1273.233367][T17093] bond0: (slave bond_slave_0): Releasing backup interface [ 1273.255746][T17093] bond0: (slave bond_slave_1): Releasing backup interface [ 1273.386651][T17093] team0: Port device team_slave_0 removed [ 1273.427080][T17093] team0: Port device team_slave_1 removed [ 1273.447140][T17093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.476574][T17093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.500059][T17093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.522397][T17093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.565285][T17093] bond0: (slave wlan1): Releasing backup interface [ 1273.632879][T17093] bond2: (slave bridge16): Releasing active interface [ 1273.650166][T17093] bridge16: left promiscuous mode [ 1273.684813][T17093] bridge16: left allmulticast mode [ 1273.712130][T17097] team0: Mode changed to "activebackup" [ 1276.079190][T17124] xt_cgroup: xt_cgroup: no path or classid specified [ 1279.594510][T17142] netlink: 5948 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1280.062259][ T12] tipc: Subscription rejected, illegal request [ 1280.110497][T17140] 9pnet_fd: Insufficient options for proto=fd [ 1280.686529][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3020'. [ 1280.715149][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3020'. [ 1281.015238][T17153] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1281.322291][T17159] usb usb7: selecting invalid altsetting 6 [ 1282.062367][T17169] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 1282.062367][T17169] [ 1283.926026][T15109] Bluetooth: hci0: command tx timeout [ 1283.936230][T17174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1284.060226][T17183] gfs2: path_lookup on c::: returned error -2 [ 1284.669575][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1284.680482][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1286.523326][T17204] xt_cgroup: xt_cgroup: no path or classid specified [ 1293.040084][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3049'. [ 1293.058606][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3049'. [ 1296.209679][T17281] netdevsim netdevsim1: Direct firmware load for — failed with error -2 [ 1296.222310][T17281] netdevsim netdevsim1: Falling back to sysfs fallback for: — [ 1302.407655][T17324] fuse: Unknown parameter '' [ 1303.190890][ T5903] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1303.415040][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.465051][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1303.574621][ T5903] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1303.603788][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1303.612588][ T5903] usb 4-1: SerialNumber: syz [ 1304.029718][ T5903] usb 4-1: 0:2 : does not exist [ 1304.067879][ T5903] usb 4-1: unit 255 not found! [ 1304.111854][ T5903] usb 4-1: 5:0: cannot get min/max values for control 7 (id 5) [ 1304.216103][ T5903] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1304.308797][ T5903] usb 4-1: 5:0: cannot get min/max values for control 9 (id 5) [ 1304.395066][ T5903] usb 4-1: 5:0: cannot get min/max values for control 10 (id 5) [ 1304.922716][ T5903] usb 4-1: USB disconnect, device number 32 [ 1305.329128][T17337] udevd[17337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1305.469303][T17345] vivid-002: disconnect [ 1306.058499][T17341] vivid-002: reconnect [ 1308.112394][T17355] xt_cgroup: xt_cgroup: no path or classid specified [ 1314.281050][T17424] kvm: kvm [17423]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1314.355028][T17424] kvm: kvm [17423]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1320.857718][T17475] xt_cgroup: xt_cgroup: no path or classid specified [ 1327.498680][T17531] xt_cgroup: xt_cgroup: no path or classid specified [ 1333.276739][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'. [ 1338.127127][T17598] overlayfs: missing 'workdir' [ 1338.738860][T17603] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3121'. [ 1340.052523][T17613] tmpfs: Bad value for 'mpol' [ 1341.390462][ T29] audit: type=1326 audit(2000000869.450:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17621 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 1342.034633][ T29] audit: type=1326 audit(2000000869.450:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17621 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 1342.101767][ T29] audit: type=1326 audit(2000000869.450:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17621 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 1342.801591][ T29] audit: type=1326 audit(2000000869.469:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17621 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 1342.823389][ T29] audit: type=1326 audit(2000000869.469:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17621 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e0b7ff19 code=0x7ffc0000 [ 1346.555841][T17686] block nbd0: shutting down sockets [ 1347.929614][T17680] nbd0: detected capacity change from 0 to 134217738 [ 1348.081443][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.090730][T17337] buffer_io_error: 267 callbacks suppressed [ 1348.090745][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.106149][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.176624][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.184707][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.210132][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.248619][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.264091][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.272069][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.289854][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.314037][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.356311][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.379806][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.418342][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.426509][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.507473][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.515502][T17337] ldm_validate_partition_table(): Disk read failed. [ 1348.522514][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.531782][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.540115][T17337] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1348.549248][T17337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.562793][T17337] Dev nbd0: unable to read RDB block 0 [ 1348.578218][T17337] nbd0: unable to read partition table [ 1349.161293][T17337] ldm_validate_partition_table(): Disk read failed. [ 1349.168348][T17337] Dev nbd0: unable to read RDB block 0 [ 1349.182527][T17337] nbd0: unable to read partition table [ 1352.204811][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3150'. [ 1357.155243][T17801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1357.171382][T17801] ufs: Invalid option: "GPL" or missing value [ 1357.178299][T17801] ufs: wrong mount options [ 1359.625781][T17821] sp0: Synchronizing with TNC [ 1359.793906][T17821] Invalid ELF header type: 0 != 1 [ 1360.965099][T17812] [U] è [ 1361.731341][T17829] vlan5: entered promiscuous mode [ 1361.741002][T17829] vlan5: entered allmulticast mode [ 1361.753675][T17829] hsr_slave_1: entered allmulticast mode [ 1364.170162][T17850] tipc: Enabling of bearer rejected, failed to enable media [ 1367.585850][T17867] orangefs_mount: mount request failed with -4 [ 1368.874050][T17880] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 1370.754346][T17895] 9pnet_fd: p9_fd_create_tcp (17895): problem connecting socket to 127.0.0.1 [ 1374.496846][T17847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1379.303119][T17956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3202'. [ 1380.398913][T17960] veth0_to_team: entered promiscuous mode [ 1380.404706][T17960] veth0_to_team: entered allmulticast mode [ 1381.187725][T10645] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1381.297854][T17979] syz.3.3201: attempt to access beyond end of device [ 1381.297854][T17979] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1381.311275][T17979] EXT4-fs (loop3): unable to read superblock [ 1382.400783][T10645] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1382.409377][T10645] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.432291][T10645] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1382.460207][T10645] usb 6-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1382.484166][T10645] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1382.607081][T10645] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1382.621766][T10645] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1382.642841][T10645] usb 6-1: Product: syz [ 1382.662762][T10645] usb 6-1: Manufacturer: syz [ 1382.690588][T10645] usb 6-1: SerialNumber: syz [ 1382.700135][T10645] usb 6-1: config 0 descriptor?? [ 1382.713466][T10645] ldusb 6-1:0.0: Interrupt in endpoint not found [ 1384.320338][T17838] usb 6-1: USB disconnect, device number 16 [ 1385.560443][T18008] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1385.569365][T18008] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1385.578217][T18008] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1385.587014][T18008] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1388.104642][T18028] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1388.113080][T18028] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1388.122988][T18028] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1388.318142][T18028] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1388.886124][T18035] cgroup: none used incorrectly [ 1391.256578][T18060] syz.1.3223: attempt to access beyond end of device [ 1391.256578][T18060] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1393.562341][T18083] [ 1393.564715][T18083] ====================================================== [ 1393.571741][T18083] WARNING: possible circular locking dependency detected [ 1393.578778][T18083] 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 Not tainted [ 1393.585893][T18083] ------------------------------------------------------ [ 1393.592923][T18083] syz.0.3229/18083 is trying to acquire lock: [ 1393.599007][T18083] ffff8880280eb6c0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x149/0x400 [ 1393.608443][T18083] [ 1393.608443][T18083] but task is already holding lock: [ 1393.615830][T18083] ffff8880280eb750 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x67/0x400 [ 1393.625530][T18083] [ 1393.625530][T18083] which lock already depends on the new lock. [ 1393.625530][T18083] [ 1393.635954][T18083] [ 1393.635954][T18083] the existing dependency chain (in reverse order) is: [ 1393.644983][T18083] [ 1393.644983][T18083] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 1393.652921][T18083] lock_acquire+0x1ed/0x550 [ 1393.657974][T18083] __mutex_lock+0x1ac/0xee0 [ 1393.663020][T18083] blk_mq_sysfs_unregister_hctxs+0xaa/0x300 [ 1393.669455][T18083] blk_mq_update_nr_hw_queues+0x6cc/0x1ae0 [ 1393.675799][T18083] nbd_start_device+0x16c/0xaa0 [ 1393.681192][T18083] nbd_ioctl+0x5dc/0xf40 [ 1393.685977][T18083] blkdev_ioctl+0x57d/0x6a0 [ 1393.691015][T18083] __se_sys_ioctl+0xf5/0x170 [ 1393.696142][T18083] do_syscall_64+0xf3/0x230 [ 1393.701193][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.707625][T18083] [ 1393.707625][T18083] -> #4 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1393.716259][T18083] lock_acquire+0x1ed/0x550 [ 1393.721300][T18083] blk_mq_submit_bio+0x1536/0x2390 [ 1393.726940][T18083] __submit_bio+0x2c6/0x560 [ 1393.731974][T18083] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1393.738139][T18083] mpage_readahead+0x630/0x780 [ 1393.743451][T18083] read_pages+0x176/0x750 [ 1393.748319][T18083] page_cache_ra_unbounded+0x606/0x720 [ 1393.754325][T18083] page_cache_sync_ra+0x3c5/0xad0 [ 1393.759892][T18083] filemap_get_pages+0x605/0x2080 [ 1393.765465][T18083] filemap_read+0x452/0xf50 [ 1393.770518][T18083] blkdev_read_iter+0x2d8/0x430 [ 1393.775907][T18083] vfs_read+0x991/0xb70 [ 1393.780583][T18083] ksys_read+0x18f/0x2b0 [ 1393.785338][T18083] do_syscall_64+0xf3/0x230 [ 1393.790358][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.796767][T18083] [ 1393.796767][T18083] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1393.805285][T18083] lock_acquire+0x1ed/0x550 [ 1393.810301][T18083] down_read+0xb1/0xa40 [ 1393.814976][T18083] page_cache_ra_unbounded+0x142/0x720 [ 1393.820960][T18083] do_sync_mmap_readahead+0x499/0x970 [ 1393.826850][T18083] filemap_fault+0x8a9/0x1490 [ 1393.832044][T18083] __do_fault+0x135/0x390 [ 1393.836889][T18083] handle_pte_fault+0x39eb/0x5ed0 [ 1393.842429][T18083] handle_mm_fault+0x1053/0x1ad0 [ 1393.847879][T18083] exc_page_fault+0x2b9/0x8b0 [ 1393.853071][T18083] asm_exc_page_fault+0x26/0x30 [ 1393.858440][T18083] rep_movs_alternative+0x30/0x70 [ 1393.863978][T18083] _copy_from_user+0x7f/0xc0 [ 1393.869086][T18083] copy_msghdr_from_user+0xae/0x680 [ 1393.874804][T18083] do_recvmmsg+0x3bd/0xab0 [ 1393.879731][T18083] __x64_sys_recvmmsg+0x199/0x250 [ 1393.885265][T18083] do_syscall_64+0xf3/0x230 [ 1393.890284][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.896692][T18083] [ 1393.896692][T18083] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 1393.904244][T18083] lock_acquire+0x1ed/0x550 [ 1393.909258][T18083] __might_fault+0xc6/0x120 [ 1393.914276][T18083] _copy_from_user+0x2a/0xc0 [ 1393.919395][T18083] blk_trace_ioctl+0x1ad/0x9a0 [ 1393.924692][T18083] blkdev_ioctl+0x40c/0x6a0 [ 1393.929715][T18083] __se_sys_ioctl+0xf5/0x170 [ 1393.934825][T18083] do_syscall_64+0xf3/0x230 [ 1393.939856][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.946270][T18083] [ 1393.946270][T18083] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1393.954090][T18083] lock_acquire+0x1ed/0x550 [ 1393.959110][T18083] __mutex_lock+0x1ac/0xee0 [ 1393.964136][T18083] blk_register_queue+0x15a/0x400 [ 1393.969673][T18083] add_disk_fwnode+0x648/0xf80 [ 1393.974950][T18083] brd_alloc+0x547/0x790 [ 1393.979710][T18083] brd_init+0x126/0x1b0 [ 1393.984379][T18083] do_one_initcall+0x248/0x870 [ 1393.989659][T18083] do_initcall_level+0x157/0x210 [ 1393.995106][T18083] do_initcalls+0x3f/0x80 [ 1393.999949][T18083] kernel_init_freeable+0x435/0x5d0 [ 1394.005664][T18083] kernel_init+0x1d/0x2b0 [ 1394.010508][T18083] ret_from_fork+0x4b/0x80 [ 1394.015432][T18083] ret_from_fork_asm+0x1a/0x30 [ 1394.020713][T18083] [ 1394.020713][T18083] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 1394.028267][T18083] validate_chain+0x18ef/0x5920 [ 1394.033636][T18083] __lock_acquire+0x1397/0x2100 [ 1394.039002][T18083] lock_acquire+0x1ed/0x550 [ 1394.044022][T18083] __mutex_lock+0x1ac/0xee0 [ 1394.049061][T18083] blk_register_queue+0x149/0x400 [ 1394.054602][T18083] add_disk_fwnode+0x648/0xf80 [ 1394.059880][T18083] loop_add+0x81d/0xaf0 [ 1394.064554][T18083] blk_request_module+0x18d/0x1b0 [ 1394.070093][T18083] blkdev_get_no_open+0x36/0xc0 [ 1394.075473][T18083] bdev_file_open_by_dev+0x99/0x220 [ 1394.081189][T18083] setup_bdev_super+0x5d/0x5d0 [ 1394.086468][T18083] mount_bdev+0x1c4/0x2d0 [ 1394.091309][T18083] legacy_get_tree+0xee/0x190 [ 1394.096497][T18083] vfs_get_tree+0x90/0x2b0 [ 1394.101426][T18083] do_new_mount+0x2be/0xb40 [ 1394.106443][T18083] __se_sys_mount+0x2d6/0x3c0 [ 1394.111651][T18083] do_syscall_64+0xf3/0x230 [ 1394.116682][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.123097][T18083] [ 1394.123097][T18083] other info that might help us debug this: [ 1394.123097][T18083] [ 1394.133411][T18083] Chain exists of: [ 1394.133411][T18083] &q->sysfs_lock --> &q->q_usage_counter(io)#49 --> &q->sysfs_dir_lock [ 1394.133411][T18083] [ 1394.147592][T18083] Possible unsafe locking scenario: [ 1394.147592][T18083] [ 1394.155041][T18083] CPU0 CPU1 [ 1394.160396][T18083] ---- ---- [ 1394.165749][T18083] lock(&q->sysfs_dir_lock); [ 1394.170425][T18083] lock(&q->q_usage_counter(io)#49); [ 1394.178315][T18083] lock(&q->sysfs_dir_lock); [ 1394.185500][T18083] lock(&q->sysfs_lock); [ 1394.189819][T18083] [ 1394.189819][T18083] *** DEADLOCK *** [ 1394.189819][T18083] [ 1394.198037][T18083] 3 locks held by syz.0.3229/18083: [ 1394.203221][T18083] #0: ffff8880661cc0e0 (&type->s_umount_key#101/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0 [ 1394.213412][T18083] #1: ffffffff8f04e148 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x33/0x1b0 [ 1394.223326][T18083] #2: ffff8880280eb750 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x67/0x400 [ 1394.233425][T18083] [ 1394.233425][T18083] stack backtrace: [ 1394.239396][T18083] CPU: 0 UID: 0 PID: 18083 Comm: syz.0.3229 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 1394.250139][T18083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1394.260188][T18083] Call Trace: [ 1394.263457][T18083] [ 1394.266380][T18083] dump_stack_lvl+0x241/0x360 [ 1394.271058][T18083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1394.276258][T18083] ? __pfx__printk+0x10/0x10 [ 1394.280846][T18083] print_circular_bug+0x13a/0x1b0 [ 1394.285868][T18083] check_noncircular+0x36a/0x4a0 [ 1394.290803][T18083] ? mark_lock+0x9a/0x360 [ 1394.295125][T18083] ? __pfx_check_noncircular+0x10/0x10 [ 1394.300577][T18083] ? lockdep_lock+0x123/0x2b0 [ 1394.305245][T18083] ? mark_lock+0x9a/0x360 [ 1394.309565][T18083] validate_chain+0x18ef/0x5920 [ 1394.314415][T18083] ? __pfx_validate_chain+0x10/0x10 [ 1394.319605][T18083] ? up_write+0x1a9/0x590 [ 1394.323949][T18083] ? up_write+0x1a9/0x590 [ 1394.328284][T18083] ? mark_lock+0x9a/0x360 [ 1394.332613][T18083] ? __pfx_up_write+0x10/0x10 [ 1394.337308][T18083] ? __lock_acquire+0x1397/0x2100 [ 1394.342351][T18083] ? mark_lock+0x9a/0x360 [ 1394.346678][T18083] __lock_acquire+0x1397/0x2100 [ 1394.351532][T18083] lock_acquire+0x1ed/0x550 [ 1394.356030][T18083] ? blk_register_queue+0x149/0x400 [ 1394.361225][T18083] ? __pfx_lock_acquire+0x10/0x10 [ 1394.366246][T18083] ? __pfx___might_resched+0x10/0x10 [ 1394.371534][T18083] ? xa_find_after+0x689/0x700 [ 1394.376290][T18083] ? xa_find_after+0x1b1/0x700 [ 1394.381050][T18083] __mutex_lock+0x1ac/0xee0 [ 1394.385547][T18083] ? blk_register_queue+0x149/0x400 [ 1394.390739][T18083] ? blk_register_queue+0x149/0x400 [ 1394.395928][T18083] ? __pfx___mutex_lock+0x10/0x10 [ 1394.400946][T18083] ? kobject_init+0x83/0x1f0 [ 1394.405532][T18083] blk_register_queue+0x149/0x400 [ 1394.410551][T18083] add_disk_fwnode+0x648/0xf80 [ 1394.415305][T18083] ? loop_add+0x6d6/0xaf0 [ 1394.419637][T18083] loop_add+0x81d/0xaf0 [ 1394.423787][T18083] ? __pfx_loop_add+0x10/0x10 [ 1394.428466][T18083] ? __pfx_loop_probe+0x10/0x10 [ 1394.433309][T18083] ? __pfx_loop_probe+0x10/0x10 [ 1394.438155][T18083] ? blk_request_module+0x94/0x1b0 [ 1394.443255][T18083] ? blk_request_module+0x184/0x1b0 [ 1394.448442][T18083] ? __pfx_loop_probe+0x10/0x10 [ 1394.453279][T18083] blk_request_module+0x18d/0x1b0 [ 1394.458299][T18083] blkdev_get_no_open+0x36/0xc0 [ 1394.463147][T18083] bdev_file_open_by_dev+0x99/0x220 [ 1394.468357][T18083] setup_bdev_super+0x5d/0x5d0 [ 1394.473147][T18083] mount_bdev+0x1c4/0x2d0 [ 1394.477488][T18083] ? __pfx_f2fs_fill_super+0x10/0x10 [ 1394.482773][T18083] ? __pfx_mount_bdev+0x10/0x10 [ 1394.487620][T18083] ? vfs_parse_fs_string+0x190/0x230 [ 1394.492912][T18083] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 1394.498553][T18083] legacy_get_tree+0xee/0x190 [ 1394.503225][T18083] ? __pfx_f2fs_mount+0x10/0x10 [ 1394.508082][T18083] vfs_get_tree+0x90/0x2b0 [ 1394.512492][T18083] do_new_mount+0x2be/0xb40 [ 1394.517007][T18083] ? __pfx_do_new_mount+0x10/0x10 [ 1394.522032][T18083] __se_sys_mount+0x2d6/0x3c0 [ 1394.526697][T18083] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1394.532668][T18083] ? __pfx___se_sys_mount+0x10/0x10 [ 1394.537853][T18083] ? do_syscall_64+0x100/0x230 [ 1394.542612][T18083] ? __x64_sys_mount+0x20/0xc0 [ 1394.547361][T18083] do_syscall_64+0xf3/0x230 [ 1394.551854][T18083] ? clear_bhb_loop+0x35/0x90 [ 1394.556527][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.562416][T18083] RIP: 0033:0x7f16e0b7ff19 [ 1394.566831][T18083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1394.586429][T18083] RSP: 002b:00007f16e193d058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1394.594835][T18083] RAX: ffffffffffffffda RBX: 00007f16e0d46160 RCX: 00007f16e0b7ff19 [ 1394.602797][T18083] RDX: 0000000020000140 RSI: 0000000020000040 RDI: 0000000020000240 [ 1394.610758][T18083] RBP: 00007f16e0bf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1394.618718][T18083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.626676][T18083] R13: 0000000000000000 R14: 00007f16e0d46160 R15: 00007ffd3424f1a8 [ 1394.634641][T18083] [ 1394.682485][T18083] block device autoloading is deprecated and will be removed. [ 1394.690136][T18083] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1394.698696][T18083] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1394.750269][T18083] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1394.758104][T18083] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1394.829633][T18087] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1394.837543][T18087] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1394.845882][T18087] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1394.853732][T18087] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1395.734141][T18097] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1395.742093][T18097] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1395.751266][T18097] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1395.759026][T18097] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock