last executing test programs: 40m43.309910138s ago: executing program 3 (id=2708): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E\x00', 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0xfffffffffffffff5, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x80, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 40m43.171789819s ago: executing program 3 (id=2710): r0 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x7, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x0, 0x1}, 0x20) 40m42.969517491s ago: executing program 3 (id=2714): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) 40m41.933838455s ago: executing program 3 (id=2723): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) 40m41.776706155s ago: executing program 3 (id=2725): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096}) 40m40.687366637s ago: executing program 3 (id=2735): socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) 40m40.359347753s ago: executing program 32 (id=2735): socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) 40m37.933745563s ago: executing program 1 (id=2767): r0 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x300, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 40m37.714703898s ago: executing program 1 (id=2771): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x4040, 0x24, 0xa}, 0x18) 40m37.45358262s ago: executing program 1 (id=2774): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) 40m36.176256774s ago: executing program 1 (id=2788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 40m34.198766388s ago: executing program 1 (id=2805): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 40m31.285352886s ago: executing program 1 (id=2823): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000500), 0x8, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 40m31.037575037s ago: executing program 33 (id=2823): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000500), 0x8, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 39m43.059525315s ago: executing program 6 (id=3273): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}}}, 0x84) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 39m42.420063469s ago: executing program 6 (id=3281): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x100000001, 0x0, 0x6, 0x3, 0x6, 0xfffffffffffffffd, 0x500fff}) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'net_prio.prioidx\x00', 0x3a, 'net_prio.prioidx\x00', 0x3a, './file1'}, 0x49) 39m42.25102018s ago: executing program 6 (id=3285): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r0, &(0x7f0000000340)="732f7f3bab5895", 0x7) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x80000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 39m41.762213713s ago: executing program 6 (id=3291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 39m41.514169584s ago: executing program 6 (id=3296): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 39m40.253787555s ago: executing program 6 (id=3310): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000285000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0xcb1f, 0x0, 0x0, 0x100, 0x16, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39m40.134899877s ago: executing program 34 (id=3310): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000285000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0xcb1f, 0x0, 0x0, 0x100, 0x16, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35m13.039601005s ago: executing program 4 (id=4989): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 35m10.06396227s ago: executing program 4 (id=4997): syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf00", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r3, 0x1) 35m7.345532336s ago: executing program 4 (id=5008): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') 34m56.651270972s ago: executing program 4 (id=5038): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, &(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r5, &(0x7f00000002c0), 0x15) splice(r4, 0x0, r6, 0x0, 0x100, 0x0) 34m54.491468122s ago: executing program 4 (id=5050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r3) ioctl$FE_SET_TONE(0xffffffffffffffff, 0x6f42, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r4, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f17", 0x5e, 0x4008044, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)='i', 0x1) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 34m53.179005647s ago: executing program 4 (id=5055): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x1800) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) 34m36.875889746s ago: executing program 35 (id=5055): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x1800) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) 27m12.582796149s ago: executing program 7 (id=10338): timer_delete(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(0x0, 0x1) dup(r0) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a40)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8011) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 27m9.633110024s ago: executing program 7 (id=10352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 27m8.929215793s ago: executing program 7 (id=10359): connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) 27m3.964421212s ago: executing program 7 (id=10403): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0x8) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 27m0.556110685s ago: executing program 7 (id=10421): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf50", 0x15}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec57", 0x10}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 26m53.493961522s ago: executing program 7 (id=10453): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x10000014}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') lseek(r2, 0x8001, 0x1) 26m38.340724006s ago: executing program 36 (id=10453): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x10000014}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') lseek(r2, 0x8001, 0x1) 26.595865023s ago: executing program 0 (id=23010): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xfc, 0x0, 0x40, 0x8002, 0x2, 0x3e, 0x6, 0x294, 0x40, 0x1dd, 0x13, 0x0, 0x38, 0x1, 0x0, 0x333, 0xa816}, [{0x3, 0x3, 0x4, 0x4d, 0x1c8, 0xe6, 0x1004, 0x3}], "", ['\x00']}, 0x178) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0xffffffffffffffff, 0x4008815) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, r0, 0x4, 0x1, 0x4}, 0x50) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 26.338999323s ago: executing program 0 (id=23012): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES32=r0], 0x24}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYBLOB="3d03"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = semget$private(0x0, 0x6, 0x182) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{}, {}], 0x2) semop(r3, &(0x7f0000000180)=[{}, {}], 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mlock(&(0x7f000038e000/0x2000)=nil, 0x2000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41100, 0x20, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xe, 0xfffffffa, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x5, 0x3, 0xc, 0x1}, {0x4, 0x2, 0xf, 0x6}, {0x4, 0x5, 0x10, 0xb}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000040), &(0x7f0000000480)=r5}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 25.487258142s ago: executing program 0 (id=23019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="ff6b5a515c3c56ff1b4c3a42f625147973d3c2de515e204babe0ae64f2f6eb233d7d8033abfdf5109b811b3ebaeec7ac4e0b9b15f2ab9a9daddaf779ab6b13db5b2470f6b956e89be513bab40dece0f5e3bb4eaa82d0a5f87e8216ae3269f1c67cb89351aa1bf1de252d5e95dc8ed4d638846d2be7c9f248c090215e0919c8a4b2fed7330c666b1a24e3aa7f91ad80a9ae9f17d3dacd49fd281ecd035a4b228dc93b32fb9236e8004f1628d0b6bb265b0baadf1e", @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x2c000010) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) open(0x0, 0x169a7e, 0x68) dup3(r7, r8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000002480)={0x0, 0x6, 0x0, 0x1ff}, 0x8) 24.334189997s ago: executing program 0 (id=23022): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xae\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\x8d\x8b\x9e\xb1\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @local, 0x9}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x15944, 0x4) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa415926bee9aa80e, 0x40010, r1, 0x82000000) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000180)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) 22.939194046s ago: executing program 0 (id=23029): r0 = syz_open_dev$video4linux(&(0x7f0000001600), 0x7, 0x101402) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) 22.725636577s ago: executing program 0 (id=23031): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f}}, 0x20) 8.79579484s ago: executing program 5 (id=23213): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000640)={0x2, 0x0, 0x98, &(0x7f0000000000)={0x6471, 0x20003, 0x14}}) 8.589338918s ago: executing program 5 (id=23216): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x9) 8.376052936s ago: executing program 5 (id=23219): syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 7.785553227s ago: executing program 5 (id=23222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 7.600688623s ago: executing program 5 (id=23227): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x20040891) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x7, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) 6.410427845s ago: executing program 5 (id=23237): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 3.710099787s ago: executing program 8 (id=23255): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 3.289691788s ago: executing program 8 (id=23258): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 3.026876286s ago: executing program 8 (id=23260): fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 2.377625658s ago: executing program 9 (id=23265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x6c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "000d277146249bbe4d0b805c92d4a7f9"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}}, 0x4080) 2.226922031s ago: executing program 9 (id=23266): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1e21, 0x4, 0x201, 0x0, 0x401, 0x4, 0x5, 0xffffffff, 0x4c5d, 0x0, 0x0, 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140), 0x14) 2.173225135s ago: executing program 8 (id=23267): rt_sigprocmask(0x1, &(0x7f0000000480)={[0x5]}, &(0x7f00000004c0), 0x8) 2.109811247s ago: executing program 8 (id=23269): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x2a0}}, 0x10004000) 1.921210289s ago: executing program 9 (id=23270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x401}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 1.444088927s ago: executing program 9 (id=23273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4800}, 0x11) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.105974246s ago: executing program 8 (id=23276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xdd0, &(0x7f0000000280)=ANY=[], 0x0) 965.652572ms ago: executing program 2 (id=23277): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000", 0x3b}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c4", 0x72}], 0x3}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d90", 0x96}, {&(0x7f0000000700)="223aa707c08a7eca577ac4e5fca75231526b9876be28f3dbb88da63d4e66b62cbc49eca97a5d5eb03c02208ffb60524cf64217e75311bb3ccc8750c92a1e4ed86591a855fff7e828e7d0f62832d58a820635fade812e52c07f6daffe", 0x5c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d2", 0x59}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 817.06485ms ago: executing program 2 (id=23278): rt_sigprocmask(0x1, 0x0, &(0x7f00000004c0), 0x0) 666.163158ms ago: executing program 2 (id=23279): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 452.506534ms ago: executing program 2 (id=23280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) 451.063893ms ago: executing program 9 (id=23281): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 319.052769ms ago: executing program 9 (id=23282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 181.22149ms ago: executing program 2 (id=23283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=23284): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_xfrm(r0, 0x0, 0x10004000) kernel console output (not intermixed with test programs): 8.195048][T19904] netlink: 32 bytes leftover after parsing attributes in process `syz.5.21062'. [ 2428.925745][T20238] sctp: [Deprecated]: syz.9.21072 (pid 20238) Use of int in max_burst socket option. [ 2428.925745][T20238] Use struct sctp_assoc_value instead [ 2428.947553][T20238] netlink: 'syz.9.21072': attribute type 10 has an invalid length. [ 2429.765640][T20642] netlink: 20 bytes leftover after parsing attributes in process `syz.9.21085'. [ 2429.766730][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 2429.766746][ T36] audit: type=1326 audit(16913375.610:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2429.767534][ T36] audit: type=1326 audit(16913375.610:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2429.898244][T20675] overlayfs: missing 'lowerdir' [ 2430.070581][ T36] audit: type=1326 audit(16913375.680:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2430.070827][ T36] audit: type=1326 audit(16913375.680:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2430.071158][ T36] audit: type=1326 audit(16913375.680:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2430.071222][ T36] audit: type=1326 audit(16913375.680:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2430.071455][ T36] audit: type=1326 audit(16913375.680:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2430.071693][ T36] audit: type=1326 audit(16913375.680:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2430.071947][ T36] audit: type=1326 audit(16913375.690:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2430.072030][ T36] audit: type=1326 audit(16913375.690:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20641 comm="syz.9.21085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2431.259211][T20791] udevd[20791]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 2431.603065][T21333] overlayfs: failed to resolve './file0': -2 [ 2432.371903][T20791] udevd[20791]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 2433.411913][T22439] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21125'. [ 2433.602704][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21127'. [ 2433.742471][T22532] overlayfs: missing 'lowerdir' [ 2433.807021][T22533] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2433.807219][T22533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2434.506533][T22437] lo speed is unknown, defaulting to 1000 [ 2434.520566][T22437] lo speed is unknown, defaulting to 1000 [ 2434.843295][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21131'. [ 2436.264276][T20791] udevd[20791]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 2437.967905][T23589] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.21149'. [ 2438.618953][T23919] overlayfs: failed to resolve './file0': -2 [ 2438.798863][T23951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21160'. [ 2440.857211][T20586] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2441.957169][T20586] usb 9-1: Using ep0 maxpacket: 16 [ 2441.960471][T20586] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2441.960505][T20586] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 2441.960529][T20586] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2441.960550][T20586] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2441.963212][T20586] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2441.963238][T20586] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2441.963257][T20586] usb 9-1: SerialNumber: syz [ 2442.003779][T24774] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2442.003905][T24774] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2442.016068][T20586] hub 9-1:1.0: bad descriptor, ignoring hub [ 2442.016105][T20586] hub 9-1:1.0: probe with driver hub failed with error -5 [ 2442.239137][T20586] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 2442.344360][T20586] usb 9-1: USB disconnect, device number 77 [ 2442.851574][T20586] usb 9-1: new full-speed USB device number 78 using dummy_hcd [ 2443.110612][T20586] usb 9-1: device descriptor read/64, error -71 [ 2443.637187][T20586] usb 9-1: new full-speed USB device number 79 using dummy_hcd [ 2443.891613][T26013] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2443.891988][T26013] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2444.595545][T26032] overlayfs: missing 'lowerdir' [ 2445.157680][ T42] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2445.576784][T26564] netlink: 28 bytes leftover after parsing attributes in process `syz.9.21219'. [ 2446.638242][ T36] kauditd_printk_skb: 236 callbacks suppressed [ 2446.638261][ T36] audit: type=1326 audit(16913392.490:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2446.638631][ T36] audit: type=1326 audit(16913392.490:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2446.640673][ T36] audit: type=1326 audit(16913392.490:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2446.641425][ T36] audit: type=1326 audit(16913392.490:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2446.641830][ T36] audit: type=1326 audit(16913392.490:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2446.641953][ T36] audit: type=1326 audit(16913392.490:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2446.642309][ T36] audit: type=1326 audit(16913392.490:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2446.643579][ T36] audit: type=1326 audit(16913392.490:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2446.643628][ T36] audit: type=1326 audit(16913392.490:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2446.645758][ T36] audit: type=1326 audit(16913392.490:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27226 comm="syz.9.21241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2447.040011][T27618] devpts: Bad value for 'gid' [ 2447.040033][T27618] devpts: Bad value for 'gid' [ 2447.137258][T20586] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 2447.582815][T20586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2447.582848][T20586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2447.582870][T20586] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2447.582909][T20586] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2447.582932][T20586] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.716463][T20586] usb 9-1: config 0 descriptor?? [ 2447.773510][T28055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21255'. [ 2447.773603][T28055] openvswitch: netlink: Message has 2 unknown bytes. [ 2448.290968][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.291005][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.291032][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.291057][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.291082][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.291106][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.291132][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.291158][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.291184][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.291208][T20586] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 2448.313951][T28277] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21263'. [ 2448.405352][T20586] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2450.312307][ T7679] usb 9-1: USB disconnect, device number 80 [ 2450.610186][T28952] binder: 28907:28952 ioctl c0285840 0 returned -22 [ 2450.908050][T28960] netlink: 56 bytes leftover after parsing attributes in process `syz.9.21282'. [ 2450.979418][T28968] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2450.979473][T28968] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2452.813550][T29340] netlink: 36 bytes leftover after parsing attributes in process `syz.9.21293'. [ 2453.944317][T29407] FAULT_INJECTION: forcing a failure. [ 2453.944317][T29407] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2453.944351][T29407] CPU: 0 UID: 0 PID: 29407 Comm: syz.8.21299 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2453.944378][T29407] Tainted: [L]=SOFTLOCKUP [ 2453.944385][T29407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2453.944397][T29407] Call Trace: [ 2453.944405][T29407] [ 2453.944414][T29407] dump_stack_lvl+0xe8/0x150 [ 2453.944447][T29407] should_fail_ex+0x46b/0x600 [ 2453.944478][T29407] _copy_to_user+0x31/0xb0 [ 2453.944588][T29407] simple_read_from_buffer+0xe1/0x170 [ 2453.944650][T29407] proc_fail_nth_read+0x1be/0x230 [ 2453.944677][T29407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2453.944716][T29407] ? rw_verify_area+0x2ac/0x4e0 [ 2453.944743][T29407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2453.944768][T29407] vfs_read+0x212/0xa80 [ 2453.944803][T29407] ? __pfx_vfs_read+0x10/0x10 [ 2453.944833][T29407] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2453.944856][T29407] ? lockdep_hardirqs_on+0x7a/0x110 [ 2453.944877][T29407] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2453.944898][T29407] ? mutex_lock_nested+0x152/0x1d0 [ 2453.944924][T29407] ? fdget_pos+0x252/0x320 [ 2453.944958][T29407] ksys_read+0x156/0x270 [ 2453.944989][T29407] ? __pfx_ksys_read+0x10/0x10 [ 2453.945029][T29407] do_syscall_64+0x14d/0xf80 [ 2453.945049][T29407] ? trace_irq_disable+0x3b/0x150 [ 2453.945072][T29407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2453.945091][T29407] ? clear_bhb_loop+0x40/0x90 [ 2453.945115][T29407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2453.945133][T29407] RIP: 0033:0x7f64a7aed04e [ 2453.945152][T29407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2453.945168][T29407] RSP: 002b:00007f64a5d85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2453.945188][T29407] RAX: ffffffffffffffda RBX: 00007f64a5d866c0 RCX: 00007f64a7aed04e [ 2453.945202][T29407] RDX: 000000000000000f RSI: 00007f64a5d860a0 RDI: 0000000000000004 [ 2453.945214][T29407] RBP: 00007f64a5d86090 R08: 0000000000000000 R09: 0000000000000000 [ 2453.945225][T29407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2453.945237][T29407] R13: 00007f64a7da6038 R14: 00007f64a7da5fa0 R15: 00007fffbe96e3e8 [ 2453.945268][T29407] [ 2457.436071][T30047] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2457.436502][T30047] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2458.443518][T30173] binder: 30083:30173 ioctl c0285840 0 returned -22 [ 2458.897360][T30301] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2458.897413][T30301] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2461.625176][T30829] fuse: Unknown parameter 'grouMp_id' [ 2463.177360][ T1637] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2463.327096][ T1637] usb 9-1: Using ep0 maxpacket: 16 [ 2463.335192][ T1637] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2463.335225][ T1637] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 2463.335248][ T1637] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2463.335269][ T1637] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2463.347636][ T1637] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2463.347666][ T1637] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2463.347684][ T1637] usb 9-1: SerialNumber: syz [ 2463.354303][T31100] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2463.354416][T31100] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2463.363497][ T1637] hub 9-1:1.0: bad descriptor, ignoring hub [ 2463.363531][ T1637] hub 9-1:1.0: probe with driver hub failed with error -5 [ 2463.816773][T31100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2463.833945][T31100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2465.092523][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21366'. [ 2466.111103][ T1637] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 2466.175018][ T1637] usb 9-1: USB disconnect, device number 81 [ 2466.838671][ T694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21382'. [ 2468.021741][ T931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21389'. [ 2468.025202][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 2468.025218][ T36] audit: type=1326 audit(16913413.870:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.025259][ T36] audit: type=1326 audit(16913413.870:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.026581][ T36] audit: type=1326 audit(16913413.870:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.125813][ T36] audit: type=1326 audit(16913413.870:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.125862][ T36] audit: type=1326 audit(16913413.870:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.126038][ T36] audit: type=1326 audit(16913413.970:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.126206][ T36] audit: type=1326 audit(16913413.970:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.126479][ T36] audit: type=1326 audit(16913413.970:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.126614][ T36] audit: type=1326 audit(16913413.970:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.147202][ T36] audit: type=1326 audit(16913413.990:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=916 comm="syz.0.21389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb664d7c819 code=0x7ffc0000 [ 2468.602551][ T1240] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21395'. [ 2471.287927][ T1690] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21407'. [ 2471.505057][ T1795] 9p: Bad value for 'rfdno' [ 2471.509389][ T1795] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2471.509441][ T1795] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2472.368418][ T2477] overlayfs: missing 'lowerdir' [ 2472.433723][ T2478] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2472.433846][ T2478] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2472.864751][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.878269][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2473.361882][ T2537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21420'. [ 2473.364132][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 2473.364147][ T36] audit: type=1326 audit(16913419.210:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2473.364799][ T36] audit: type=1326 audit(16913419.210:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2473.364844][ T36] audit: type=1326 audit(16913419.210:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2473.365248][ T36] audit: type=1326 audit(16913419.210:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2473.365733][ T36] audit: type=1326 audit(16913419.210:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2473.365776][ T36] audit: type=1326 audit(16913419.210:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2473.366162][ T36] audit: type=1326 audit(16913419.210:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2473.528347][ T36] audit: type=1326 audit(16913419.210:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2473.564245][ T36] audit: type=1326 audit(16913419.410:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2473.564820][ T36] audit: type=1326 audit(16913419.410:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2530 comm="syz.5.21420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2475.913185][ T2996] netlink: 20 bytes leftover after parsing attributes in process `syz.9.21430'. [ 2476.107898][ T3071] sctp: [Deprecated]: syz.9.21430 (pid 3071) Use of int in max_burst socket option deprecated. [ 2476.107898][ T3071] Use struct sctp_assoc_value instead [ 2477.558947][ T4114] FAULT_INJECTION: forcing a failure. [ 2477.558947][ T4114] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.558983][ T4114] CPU: 0 UID: 0 PID: 4114 Comm: syz.8.21456 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2477.559010][ T4114] Tainted: [L]=SOFTLOCKUP [ 2477.559016][ T4114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2477.559029][ T4114] Call Trace: [ 2477.559036][ T4114] [ 2477.559046][ T4114] dump_stack_lvl+0xe8/0x150 [ 2477.559078][ T4114] should_fail_ex+0x46b/0x600 [ 2477.559110][ T4114] should_failslab+0xa8/0x100 [ 2477.559132][ T4114] __kmalloc_noprof+0xdf/0x7b0 [ 2477.559150][ T4114] ? percpu_ref_get_many+0x21/0x1e0 [ 2477.559244][ T4114] ? io_cache_alloc_new+0x40/0x100 [ 2477.559296][ T4114] io_cache_alloc_new+0x40/0x100 [ 2477.559315][ T4114] __io_prep_rw+0x2bd/0xed0 [ 2477.559369][ T4114] ? __pfx___io_prep_rw+0x10/0x10 [ 2477.559390][ T4114] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 2477.559428][ T4114] io_prep_write+0x36/0x110 [ 2477.559447][ T4114] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 2477.559500][ T4114] io_submit_sqes+0xbf0/0x24e0 [ 2477.559553][ T4114] __se_sys_io_uring_enter+0x2cc/0x1970 [ 2477.559588][ T4114] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2477.559610][ T4114] ? fput+0xa0/0xd0 [ 2477.559634][ T4114] ? ksys_write+0x248/0x270 [ 2477.559672][ T4114] ? __pfx_ksys_write+0x10/0x10 [ 2477.559707][ T4114] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 2477.559731][ T4114] do_syscall_64+0x14d/0xf80 [ 2477.559752][ T4114] ? trace_irq_disable+0x3b/0x150 [ 2477.559775][ T4114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2477.559794][ T4114] ? clear_bhb_loop+0x40/0x90 [ 2477.559819][ T4114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2477.559838][ T4114] RIP: 0033:0x7f64a7b2c819 [ 2477.559856][ T4114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2477.559873][ T4114] RSP: 002b:00007f64a5d86028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2477.559895][ T4114] RAX: ffffffffffffffda RBX: 00007f64a7da5fa0 RCX: 00007f64a7b2c819 [ 2477.559909][ T4114] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 2477.559922][ T4114] RBP: 00007f64a5d86090 R08: 0000000000000000 R09: 0000000000000000 [ 2477.559934][ T4114] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 2477.559946][ T4114] R13: 00007f64a7da6038 R14: 00007f64a7da5fa0 R15: 00007fffbe96e3e8 [ 2477.559977][ T4114] [ 2478.391548][ T5652] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2478.437148][ T154] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2479.191668][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 2479.191685][ T36] audit: type=1326 audit(16913425.040:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.191783][ T36] audit: type=1326 audit(16913425.040:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.192107][ T36] audit: type=1326 audit(16913425.040:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.195421][ T36] audit: type=1326 audit(16913425.040:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.195471][ T36] audit: type=1326 audit(16913425.040:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.195511][ T36] audit: type=1326 audit(16913425.040:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.195557][ T36] audit: type=1326 audit(16913425.040:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.195595][ T36] audit: type=1326 audit(16913425.040:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.195634][ T36] audit: type=1326 audit(16913425.040:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.195673][ T36] audit: type=1326 audit(16913425.040:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5085 comm="syz.9.21482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2479.852893][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21489'. [ 2482.479671][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21503'. [ 2483.736427][ T6729] netlink: 'syz.0.21515': attribute type 10 has an invalid length. [ 2483.736443][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21515'. [ 2484.451052][ T7246] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2484.451106][ T7246] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2486.444977][ T7568] netlink: 56 bytes leftover after parsing attributes in process `syz.8.21532'. [ 2486.445133][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21532'. [ 2487.390499][ T8334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21550'. [ 2489.112131][ T8630] netlink: 84 bytes leftover after parsing attributes in process `syz.9.21557'. [ 2489.189388][ T8631] overlayfs: missing 'lowerdir' [ 2492.958011][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21579'. [ 2493.702286][ T9854] binder: 9843:9854 ioctl c0285840 0 returned -22 [ 2495.546881][T10256] FAULT_INJECTION: forcing a failure. [ 2495.546881][T10256] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.546915][T10256] CPU: 1 UID: 0 PID: 10256 Comm: syz.8.21600 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2495.546945][T10256] Tainted: [L]=SOFTLOCKUP [ 2495.546951][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2495.546961][T10256] Call Trace: [ 2495.546969][T10256] [ 2495.546977][T10256] dump_stack_lvl+0xe8/0x150 [ 2495.547008][T10256] should_fail_ex+0x46b/0x600 [ 2495.547038][T10256] should_failslab+0xa8/0x100 [ 2495.547059][T10256] __kmalloc_noprof+0xdf/0x7b0 [ 2495.547075][T10256] ? kfree+0x4d/0x6c0 [ 2495.547164][T10256] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2495.547224][T10256] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2495.547258][T10256] ? tomoyo_path_number_perm+0x219/0x630 [ 2495.547277][T10256] tomoyo_path_number_perm+0x246/0x630 [ 2495.547301][T10256] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2495.547325][T10256] ? __lock_acquire+0x6b5/0x2cf0 [ 2495.547375][T10256] ? __fget_files+0x2a/0x420 [ 2495.547405][T10256] ? __fget_files+0x2a/0x420 [ 2495.547428][T10256] ? __fget_files+0x3a6/0x420 [ 2495.547452][T10256] ? __fget_files+0x2a/0x420 [ 2495.547480][T10256] security_file_ioctl+0xc3/0x2a0 [ 2495.547536][T10256] __se_sys_ioctl+0x47/0x170 [ 2495.547584][T10256] do_syscall_64+0x14d/0xf80 [ 2495.547605][T10256] ? trace_irq_disable+0x3b/0x150 [ 2495.547628][T10256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2495.547648][T10256] ? clear_bhb_loop+0x40/0x90 [ 2495.547672][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2495.547698][T10256] RIP: 0033:0x7f64a7b2c819 [ 2495.547716][T10256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2495.547734][T10256] RSP: 002b:00007f64a5d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2495.547754][T10256] RAX: ffffffffffffffda RBX: 00007f64a7da5fa0 RCX: 00007f64a7b2c819 [ 2495.547767][T10256] RDX: 0000200000000180 RSI: 00000000400448c8 RDI: 0000000000000004 [ 2495.547780][T10256] RBP: 00007f64a5d86090 R08: 0000000000000000 R09: 0000000000000000 [ 2495.547792][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2495.547804][T10256] R13: 00007f64a7da6038 R14: 00007f64a7da5fa0 R15: 00007fffbe96e3e8 [ 2495.547836][T10256] [ 2495.797180][T10256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2496.064401][T10479] dlm: non-version read from control device 36 [ 2496.371554][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.8.21607'. [ 2498.003615][T11133] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2498.003669][T11133] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2498.157146][ T3367] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2498.245172][T11258] netlink: 'syz.9.21631': attribute type 2 has an invalid length. [ 2498.319569][ T3367] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2498.319602][ T3367] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2498.319624][ T3367] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2498.319664][ T3367] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2498.319693][ T3367] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.325347][ T3367] usb 9-1: config 0 descriptor?? [ 2498.598444][T11451] libceph: resolve 'c;' (ret=-3): failed [ 2498.613753][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21634'. [ 2498.613774][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21634'. [ 2498.905162][ T3367] hid_parser_main: 28 callbacks suppressed [ 2498.905187][ T3367] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 2498.905218][ T3367] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 2498.905245][ T3367] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 2498.905271][ T3367] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 2498.905297][ T3367] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 2498.905322][ T3367] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 2498.905349][ T3367] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 2498.905375][ T3367] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 2498.905401][ T3367] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 2498.905424][ T3367] plantronics 0003:047F:FFFF.003B: item fetching failed at offset 14/41 [ 2498.906155][ T3367] plantronics 0003:047F:FFFF.003B: parse failed [ 2498.906247][ T3367] plantronics 0003:047F:FFFF.003B: probe with driver plantronics failed with error -22 [ 2498.968400][T11762] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 2498.968428][T11762] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 2498.968634][T11762] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2499.725403][ T3367] usb 9-1: USB disconnect, device number 82 [ 2501.525595][T13327] netlink: 84 bytes leftover after parsing attributes in process `syz.0.21678'. [ 2501.603532][T13328] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2501.603731][T13328] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2504.813538][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21696'. [ 2505.339575][T13507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2505.600568][ T5652] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2505.611278][T13923] FAULT_INJECTION: forcing a failure. [ 2505.611278][T13923] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.611311][T13923] CPU: 0 UID: 0 PID: 13923 Comm: syz.8.21701 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2505.611337][T13923] Tainted: [L]=SOFTLOCKUP [ 2505.611344][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2505.611356][T13923] Call Trace: [ 2505.611364][T13923] [ 2505.611372][T13923] dump_stack_lvl+0xe8/0x150 [ 2505.611404][T13923] should_fail_ex+0x46b/0x600 [ 2505.611434][T13923] should_failslab+0xa8/0x100 [ 2505.611455][T13923] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 2505.611485][T13923] ? __alloc_skb+0x1d0/0x7d0 [ 2505.611502][T13923] ? lockdep_hardirqs_on+0x7a/0x110 [ 2505.611528][T13923] __alloc_skb+0x1d0/0x7d0 [ 2505.611550][T13923] alloc_skb_with_frags+0xca/0x890 [ 2505.611664][T13923] sock_alloc_send_pskb+0x884/0x9a0 [ 2505.611712][T13923] ? __lock_acquire+0x6b5/0x2cf0 [ 2505.611752][T13923] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2505.611776][T13923] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 2505.611854][T13923] ? __lock_acquire+0x6b5/0x2cf0 [ 2505.611878][T13923] hci_sock_sendmsg+0x208/0xf40 [ 2505.611912][T13923] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2505.611942][T13923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2505.612020][T13923] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2505.612044][T13923] sock_write_iter+0x4a1/0x4f0 [ 2505.612096][T13923] ? __pfx_sock_write_iter+0x10/0x10 [ 2505.612139][T13923] vfs_write+0x629/0xba0 [ 2505.612175][T13923] ? __pfx_vfs_write+0x10/0x10 [ 2505.612211][T13923] ? __fget_files+0x2a/0x420 [ 2505.612243][T13923] ksys_write+0x156/0x270 [ 2505.612273][T13923] ? __pfx_ksys_write+0x10/0x10 [ 2505.612311][T13923] do_syscall_64+0x14d/0xf80 [ 2505.612330][T13923] ? trace_irq_disable+0x3b/0x150 [ 2505.612352][T13923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.612371][T13923] ? clear_bhb_loop+0x40/0x90 [ 2505.612393][T13923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.612411][T13923] RIP: 0033:0x7f64a7b2c819 [ 2505.612429][T13923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2505.612444][T13923] RSP: 002b:00007f64a5d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2505.612463][T13923] RAX: ffffffffffffffda RBX: 00007f64a7da5fa0 RCX: 00007f64a7b2c819 [ 2505.612476][T13923] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000004 [ 2505.612489][T13923] RBP: 00007f64a5d86090 R08: 0000000000000000 R09: 0000000000000000 [ 2505.612500][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2505.612511][T13923] R13: 00007f64a7da6038 R14: 00007f64a7da5fa0 R15: 00007fffbe96e3e8 [ 2505.612540][T13923] [ 2505.701430][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 2505.701446][ T36] audit: type=1326 audit(16913451.550:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2505.701778][ T36] audit: type=1326 audit(16913451.550:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2505.701966][ T36] audit: type=1326 audit(16913451.550:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2505.702013][ T36] audit: type=1326 audit(16913451.550:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2505.702155][ T36] audit: type=1326 audit(16913451.550:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2505.702548][ T36] audit: type=1326 audit(16913451.550:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2505.702672][ T36] audit: type=1326 audit(16913451.550:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2505.706832][ T36] audit: type=1326 audit(16913451.550:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2505.707418][ T36] audit: type=1326 audit(16913451.560:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2505.722454][ T36] audit: type=1326 audit(16913451.570:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.8.21703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2507.011138][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21710'. [ 2507.951769][T13946] netlink: 16 bytes leftover after parsing attributes in process `syz.9.21706'. [ 2508.662809][T20586] lo speed is unknown, defaulting to 1000 [ 2508.662902][T20586] sy0: Port: 1 Link ACTIVE [ 2508.937368][T14819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2509.657559][ T1637] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2509.819746][ T1637] usb 9-1: config 171 has an invalid interface number: 109 but max is 0 [ 2509.819774][ T1637] usb 9-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 2509.819793][ T1637] usb 9-1: config 171 has no interface number 0 [ 2509.819848][ T1637] usb 9-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 2509.819872][ T1637] usb 9-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2509.823340][ T1637] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 2509.823367][ T1637] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2509.823386][ T1637] usb 9-1: Product: syz [ 2509.823399][ T1637] usb 9-1: Manufacturer: syz [ 2509.823413][ T1637] usb 9-1: SerialNumber: syz [ 2509.840080][T15135] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2509.978199][T15466] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2509.978231][T15466] overlayfs: missing 'lowerdir' [ 2510.088208][ T1637] ath6kl: Failed to submit usb control message: -71 [ 2510.088251][ T1637] ath6kl: unable to send the bmi data to the device: -71 [ 2510.088271][ T1637] ath6kl: Unable to send get target info: -71 [ 2510.142155][ T1637] ath6kl: Failed to init ath6kl core: -71 [ 2510.143559][ T1637] ath6kl_usb 9-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 2510.162776][ T1637] usb 9-1: USB disconnect, device number 83 [ 2510.876557][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21751'. [ 2511.408030][T16194] netlink: 20 bytes leftover after parsing attributes in process `syz.8.21755'. [ 2511.409942][ T36] kauditd_printk_skb: 108 callbacks suppressed [ 2511.409960][ T36] audit: type=1326 audit(16913457.260:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.410063][ T36] audit: type=1326 audit(16913457.260:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.411681][ T36] audit: type=1326 audit(16913457.260:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.411925][ T36] audit: type=1326 audit(16913457.260:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.412471][ T36] audit: type=1326 audit(16913457.260:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.412574][ T36] audit: type=1326 audit(16913457.260:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.412621][ T36] audit: type=1326 audit(16913457.260:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.413318][ T36] audit: type=1326 audit(16913457.260:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.414121][ T36] audit: type=1326 audit(16913457.260:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.414240][ T36] audit: type=1326 audit(16913457.260:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.8.21755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2511.787657][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21761'. [ 2511.787680][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21761'. [ 2511.787705][T16503] netlink: 'syz.9.21761': attribute type 18 has an invalid length. [ 2511.787719][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21761'. [ 2512.015797][T16609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2512.028630][T16609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2512.126745][T16618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2512.357222][T15758] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2512.857949][T17134] netlink: 144 bytes leftover after parsing attributes in process `syz.0.21775'. [ 2512.860047][T17134] netlink: 'syz.0.21775': attribute type 1 has an invalid length. [ 2512.860067][T17134] netlink: 'syz.0.21775': attribute type 2 has an invalid length. [ 2513.700650][T17773] vlan1: entered allmulticast mode [ 2513.700669][T17773] bond0: entered allmulticast mode [ 2514.225130][T18200] netlink: 'syz.5.21799': attribute type 8 has an invalid length. [ 2514.251887][T18201] netlink: 'syz.8.21800': attribute type 1 has an invalid length. [ 2514.251907][T18201] netlink: 'syz.8.21800': attribute type 2 has an invalid length. [ 2514.251919][T18201] netlink: 'syz.8.21800': attribute type 2 has an invalid length. [ 2514.425582][T18307] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2514.425615][T18307] overlayfs: missing 'lowerdir' [ 2514.911052][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21808'. [ 2516.421851][T19116] overlayfs: failed to clone upperpath [ 2516.474985][T19116] netlink: 56 bytes leftover after parsing attributes in process `syz.0.21816'. [ 2516.697159][ T3367] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2516.777883][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21822'. [ 2516.849874][ T3367] usb 9-1: config 171 has an invalid interface number: 109 but max is 0 [ 2516.849903][ T3367] usb 9-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 2516.849923][ T3367] usb 9-1: config 171 has no interface number 0 [ 2516.849967][ T3367] usb 9-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 2516.849991][ T3367] usb 9-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2516.853551][ T3367] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 2516.853579][ T3367] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2516.853611][ T3367] usb 9-1: Product: syz [ 2516.853626][ T3367] usb 9-1: Manufacturer: syz [ 2516.853640][ T3367] usb 9-1: SerialNumber: syz [ 2516.982046][T19212] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2517.244267][ T3367] ath6kl: Failed to submit usb control message: -71 [ 2517.244317][ T3367] ath6kl: unable to send the bmi data to the device: -71 [ 2517.244332][ T3367] ath6kl: Unable to send get target info: -71 [ 2517.277180][ T3367] ath6kl: Failed to init ath6kl core: -71 [ 2517.278490][ T3367] ath6kl_usb 9-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 2517.343116][ T3367] usb 9-1: USB disconnect, device number 84 [ 2517.566290][T19770] 9pnet_virtio: no channels available for device syz [ 2518.011145][T20085] overlayfs: failed to resolve './file0': -2 [ 2519.392953][T20447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21849'. [ 2519.598943][T20598] batadv0: entered promiscuous mode [ 2519.600349][T20598] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 2519.601823][T20598] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 2519.602266][T20598] hsr1: entered allmulticast mode [ 2519.602282][T20598] batadv0: entered allmulticast mode [ 2519.602303][T20598] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 2519.871935][T20681] 9pnet_virtio: no channels available for device syz [ 2520.710454][T21116] netlink: 84 bytes leftover after parsing attributes in process `syz.0.21862'. [ 2520.769284][T21117] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2520.769336][T21117] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2523.118400][T21466] netlink: 20 bytes leftover after parsing attributes in process `syz.8.21871'. [ 2523.122667][ T36] kauditd_printk_skb: 105 callbacks suppressed [ 2523.122684][ T36] audit: type=1326 audit(16913468.970:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.122724][ T36] audit: type=1326 audit(16913468.970:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.122762][ T36] audit: type=1326 audit(16913468.970:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.122801][ T36] audit: type=1326 audit(16913468.970:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.122840][ T36] audit: type=1326 audit(16913468.970:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.122878][ T36] audit: type=1326 audit(16913468.970:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.122917][ T36] audit: type=1326 audit(16913468.970:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.124023][ T36] audit: type=1326 audit(16913468.970:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.124067][ T36] audit: type=1326 audit(16913468.970:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.124107][ T36] audit: type=1326 audit(16913468.970:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21465 comm="syz.8.21871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2523.655082][ T5652] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2524.971323][T22143] 9pnet_virtio: no channels available for device syz [ 2525.108058][ T5652] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2526.535171][T22473] 9pnet_virtio: no channels available for device syz [ 2526.962854][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2526.962891][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2526.962917][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2526.962943][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2526.962969][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2526.962995][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2526.963020][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2526.963045][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2526.963071][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2526.963096][ T3367] hid-generic 0000:0000:000E.003C: unknown main item tag 0x0 [ 2527.087516][ T3367] hid-generic 0000:0000:000E.003C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2527.234321][T22869] fido_id[22869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2527.518729][T23014] netlink: 84 bytes leftover after parsing attributes in process `syz.9.21922'. [ 2527.599955][T23019] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2527.600160][T23019] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2528.633173][T23110] FAULT_INJECTION: forcing a failure. [ 2528.633173][T23110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2528.633211][T23110] CPU: 0 UID: 0 PID: 23110 Comm: syz.8.21930 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2528.633237][T23110] Tainted: [L]=SOFTLOCKUP [ 2528.633245][T23110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2528.633258][T23110] Call Trace: [ 2528.633266][T23110] [ 2528.633274][T23110] dump_stack_lvl+0xe8/0x150 [ 2528.633309][T23110] should_fail_ex+0x46b/0x600 [ 2528.633342][T23110] _copy_to_user+0x31/0xb0 [ 2528.633364][T23110] simple_read_from_buffer+0xe1/0x170 [ 2528.633394][T23110] proc_fail_nth_read+0x1be/0x230 [ 2528.633434][T23110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2528.633469][T23110] ? rw_verify_area+0x2ac/0x4e0 [ 2528.633498][T23110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2528.633524][T23110] vfs_read+0x212/0xa80 [ 2528.633560][T23110] ? __pfx_vfs_read+0x10/0x10 [ 2528.633591][T23110] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2528.633614][T23110] ? lockdep_hardirqs_on+0x7a/0x110 [ 2528.633635][T23110] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2528.633657][T23110] ? mutex_lock_nested+0x152/0x1d0 [ 2528.633683][T23110] ? fdget_pos+0x252/0x320 [ 2528.633716][T23110] ksys_read+0x156/0x270 [ 2528.633748][T23110] ? __pfx_ksys_read+0x10/0x10 [ 2528.633775][T23110] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 2528.633906][T23110] do_syscall_64+0x14d/0xf80 [ 2528.633928][T23110] ? trace_irq_disable+0x3b/0x150 [ 2528.633951][T23110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2528.633971][T23110] ? clear_bhb_loop+0x40/0x90 [ 2528.633994][T23110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2528.634013][T23110] RIP: 0033:0x7f64a7aed04e [ 2528.634032][T23110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2528.634049][T23110] RSP: 002b:00007f64a5d85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2528.634070][T23110] RAX: ffffffffffffffda RBX: 00007f64a5d866c0 RCX: 00007f64a7aed04e [ 2528.634085][T23110] RDX: 000000000000000f RSI: 00007f64a5d860a0 RDI: 0000000000000004 [ 2528.634097][T23110] RBP: 00007f64a5d86090 R08: 0000000000000000 R09: 0000000000000000 [ 2528.634109][T23110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2528.634120][T23110] R13: 00007f64a7da6038 R14: 00007f64a7da5fa0 R15: 00007fffbe96e3e8 [ 2528.634153][T23110] [ 2529.730654][T23211] 9pnet_virtio: no channels available for device syz [ 2529.832103][T23273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21938'. [ 2529.848237][T23291] netlink: 'syz.9.21940': attribute type 10 has an invalid length. [ 2529.851942][T23291] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 2529.852390][T23291] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2533.678845][T24134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21961'. [ 2534.148347][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.148415][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2534.227133][ T3367] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2534.487640][ T3367] usb 9-1: Using ep0 maxpacket: 8 [ 2534.721745][ T3367] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2534.721898][ T3367] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2534.721955][ T3367] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2534.722339][ T3367] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 2534.722443][ T3367] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2535.081316][ T3367] usb 9-1: config 0 descriptor?? [ 2535.214077][T24576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21972'. [ 2535.610051][T24199] input: syz0 as /devices/virtual/input/input40 [ 2535.768168][ T3367] usbhid 9-1:0.0: can't add hid device: -71 [ 2535.768284][ T3367] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2535.776781][ T3367] usb 9-1: USB disconnect, device number 85 [ 2536.284976][T25291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21982'. [ 2536.660895][T25641] 9pnet_virtio: no channels available for device syz [ 2536.745219][ T36] kauditd_printk_skb: 116 callbacks suppressed [ 2536.745238][ T36] audit: type=1326 audit(16913482.590:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2536.745285][ T36] audit: type=1326 audit(16913482.590:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2536.745629][ T36] audit: type=1326 audit(16913482.590:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2536.745773][ T36] audit: type=1326 audit(16913482.590:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2536.745965][ T36] audit: type=1326 audit(16913482.590:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2536.746344][ T36] audit: type=1326 audit(16913482.590:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2536.746382][ T36] audit: type=1326 audit(16913482.590:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2536.746485][ T36] audit: type=1326 audit(16913482.590:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2536.746620][ T36] audit: type=1326 audit(16913482.590:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2536.746717][ T36] audit: type=1326 audit(16913482.590:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25719 comm="syz.5.21991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2537.361855][T26133] netlink: 56 bytes leftover after parsing attributes in process `syz.9.21996'. [ 2537.362726][T26133] netlink: 16 bytes leftover after parsing attributes in process `syz.9.21996'. [ 2537.445031][T26136] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2537.445392][T26136] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2539.737892][T26609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22016'. [ 2540.320348][T26829] sctp: [Deprecated]: syz.0.22022 (pid 26829) Use of int in maxseg socket option. [ 2540.320348][T26829] Use struct sctp_assoc_value instead [ 2540.670832][T27053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22032'. [ 2542.077117][ T36] kauditd_printk_skb: 191 callbacks suppressed [ 2542.077136][ T36] audit: type=1800 audit(16913487.920:3796): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.22037" name="bus" dev="ramfs" ino=205862 res=0 errno=0 [ 2542.156342][T27773] netlink: 20 bytes leftover after parsing attributes in process `syz.9.22046'. [ 2542.157942][ T36] audit: type=1326 audit(16913488.010:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27772 comm="syz.9.22046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2542.158559][ T36] audit: type=1326 audit(16913488.010:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27772 comm="syz.9.22046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2542.158603][ T36] audit: type=1326 audit(16913488.010:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27772 comm="syz.9.22046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2542.158813][ T36] audit: type=1326 audit(16913488.010:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27772 comm="syz.9.22046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2542.159023][ T36] audit: type=1326 audit(16913488.010:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27772 comm="syz.9.22046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2542.160717][ T36] audit: type=1326 audit(16913488.010:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27772 comm="syz.9.22046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2542.161052][ T36] audit: type=1326 audit(16913488.010:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27772 comm="syz.9.22046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2542.161284][ T36] audit: type=1326 audit(16913488.010:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27772 comm="syz.9.22046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2542.166184][ T36] audit: type=1326 audit(16913488.010:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27772 comm="syz.9.22046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2543.276359][ T1637] hid_parser_main: 7 callbacks suppressed [ 2543.276383][ T1637] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 2543.425990][ T1637] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2543.584064][T28302] sctp: [Deprecated]: syz.0.22059 (pid 28302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2543.584064][T28302] Use struct sctp_sack_info instead [ 2543.638459][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22059'. [ 2543.758190][T28353] netlink: 20 bytes leftover after parsing attributes in process `syz.9.22064'. [ 2544.647729][T28939] netlink: 20 bytes leftover after parsing attributes in process `syz.9.22076'. [ 2544.842948][T29042] netlink: 44 bytes leftover after parsing attributes in process `syz.8.22077'. [ 2544.997622][T29145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22081'. [ 2545.007585][T32492] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2545.780937][T29768] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22093'. [ 2545.851225][T29771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2545.967526][ T1637] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2546.122702][ T1637] usb 9-1: config 171 has an invalid interface number: 109 but max is 0 [ 2546.122731][ T1637] usb 9-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 2546.122749][ T1637] usb 9-1: config 171 has no interface number 0 [ 2546.122792][ T1637] usb 9-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 2546.122815][ T1637] usb 9-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2546.133040][ T1637] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 2546.133068][ T1637] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2546.133086][ T1637] usb 9-1: Product: syz [ 2546.133099][ T1637] usb 9-1: Manufacturer: syz [ 2546.133112][ T1637] usb 9-1: SerialNumber: syz [ 2546.156830][T29726] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2546.281318][T30178] netlink: 'syz.9.22102': attribute type 1 has an invalid length. [ 2546.435726][ T1637] ath6kl: Failed to submit usb control message: -71 [ 2546.435777][ T1637] ath6kl: unable to send the bmi data to the device: -71 [ 2546.435791][ T1637] ath6kl: Unable to send get target info: -71 [ 2546.440657][ T1637] ath6kl: Failed to init ath6kl core: -71 [ 2546.441910][ T1637] ath6kl_usb 9-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 2546.525337][ T1637] usb 9-1: USB disconnect, device number 86 [ 2546.709013][T30424] netlink: 44 bytes leftover after parsing attributes in process `syz.9.22105'. [ 2547.279187][T30902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2547.986706][T31343] overlay: Unknown parameter 'uid<00000000000000000000' [ 2548.138127][ T36] kauditd_printk_skb: 250 callbacks suppressed [ 2548.138145][ T36] audit: type=1326 audit(16913493.990:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.139103][ T36] audit: type=1326 audit(16913493.990:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.139157][ T36] audit: type=1326 audit(16913493.990:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.139199][ T36] audit: type=1326 audit(16913493.990:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.139252][ T36] audit: type=1326 audit(16913493.990:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.139296][ T36] audit: type=1326 audit(16913493.990:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.139335][ T36] audit: type=1326 audit(16913493.990:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.139672][ T36] audit: type=1326 audit(16913493.990:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.139908][ T36] audit: type=1326 audit(16913493.990:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.142922][ T36] audit: type=1326 audit(16913493.990:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31438 comm="syz.8.22134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2548.341603][T31559] CIFS mount error: No usable UNC path provided in device string! [ 2548.341603][T31559] [ 2548.341625][T31559] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2549.743485][T31805] overlayfs: missing 'lowerdir' [ 2549.806280][T31807] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2549.806491][T31807] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2550.539866][T31801] netlink: 56 bytes leftover after parsing attributes in process `syz.8.22141'. [ 2551.027079][T32007] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2551.027131][T32007] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2551.042699][T31900] udevd[31900]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 2551.063694][T31900] udevd[31900]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 2552.287300][ T1637] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2552.449751][ T1637] usb 9-1: Using ep0 maxpacket: 8 [ 2552.451807][ T1637] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2552.451838][ T1637] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2552.451863][ T1637] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2552.451896][ T1637] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 2552.451917][ T1637] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2552.507534][ T1637] usb 9-1: config 0 descriptor?? [ 2553.420174][ T1637] usbhid 9-1:0.0: can't add hid device: -71 [ 2553.420296][ T1637] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2553.450767][ T1637] usb 9-1: USB disconnect, device number 87 [ 2554.081713][ T1374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22186'. [ 2554.247081][ T1637] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2554.482838][ T1637] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2554.484672][ T1637] usb 9-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2554.484704][ T1637] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2554.518852][ T1637] usb 9-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 2554.518884][ T1637] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.518902][ T1637] usb 9-1: Product: syz [ 2554.518915][ T1637] usb 9-1: Manufacturer: syz [ 2554.518928][ T1637] usb 9-1: SerialNumber: syz [ 2554.717553][ T1889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22192'. [ 2554.817470][ T1993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2554.818075][ T1993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2554.863695][ T1637] usbhid 9-1:1.0: can't add hid device: -71 [ 2554.863805][ T1637] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 2554.894726][ T1637] usb 9-1: USB disconnect, device number 88 [ 2555.055960][ T2102] netlink: 20 bytes leftover after parsing attributes in process `syz.9.22197'. [ 2555.067907][ T36] kauditd_printk_skb: 117 callbacks suppressed [ 2555.067925][ T36] audit: type=1326 audit(16913500.920:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.069237][ T36] audit: type=1326 audit(16913500.920:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.071261][ T36] audit: type=1326 audit(16913500.920:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.071414][ T36] audit: type=1326 audit(16913500.920:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.071658][ T36] audit: type=1326 audit(16913500.920:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.071792][ T36] audit: type=1326 audit(16913500.920:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.071927][ T36] audit: type=1326 audit(16913500.920:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.072196][ T36] audit: type=1326 audit(16913500.920:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.072325][ T36] audit: type=1326 audit(16913500.920:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.072556][ T36] audit: type=1326 audit(16913500.920:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2100 comm="syz.9.22197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f4ed4c819 code=0x7ffc0000 [ 2555.495006][ T2315] dlm: non-version read from control device 36 [ 2556.087235][ T2811] netlink: 28 bytes leftover after parsing attributes in process `syz.8.22213'. [ 2557.535648][ T3221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22221'. [ 2557.535675][ T3221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22221'. [ 2559.908637][ T4322] overlayfs: failed to resolve './file0': -2 [ 2560.214083][ T36] kauditd_printk_skb: 173 callbacks suppressed [ 2560.214100][ T36] audit: type=1326 audit(16913506.060:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4109 comm="syz.8.22237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f64a7b2c819 code=0x7ffc0000 [ 2561.147110][ T3367] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2561.176862][ T5075] netlink: 44 bytes leftover after parsing attributes in process `syz.9.22258'. [ 2561.299903][ T3367] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2561.299958][ T3367] usb 9-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 2561.299981][ T3367] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.364452][ T3367] usb 9-1: config 0 descriptor?? [ 2561.383521][ T3367] usb 9-1: bad CDC descriptors [ 2561.629779][ T3367] usb 9-1: USB disconnect, device number 89 [ 2561.796351][ T5625] dlm: non-version read from control device 36 [ 2562.506070][ T6133] IPv6: Can't replace route, no match found [ 2563.108040][ T6604] 9pnet_virtio: no channels available for device syz [ 2563.596543][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22297'. [ 2563.607521][ T36] audit: type=1326 audit(16913509.450:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.5.22297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2563.607569][ T36] audit: type=1326 audit(16913509.450:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.5.22297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2563.607608][ T36] audit: type=1326 audit(16913509.450:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.5.22297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2563.607643][ T36] audit: type=1326 audit(16913509.450:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.5.22297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2563.607679][ T36] audit: type=1326 audit(16913509.450:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.5.22297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2563.607716][ T36] audit: type=1326 audit(16913509.450:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.5.22297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2563.607753][ T36] audit: type=1326 audit(16913509.450:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.5.22297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2563.607792][ T36] audit: type=1326 audit(16913509.450:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.5.22297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2563.607831][ T36] audit: type=1326 audit(16913509.450:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.5.22297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2563.825522][ T6935] netlink: 36 bytes leftover after parsing attributes in process `syz.9.22298'. [ 2566.016606][ T7772] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.22314'. [ 2566.387101][ T3367] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2566.537053][ T3367] usb 9-1: Using ep0 maxpacket: 32 [ 2566.539413][ T3367] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2566.540434][ T3367] usb 9-1: config 128 has an invalid interface number: 6 but max is 3 [ 2566.540456][ T3367] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2566.540474][ T3367] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2566.540492][ T3367] usb 9-1: config 128 has no interface number 0 [ 2566.540530][ T3367] usb 9-1: config 128 interface 6 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2566.540552][ T3367] usb 9-1: config 128 interface 6 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2566.542643][ T3367] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2566.542669][ T3367] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2566.542687][ T3367] usb 9-1: Product: syz [ 2566.542701][ T3367] usb 9-1: Manufacturer: syz [ 2566.542714][ T3367] usb 9-1: SerialNumber: syz [ 2566.817742][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22324'. [ 2566.817776][ T8288] netlink: 9 bytes leftover after parsing attributes in process `syz.9.22324'. [ 2567.353849][ T3367] usb 9-1: USB disconnect, device number 90 [ 2567.441699][ T8503] macsec1: entered promiscuous mode [ 2567.441714][ T8503] veth1_to_bridge: entered promiscuous mode [ 2567.441822][ T8503] macsec1: entered allmulticast mode [ 2567.441830][ T8503] veth1_to_bridge: entered allmulticast mode [ 2567.524257][ T8503] veth1_to_bridge: left allmulticast mode [ 2567.524274][ T8503] veth1_to_bridge: left promiscuous mode [ 2567.544619][ T4865] udevd[4865]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.6/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2568.099600][ T8950] netlink: 56 bytes leftover after parsing attributes in process `syz.8.22337'. [ 2568.100287][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.8.22337'. [ 2568.178314][ T8951] overlayfs: missing 'lowerdir' [ 2570.026764][ T4865] udevd[4865]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 2573.907676][ T9518] overlayfs: failed to resolve './file0': -2 [ 2573.908542][ T9519] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2573.908597][ T9519] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2575.397223][ T9195] usb 9-1: new full-speed USB device number 91 using dummy_hcd [ 2575.549461][ T9195] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 2575.549490][ T9195] usb 9-1: config 0 has no interface number 0 [ 2575.549535][ T9195] usb 9-1: config 0 interface 41 has no altsetting 0 [ 2575.552184][ T9195] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2575.552211][ T9195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2575.552232][ T9195] usb 9-1: Product: syz [ 2575.552247][ T9195] usb 9-1: Manufacturer: syz [ 2575.552260][ T9195] usb 9-1: SerialNumber: syz [ 2575.632035][ T9195] usb 9-1: config 0 descriptor?? [ 2577.408943][ T9195] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 2577.472213][ T9195] usb 9-1: USB disconnect, device number 91 [ 2577.710969][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22371'. [ 2577.713114][ T9965] netlink: 'syz.0.22371': attribute type 14 has an invalid length. [ 2577.713133][ T9965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22371'. [ 2577.887205][ T9195] usb 9-1: new low-speed USB device number 92 using dummy_hcd [ 2578.039352][ T9195] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 2578.039379][ T9195] usb 9-1: config 0 has no interface number 0 [ 2578.039417][ T9195] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2578.039436][ T9195] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2578.039460][ T9195] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2578.039482][ T9195] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2578.039504][ T9195] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2578.039526][ T9195] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2578.039564][ T9195] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2578.039583][ T9195] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.149131][ T9195] usb 9-1: config 0 descriptor?? [ 2578.258801][ T9858] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2578.300729][ T9858] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2578.339733][ T4845] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2578.435907][ T9195] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2578.513094][ T9858] ldusb 9-1:0.55: Write buffer overflow, 1 bytes dropped [ 2579.447809][ T9195] usb 9-1: USB disconnect, device number 92 [ 2579.476715][ T9195] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 2582.637575][T11240] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.22399'. [ 2583.160656][T20586] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2583.845637][T20586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2583.845669][T20586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2583.845691][T20586] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2583.845731][T20586] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2583.845754][T20586] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2583.916647][T20586] usb 9-1: config 0 descriptor?? [ 2584.391618][T20586] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2584.391655][T20586] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2584.391682][T20586] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2584.391708][T20586] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2584.391736][T20586] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2584.391761][T20586] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2584.391788][T20586] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2584.391812][T20586] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2584.391837][T20586] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 2584.394886][T20586] plantronics 0003:047F:FFFF.003E: item fetching failed at offset 14/41 [ 2584.395603][T20586] plantronics 0003:047F:FFFF.003E: parse failed [ 2584.395786][T20586] plantronics 0003:047F:FFFF.003E: probe with driver plantronics failed with error -22 [ 2585.210061][T20586] usb 9-1: USB disconnect, device number 93 [ 2587.319961][T13637] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.22448'. [ 2587.345993][T13468] infiniband syz1: set down [ 2587.346011][T13468] infiniband syz1: added team_slave_0 [ 2587.417982][T13468] RDS/IB: syz1: added [ 2587.418061][T13468] smc: adding ib device syz1 with port count 1 [ 2587.418086][T13468] smc: ib device syz1 port 1 has no pnetid [ 2590.339804][T14217] 9pnet_virtio: no channels available for device syz [ 2590.350543][T14220] netlink: 24 bytes leftover after parsing attributes in process `syz.8.22467'. [ 2590.630975][T14379] netlink: 56 bytes leftover after parsing attributes in process `syz.9.22470'. [ 2590.631747][T14379] netlink: 16 bytes leftover after parsing attributes in process `syz.9.22470'. [ 2590.690863][T14384] overlayfs: missing 'lowerdir' [ 2592.586020][T14626] netlink: 196 bytes leftover after parsing attributes in process `syz.9.22480'. [ 2592.752834][T14668] netlink: 56 bytes leftover after parsing attributes in process `syz.9.22482'. [ 2592.753646][T14668] netlink: 16 bytes leftover after parsing attributes in process `syz.9.22482'. [ 2593.815185][T14881] netlink: 191520 bytes leftover after parsing attributes in process `syz.9.22486'. [ 2593.825281][T14833] lo speed is unknown, defaulting to 1000 [ 2593.833041][T14833] lo speed is unknown, defaulting to 1000 [ 2594.691374][T20586] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 2594.897479][T20586] usb 9-1: device descriptor read/64, error -71 [ 2595.167382][T20586] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 2595.297160][T20586] usb 9-1: device descriptor read/64, error -71 [ 2595.407802][T20586] usb usb9-port1: attempt power cycle [ 2595.557441][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2595.591551][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.591618][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2595.866123][T15834] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2595.866175][T15834] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2596.070224][T20586] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2596.107507][T20586] usb 9-1: device descriptor read/8, error -71 [ 2596.685237][ T5652] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2596.767648][T20586] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2596.798486][T20586] usb 9-1: device descriptor read/8, error -71 [ 2596.958502][T20586] usb usb9-port1: unable to enumerate USB device [ 2597.527134][ T9195] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 2597.527404][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 2597.687106][ T9195] usb 9-1: device descriptor read/64, error -32 [ 2597.751157][T16473] 9pnet_virtio: no channels available for device syz [ 2597.929424][ T9195] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 2597.966524][T16681] PKCS7: Unknown OID: [4] 4.2.137581063.0.17.0.6757.42.118.403037 [ 2597.966541][T16681] PKCS7: Only support pkcs7_signedData type [ 2598.085765][ T9195] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2598.085798][ T9195] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2598.085817][ T9195] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2598.085857][ T9195] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2598.085879][ T9195] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.101420][ T9195] usb 9-1: config 0 descriptor?? [ 2598.569829][ T9195] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 2598.569865][ T9195] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 2598.569891][ T9195] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 2598.569917][ T9195] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 2598.569943][ T9195] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 2598.569969][ T9195] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 2598.569994][ T9195] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 2598.570019][ T9195] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 2598.570044][ T9195] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 2598.570070][ T9195] plantronics 0003:047F:FFFF.003F: item fetching failed at offset 14/41 [ 2598.570891][ T9195] plantronics 0003:047F:FFFF.003F: parse failed [ 2598.570989][ T9195] plantronics 0003:047F:FFFF.003F: probe with driver plantronics failed with error -22 [ 2599.074413][T17520] 9pnet_virtio: no channels available for device syz [ 2599.219965][T17618] netlink: 24 bytes leftover after parsing attributes in process `syz.9.22538'. [ 2599.429949][ T9195] usb 9-1: USB disconnect, device number 99 [ 2599.839095][T17976] 9pnet_virtio: no channels available for device syz [ 2600.303909][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 2600.303925][ T36] audit: type=1326 audit(16913546.150:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18378 comm="syz.0.22560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x0 [ 2600.355328][ T36] audit: type=1326 audit(16913546.200:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18378 comm="syz.0.22560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb664d7c819 code=0x0 [ 2600.409542][T18499] devpts: Bad value for 'gid' [ 2600.409561][T18499] devpts: Bad value for 'gid' [ 2600.550403][ T36] audit: type=1326 audit(16913546.400:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18577 comm="syz.5.22563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2600.550578][ T36] audit: type=1326 audit(16913546.400:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18577 comm="syz.5.22563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2600.553235][ T36] audit: type=1326 audit(16913546.400:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18577 comm="syz.5.22563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2600.553280][ T36] audit: type=1326 audit(16913546.400:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18577 comm="syz.5.22563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2600.553320][ T36] audit: type=1326 audit(16913546.400:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18577 comm="syz.5.22563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2600.553359][ T36] audit: type=1326 audit(16913546.400:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18577 comm="syz.5.22563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2600.553396][ T36] audit: type=1326 audit(16913546.400:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18577 comm="syz.5.22563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2600.553435][ T36] audit: type=1326 audit(16913546.400:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18577 comm="syz.5.22563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2600.580668][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22564'. [ 2601.118996][T18775] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2601.119137][T18775] overlayfs: missing 'lowerdir' [ 2601.180562][T18776] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2601.180735][T18776] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2601.488085][T18774] netlink: 56 bytes leftover after parsing attributes in process `syz.9.22567'. [ 2602.058368][T18806] 9pnet_virtio: no channels available for device syz [ 2602.812606][ T5652] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 2603.090582][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22587'. [ 2604.474412][T19950] netlink: 36 bytes leftover after parsing attributes in process `syz.8.22590'. [ 2607.276593][T21001] netlink: 36 bytes leftover after parsing attributes in process `syz.8.22612'. [ 2607.370952][T20988] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22612'. [ 2607.373169][T20988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2607.388174][T21006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22616'. [ 2607.718924][T20923] netlink: 16 bytes leftover after parsing attributes in process `syz.9.22613'. [ 2607.878633][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22619'. [ 2608.499143][T21642] netlink: 36 bytes leftover after parsing attributes in process `syz.9.22627'. [ 2609.237173][ T9195] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 2609.579216][ T9195] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2609.579246][ T9195] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 2609.581669][ T9195] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2609.581695][ T9195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2609.581713][ T9195] usb 9-1: Product: syz [ 2609.581725][ T9195] usb 9-1: Manufacturer: syz [ 2609.581738][ T9195] usb 9-1: SerialNumber: syz [ 2609.648642][ T9195] usb 9-1: config 0 descriptor?? [ 2610.056470][ T9195] usb 9-1: USB disconnect, device number 100 [ 2610.142917][T21046] udevd[21046]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2610.586260][T22448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.22644'. [ 2610.827452][T20586] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 2610.977214][T20586] usb 9-1: Using ep0 maxpacket: 16 [ 2610.980348][T20586] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2610.980380][T20586] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2610.980411][T20586] usb 9-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 2610.980432][T20586] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2610.992187][T20586] usb 9-1: config 0 descriptor?? [ 2611.412949][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.412986][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.413013][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.413039][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.413064][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.413089][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.413114][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.413139][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.413164][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.413190][T20586] asus 0003:0B05:1822.0040: unknown main item tag 0x0 [ 2611.419956][T20586] asus 0003:0B05:1822.0040: hidraw0: USB HID v0.08 Device [HID 0b05:1822] on usb-dummy_hcd.8-1/input0 [ 2611.420001][T20586] asus 0003:0B05:1822.0040: Asus input not registered [ 2611.423384][T20586] asus 0003:0B05:1822.0040: probe with driver asus failed with error -12 [ 2611.728440][ T3367] usb 9-1: USB disconnect, device number 101 [ 2613.161367][T23737] devpts: Bad value for 'gid' [ 2613.161387][T23737] devpts: Bad value for 'gid' [ 2613.165670][T23739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22670'. [ 2613.771365][ T3367] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2613.911545][T23960] overlayfs: missing 'lowerdir' [ 2614.131085][T17932] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2614.533894][ T3367] usb 9-1: config 171 has an invalid interface number: 109 but max is 0 [ 2614.533921][ T3367] usb 9-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 2614.533940][ T3367] usb 9-1: config 171 has no interface number 0 [ 2614.533982][ T3367] usb 9-1: config 171 interface 109 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2614.537653][ T3367] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 2614.537679][ T3367] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.537697][ T3367] usb 9-1: Product: syz [ 2614.537710][ T3367] usb 9-1: Manufacturer: syz [ 2614.537948][ T3367] usb 9-1: SerialNumber: syz [ 2614.812320][ T3367] ath6kl: Failed to submit usb control message: -71 [ 2614.812367][ T3367] ath6kl: unable to send the bmi data to the device: -71 [ 2614.812380][ T3367] ath6kl: Unable to send get target info: -71 [ 2614.862589][ T3367] ath6kl: Failed to init ath6kl core: -71 [ 2614.863105][ T3367] ath6kl_usb 9-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 2614.893852][ T3367] usb 9-1: USB disconnect, device number 102 [ 2614.927762][T24162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22680'. [ 2615.023155][T24158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22680'. [ 2616.349733][T24868] overlayfs: missing 'lowerdir' [ 2618.998173][T25060] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2619.643424][T25115] trusted_key: encrypted_key: insufficient parameters specified [ 2619.862785][T25115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22697'. [ 2619.862808][T25115] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22697'. [ 2619.862833][T25115] netlink: 'syz.8.22697': attribute type 13 has an invalid length. [ 2620.317036][T20586] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 2620.491273][T20586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2620.491299][T20586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2620.491310][T20586] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2620.491333][T20586] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2620.491345][T20586] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2620.496145][T20586] usb 9-1: config 0 descriptor?? [ 2621.101478][T20586] hid_parser_main: 28 callbacks suppressed [ 2621.101505][T20586] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2621.101537][T20586] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2621.101563][T20586] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2621.101589][T20586] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2621.101615][T20586] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2621.101669][T20586] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2621.101695][T20586] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2621.101721][T20586] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2621.101747][T20586] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2621.101773][T20586] plantronics 0003:047F:FFFF.0041: item fetching failed at offset 14/41 [ 2621.102498][T20586] plantronics 0003:047F:FFFF.0041: parse failed [ 2621.102594][T20586] plantronics 0003:047F:FFFF.0041: probe with driver plantronics failed with error -22 [ 2621.461668][ T3367] usb 9-1: USB disconnect, device number 103 [ 2621.557835][T26019] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2623.070763][T26593] netlink: 56 bytes leftover after parsing attributes in process `syz.8.22725'. [ 2623.114291][T26592] overlayfs: missing 'lowerdir' [ 2623.929070][T26603] o2cb: This node has not been configured. [ 2623.929107][T26603] o2cb: Cluster check failed. Fix errors before retrying. [ 2623.929184][T26603] (syz.5.22727,26603,1):user_dlm_register:674 ERROR: status = -22 [ 2623.929207][T26603] (syz.5.22727,26603,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 2624.224473][T26706] overlayfs: failed to resolve './file0': -2 [ 2625.208640][T25192] udevd[25192]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 2625.229310][T26726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.22731'. [ 2625.651196][T26826] fuse: Bad value for 'group_id' [ 2625.651216][T26826] fuse: Bad value for 'group_id' [ 2625.877292][T20586] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 2626.247736][T20586] usb 9-1: Using ep0 maxpacket: 8 [ 2626.919206][T20586] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2626.919269][T20586] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2626.919294][T20586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2627.102353][T20586] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2627.102382][T20586] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2627.102401][T20586] usb 9-1: Product: syz [ 2627.102415][T20586] usb 9-1: Manufacturer: syz [ 2627.102428][T20586] usb 9-1: SerialNumber: syz [ 2627.143817][T20586] usb 9-1: config 0 descriptor?? [ 2627.289264][T20586] rc_core: IR keymap rc-imon-rsc not found [ 2627.289283][T20586] Registered IR keymap rc-empty [ 2627.291103][T20586] rc rc0: iMON Station as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2627.305467][T20586] input: iMON Station as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input42 [ 2628.114487][ T3367] usb 9-1: USB disconnect, device number 104 [ 2628.145606][T17942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2628.145625][T17942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2628.463757][T27993] overlayfs: failed to resolve 'measure': -2 [ 2629.017953][T28358] overlayfs: missing 'lowerdir' [ 2629.079415][T28360] overlayfs: missing 'lowerdir' [ 2629.728149][T28353] netlink: 56 bytes leftover after parsing attributes in process `syz.9.22756'. [ 2630.656749][T29013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22770'. [ 2631.123793][T29119] o2cb: This node has not been configured. [ 2631.123808][T29119] o2cb: Cluster check failed. Fix errors before retrying. [ 2631.123831][T29119] (syz.0.22769,29119,0):user_dlm_register:674 ERROR: status = -22 [ 2631.123854][T29119] (syz.0.22769,29119,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 2631.224321][T29223] devpts: Bad value for 'gid' [ 2631.224341][T29223] devpts: Bad value for 'gid' [ 2631.359415][T29307] overlayfs: failed to resolve './file0': -2 [ 2633.541098][T29966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2633.938952][T30367] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2633.939092][T30367] overlayfs: missing 'lowerdir' [ 2635.093972][T30507] netlink: 36 bytes leftover after parsing attributes in process `syz.9.22798'. [ 2637.658269][T31632] fuse: Bad value for 'fd' [ 2638.152731][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22827'. [ 2638.834847][ T394] netlink: 56 bytes leftover after parsing attributes in process `syz.8.22840'. [ 2638.835685][ T394] netlink: 16 bytes leftover after parsing attributes in process `syz.8.22840'. [ 2638.917105][ T402] overlayfs: missing 'lowerdir' [ 2640.373945][ T3068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2640.407487][ T3068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2640.411379][ T3068] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2640.412744][ T3068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2640.442596][ T3068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2640.674632][ T581] lo speed is unknown, defaulting to 1000 [ 2640.683673][ T581] lo speed is unknown, defaulting to 1000 [ 2642.251351][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 2642.251368][ T36] audit: type=1326 audit(16913588.100:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2642.252101][ T36] audit: type=1326 audit(16913588.100:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2642.310497][ T36] audit: type=1326 audit(16913588.160:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2642.310886][ T36] audit: type=1326 audit(16913588.160:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2642.310928][ T36] audit: type=1326 audit(16913588.160:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2642.381390][ T36] audit: type=1326 audit(16913588.220:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2642.381438][ T36] audit: type=1326 audit(16913588.220:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f73a26ac582 code=0x7ffc0000 [ 2642.381474][ T36] audit: type=1326 audit(16913588.220:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f73a26ac617 code=0x7ffc0000 [ 2642.381508][ T36] audit: type=1326 audit(16913588.220:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f73a2669511 code=0x7ffc0000 [ 2642.381544][ T36] audit: type=1326 audit(16913588.220:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1791 comm="syz.5.22870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f73a26ad609 code=0x7ffc0000 [ 2642.517238][ T3068] Bluetooth: hci0: command tx timeout [ 2642.524255][ T581] chnl_net:caif_netlink_parms(): no params data found [ 2642.842921][ T2111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22872'. [ 2643.478698][ T2355] overlayfs: missing 'lowerdir' [ 2643.540951][ T2356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2643.541006][ T2356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2643.549559][ T2351] netlink: 56 bytes leftover after parsing attributes in process `syz.9.22878'. [ 2644.597092][ T3068] Bluetooth: hci0: command tx timeout [ 2645.561984][T17927] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2645.562006][T17927] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.925842][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.926010][ T581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2645.926204][ T581] bridge_slave_0: entered allmulticast mode [ 2645.943186][ T581] bridge_slave_0: entered promiscuous mode [ 2645.946313][ T581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.946510][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 2645.946700][ T581] bridge_slave_1: entered allmulticast mode [ 2645.964974][ T581] bridge_slave_1: entered promiscuous mode [ 2646.299894][T17927] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2646.299928][T17927] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2646.504461][ T581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2646.524381][ T581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2646.764789][ T3068] Bluetooth: hci0: command tx timeout [ 2646.816191][T17927] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2646.816228][T17927] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2647.310767][ T581] team0: Port device team_slave_0 added [ 2647.338398][ T581] team0: Port device team_slave_1 added [ 2647.758016][T17927] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode [ 2647.763767][T17927] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2647.763800][T17927] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2647.876787][ T4355] netlink: 56 bytes leftover after parsing attributes in process `syz.9.22911'. [ 2647.877489][ T4355] netlink: 16 bytes leftover after parsing attributes in process `syz.9.22911'. [ 2647.958065][ T4356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2647.958218][ T4356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2648.771487][ T581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2648.771504][ T581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2648.771530][ T581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2648.773672][ T581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2648.773685][ T581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2648.773706][ T581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2648.837458][ T3068] Bluetooth: hci0: command tx timeout [ 2648.896602][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22913'. [ 2648.967494][ T4465] netlink: 48 bytes leftover after parsing attributes in process `syz.9.22916'. [ 2649.019866][ T36] kauditd_printk_skb: 403 callbacks suppressed [ 2649.019884][ T36] audit: type=1326 audit(16913594.870:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2649.019933][ T36] audit: type=1326 audit(16913594.870:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2649.027980][ T36] audit: type=1326 audit(16913594.870:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2649.028030][ T36] audit: type=1326 audit(16913594.870:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2649.028735][ T36] audit: type=1326 audit(16913594.880:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2649.028777][ T36] audit: type=1326 audit(16913594.880:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2649.028814][ T36] audit: type=1326 audit(16913594.880:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2649.030482][ T36] audit: type=1326 audit(16913594.880:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2649.030524][ T36] audit: type=1326 audit(16913594.880:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a26ac819 code=0x7ffc0000 [ 2649.031149][ T36] audit: type=1326 audit(16913594.880:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.5.22917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73a266d04e code=0x7ffc0000 [ 2649.178126][ T4518] delete_channel: no stack [ 2649.262779][ T581] hsr_slave_0: entered promiscuous mode [ 2649.266269][ T581] hsr_slave_1: entered promiscuous mode [ 2649.281492][ T581] debugfs: 'hsr0' already exists in 'hsr' [ 2649.281519][ T581] Cannot create hsr debugfs directory [ 2649.317133][T32492] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2649.843809][ T4793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22923'. [ 2649.844475][ T4793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22923'. [ 2649.918839][ T4794] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2649.919212][ T4794] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2653.558061][T17927] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2653.913255][T17927] bond0 (unregistering): Released all slaves [ 2653.937832][T17927] bond1 (unregistering): (slave veth3): Releasing active interface [ 2654.000787][T17927] bond1 (unregistering): Released all slaves [ 2654.016140][T17927] bond2 (unregistering): Released all slaves [ 2654.228758][T17927] : left promiscuous mode [ 2656.825730][ T581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2657.703496][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2657.703566][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2658.340657][ T581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2658.525579][ T581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2658.872761][ T581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2659.614135][ T581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2659.650449][T17927] batadv0: left promiscuous mode [ 2660.158874][T17927] hsr_slave_0: left promiscuous mode [ 2660.192881][T17927] hsr_slave_1: left promiscuous mode [ 2660.230779][T17927] veth1_vlan: left allmulticast mode [ 2660.233168][T17927] veth1_macvtap: left promiscuous mode [ 2660.233265][T17927] veth0_macvtap: left promiscuous mode [ 2660.233538][T17927] veth1_vlan: left promiscuous mode [ 2660.233698][T17927] veth0_vlan: left promiscuous mode [ 2660.361820][ T7602] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22974'. [ 2660.362599][ T7602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22974'. [ 2660.435025][ T7603] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2660.435385][ T7603] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2661.828345][ T8045] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2662.989016][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22987'. [ 2663.591670][ T8788] netlink: 44 bytes leftover after parsing attributes in process `syz.9.22995'. [ 2663.843607][T20586] infiniband syz0: ib_query_port failed (-19) [ 2663.920083][ T581] 8021q: adding VLAN 0 to HW filter on device team0 [ 2663.938590][ T9008] 9pnet_virtio: no channels available for device syz [ 2663.980177][T17933] bridge0: port 1(bridge_slave_0) entered blocking state [ 2663.980305][T17933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2664.029012][T17932] bridge0: port 2(bridge_slave_1) entered blocking state [ 2664.029137][T17932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2664.339950][ T9140] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22999'. [ 2664.362842][ T9135] overlayfs: missing 'lowerdir' [ 2664.414387][ T9143] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2665.543208][ T581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2667.451570][ T581] veth0_vlan: entered promiscuous mode [ 2667.483106][T17927] IPVS: stop unused estimator thread 0... [ 2667.517430][ T581] veth1_vlan: entered promiscuous mode [ 2667.753545][ T581] veth0_macvtap: entered promiscuous mode [ 2667.818864][ T581] veth1_macvtap: entered promiscuous mode [ 2667.899787][ T581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2667.917658][ T581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2667.956196][T25003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.967077][T25003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.968458][T25003] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2667.972358][T25003] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2669.380271][T17927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2669.380290][T17927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2669.497019][T10283] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2669.497172][T10283] overlayfs: missing 'lowerdir' [ 2670.362534][T17932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2670.362554][T17932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2670.513054][ T36] kauditd_printk_skb: 472 callbacks suppressed [ 2670.513072][ T36] audit: type=1804 audit(16913616.330:5392): pid=10328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.23030" name="file1" dev="hugetlbfs" ino=213752 res=1 errno=0 [ 2670.547059][ T36] audit: type=1804 audit(16913616.390:5393): pid=10393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.23030" name="file1" dev="hugetlbfs" ino=213752 res=1 errno=0 [ 2671.634365][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2671.651414][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2671.653609][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2671.660694][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2671.661845][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2671.970498][T10808] lo speed is unknown, defaulting to 1000 [ 2671.982538][T10808] lo speed is unknown, defaulting to 1000 [ 2673.308539][T25003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2673.308573][T25003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2673.808965][ T3068] Bluetooth: hci5: command tx timeout [ 2673.952429][T25003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2673.952468][T25003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2674.267912][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23088'. [ 2674.503283][T25003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2674.503317][T25003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2675.258365][T25003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2675.258405][T25003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2675.551675][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.9.23114'. [ 2675.886074][ T3068] Bluetooth: hci5: command tx timeout [ 2675.985349][T10808] chnl_net:caif_netlink_parms(): no params data found [ 2676.511526][T25003] erspan0: left allmulticast mode [ 2676.511560][T25003] erspan0: left promiscuous mode [ 2676.511813][T25003] bridge3: port 1(erspan0) entered disabled state [ 2677.958247][ T3068] Bluetooth: hci5: command tx timeout [ 2678.769836][T25003] tipc: Disabling bearer [ 2679.348328][T25003] bond5 (unregistering): (slave macvlan0): Releasing backup interface [ 2679.548189][T25003] bond0 (unregistering): Released all slaves [ 2679.556693][T25003] bond1 (unregistering): Released all slaves [ 2679.575377][T25003] bond2 (unregistering): Released all slaves [ 2679.592844][T25003] bond3 (unregistering): Released all slaves [ 2679.613802][T25003] bond4 (unregistering): Released all slaves [ 2679.642157][T25003] bond5 (unregistering): Released all slaves [ 2679.728145][T25003] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 2679.819781][T25003] bond6 (unregistering): Released all slaves [ 2679.842883][T25003] bond7 (unregistering): Released all slaves [ 2679.872868][T25003] bond8 (unregistering): Released all slaves [ 2680.037237][ T3068] Bluetooth: hci5: command tx timeout [ 2680.153203][ T3068] Bluetooth: hci0: Malformed Event: 0x02 [ 2680.257113][T25003] tipc: Disabling bearer [ 2680.347441][T25003] tipc: Left network mode [ 2680.488769][T10808] bridge0: port 1(bridge_slave_0) entered blocking state [ 2680.488889][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2680.489117][T10808] bridge_slave_0: entered allmulticast mode [ 2680.491452][T10808] bridge_slave_0: entered promiscuous mode [ 2680.518152][T10808] bridge0: port 2(bridge_slave_1) entered blocking state [ 2680.518260][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2680.518495][T10808] bridge_slave_1: entered allmulticast mode [ 2680.523348][T10808] bridge_slave_1: entered promiscuous mode [ 2680.739514][T10808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2680.762581][T10808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2680.966292][T10808] team0: Port device team_slave_0 added [ 2680.972140][T10808] team0: Port device team_slave_1 added [ 2681.373181][T10808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2681.373196][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2681.373222][T10808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2681.375310][T10808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2681.375325][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2681.375351][T10808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2681.621086][T10808] hsr_slave_0: entered promiscuous mode [ 2681.622426][T10808] hsr_slave_1: entered promiscuous mode [ 2681.623264][T10808] debugfs: 'hsr0' already exists in 'hsr' [ 2681.623287][T10808] Cannot create hsr debugfs directory [ 2681.797275][T25003] IPVS: stopping backup sync thread 20864 ... [ 2682.266599][ T3068] Bluetooth: hci4: Invalid handle: 0xfbc9 > 0x0eff [ 2683.033518][T19172] can0: slcan on ttynull. [ 2683.318455][T19172] can0 (unregistered): slcan off ttynull. [ 2683.879232][T17933] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2684.427090][T12339] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 2684.629303][T12339] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2684.629330][T12339] usb 9-1: config 0 has no interfaces? [ 2684.631690][T12339] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2684.631717][T12339] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.631736][T12339] usb 9-1: Product: syz [ 2684.631750][T12339] usb 9-1: Manufacturer: syz [ 2684.631763][T12339] usb 9-1: SerialNumber: syz [ 2684.660138][T12339] usb 9-1: config 0 descriptor?? [ 2684.895463][T12339] usb 9-1: USB disconnect, device number 105 [ 2686.033230][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803be61400: rx timeout, send abort [ 2686.501185][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803be62400: rx timeout, send abort [ 2686.533325][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803be61400: abort rx timeout. Force session deactivation [ 2687.004701][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803be62400: abort rx timeout. Force session deactivation [ 2687.260846][T20699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2687.264262][T20699] bond0: (slave rose0): Enslaving as an active interface with an up link [ 2687.780665][T20901] netlink: 'syz.9.23239': attribute type 5 has an invalid length. [ 2688.883897][T21259] Bluetooth: MGMT ver 1.23 [ 2689.560039][T20814] lo speed is unknown, defaulting to 1000 [ 2689.636918][T20814] lo speed is unknown, defaulting to 1000 [ 2689.701868][T10808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2690.007395][T10808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2690.118919][T10808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2690.261587][T10808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2693.385029][ T4856] ------------[ cut here ]------------ [ 2693.385046][ T4856] !xa_empty(&device->compat_devs) [ 2693.385061][ T4856] WARNING: drivers/infiniband/core/device.c:682 at ib_dealloc_device+0x187/0x200, CPU#0: kworker/u8:37/4856 [ 2693.385206][ T4856] Modules linked in: [ 2693.385227][ T4856] CPU: 0 UID: 0 PID: 4856 Comm: kworker/u8:37 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2693.385252][ T4856] Tainted: [L]=SOFTLOCKUP [ 2693.385260][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2693.385273][ T4856] Workqueue: ib-unreg-wq ib_unregister_work [ 2693.385303][ T4856] RIP: 0010:ib_dealloc_device+0x187/0x200 [ 2693.385331][ T4856] Code: e8 de ec ad f9 48 89 df e8 56 59 07 00 48 81 c3 30 08 00 00 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 0f 09 60 fd e8 ba ec ad f9 90 <0f> 0b 90 e9 72 ff ff ff e8 ac ec ad f9 90 0f 0b 90 eb 8f e8 a1 ec [ 2693.385348][ T4856] RSP: 0018:ffffc9000f49fa18 EFLAGS: 00010293 [ 2693.385364][ T4856] RAX: ffffffff88169536 RBX: ffff888039d40000 RCX: ffff88806a691e80 [ 2693.385379][ T4856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2693.385390][ T4856] RBP: ffff888039d41308 R08: 0000000000000000 R09: 0000000000000000 [ 2693.385403][ T4856] R10: dffffc0000000000 R11: fffffbfff1ed4eb7 R12: 1ffff110073a81fd [ 2693.385417][ T4856] R13: dffffc0000000000 R14: ffff888039d41268 R15: dffffc0000000000 [ 2693.385432][ T4856] FS: 0000000000000000(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 2693.385448][ T4856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2693.385461][ T4856] CR2: 00007ff6d2897e9c CR3: 0000000022382000 CR4: 00000000003526f0 [ 2693.385478][ T4856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000f1ffffdf [ 2693.385490][ T4856] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2693.385503][ T4856] Call Trace: [ 2693.385511][ T4856] [ 2693.385523][ T4856] __ib_unregister_device+0x393/0x3f0 [ 2693.385565][ T4856] ib_unregister_work+0x19/0x30 [ 2693.385593][ T4856] ? process_scheduled_works+0xa8d/0x18c0 [ 2693.385620][ T4856] process_scheduled_works+0xb6e/0x18c0 [ 2693.385675][ T4856] ? __pfx_process_scheduled_works+0x10/0x10 [ 2693.385704][ T4856] ? assign_work+0x3d5/0x5e0 [ 2693.385733][ T4856] worker_thread+0xa53/0xfc0 [ 2693.385780][ T4856] kthread+0x388/0x470 [ 2693.385802][ T4856] ? __pfx_worker_thread+0x10/0x10 [ 2693.385826][ T4856] ? __pfx_kthread+0x10/0x10 [ 2693.385848][ T4856] ret_from_fork+0x51e/0xb90 [ 2693.385880][ T4856] ? __pfx_ret_from_fork+0x10/0x10 [ 2693.385911][ T4856] ? __switch_to+0xc7d/0x1450 [ 2693.385936][ T4856] ? __pfx_kthread+0x10/0x10 [ 2693.385957][ T4856] ret_from_fork_asm+0x1a/0x30 [ 2693.385992][ T4856] [ 2693.386012][ T4856] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2693.386029][ T4856] CPU: 0 UID: 0 PID: 4856 Comm: kworker/u8:37 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2693.386055][ T4856] Tainted: [L]=SOFTLOCKUP [ 2693.386063][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2693.386075][ T4856] Workqueue: ib-unreg-wq ib_unregister_work [ 2693.386103][ T4856] Call Trace: [ 2693.386111][ T4856] [ 2693.386120][ T4856] vpanic+0x56c/0xa60 [ 2693.386149][ T4856] ? __pfx__printk+0x10/0x10 [ 2693.386170][ T4856] ? __pfx_vpanic+0x10/0x10 [ 2693.386195][ T4856] ? is_bpf_text_address+0x292/0x2b0 [ 2693.386264][ T4856] ? is_bpf_text_address+0x26/0x2b0 [ 2693.386297][ T4856] panic+0xc5/0xd0 [ 2693.386324][ T4856] ? __pfx_panic+0x10/0x10 [ 2693.386361][ T4856] ? ret_from_fork_asm+0x1a/0x30 [ 2693.386386][ T4856] __warn+0x315/0x4f0 [ 2693.386413][ T4856] ? ib_dealloc_device+0x187/0x200 [ 2693.386443][ T4856] ? ib_dealloc_device+0x187/0x200 [ 2693.386473][ T4856] __report_bug+0x29a/0x540 [ 2693.386528][ T4856] ? ib_dealloc_device+0x187/0x200 [ 2693.386558][ T4856] ? __pfx___report_bug+0x10/0x10 [ 2693.386579][ T4856] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2693.386603][ T4856] ? lockdep_hardirqs_on+0x7a/0x110 [ 2693.386625][ T4856] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2693.386646][ T4856] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 2693.386676][ T4856] ? reacquire_held_locks+0x104/0x190 [ 2693.386705][ T4856] ? ib_dealloc_device+0x187/0x200 [ 2693.386733][ T4856] report_bug+0x16a/0x220 [ 2693.386754][ T4856] ? ib_dealloc_device+0x187/0x200 [ 2693.386781][ T4856] ? ib_dealloc_device+0x189/0x200 [ 2693.386808][ T4856] handle_bug+0x9c/0x200 [ 2693.386835][ T4856] exc_invalid_op+0x1a/0x50 [ 2693.386861][ T4856] asm_exc_invalid_op+0x1a/0x20 [ 2693.386879][ T4856] RIP: 0010:ib_dealloc_device+0x187/0x200 [ 2693.386913][ T4856] Code: e8 de ec ad f9 48 89 df e8 56 59 07 00 48 81 c3 30 08 00 00 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 0f 09 60 fd e8 ba ec ad f9 90 <0f> 0b 90 e9 72 ff ff ff e8 ac ec ad f9 90 0f 0b 90 eb 8f e8 a1 ec [ 2693.386928][ T4856] RSP: 0018:ffffc9000f49fa18 EFLAGS: 00010293 [ 2693.386943][ T4856] RAX: ffffffff88169536 RBX: ffff888039d40000 RCX: ffff88806a691e80 [ 2693.386956][ T4856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2693.386967][ T4856] RBP: ffff888039d41308 R08: 0000000000000000 R09: 0000000000000000 [ 2693.386979][ T4856] R10: dffffc0000000000 R11: fffffbfff1ed4eb7 R12: 1ffff110073a81fd [ 2693.386994][ T4856] R13: dffffc0000000000 R14: ffff888039d41268 R15: dffffc0000000000 [ 2693.387015][ T4856] ? ib_dealloc_device+0x186/0x200 [ 2693.387047][ T4856] ? ib_dealloc_device+0x186/0x200 [ 2693.387077][ T4856] __ib_unregister_device+0x393/0x3f0 [ 2693.387117][ T4856] ib_unregister_work+0x19/0x30 [ 2693.387143][ T4856] ? process_scheduled_works+0xa8d/0x18c0 [ 2693.387168][ T4856] process_scheduled_works+0xb6e/0x18c0 [ 2693.387223][ T4856] ? __pfx_process_scheduled_works+0x10/0x10 [ 2693.387257][ T4856] ? assign_work+0x3d5/0x5e0 [ 2693.387288][ T4856] worker_thread+0xa53/0xfc0 [ 2693.387343][ T4856] kthread+0x388/0x470 [ 2693.387364][ T4856] ? __pfx_worker_thread+0x10/0x10 [ 2693.387388][ T4856] ? __pfx_kthread+0x10/0x10 [ 2693.387406][ T4856] ret_from_fork+0x51e/0xb90 [ 2693.387434][ T4856] ? __pfx_ret_from_fork+0x10/0x10 [ 2693.387459][ T4856] ? __switch_to+0xc7d/0x1450 [ 2693.387484][ T4856] ? __pfx_kthread+0x10/0x10 [ 2693.387505][ T4856] ret_from_fork_asm+0x1a/0x30 [ 2693.387539][ T4856] [ 2693.387878][ T4856] Kernel Offset: disabled