last executing test programs: 11.817907493s ago: executing program 3 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 10.777902869s ago: executing program 3 (id=303): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x2, 0x0, 0xabee, 0x0, 0x0, 0x20, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f5de6af0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0xf83cb676ac42ebc1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) chmod(&(0x7f0000000100)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x8) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007bc0), 0x0, 0x20, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0185649, &(0x7f0000000700)={0x4, 0x5, 0x3, 0xffffffffffffffff, 0x980912, &(0x7f00000006c0)={0xf0f043, 0x80000000, '\x00', @value64=0x8000000000ee}}) lremovexattr(0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='vivid.0', 0x7) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(r6, &(0x7f0000000140)=r2, 0x12) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00a502000000e1d10900b41bf8df8f2f00000000140012800b000100627269646765000004000280"], 0x34}}, 0x20000000) 7.247402516s ago: executing program 1 (id=313): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x773e0d3f}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="7c46dd2464adb06933e7abccf111890ac6ad334bba273822e574152e0a73ee093290369fad9d785fc285978e73b5bb0cadc7f8cc79c7343ac67b751133be", 0x3e}, {&(0x7f0000000880)="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", 0xfc0}], 0x2}, 0x44040) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) syz_io_uring_setup(0x6bb3, &(0x7f0000000180)={0x0, 0x9b36, 0x2000, 0x1, 0xa4}, &(0x7f000001b0c0), &(0x7f000001d1c0), &(0x7f0000000000)) socket$kcm(0x21, 0x2, 0xa) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 7.12215342s ago: executing program 0 (id=314): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000400)=@usbdevfs_disconnect={0xcf}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfc}}, 0x0) 6.398335615s ago: executing program 2 (id=315): execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) write$cgroup_int(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, 0x0) 5.481657037s ago: executing program 1 (id=316): mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x400}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x4, 0x1, 0x0, 0x0) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[], 0x20}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) close(0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000800, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x4, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x2, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3037, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0xfffffff9, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x14, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) pread64(r5, &(0x7f0000000080)=""/151, 0x97, 0x8) 5.417664167s ago: executing program 2 (id=317): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) eventfd2(0x5, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x100, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, r5, 0x3ff}}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r7, 0x180000000) 5.085833728s ago: executing program 1 (id=318): r0 = socket(0x21, 0x80000, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x4, 0x0, &(0x7f0000000000)=0xfffffffffffffd55) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$EVIOCGNAME(r3, 0x80404506, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x4) r5 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r5, &(0x7f0000000000), 0xd4ba103) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000080)) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendto$inet(r7, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000100)=0x100, 0x4) 4.768094267s ago: executing program 0 (id=319): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) getpid() ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x32314152, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) 4.543949704s ago: executing program 3 (id=320): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x8840) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0xfffffff0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r8, 0x4, 0x2000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 4.395477478s ago: executing program 2 (id=321): execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) syz_open_procfs(0x0, 0x0) 3.375309848s ago: executing program 3 (id=322): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080), 0x0) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 3.361885424s ago: executing program 0 (id=330): execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) syz_open_procfs(0x0, 0x0) 3.360407458s ago: executing program 1 (id=323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 3.360055175s ago: executing program 2 (id=324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x8080}], 0x1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x800000000000214, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], &(0x7f0000000300), 0x1, r4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r8, 0x400454dc, &(0x7f0000001700)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07000000000000000000050000001c000380080004001a0000000800020020000000080005007180bbda180001801400020073797a5f74756e000000000000210000050006"], 0x50}, 0x1, 0x0, 0x0, 0x4000820}, 0x2000c000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r10) ioctl$TUNSETLINK(r9, 0x400454cd, 0x118) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5], &(0x7f00000003c0), 0x0, 0x2}) 2.39779248s ago: executing program 0 (id=325): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x773e0d3f}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="7c46dd2464adb06933e7abccf111890ac6ad334bba273822e574152e0a73ee093290369fad9d785fc285978e73b5bb0cadc7f8cc79c7343ac67b751133be", 0x3e}, {&(0x7f0000000880)="57c90a3fbc594d13d224de31f6a1b115412f57f24040df23b81e86ae36457988b32577e990a45d4da9efe6e91d07781d7adf63e27ef72ac17e8181fd72cc5eca27ed50863e5c090098b001b33d601ec1fdf91f23f3533122fd0bc6a39a966edf336dcfe499c284f5391b49ffaa89da6d36e2ff2af36852ec89f1ee735386e71944c315ee3e0e0d1efeabba224a986e47a4c5492082b0a87565f5212cfadef983e09ad5abba3c7156ad13b50538ab13713081c0542559acb9c8fd096cb85eff05d6356e710271863f1488672887c02028a35dcf6680afda9f99e86135b3e3b632809edaa7615c5c495327ad2c20447d1902e08a5b671785888e33b6c3d89e91c44743485c9cb2b1971f62b5f821a39516538b72ade110259ff3d1b5bfa72c474da36ff0fcef2ef3421f37309600f4a9dbae99a8b687986398b4d4e2897d3bcaaa8f121d2aabc5d6d61b4845e91569b42056a8bee743865a1b4167b9aeb2e2e352c96fd3fd0e45b71512943551432d88d0752dd64486b20e309838a25143170f35f65eb20dd72f1aa45354579f939f8f7a06eb4638c28c04efb6e425e8a00a7467ee43f1a40cbd2633e9221eb47a4c8761ff3085d1541d766e070bddfe3471256d92c9261f6a2abc22fce4d06c5a1c26e951df05f7b97aa7ee0caec45ccc396a79c5edb7b2ba96a8007a431712ff47aba82569337d8afb73cd318e15edb4e3539010e1cf0db8e88670021d11e197daabb2670929fe93e94450fe13a8cbf85f1fdcf477ef205d4a440d4abfc2c649b1f2f480ef2a1735121468574d42a48409273a114e47462ee75be8304347984589e992a25b8ce45ee68c514c2c7c03b7d1a30ce960e87a4090992d401f99b05064f825822062143eee69703498436b97bdb53cf6ec1666e9e400b71f7f22bf58bc3589155a41310502f09926d552c96cf26ab66857728495cb8c9ca0b7976249bfcc72610e67e4f83ee0233eafc5b94ae82cbbcfce141f93d812af89500a87880fde5b4f91f31a87bc174513ea5824f241366bac66ce4406c698a59ac6d00ff53b800f3e0f0e3962630b0df69c6f12f1f9cb8c43fb14eebafb5120e1e6944e98c8558312d035f46764a24e6d0c89ca3f96df81e7d67a2c701a2858d8653b308c1887c339c3de6fd038eaddf5acf575a900e473935a968b74915b678f057962e80122291a9ca9ae5db470e91ce6062036d64e30d5ebb72896107dabb401259da64de7f6975b0eca8a66308cfef5df41dc97b19c95721d5243323088a7652e4360419964d59fa39eff4c7cb48b02099ffb2266c59b3384ecf6dbd80ce26bbe68332012c05f263eb50bf0e7cd0359664a452d1195e2350b762ab054f2b8740109e6d3b9a1e8a5139bd1a209aae82ca24e9f9745d5ba029fcb49a2616b9a6a8aebc381bc3d57f29e90d00ab64f8abfae711a69a36f5230b41af78996f5301550e95e795bcabcc9cc680b306a592cbee5c8bfbe36e74c38efa01f23869e333d78e4e7667f3060edcd33a6170934069dc20869f7924db0f1759905783864200dbff4bd55a909ddc7d82186e85f8df6a5f22e463b92330beaa96196e42473062ec89efae189b53afeea4b12db607bbf5dcd1dfdc629db6e867b6b15cf737a4cc0bc28f3cf8c318bbf8a5264579a88d5e909b24d887babb21de5d2855a35acf8d39a4e29e5b508212717e3d3832d24385f6e7539d72dfb2147a07f46a41d28ed9d09b6ae3d5294b6444a4a649321888bfce098c79c0fb08eff0bfc7fd259282a0aecfa0ad5215a30fb33a5cd3a3b8740ec34f6dd2e382494c977335c5da756062121f830e6dc057dba14ad59d8add5a4f6ce9bd28a352a98d1e860411ddff3aa37466dd89e1a86794052775c36689a898c626b251dd12c972f32d4fa3fbda3fbd7acb743ea06d15cbe2bd8fc11862f00901fb1ed88e2ec04f2b5921cd80940738af38bf69cbea40341de11c53833927f90f90735da62708bb42b5a663a3438e1fb8d59368489639e4cf64ba3ffac692741366628d7431f8c224affe4bfbf2a8d4f4cf1b46fb296475bcc4386f6445293fef3d12577158af3d94faef3502ee1265efc15c321cdc4572f122be676311b1dccdee64e5fdae706d3968e7c951bc8edba4041d96000e54f329e0b49fb87e52b33a9e81d709abc8eb5e82a80a6461ef2ff546817efef974bd37f8224442babb06d6c6625427bbe3a89303e5daecb6649a500b56e8b2c1dcfac6cba024ac8c7204c85e5051d73d488180b9b19bea20204147725ede15a281e35bf02deb18e4762aa49c621e759590111d923619306b74451797e2b49529eb6d15bc0c2863235fe5953b34a2c830bdcf3e1fd344cd766d0f774e06db50bc35e59e8d2726f6f3bd6a304f751c9d13a5513e6fbc4dc63cd77e736f3bbd1e120e66443d1e7434db5cf807e932d46a3bd80f1bd6227ab694b805c9ceeb2ae2d4f89dd25618a53ccee3ff37cfadbedfc3b4bd39b27fa5af17ddcd9f4d1b5da9165a79126fbe5161ef1b2f76d8dc9550cb202350524667fa87fb9c582d3cdd279bce4a698bbadaeca7f7d61748e3f44eb11dfeb53c627416c1848ba231ba477d6310385d395d17e3656622a3ec7527e3cbb1ddba8eb8d5c73f2d20c4690ba2678a4d0bcbdd9d55545e2ef390a55542506eff296691c608508956984a27aacfeecd71316be32fb0f69abad12ed4c096073eb6f9f319cdda27adc6d45c72b5164b2fc4b2f6b3e349de660f332639afd3fe1a2f2902ee3112f136b12825b48e1579a2ef880ece20d4b0b645d9699247b9dbee5129bf660aaf084c040c30c742feceaa7ff5f02829b5a3ee8dc7963d2c8151fb904b4388b9cbe8cade9cc4db27e65519b88411f3f26a7c319be123f1da8f8f91d88f1900abaa541ab41fee921fd7bec530ece788c1aaad13c7dac96a74be25c6d9534558c0bdc90f0dd7a7638af0d094241f117393c585d8ae426a0717b7e5fdd059a134f2aed472411a36b182853638beebbe7f2e714419e267cf4630055e30659b8e63e7f1c7438e144a1224544bc51c371198d618b31b802d5ebc7bc28bd276044541ce0c775b251aec85cd8367e4397dc5933e7a66a9a28f22acc49c4393b1556ca85fcd6a0eb746a58507c586800d8b2930c949f7675155c487d2f3bb19c40d2a34d7614024fb5d715c46dce3c74b76d5cb9e6dc26831a937656a1b3f7c79be15c37cf73c10ee05159d187d4d97e13ec87aafb0cf96251eec39e7b509fa6af6e3de31b89753b00f406fbef8919e082cbc3774d085b112cbf921668a0396d45cb319f3783f652981a9b49567832e54bba96dfdfd8cacfe459745225ac485515dc1812932ed63963d9f8564b0ce4066e2b95f96649dff91b7e31346e340665c1f3df4d718f93fb64a84fc2367911c7acf27394ed499bf19956d2e06630559b3d163740cfcda4797225f18f3e9359c0ac33d9269b171dd8dd8f761ada14f19b1e40c7e68f5b983ca66f82e5f3c16909f7d330a0db42b98f247fc0ac7582475a9641cff3929c35e0fab7d6f57b1b12c4b2fe059f5cdfbfb062a3241e25e0baac13e80a395b61b893c8e1bfc8bb54b043f6061f91d4b6d3b44143eb57106876cc0e41cf98da0e770be5ad36a5f6167f98279b514a2f26eed3d299198199ad6f2c7b792c6d68d2c89bd43833c103534838cc484ecdf9766cd2cbfcec635f7532369a8346329d6c86b49c310cf3b77747d196341b3fb95748944ca3f7a14f452a6cf8fe35509fa8f420f804a02eaf5a881434397ff9f742cc11a7fb4f9aa592e7a7fb017e7f717d3a786b0f8f82ed7073968c545074992c5889a013976c0e9e705f5bc0830414e23c2f7b48a79e6d3d9fdf570532aefbd1fabeb89bd3833bd6c8c2c2de12afbc4f7a9bd4c6a105f131d30accafcf307fc45437b6e57f931d38427209071ae666d292105e2afffc54a32351886d1cf2dfc5fbe186f3ae088cf48fc599c18b1c6775a1481e999467af78684e7fa24e643851848d682e2b65e0a7b2bf6bcae8c85e3176a4abe75e8650d621279ad73213498f55e32e4b8ed574fa1ae319297f1e40ba854c2325cd743738f34523222e413f96ced8a35fcf8744571df640d41837c92f924989529fe62a6825ac38bc768358fab921df8a1b08cfe8c7cee066d9b77ded94642c4245a513d778326291e15d573c4d1ed2e061b52e36c58973a567e4a36f66bc639869e379f3a5de8af1baea4df3dc58adac7c15d373a360d33653a33e8ecc5f66085d09fd4d9d74b43573fff9574013f2a6a7083546cd102104f09efe243dc75da775bd2677f9efa6e32eb5fd84aa6fa0d445d910463f42925054ac4d7802a25108d8a1c9f6fe8799c962665e2005c6c8de4609eaf7d3ff904e95e1006d317e443e23a681f26b65be706a45a81ee1d947cf0683660a82350fa4118e7402221dc4ed134929243d11e939ba54d4146fc6900f7ddedcae040287f3ba0850b7a2b486d905c59dc3f04492921f485db70264e3a3d439939a95a1256529df5621958d5a134c1e5b172094162f33d22deac0606119a6a41b450e13b5a8c47ecadef1e950ded3192c76085cbd8fe4203beb04b35f5a39b929a3609dddc04159924213d55d4ddb2c705c88d89a52304ae60b9f745bb6a2029ce4f4997633b5e47d33d0ac2381289579a9dc5a6571788acb56addddaf513835c97d654b02ae742983ab326b74873b316b0269648c5ff4f7d4837ba3d258b147791b8c066ac791eb5d9bcd98c6ae4373bbd019faf5f7f15a555a5e763c3d241dfc465756cd856d0183b2e400446cb5b268a5c0ba22b97f1546fe4a91072f5a03eb9ead7d3755621ca755d8d6024762d5645fd84a4d557f359d4440ae2b13fe56d50835b0f7b5a7d79d45bad4c4129240fb5c12f785878736eab05c4d9e8e8c01976fa3abd964d748db236e3862e8ddedd0f8b3135e3ea041499b6944920651771496d4931d6c6ad50ce348e05ff4064214e50995954449a534b64f2607856aa14382a683e730aae387b70cbb7a05cb6da1516562b57900d20ca52a28c853657cc3e3250ffcc551bf93212117644d88c76017661456a153536759261d3345d4726ba11f9cd9b693ddd4aa79ec29b2e896115066df6d9ab7276f6ecae7f33731a7e08ce23a39ffe7e39e31c028ed881f8b8d8b40c589a8e5455c2aacf14491fdba166ccee5bf7d8e56a561135b1e913bf963d4083a135dcb542cf3b256ca72e60242a448dd23ab757618a5288490658c0d8d8b541cc79c0039b5bada27c52c4902f92ebd1d48ae7ec7591c8c9b2ed3212e55787e47377ea2188fc79c7f2040c698de2121224f0ec3abbb64d3c6d4ee603db628effdb501e236452321731da38d4ffb7ef76fe83339abce9d9be06ac97b1c235cc419772463898f8dcd1e45e4578fce829ccffefd65beb11b4a281609e62cdd49bf0dfe3ed9107fee5726bb0fd0130d69f532187c3a878494aefaeae60cea3af92ab4cfde64f497dbf0255659ecb6d56ae7da0acbe29a647a20f30a8c9ecc35b6233951b29cad5e7c0f7f8a15cde908e2d643740dd268e08e8621787fc368cc8fc15b45a46562da1114f5a3dfd8b514ffda72f1b54928effa8c89050de691e26c9f3ed524f5cac0672b54c1b4737853e4e221a224ad83eca9bb2e848adeb1a8b9d8efd6b7c3b5c593ad93ca88d71cbcf2f5a", 0xfc0}], 0x2}, 0x44040) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) syz_io_uring_setup(0x6bb3, &(0x7f0000000180)={0x0, 0x9b36, 0x2000, 0x1, 0xa4}, &(0x7f000001b0c0), &(0x7f000001d1c0), &(0x7f0000000000)) socket$kcm(0x21, 0x2, 0xa) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.251066744s ago: executing program 3 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000f00)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000001100)="0200"/128, 0x80) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000001300)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r5, &(0x7f0000001500), 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2.147429691s ago: executing program 1 (id=335): fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(0xffffffffffffffff, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 1.711695028s ago: executing program 2 (id=327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, 0x0, 0x400700, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f4, 0x0, 0x168, 0x9, 0x144, 0xb, 0x22c, 0x250, 0x250, 0x22c, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xff], [], 'geneve0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xfc, 0x144, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x2c}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x2c}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@set2={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x350) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@broadcast, @empty, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "84384be0a4202d24"}}}}, &(0x7f0000000240)={0x1, 0x2, [0x73, 0xd66, 0x868, 0x539]}) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000006c0), 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) setreuid(0xee00, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.656263259s ago: executing program 3 (id=328): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) r0 = open$dir(&(0x7f0000000040)='./dev/ttyUSB0\x00', 0x181000, 0x2) mkdirat(r0, &(0x7f0000000080)='mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x7fff, 0x1, 0x3, 0xd59f80, 0xb488ab32, 0x7, 0x19ef, 0x3, 0x6, 0x8027ff, 0x2800, 0x101, 0xbb6, 0x9, 0x0, {0x8, 0xfffffffb}, 0xd0, 0xc}}) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e657720656372797074667320747275737065643a73797a2050303030303030303030303030303030303133300010d3db6e3b7c99777a654b6e874519a3702a0800000000000000f9db0b691bc858c5c6fe1220b282ae3924b4ac2bfd10512251ac3016a039faeb81978592dd8ccca814c92806cb972874dfecc8793edde0d3a0ecf4fbbc0f31349e33a17c3007d5d67c4e5163eab023e4"], 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd700000000000", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @loopback, @private1, 0x80000000, 0x2, 0xc, 0x100, 0x0, 0x90000a, r2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) 726.514626ms ago: executing program 2 (id=329): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x4}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='i8042', 0x5) 719.798359ms ago: executing program 1 (id=339): syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f4, 0x2a8, 0x2a8, 0x3f4, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xffffffff, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x30c, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0xa, [0x100, 0x4e22, 0x4e23, 0x4e23, 0x4e24, 0x4e20, 0x4e23, 0x4e21, 0x4e21, 0x4e24, 0x4e21, 0x4e22, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1]}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4e4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}, 0x38) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000140)=0x7, 0x4) listen(r5, 0x1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 540.787418ms ago: executing program 0 (id=331): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x20000014) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4048aecb, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r6, @ANYRESDEC, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r11, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f6164b11d7cf302ca932e56a7ed20656372797074667320757365"], 0x2b, 0xfffffffffffffff9) 0s ago: executing program 0 (id=332): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xe85c, 0xfc6c3) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f00000000c0)={0x0, 0x40000000}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x30, 0x0, "1cdc0dca1d9f"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x68}, 0x1, 0x7}, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:41031' (ED25519) to the list of known hosts. [ 40.854868][ T5648] cgroup: Unknown subsys name 'net' [ 41.026162][ T5648] cgroup: Unknown subsys name 'cpuset' [ 41.031136][ T5648] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.156485][ T5648] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.848944][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.849062][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.851895][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.853699][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.854838][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.855717][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.856300][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.857684][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.857930][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.858419][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.858968][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.860969][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.861099][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.861954][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.867256][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.870736][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.871591][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.875271][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.881391][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.898986][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.521626][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.525657][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.528844][ T5744] bridge_slave_0: entered allmulticast mode [ 46.532910][ T5744] bridge_slave_0: entered promiscuous mode [ 46.579072][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.582314][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.585427][ T5732] bridge_slave_0: entered allmulticast mode [ 46.589551][ T5732] bridge_slave_0: entered promiscuous mode [ 46.593747][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.597753][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.600979][ T5744] bridge_slave_1: entered allmulticast mode [ 46.606726][ T5744] bridge_slave_1: entered promiscuous mode [ 46.626965][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.630297][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.633680][ T5732] bridge_slave_1: entered allmulticast mode [ 46.637617][ T5732] bridge_slave_1: entered promiscuous mode [ 46.702418][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.709383][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.734146][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.777734][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.780429][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.783504][ T5739] bridge_slave_0: entered allmulticast mode [ 46.787113][ T5739] bridge_slave_0: entered promiscuous mode [ 46.793007][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.799538][ T5732] team0: Port device team_slave_0 added [ 46.811363][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.814636][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.817839][ T5739] bridge_slave_1: entered allmulticast mode [ 46.821778][ T5739] bridge_slave_1: entered promiscuous mode [ 46.841826][ T5732] team0: Port device team_slave_1 added [ 46.849114][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.851560][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.855440][ T5733] bridge_slave_0: entered allmulticast mode [ 46.858185][ T5733] bridge_slave_0: entered promiscuous mode [ 46.868167][ T5744] team0: Port device team_slave_0 added [ 46.875757][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.878013][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.880253][ T5733] bridge_slave_1: entered allmulticast mode [ 46.882881][ T5733] bridge_slave_1: entered promiscuous mode [ 46.896754][ T5744] team0: Port device team_slave_1 added [ 46.911895][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.915012][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.925843][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.943612][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.949037][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.959491][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.961495][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.968871][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.985928][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.996543][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.999520][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.008351][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.019507][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.039109][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.042054][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.052493][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.074438][ T5739] team0: Port device team_slave_0 added [ 47.078193][ T5739] team0: Port device team_slave_1 added [ 47.095515][ T5733] team0: Port device team_slave_0 added [ 47.099630][ T5733] team0: Port device team_slave_1 added [ 47.134320][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.137059][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.146219][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.159632][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.161833][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.169644][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.178392][ T5732] hsr_slave_0: entered promiscuous mode [ 47.180866][ T5732] hsr_slave_1: entered promiscuous mode [ 47.190333][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.193106][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.202152][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.216689][ T5744] hsr_slave_0: entered promiscuous mode [ 47.220727][ T5744] hsr_slave_1: entered promiscuous mode [ 47.223711][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 47.226097][ T5744] Cannot create hsr debugfs directory [ 47.228948][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.232966][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.243668][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.316738][ T5739] hsr_slave_0: entered promiscuous mode [ 47.320033][ T5739] hsr_slave_1: entered promiscuous mode [ 47.323150][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 47.325568][ T5739] Cannot create hsr debugfs directory [ 47.409601][ T5733] hsr_slave_0: entered promiscuous mode [ 47.412853][ T5733] hsr_slave_1: entered promiscuous mode [ 47.415781][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 47.418167][ T5733] Cannot create hsr debugfs directory [ 47.729523][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.742024][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.746040][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.764288][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.773186][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.779483][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.783194][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.787802][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.874942][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.881357][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.884832][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.891212][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.894403][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.896322][ T5735] Bluetooth: hci1: command tx timeout [ 47.896329][ T5743] Bluetooth: hci2: command tx timeout [ 47.896550][ T5743] Bluetooth: hci0: command tx timeout [ 47.908459][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.916252][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.922354][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.973411][ T5735] Bluetooth: hci3: command tx timeout [ 48.007103][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.013627][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.021211][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.028700][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.045441][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.051541][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.055926][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.062211][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.099951][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.108862][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.117815][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.130589][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.137563][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.141374][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.148548][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.153253][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.159427][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.198293][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.230750][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.234400][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.265208][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.268377][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.306653][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.366403][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.370341][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.376781][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.379604][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.399308][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.402236][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.417593][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.440127][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.444008][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.446451][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.463947][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.466367][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.510143][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.520991][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.523391][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.548182][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.551316][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.794120][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.799532][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.827812][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.839563][ T5732] veth0_vlan: entered promiscuous mode [ 48.858411][ T5732] veth1_vlan: entered promiscuous mode [ 48.868335][ T5744] veth0_vlan: entered promiscuous mode [ 48.883286][ T5744] veth1_vlan: entered promiscuous mode [ 48.905838][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.910546][ T5733] veth0_vlan: entered promiscuous mode [ 48.917219][ T5732] veth0_macvtap: entered promiscuous mode [ 48.930261][ T5733] veth1_vlan: entered promiscuous mode [ 48.933444][ T5732] veth1_macvtap: entered promiscuous mode [ 48.945291][ T5744] veth0_macvtap: entered promiscuous mode [ 48.950811][ T5744] veth1_macvtap: entered promiscuous mode [ 48.969885][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.980030][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.993235][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.012194][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.031047][ T5739] veth0_vlan: entered promiscuous mode [ 49.043574][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.050023][ T5733] veth0_macvtap: entered promiscuous mode [ 49.066808][ T5739] veth1_vlan: entered promiscuous mode [ 49.071609][ T5733] veth1_macvtap: entered promiscuous mode [ 49.103896][ T5546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.131476][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.136046][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.144549][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.147179][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.152689][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.158888][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.166461][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.169929][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.186122][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.189041][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.189242][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.198420][ T5739] veth0_macvtap: entered promiscuous mode [ 49.210425][ T5739] veth1_macvtap: entered promiscuous mode [ 49.243887][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.259750][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.269108][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.289092][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.301108][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.310378][ T5732] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.311529][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.319029][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.324198][ T5732] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.328912][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.331944][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.337767][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.359433][ T5732] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.411480][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.419160][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.434032][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.476631][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.485025][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.504380][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.514865][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.518754][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.523888][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.526418][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.554886][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.564462][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.570798][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.578392][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.591922][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.080449][ T5735] Bluetooth: hci1: command tx timeout [ 50.082338][ T5735] Bluetooth: hci0: command tx timeout [ 50.084717][ T64] Bluetooth: hci2: command tx timeout [ 50.086489][ T64] Bluetooth: hci3: command tx timeout [ 50.704850][ T5886] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 50.717820][ T5886] : entered promiscuous mode [ 51.235013][ T5930] Invalid ELF header magic: != ELF [ 51.565713][ T5930] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 51.567995][ T5930] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.571353][ T5930] vhci_hcd vhci_hcd.0: Device attached [ 51.727172][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.836206][ T5932] vhci_hcd: connection closed [ 51.838334][ T5813] vhci_hcd vhci_hcd.0: stop threads [ 51.843473][ T5813] vhci_hcd vhci_hcd.0: release socket [ 51.845805][ T5813] vhci_hcd vhci_hcd.0: disconnect device [ 52.142724][ T5743] Bluetooth: hci3: command tx timeout [ 52.143256][ T5735] Bluetooth: hci2: command tx timeout [ 52.143724][ T5750] Bluetooth: hci1: command tx timeout [ 52.149234][ T64] Bluetooth: hci0: command tx timeout [ 52.372645][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 52.663308][ T5936] process 'syz.3.9' launched './file2' with NULL argv: empty string added [ 52.711356][ T9] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 52.756806][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.762656][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.771278][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.777194][ T9] usb 7-1: Product: syz [ 52.778541][ T9] usb 7-1: Manufacturer: syz [ 52.780143][ T9] usb 7-1: SerialNumber: syz [ 52.783726][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 53.441909][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 53.756210][ T5953] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 53.764977][ T5953] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 53.769430][ T5953] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 53.771088][ T5955] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.11'. [ 53.771907][ T5953] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 53.796944][ T5953] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 53.797100][ T5955] openvswitch: netlink: Message has 512 unknown bytes. [ 53.831100][ T5953] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 53.841562][ T5953] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 53.884768][ T5953] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 53.887973][ T5953] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 53.902629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.922622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.952641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.212820][ T64] Bluetooth: hci0: command tx timeout [ 54.212885][ T5743] Bluetooth: hci1: command tx timeout [ 54.215459][ T5735] Bluetooth: hci2: command tx timeout [ 54.223009][ T5735] Bluetooth: hci3: command tx timeout [ 54.971334][ T5977] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 54.973459][ T5977] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 54.991819][ T5977] vhci_hcd vhci_hcd.0: Device attached [ 55.383021][ T5827] usb 38-1: SetAddress Request (2) to port 0 [ 55.389580][ T5827] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 55.389880][ T9] usb 7-1: USB disconnect, device number 2 [ 55.908626][ T5978] vhci_hcd: connection reset by peer [ 55.912046][ T5813] vhci_hcd vhci_hcd.0: stop threads [ 55.913999][ T5813] vhci_hcd vhci_hcd.0: release socket [ 55.916815][ T5813] vhci_hcd vhci_hcd.0: disconnect device [ 57.132712][ T5812] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 57.293877][ T5812] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 57.299800][ T5812] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 57.302450][ T5812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.305813][ T5812] usb 7-1: config 0 has no interface number 0 [ 57.308171][ T5812] usb 7-1: config 0 interface 205 has no altsetting 0 [ 57.315467][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.318105][ T5812] usb 7-1: Product: syz [ 57.319855][ T5812] usb 7-1: Manufacturer: syz [ 57.321616][ T5812] usb 7-1: SerialNumber: syz [ 57.326834][ T5812] usb 7-1: config 0 descriptor?? [ 57.334277][ T5812] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 57.339119][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 57.359134][ T5812] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 57.365958][ T5812] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 57.371159][ T5812] usb 7-1: media controller created [ 57.375373][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 57.385237][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 57.388451][ T5812] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 57.396991][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 57.417715][ T5812] dvb-usb: schedule remote query interval to 150 msecs. [ 57.429834][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 57.452653][ T5812] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 57.604145][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 57.630678][ T5812] dvb-usb: error while querying for an remote control event. [ 57.721120][ T6016] Invalid ELF header magic: != ELF [ 57.744610][ T6016] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 57.746925][ T6016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.749504][ T6016] vhci_hcd vhci_hcd.0: Device attached [ 58.013972][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 58.016452][ T5812] dvb-usb: error while querying for an remote control event. [ 58.172674][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 58.175104][ T5812] dvb-usb: error while querying for an remote control event. [ 58.283043][ T55] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 58.333470][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 58.335355][ T5812] dvb-usb: error while querying for an remote control event. [ 58.460910][ T6017] vhci_hcd: connection reset by peer [ 58.486044][ T5811] vhci_hcd vhci_hcd.3: stop threads [ 58.487798][ T5811] vhci_hcd vhci_hcd.3: release socket [ 58.489574][ T5811] vhci_hcd vhci_hcd.3: disconnect device [ 58.492703][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 58.495356][ T5812] dvb-usb: error while querying for an remote control event. [ 58.593487][ T42] audit: type=1326 audit(1786616849.716:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.612217][ T42] audit: type=1326 audit(1786616849.716:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.624984][ T42] audit: type=1326 audit(1786616849.716:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.633172][ T42] audit: type=1326 audit(1786616849.716:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.639802][ T42] audit: type=1326 audit(1786616849.716:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.646579][ T42] audit: type=1326 audit(1786616849.716:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.653676][ T42] audit: type=1326 audit(1786616849.726:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.660317][ T42] audit: type=1326 audit(1786616849.726:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.667030][ T42] audit: type=1326 audit(1786616849.726:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.674039][ T42] audit: type=1326 audit(1786616849.726:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 58.894999][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 58.897874][ T5812] dvb-usb: error while querying for an remote control event. [ 59.064539][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 59.069538][ T5812] dvb-usb: error while querying for an remote control event. [ 59.283628][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 59.331420][ T24] dvb-usb: error while querying for an remote control event. [ 59.502783][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 59.506917][ T24] dvb-usb: error while querying for an remote control event. [ 59.651879][ T24] usb 7-1: USB disconnect, device number 3 [ 59.663637][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 59.665662][ T5812] dvb-usb: error while querying for an remote control event. [ 60.008577][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 60.046879][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 60.205869][ T6049] tipc: Started in network mode [ 60.208753][ T6049] tipc: Node identity 4, cluster identity 4711 [ 60.211089][ T6049] tipc: Node number set to 4 [ 60.556206][ T5827] usb 38-1: device descriptor read/8, error -110 [ 60.966791][ T5827] usb usb38-port1: attempt power cycle [ 61.583252][ T5827] usb usb38-port1: unable to enumerate USB device [ 61.708920][ T6070] orangefs_mount: mount request failed with -4 [ 62.822985][ T5827] Process accounting resumed [ 63.633597][ T55] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 64.604583][ T6112] validate_nla: 45 callbacks suppressed [ 64.604621][ T6112] netlink: 'syz.3.39': attribute type 2 has an invalid length. [ 64.668524][ T6112] : entered promiscuous mode [ 65.313977][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.482762][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 65.487778][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 65.496692][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.499555][ T10] usb 7-1: config 179 has no interface number 0 [ 65.506467][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 65.514171][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 65.521428][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.531398][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 65.552725][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.559566][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.566723][ T6121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.826897][ C1] Unknown status report in ack skb [ 66.027843][ T1155] Bluetooth: hci4: Frame reassembly failed (-90) [ 66.133326][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 66.172777][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 66.173038][ T42] audit: type=1804 audit(1786616857.246:36): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.45" name="/newroot/11/bus/bus" dev="overlay" ino=93 res=1 errno=0 [ 66.531612][ T55] usb 7-1: USB disconnect, device number 4 [ 66.531675][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 66.537075][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 68.052763][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 68.054602][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.754506][ T6163] Invalid ELF header magic: != ELF [ 69.089923][ T6153] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 69.092035][ T6153] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.106268][ T6153] vhci_hcd vhci_hcd.0: Device attached [ 69.362733][ T5814] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 69.426856][ T6168] vhci_hcd: connection reset by peer [ 69.430178][ T5811] vhci_hcd vhci_hcd.1: stop threads [ 69.431844][ T5811] vhci_hcd vhci_hcd.1: release socket [ 69.433971][ T5811] vhci_hcd vhci_hcd.1: disconnect device [ 69.818488][ T6176] netlink: 'syz.2.52': attribute type 2 has an invalid length. [ 69.843259][ T6176] : entered promiscuous mode [ 71.073394][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.075858][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.985230][ T6197] 9p: Bad value for 'rfdno' [ 72.322739][ T10] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 72.493295][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 72.499465][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 72.502808][ T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 72.512656][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 72.516091][ T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.523670][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 72.531251][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 72.535432][ T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 72.539722][ T10] usb 8-1: config 168 interface 0 has no altsetting 0 [ 72.542731][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 72.546373][ T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 72.549918][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 72.553485][ T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.557161][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 72.560655][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 72.564285][ T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 72.568404][ T10] usb 8-1: config 168 interface 0 has no altsetting 0 [ 72.571327][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 72.573874][ T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 72.577352][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 72.580684][ T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.584493][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 72.588004][ T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 72.591424][ T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 72.595820][ T10] usb 8-1: config 168 interface 0 has no altsetting 0 [ 72.600877][ T10] usb 8-1: string descriptor 0 read error: -22 [ 72.603887][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.620829][ T10] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 72.829965][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 73.289047][ T10] usb 8-1: USB disconnect, device number 2 [ 73.995155][ T6225] capability: warning: `syz.2.62' uses deprecated v2 capabilities in a way that may be insecure [ 74.269932][ T6225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 74.462744][ T5814] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 75.108741][ T42] audit: type=1326 audit(1786616866.226:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.2.64" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x0 [ 75.986981][ T6242] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.233310][ T42] audit: type=1326 audit(1786616867.276:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.2.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 76.243792][ T42] audit: type=1326 audit(1786616867.276:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.2.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 76.250461][ T42] audit: type=1326 audit(1786616867.286:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.2.65" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 76.258033][ T42] audit: type=1326 audit(1786616867.296:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.2.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 76.265351][ T42] audit: type=1326 audit(1786616867.296:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.2.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 76.272899][ T42] audit: type=1326 audit(1786616867.296:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.2.65" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 76.279548][ T42] audit: type=1326 audit(1786616867.296:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.2.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 76.286410][ T42] audit: type=1326 audit(1786616867.296:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.2.65" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 76.294972][ T42] audit: type=1326 audit(1786616867.306:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.2.65" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 78.321500][ T6263] syz.3.69 uses obsolete (PF_INET,SOCK_PACKET) [ 79.877794][ T6302] netlink: 'syz.1.72': attribute type 2 has an invalid length. [ 79.880290][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 80.093880][ T6302] : entered promiscuous mode [ 80.187039][ T6315] warning: `syz.1.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.234640][ T6332] vlan2: entered promiscuous mode [ 81.236478][ T6332] hsr0: entered promiscuous mode [ 81.238370][ T6332] vlan2: entered allmulticast mode [ 81.240416][ T6332] hsr0: entered allmulticast mode [ 81.243557][ T6332] hsr_slave_0: entered allmulticast mode [ 81.258859][ T34] cfg80211: failed to load regulatory.db [ 81.335784][ T6333] kAFS: No cell specified [ 81.393816][ T6332] hsr_slave_1: entered allmulticast mode [ 81.428224][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 81.465584][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 81.483501][ T6332] hsr_slave_0: left promiscuous mode [ 81.494186][ T6332] hsr_slave_1: left promiscuous mode [ 83.209325][ T6356] Zero length message leads to an empty skb [ 84.578351][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 85.048460][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 85.174808][ T6399] input: syz0 as /devices/virtual/input/input6 [ 86.106463][ T6409] binder: 6407:6409 ioctl c0306201 80000040 returned -22 [ 86.142269][ T6409] ublk0: read batch cmd buffer failed [ 86.145900][ T6409] ublk0: read batch cmd buffer failed [ 88.293699][ T6422] xt_ipcomp: unknown flags 1D [ 88.618258][ T55] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 88.994548][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 89.020119][ T55] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 89.028369][ T55] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 89.032834][ T55] usb 8-1: config 179 has no interface number 0 [ 89.035802][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 89.040455][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 89.045327][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.050156][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 89.055068][ T55] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.060874][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.069711][ T6435] ptrace attach of ""[6436] was attempted by "/syz-executor exec"[6435] [ 89.092899][ T6419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.265453][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 89.319177][ C2] Unknown status report in ack skb [ 90.183546][ T24] usb 8-1: USB disconnect, device number 3 [ 90.183637][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 90.188509][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 91.067744][ T6474] kernel profiling enabled (shift: 17) [ 106.453920][ T6521] binder: 6519:6521 ioctl 400c620e 0 returned -14 [ 106.955040][ T6527] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 106.957729][ T6527] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 107.003277][ T6527] vhci_hcd vhci_hcd.0: Device attached [ 107.353301][ T55] usb 38-1: SetAddress Request (6) to port 0 [ 107.362680][ T55] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 107.426864][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.478516][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.493547][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 108.063906][ T6546] overlayfs: conflicting options: nfs_export=on,index=off [ 108.100287][ T6538] batman_adv: batadv0: Adding interface: ip6gretap1 [ 108.103103][ T6538] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.113068][ T6538] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 108.159710][ T6529] vhci_hcd: connection reset by peer [ 108.165263][ T5811] vhci_hcd vhci_hcd.0: stop threads [ 108.167533][ T5811] vhci_hcd vhci_hcd.0: release socket [ 108.169910][ T5811] vhci_hcd vhci_hcd.0: disconnect device [ 108.596332][ T5735] Bluetooth: hci3: link tx timeout [ 108.600402][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.607915][ T5735] Bluetooth: hci3: link tx timeout [ 108.610170][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.618427][ T5735] Bluetooth: hci3: link tx timeout [ 108.620771][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.624323][ T5735] Bluetooth: hci3: link tx timeout [ 108.626667][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.630877][ T5735] Bluetooth: hci3: link tx timeout [ 108.637001][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.640328][ T5735] Bluetooth: hci3: link tx timeout [ 108.642657][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.646046][ T5735] Bluetooth: hci3: link tx timeout [ 108.648291][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.651578][ T5735] Bluetooth: hci3: link tx timeout [ 108.653844][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.657281][ T5735] Bluetooth: hci3: link tx timeout [ 108.659525][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.662879][ T5735] Bluetooth: hci3: link tx timeout [ 108.665162][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.669873][ T5735] Bluetooth: hci3: link tx timeout [ 108.672174][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.675575][ T5735] Bluetooth: hci3: link tx timeout [ 108.678001][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.681313][ T5735] Bluetooth: hci3: link tx timeout [ 108.683470][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.686795][ T5735] Bluetooth: hci3: link tx timeout [ 108.689099][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.692902][ T5735] Bluetooth: hci3: link tx timeout [ 108.695206][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.698376][ T5735] Bluetooth: hci3: link tx timeout [ 108.700566][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.704016][ T5735] Bluetooth: hci3: link tx timeout [ 108.706224][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.709404][ T5735] Bluetooth: hci3: link tx timeout [ 108.711557][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.714968][ T5735] Bluetooth: hci3: link tx timeout [ 108.717198][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.720409][ T5735] Bluetooth: hci3: link tx timeout [ 108.722784][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.726681][ T5735] Bluetooth: hci3: link tx timeout [ 108.728912][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.732099][ T5735] Bluetooth: hci3: link tx timeout [ 108.734307][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.737411][ T5735] Bluetooth: hci3: link tx timeout [ 108.739414][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.742554][ T5735] Bluetooth: hci3: link tx timeout [ 108.746447][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.751334][ T5735] Bluetooth: hci3: link tx timeout [ 108.753599][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.756804][ T5735] Bluetooth: hci3: link tx timeout [ 108.758980][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.764101][ T5735] Bluetooth: hci3: link tx timeout [ 108.770290][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.774238][ T5735] Bluetooth: hci3: link tx timeout [ 108.776639][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.779872][ T5735] Bluetooth: hci3: link tx timeout [ 108.782053][ T5735] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.785297][ T5735] Bluetooth: hci3: link tx timeout [ 108.787499][ T5735] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.957261][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 108.960940][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 109.372714][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.413822][ T6556] ceph: No mds server is up or the cluster is laggy [ 109.437141][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 109.441330][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 109.532857][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 109.566452][ T34] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 109.615429][ T34] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 109.619935][ T34] usb 5-1: config 179 has no interface number 0 [ 109.622339][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 109.628489][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 109.638265][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.643529][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 109.647266][ T34] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 109.652487][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.670982][ T6562] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.890572][ C2] Unknown status report in ack skb [ 109.972818][ T6570] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.098434][ T6576] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 110.103012][ T6576] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 110.106754][ T6576] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 110.109355][ T6576] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 110.428519][ T6576] CacheFiles: No cache directory specified [ 110.443182][ T34] usb 5-1: USB disconnect, device number 2 [ 110.445297][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 110.445321][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 110.591815][ T6586] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 110.660043][ T6590] netlink: 'syz.0.129': attribute type 29 has an invalid length. [ 110.680036][ T6590] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 110.688574][ T6590] netlink: 756 bytes leftover after parsing attributes in process `syz.0.129'. [ 110.707594][ T5735] Bluetooth: hci3: command 0x0406 tx timeout [ 111.219885][ T6594] bond1 (unregistering): Released all slaves [ 111.899672][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 111.899689][ T42] audit: type=1326 audit(1786616903.006:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 111.920377][ T42] audit: type=1326 audit(1786616903.016:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 111.944844][ T42] audit: type=1326 audit(1786616903.056:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 112.003085][ T42] audit: type=1326 audit(1786616903.056:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 112.010268][ T42] audit: type=1326 audit(1786616903.056:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 112.051901][ T42] audit: type=1326 audit(1786616903.056:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 112.084318][ T42] audit: type=1326 audit(1786616903.056:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 112.117342][ T42] audit: type=1326 audit(1786616903.056:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 112.142395][ T42] audit: type=1326 audit(1786616903.066:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 112.175054][ T42] audit: type=1326 audit(1786616903.066:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.2.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27fec code=0x7ffc0000 [ 112.472558][ T55] usb 38-1: device descriptor read/8, error -110 [ 112.746040][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.755651][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 112.895142][ T55] usb usb38-port1: attempt power cycle [ 112.914394][ T29] usb 6-1: device descriptor read/64, error -32 [ 113.098204][ T5735] Bluetooth: hci3: command 0x0406 tx timeout [ 113.162838][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 113.323250][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 113.329254][ T29] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 113.341384][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.347965][ T29] usb 6-1: config 0 has no interfaces? [ 113.384164][ T29] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 113.387828][ T29] usb 6-1: Product: syz [ 113.391558][ T29] usb 6-1: Manufacturer: syz [ 113.397967][ T29] usb 6-1: SerialNumber: syz [ 113.491690][ T55] usb usb38-port1: unable to enumerate USB device [ 113.529258][ T29] usb 6-1: config 0 descriptor?? [ 113.673834][ T6640] binder: 6638:6640 ioctl 400c620e 0 returned -14 [ 115.582760][ T3263] usb 6-1: USB disconnect, device number 3 [ 115.883911][ T5812] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 116.033448][ T5812] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 116.038424][ T5812] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 116.043101][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.047309][ T5812] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.051988][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.057137][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.062930][ T5812] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 116.065653][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.070048][ T5812] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.074555][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.078761][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.084930][ T5812] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 116.088164][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.092504][ T5812] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.096879][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.100343][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.106337][ T5812] usb 5-1: string descriptor 0 read error: -22 [ 116.108467][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.119689][ T5812] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 116.173151][ T6698] ======================================================= [ 116.173151][ T6698] WARNING: The mand mount option has been deprecated and [ 116.173151][ T6698] and is ignored by this kernel. Remove the mand [ 116.173151][ T6698] option from the mount to silence this warning. [ 116.173151][ T6698] ======================================================= [ 117.046405][ T6710] Invalid ELF header magic: != ELF [ 117.297704][ T6709] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 117.303454][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.145'. [ 117.704043][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.710876][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.739880][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.762902][ T6723] netlink: 'syz.2.146': attribute type 2 has an invalid length. [ 117.768483][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.774348][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 117.779253][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.786302][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.792421][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.798951][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.808321][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.814206][ T6717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.691485][ T6728] nd_pmem pfn0.0: probe with driver nd_pmem failed with error -16 [ 119.296261][ T6744] overlayfs: conflicting options: nfs_export=on,index=off [ 120.457179][ T9] usb 5-1: USB disconnect, device number 3 [ 122.654149][ T6793] Bluetooth: MGMT ver 1.23 [ 123.610305][ T6817] qrtr: Invalid version 0 [ 123.641268][ T6817] syzkaller1: entered promiscuous mode [ 123.645868][ T6817] syzkaller1: entered allmulticast mode [ 123.938284][ T6825] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 123.943750][ T6825] netlink: 224 bytes leftover after parsing attributes in process `syz.2.170'. [ 124.146138][ T6827] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 124.148295][ T6827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.154795][ T6827] vhci_hcd vhci_hcd.0: Device attached [ 124.492843][ T6539] usb 44-1: SetAddress Request (2) to port 0 [ 124.496014][ T6539] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 124.704912][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.727649][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.408899][ T6844] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 125.416423][ T6839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.172'. [ 125.692046][ T6830] vhci_hcd: connection reset by peer [ 125.697819][ T13] vhci_hcd vhci_hcd.3: stop threads [ 125.699563][ T13] vhci_hcd vhci_hcd.3: release socket [ 125.701957][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 125.718673][ T6833] batman_adv: batadv0: Interface activated: ip6gretap1 [ 127.933079][ T6880] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.992772][ T34] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 128.173093][ T34] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 128.181600][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.187340][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 128.193735][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 128.201808][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.206323][ T34] usb 6-1: Product: syz [ 128.207681][ T34] usb 6-1: Manufacturer: syz [ 128.211508][ T34] usb 6-1: SerialNumber: syz [ 128.216077][ T34] usb 6-1: config 0 descriptor?? [ 128.220933][ T6876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.292698][ T34] rc_core: IR keymap rc-streamzap not found [ 128.294667][ T34] Registered IR keymap rc-empty [ 128.301950][ T34] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 128.308211][ T34] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 128.389761][ T6880] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 128.398013][ T6880] overlayfs: failed to look up (tracing) for ino (-66) [ 128.422703][ T3263] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 128.523144][ T6890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.180'. [ 128.582943][ T3263] usb 7-1: Using ep0 maxpacket: 16 [ 128.585794][ T3263] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.591443][ T3263] usb 7-1: config 0 has no interfaces? [ 128.596447][ T3263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.599817][ T3263] usb 7-1: Product: syz [ 128.601501][ T3263] usb 7-1: Manufacturer: syz [ 128.603041][ T3263] usb 7-1: SerialNumber: syz [ 128.608720][ T3263] usb 7-1: config 0 descriptor?? [ 128.880401][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.888338][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.608919][ T6539] usb 44-1: device descriptor read/8, error -110 [ 130.193227][ T6539] usb usb44-port1: attempt power cycle [ 130.831153][ T24] usb 6-1: USB disconnect, device number 4 [ 131.056179][ T3263] usb 7-1: USB disconnect, device number 5 [ 131.296873][ T6539] usb usb44-port1: unable to enumerate USB device [ 131.751652][ T6931] qrtr: Invalid version 0 [ 131.952753][ T6931] syzkaller1: entered promiscuous mode [ 131.958176][ T6931] syzkaller1: entered allmulticast mode [ 132.349434][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.356157][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.621256][ T6961] binder: BINDER_SET_CONTEXT_MGR already set [ 134.623749][ T6961] binder: 6960:6961 ioctl 4018620d 80004a80 returned -16 [ 135.867622][ T6993] qrtr: Invalid version 0 [ 135.886307][ T6993] syzkaller1: entered promiscuous mode [ 135.888162][ T6993] syzkaller1: entered allmulticast mode [ 136.194557][ T6961] Set syz1 is full, maxelem 65536 reached [ 136.256621][ T6995] xt_ipcomp: unknown flags 1D [ 137.338009][ T7001] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.345228][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 138.861512][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.889472][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.972848][ T9] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 139.133990][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 139.139982][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 139.142563][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 139.150205][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.160772][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 139.164202][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 139.174380][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 139.179977][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 139.185523][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.191291][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 139.196981][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 139.208553][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 139.214296][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 139.217836][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.224084][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 139.231736][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 139.251325][ T9] usb 6-1: string descriptor 0 read error: -22 [ 139.253529][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.353120][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 143.573455][ T6539] usb 6-1: USB disconnect, device number 5 [ 143.721356][ T7043] qrtr: Invalid version 0 [ 143.770298][ T7043] syzkaller1: entered promiscuous mode [ 143.772248][ T7043] syzkaller1: entered allmulticast mode [ 143.973001][ T5814] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 144.143431][ T5814] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.149298][ T5814] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.153458][ T5814] usb 7-1: config 0 has no interface number 0 [ 144.155439][ T5814] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 144.161185][ T5814] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 144.168992][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.173875][ T5814] usb 7-1: config 0 descriptor?? [ 144.178580][ T7041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.187228][ T5814] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 144.595431][ C3] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 144.600048][ T5814] usb 7-1: USB disconnect, device number 6 [ 145.314338][ T7060] ptrace attach of "/syz-executor exec"[5744] was attempted by " [ 145.409772][ T7058] tipc: Enabled bearer , priority 10 [ 145.696156][ T7050] 9pnet_fd: p9_fd_create_tcp (7050): problem connecting socket to 127.0.0.1 [ 147.241221][ T7089] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.354725][ T7089] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 147.358323][ T7089] overlayfs: failed to look up (tracing) for ino (-66) [ 148.160216][ T7106] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 148.162360][ T7106] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 148.177113][ T7106] vhci_hcd vhci_hcd.0: Device attached [ 148.222809][ T6539] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 148.373221][ T6539] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 148.376929][ T6539] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 148.379533][ T6539] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.384366][ T6539] usb 7-1: config 0 has no interface number 0 [ 148.386393][ T6539] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.443065][ T55] usb 44-1: SetAddress Request (6) to port 0 [ 148.446097][ T55] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 148.462186][ T6539] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 148.522161][ T6539] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.547100][ T6539] usb 7-1: config 0 descriptor?? [ 148.550212][ T7097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.555121][ T6539] ldusb 7-1:0.55: Interrupt in endpoint not found [ 148.680173][ T7106] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 149.146196][ T7107] vhci_hcd: connection reset by peer [ 149.148846][ T5813] vhci_hcd vhci_hcd.3: stop threads [ 149.150505][ T5813] vhci_hcd vhci_hcd.3: release socket [ 149.152318][ T5813] vhci_hcd vhci_hcd.3: disconnect device [ 150.914235][ T29] usb 7-1: USB disconnect, device number 7 [ 151.807055][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 151.815912][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 151.846697][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 151.853077][ T5813] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.860582][ T5813] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.870677][ T5813] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.874815][ T5813] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.975666][ T5813] syzkaller0: tun_net_xmit 76 [ 151.977837][ T5813] syzkaller0: tun_net_xmit 48 [ 152.002758][ T29] syzkaller0: tun_net_xmit 76 [ 152.135794][ T29] IPVS: starting estimator thread 0... [ 152.179713][ T6539] syzkaller0: tun_net_xmit 76 [ 152.272673][ T7164] syzkaller0: create flow: hash 3414639293 index 1 [ 152.283122][ T7176] IPVS: using max 44 ests per chain, 105600 per kthread [ 152.831616][ T7163] syzkaller0: delete flow: hash 3414639293 index 1 [ 153.584072][ T55] usb 44-1: device descriptor read/8, error -110 [ 154.443734][ T55] usb usb44-port1: attempt power cycle [ 155.045458][ T55] usb usb44-port1: unable to enumerate USB device [ 156.439997][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 156.563880][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 156.677116][ T7239] netlink: 140 bytes leftover after parsing attributes in process `syz.3.255'. [ 157.079123][ T7245] veth1_to_hsr: entered allmulticast mode [ 157.134361][ T7245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 159.332808][ T5843] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 159.368342][ T7298] ptrace attach of "/syz-executor exec"[5733] was attempted by " [ 159.483184][ T5843] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 159.517274][ T5843] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.521983][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 159.526783][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 159.614577][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.617984][ T5843] usb 8-1: Product: syz [ 159.619323][ T5843] usb 8-1: Manufacturer: syz [ 159.620866][ T5843] usb 8-1: SerialNumber: syz [ 159.624216][ T5843] usb 8-1: config 0 descriptor?? [ 159.626387][ T7294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.692679][ T5843] rc_core: IR keymap rc-streamzap not found [ 159.694971][ T5843] Registered IR keymap rc-empty [ 159.726101][ T5843] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 159.734822][ T5843] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input12 [ 159.786609][ T7297] tipc: Started in network mode [ 159.788242][ T7297] tipc: Node identity ac1414aa, cluster identity 4711 [ 159.792418][ T7297] tipc: Enabled bearer , priority 10 [ 159.966534][ T7311] netlink: 36 bytes leftover after parsing attributes in process `syz.3.267'. [ 160.273797][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.287145][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.787049][ T10] tipc: Node number set to 2886997162 [ 161.444815][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 161.444842][ T42] audit: type=1326 audit(1786616952.566:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.461809][ T42] audit: type=1326 audit(1786616952.576:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.478309][ T42] audit: type=1326 audit(1786616952.586:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.494119][ T42] audit: type=1326 audit(1786616952.586:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.514400][ T42] audit: type=1326 audit(1786616952.586:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.527496][ T42] audit: type=1326 audit(1786616952.586:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.542176][ T42] audit: type=1326 audit(1786616952.586:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.560779][ T42] audit: type=1326 audit(1786616952.586:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.580988][ T42] audit: type=1326 audit(1786616952.596:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.593656][ T42] audit: type=1326 audit(1786616952.606:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.0.274" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 161.829168][ T7336] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 161.831163][ T7336] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 161.837940][ T7336] vhci_hcd vhci_hcd.0: Device attached [ 162.078777][ T7336] geneve2: entered allmulticast mode [ 162.102793][ T5843] usb 42-1: SetAddress Request (2) to port 0 [ 162.104784][ T5843] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 162.128271][ T3263] usb 8-1: USB disconnect, device number 4 [ 162.586605][ T7337] vhci_hcd: connection reset by peer [ 162.597679][ T5813] vhci_hcd vhci_hcd.2: stop threads [ 162.600326][ T5813] vhci_hcd vhci_hcd.2: release socket [ 162.603096][ T5813] vhci_hcd vhci_hcd.2: disconnect device [ 162.992754][ T5854] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 163.146036][ T5854] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 163.154248][ T5854] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 163.157876][ T5854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.162816][ T5854] usb 6-1: config 0 has no interface number 0 [ 163.168126][ T5854] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.181563][ T5854] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 163.194963][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.204278][ T5854] usb 6-1: config 0 descriptor?? [ 163.205708][ T7354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.220759][ T5854] ldusb 6-1:0.55: Interrupt in endpoint not found [ 163.334715][ T7360] ptrace attach of "/syz-executor exec"[5732] was attempted by " [ 163.499639][ T7358] tipc: Started in network mode [ 163.546210][ T7358] tipc: Node identity ac1414aa, cluster identity 4711 [ 163.549900][ T7358] tipc: Enabled bearer , priority 10 [ 163.649886][ T7371] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 163.653479][ T7371] netlink: 224 bytes leftover after parsing attributes in process `syz.3.283'. [ 164.542807][ T5734] tipc: Node number set to 2886997162 [ 165.488632][ T5854] usb 6-1: USB disconnect, device number 6 [ 167.178994][ T5843] usb 42-1: device descriptor read/8, error -110 [ 167.593501][ T5843] usb usb42-port1: attempt power cycle [ 167.844065][ T7447] veth1_to_hsr: entered allmulticast mode [ 167.903060][ T7447] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 168.957009][ T5843] usb usb42-port1: unable to enumerate USB device [ 169.167930][ T7470] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 169.170472][ T7470] netlink: 224 bytes leftover after parsing attributes in process `syz.1.302'. [ 169.175571][ T5734] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 169.372968][ T5734] usb 7-1: Using ep0 maxpacket: 32 [ 169.382221][ T5734] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 169.411164][ T5734] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.419395][ T5734] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.448446][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.454635][ T5734] usb 7-1: Product: syz [ 169.456580][ T5734] usb 7-1: Manufacturer: syz [ 169.458946][ T5734] usb 7-1: SerialNumber: syz [ 169.960739][ T7474] vivid-000: unregistering video7 [ 169.968197][ T7474] vivid-000: unregistering video8 [ 169.973418][ T7474] vivid-000: unregistering vbi0 [ 170.012048][ T7474] vivid-000: unregistering vbi1 [ 170.048930][ T7474] vivid-000: unregistering swradio0 [ 170.057985][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 170.067832][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 170.072176][ T7474] vivid-000: unregistering radio0 [ 170.077304][ T7474] vivid-000: unregistering radio1 [ 170.103179][ T7474] vivid-000: unregistering video9 [ 170.110994][ T7474] vivid-000: unregistering video10 [ 170.114965][ T7474] vivid-000: unregistering v4l-touch0 [ 170.184926][ T7474] vivid-001: unregistering video11 [ 170.187433][ T7474] vivid-001: unregistering video12 [ 170.190453][ T7474] vivid-001: unregistering vbi2 [ 170.200400][ T7474] vivid-001: unregistering vbi3 [ 170.204597][ T7474] vivid-001: unregistering swradio1 [ 170.211379][ T7474] vivid-001: unregistering radio2 [ 170.245447][ T7474] vivid-001: unregistering radio3 [ 170.262543][ T7474] vivid-001: unregistering video13 [ 170.271958][ T7474] vivid-001: unregistering video14 [ 170.279560][ T7474] vivid-001: unregistering v4l-touch1 [ 170.317582][ T7474] vivid-002: unregistering video15 [ 170.327174][ T7474] vivid-002: unregistering video16 [ 170.331632][ T7474] vivid-002: unregistering vbi4 [ 170.340585][ T7474] vivid-002: unregistering vbi5 [ 170.382667][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 170.386171][ T5748] Bluetooth: hci2: command 0x0406 tx timeout [ 170.386226][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 170.393058][ T7474] vivid-002: unregistering swradio2 [ 170.444960][ T7474] vivid-002: unregistering radio4 [ 170.473819][ T7474] vivid-002: unregistering radio5 [ 170.484124][ T7474] vivid-002: unregistering video17 [ 170.496315][ T7474] vivid-002: unregistering video18 [ 170.516504][ T7474] vivid-002: unregistering v4l-touch2 [ 170.661905][ T7474] vivid-003: unregistering video19 [ 170.664661][ T7474] vivid-003: unregistering video20 [ 170.667949][ T7474] vivid-003: unregistering vbi6 [ 170.679805][ T7474] vivid-003: unregistering vbi7 [ 170.686608][ T7474] vivid-003: unregistering swradio3 [ 170.689733][ T7474] vivid-003: unregistering radio6 [ 170.704721][ T7474] vivid-003: unregistering radio7 [ 170.735060][ T7474] vivid-003: unregistering video21 [ 170.780041][ T7474] vivid-003: unregistering video22 [ 170.787155][ T7474] vivid-003: unregistering v4l-touch3 [ 170.866916][ T7474] vivid-004: unregistering video23 [ 170.870919][ T7474] vivid-004: unregistering video24 [ 170.879089][ T7474] vivid-004: unregistering vbi8 [ 170.883408][ T7474] vivid-004: unregistering vbi9 [ 170.904812][ T7474] vivid-004: unregistering swradio4 [ 170.915845][ T7474] vivid-004: unregistering radio8 [ 170.919514][ T7474] vivid-004: unregistering radio9 [ 170.923025][ T7474] vivid-004: unregistering video25 [ 170.925738][ T7474] vivid-004: unregistering video26 [ 170.928726][ T7474] vivid-004: unregistering v4l-touch4 [ 171.014074][ T7474] vivid-005: unregistering video27 [ 171.025303][ T7474] vivid-005: unregistering video28 [ 171.036974][ T7474] vivid-005: unregistering vbi10 [ 171.047996][ T7474] vivid-005: unregistering vbi11 [ 171.050402][ T7500] bridge0: entered promiscuous mode [ 171.054280][ T7500] bridge0: entered allmulticast mode [ 171.061482][ T7474] vivid-005: unregistering swradio5 [ 171.086468][ T7474] vivid-005: unregistering radio10 [ 171.094797][ T7474] vivid-005: unregistering radio11 [ 171.106754][ T7474] vivid-005: unregistering video29 [ 171.112475][ T7474] vivid-005: unregistering video30 [ 171.120906][ T7474] vivid-005: unregistering v4l-touch5 [ 171.161478][ T7500] netlink: 14 bytes leftover after parsing attributes in process `syz.0.307'. [ 171.180308][ T7474] vivid-006: unregistering video31 [ 171.184251][ T7474] vivid-006: unregistering video32 [ 171.188847][ T7474] vivid-006: unregistering vbi12 [ 171.199489][ T7474] vivid-006: unregistering vbi13 [ 171.221474][ T7474] vivid-006: unregistering swradio6 [ 171.251492][ T7474] vivid-006: unregistering radio12 [ 171.262465][ T7474] vivid-006: unregistering radio13 [ 171.271297][ T7474] vivid-006: unregistering video33 [ 171.277004][ T7474] vivid-006: unregistering video34 [ 171.285366][ T7474] vivid-006: unregistering v4l-touch6 [ 171.416234][ T5734] usb 7-1: USB disconnect, device number 8 [ 171.418611][ T7474] vivid-007: unregistering video35 [ 171.424474][ T7474] vivid-007: unregistering video36 [ 171.432461][ T7474] vivid-007: unregistering vbi14 [ 171.466364][ T7474] vivid-007: unregistering vbi15 [ 171.474409][ T7474] vivid-007: unregistering swradio7 [ 171.481746][ T7474] vivid-007: unregistering radio14 [ 171.491678][ T7474] vivid-007: unregistering radio15 [ 171.495675][ T7474] vivid-007: unregistering video37 [ 171.500261][ T7474] vivid-007: unregistering video38 [ 171.510123][ T7474] vivid-007: unregistering v4l-touch7 [ 171.686521][ T7474] vivid-008: unregistering video39 [ 171.691932][ T7474] vivid-008: unregistering video40 [ 171.695855][ T7474] vivid-008: unregistering vbi16 [ 171.795590][ T7474] vivid-008: unregistering vbi17 [ 171.812307][ T7474] vivid-008: unregistering swradio8 [ 171.815414][ T7474] vivid-008: unregistering radio16 [ 171.818557][ T7474] vivid-008: unregistering radio17 [ 171.822261][ T7474] vivid-008: unregistering video41 [ 171.828617][ T7474] vivid-008: unregistering video42 [ 171.833454][ T7474] vivid-008: unregistering v4l-touch8 [ 171.897938][ T7474] vivid-009: unregistering video43 [ 171.901914][ T7474] vivid-009: unregistering video44 [ 171.907723][ T7474] vivid-009: unregistering vbi18 [ 171.912101][ T7474] vivid-009: unregistering vbi19 [ 171.921161][ T7474] vivid-009: unregistering swradio9 [ 171.937528][ T7474] vivid-009: unregistering radio18 [ 171.955816][ T7474] vivid-009: unregistering radio19 [ 171.965999][ T7474] vivid-009: unregistering video45 [ 171.978958][ T7474] vivid-009: unregistering video46 [ 171.991111][ T7474] vivid-009: unregistering v4l-touch9 [ 172.118096][ T7474] vivid-010: unregistering video47 [ 172.129795][ T7474] vivid-010: unregistering video48 [ 172.153337][ T7474] vivid-010: unregistering vbi20 [ 172.191434][ T7474] vivid-010: unregistering vbi21 [ 172.206432][ T7474] vivid-010: unregistering swradio10 [ 172.219052][ T7474] vivid-010: unregistering radio20 [ 172.236835][ T7474] vivid-010: unregistering radio21 [ 172.251529][ T7474] vivid-010: unregistering video49 [ 172.270734][ T7474] vivid-010: unregistering video50 [ 172.292924][ T7474] vivid-010: unregistering v4l-touch10 [ 172.724900][ T7474] vivid-011: unregistering video51 [ 172.737674][ T7474] vivid-011: unregistering video52 [ 172.750776][ T7474] vivid-011: unregistering vbi22 [ 172.761427][ T7474] vivid-011: unregistering vbi23 [ 172.774745][ T7474] vivid-011: unregistering swradio11 [ 172.781873][ T7474] vivid-011: unregistering radio22 [ 172.792339][ T7474] vivid-011: unregistering radio23 [ 172.796463][ T7474] vivid-011: unregistering video53 [ 172.799537][ T7474] vivid-011: unregistering video54 [ 172.806697][ T7474] vivid-011: unregistering v4l-touch11 [ 172.845492][ T7474] vivid-012: unregistering video55 [ 172.848703][ T7474] vivid-012: unregistering video56 [ 172.852931][ T7474] vivid-012: unregistering vbi24 [ 172.868345][ T7474] vivid-012: unregistering vbi25 [ 172.872256][ T7474] vivid-012: unregistering swradio12 [ 172.892248][ T7474] vivid-012: unregistering radio24 [ 172.900179][ T7474] vivid-012: unregistering radio25 [ 172.902983][ T7474] vivid-012: unregistering video57 [ 172.905644][ T7474] vivid-012: unregistering video58 [ 172.907974][ T7474] vivid-012: unregistering v4l-touch12 [ 172.975396][ T7474] vivid-013: unregistering video59 [ 172.979806][ T7474] vivid-013: unregistering video60 [ 172.983470][ T7474] vivid-013: unregistering vbi26 [ 172.987600][ T7474] vivid-013: unregistering vbi27 [ 173.000753][ T7474] vivid-013: unregistering swradio13 [ 173.006839][ T7474] vivid-013: unregistering radio26 [ 173.015517][ T7474] vivid-013: unregistering radio27 [ 173.021827][ T7474] vivid-013: unregistering video61 [ 173.038427][ T7474] vivid-013: unregistering video62 [ 173.044006][ T7474] vivid-013: unregistering v4l-touch13 [ 173.168763][ T7474] vivid-014: unregistering video63 [ 173.172411][ T7474] vivid-014: unregistering video64 [ 173.241804][ T7474] vivid-014: unregistering vbi28 [ 173.267917][ T7474] vivid-014: unregistering vbi29 [ 173.295193][ T7474] vivid-014: unregistering swradio14 [ 173.326435][ T7474] vivid-014: unregistering radio28 [ 173.348078][ T7474] vivid-014: unregistering radio29 [ 173.400135][ T7474] vivid-014: unregistering video65 [ 173.435122][ T7474] vivid-014: unregistering video66 [ 173.477024][ T7474] vivid-014: unregistering v4l-touch14 [ 174.060337][ T7474] vivid-015: unregistering video67 [ 174.069203][ T7474] vivid-015: unregistering video68 [ 174.093491][ T7474] vivid-015: unregistering vbi30 [ 174.126036][ T7474] vivid-015: unregistering vbi31 [ 174.163300][ T7474] vivid-015: unregistering swradio15 [ 174.196778][ T7474] vivid-015: unregistering radio30 [ 174.223634][ T7474] vivid-015: unregistering radio31 [ 174.601508][ T7474] vivid-015: unregistering video69 [ 174.677638][ T7474] vivid-015: unregistering video70 [ 174.751287][ T7474] vivid-015: unregistering v4l-touch15 [ 174.941481][ T7474] vivid-016: unregistering video71 [ 174.944017][ T7474] vivid-016: unregistering video72 [ 174.946411][ T7474] vivid-016: unregistering vbi32 [ 174.952019][ T7474] vivid-016: unregistering vbi33 [ 174.964175][ T7474] vivid-016: unregistering swradio16 [ 174.971979][ T7474] vivid-016: unregistering radio32 [ 174.974688][ T7474] vivid-016: unregistering radio33 [ 174.977358][ T7474] vivid-016: unregistering video73 [ 174.987482][ T7474] vivid-016: unregistering video74 [ 174.995921][ T7474] vivid-016: unregistering v4l-touch16 [ 175.030464][ T7542] veth0: entered promiscuous mode [ 175.041880][ T7474] vivid-017: unregistering video75 [ 175.044323][ T7474] vivid-017: unregistering video76 [ 175.076259][ T7474] vivid-017: unregistering vbi34 [ 175.091465][ T7474] vivid-017: unregistering vbi35 [ 175.127022][ T7474] vivid-017: unregistering swradio17 [ 175.138633][ T7474] vivid-017: unregistering radio34 [ 175.149619][ T7474] vivid-017: unregistering radio35 [ 175.165570][ T7474] vivid-017: unregistering video77 [ 175.171917][ T7474] vivid-017: unregistering video78 [ 175.184492][ T7474] vivid-017: unregistering v4l-touch17 [ 175.200181][ T7546] bridge0: entered promiscuous mode [ 175.202459][ T7546] bridge0: entered allmulticast mode [ 175.211998][ T7542] veth0: left promiscuous mode [ 175.290247][ T7474] vivid-018: unregistering video79 [ 175.296646][ T7474] vivid-018: unregistering video80 [ 175.302373][ T7474] vivid-018: unregistering vbi36 [ 175.305910][ T7548] random: crng reseeded on system resumption [ 175.319580][ T7474] vivid-018: unregistering vbi37 [ 175.326128][ T7546] netlink: 14 bytes leftover after parsing attributes in process `syz.2.317'. [ 175.331272][ T7474] vivid-018: unregistering swradio18 [ 175.334975][ T7474] vivid-018: unregistering radio36 [ 175.340502][ T7474] vivid-018: unregistering radio37 [ 175.348689][ T7474] vivid-018: unregistering video81 [ 175.357141][ T7474] vivid-018: unregistering video82 [ 175.364672][ T7474] vivid-018: unregistering v4l-touch18 [ 175.420300][ T7474] vivid-019: unregistering video83 [ 175.423319][ T7474] vivid-019: unregistering video84 [ 175.427364][ T7474] vivid-019: unregistering vbi38 [ 175.436023][ T7474] vivid-019: unregistering vbi39 [ 175.442452][ T7474] vivid-019: unregistering swradio19 [ 175.447050][ T7474] vivid-019: unregistering radio38 [ 175.451867][ T7474] vivid-019: unregistering radio39 [ 175.456074][ T7474] vivid-019: unregistering video85 [ 175.459192][ T7474] vivid-019: unregistering video86 [ 175.464834][ T7474] vivid-019: unregistering v4l-touch19 [ 175.520428][ T7474] vivid-020: unregistering video87 [ 175.526070][ T7474] vivid-020: unregistering video88 [ 175.529833][ T7474] vivid-020: unregistering vbi40 [ 175.537814][ T7474] vivid-020: unregistering vbi41 [ 175.548824][ T7474] vivid-020: unregistering swradio20 [ 175.555632][ T7474] vivid-020: unregistering radio40 [ 175.560904][ T7474] vivid-020: unregistering radio41 [ 175.567812][ T7474] vivid-020: unregistering video89 [ 175.572245][ T7474] vivid-020: unregistering video90 [ 175.586101][ T7474] vivid-020: unregistering v4l-touch20 [ 175.624748][ T7474] vivid-021: unregistering video91 [ 175.628414][ T7474] vivid-021: unregistering video92 [ 175.631016][ T7474] vivid-021: unregistering vbi42 [ 175.639170][ T7474] vivid-021: unregistering vbi43 [ 175.642064][ T7474] vivid-021: unregistering swradio21 [ 175.645339][ T7474] vivid-021: unregistering radio42 [ 175.648784][ T7474] vivid-021: unregistering radio43 [ 175.651136][ T7474] vivid-021: unregistering video93 [ 175.654558][ T7474] vivid-021: unregistering video94 [ 175.657081][ T7474] vivid-021: unregistering v4l-touch21 [ 175.679122][ T7474] vivid-022: unregistering video95 [ 175.681711][ T7474] vivid-022: unregistering video96 [ 175.686676][ T7474] vivid-022: unregistering vbi44 [ 175.691307][ T7474] vivid-022: unregistering vbi45 [ 175.695319][ T7474] vivid-022: unregistering swradio22 [ 175.698111][ T7474] vivid-022: unregistering radio44 [ 175.700684][ T7474] vivid-022: unregistering radio45 [ 175.703127][ T7474] vivid-022: unregistering video97 [ 175.705429][ T7474] vivid-022: unregistering video98 [ 175.707871][ T7474] vivid-022: unregistering v4l-touch22 [ 175.736963][ T7474] vivid-023: unregistering video99 [ 175.739544][ T7474] vivid-023: unregistering video100 [ 175.742031][ T7474] vivid-023: unregistering vbi46 [ 175.748958][ T7474] vivid-023: unregistering vbi47 [ 175.751293][ T7474] vivid-023: unregistering swradio23 [ 175.755476][ T7474] vivid-023: unregistering radio46 [ 175.757872][ T7474] vivid-023: unregistering radio47 [ 175.760166][ T7474] vivid-023: unregistering video101 [ 175.762538][ T7474] vivid-023: unregistering video102 [ 175.765140][ T7474] vivid-023: unregistering v4l-touch23 [ 176.385719][ T7559] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 176.423471][ T7559] bond1: entered promiscuous mode [ 176.425529][ T7559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.280676][ T7576] syzkaller0: entered promiscuous mode [ 177.283145][ T7576] syzkaller0: entered allmulticast mode [ 177.289138][ T7576] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 178.140880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 178.291906][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 178.291918][ T42] audit: type=1800 audit(1786616969.406:120): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.326" name="local" dev="configfs" ino=14816 res=0 errno=0 [ 178.304466][ T42] audit: type=1800 audit(1786616969.416:121): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.326" name="scan_secs" dev="configfs" ino=14817 res=0 errno=0 [ 178.711724][ T7598] xt_ipcomp: unknown flags 1D [ 179.495536][ T5108] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 179.686439][ T5108] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 179.711115][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 179.713565][ T5108] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.724781][ T5108] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 179.734787][ T5108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.756122][ T5108] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 179.788048][ T5108] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 179.977454][ T7602] jffs2: notice: (7602) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.096178][ T5108] usb 8-1: USB disconnect, device number 5 [ 180.130340][ T5108] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 180.147673][ T5108] spcp8x5 8-1:1.0: device disconnected [ 180.402943][ T7609] [ 180.403811][ T7609] ====================================================== [ 180.405965][ T7609] WARNING: possible circular locking dependency detected [ 180.408140][ T7609] syzkaller #0 Not tainted [ 180.409605][ T7609] ------------------------------------------------------ [ 180.411784][ T7609] syz.2.329/7609 is trying to acquire lock: [ 180.413631][ T7609] ffff88801344b760 (&f->sem){+.+.}-{4:4}, at: jffs2_do_clear_inode+0x5a/0x470 [ 180.416489][ T7609] [ 180.416489][ T7609] but task is already holding lock: [ 180.418761][ T7609] ffffffff8edb95e0 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0x13f2/0x2dc0 [ 180.421872][ T7609] [ 180.421872][ T7609] which lock already depends on the new lock. [ 180.421872][ T7609] [ 180.425063][ T7609] [ 180.425063][ T7609] the existing dependency chain (in reverse order) is: [ 180.427881][ T7609] [ 180.427881][ T7609] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 180.430130][ T7609] lock_acquire+0x1b9/0x370 [ 180.431733][ T7609] fs_reclaim_acquire+0xc4/0x100 [ 180.433435][ T7609] kmem_cache_alloc_noprof+0x63/0x6a0 [ 180.435301][ T7609] jffs2_do_read_inode+0x307/0x520 [ 180.437080][ T7609] jffs2_iget+0x32b/0xe30 [ 180.438558][ T7609] jffs2_do_fill_super+0x44b/0xa60 [ 180.440330][ T7609] jffs2_fill_super+0x283/0x370 [ 180.442050][ T7609] mtd_get_sb+0x2f0/0x4c0 [ 180.443631][ T7609] get_tree_mtd+0x6f9/0x8a0 [ 180.445212][ T7609] vfs_get_tree+0x92/0x320 [ 180.446791][ T7609] path_mount+0x7d0/0x23d0 [ 180.448361][ T7609] __ia32_sys_mount+0x292/0x310 [ 180.450042][ T7609] __do_fast_syscall_32+0xe7/0x970 [ 180.451883][ T7609] do_fast_syscall_32+0x32/0x70 [ 180.453617][ T7609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.455775][ T7609] [ 180.455775][ T7609] -> #0 (&f->sem){+.+.}-{4:4}: [ 180.457943][ T7609] check_prev_add+0xeb/0xe60 [ 180.459569][ T7609] __lock_acquire+0x136c/0x1a40 [ 180.461251][ T7609] lock_acquire+0x1b9/0x370 [ 180.462822][ T7609] __mutex_lock+0x1a4/0x1bd0 [ 180.464449][ T7609] jffs2_do_clear_inode+0x5a/0x470 [ 180.466203][ T7609] evict+0x3c2/0xad0 [ 180.467628][ T7609] dispose_list+0x117/0x1e0 [ 180.469204][ T7609] prune_icache_sb+0xea/0x150 [ 180.470867][ T7609] super_cache_scan+0x373/0x550 [ 180.472560][ T7609] do_shrink_slab+0x416/0x1200 [ 180.474227][ T7609] shrink_slab+0xa7d/0x12e0 [ 180.475836][ T7609] shrink_one+0x398/0x850 [ 180.477309][ T7609] shrink_node+0x2721/0x3e90 [ 180.478928][ T7609] do_try_to_free_pages+0x33e/0x16d0 [ 180.480767][ T7609] try_to_free_pages+0x2a0/0x740 [ 180.482473][ T7609] __alloc_frozen_pages_noprof+0x1447/0x2dc0 [ 180.484519][ T7609] __folio_alloc_noprof+0x13/0x260 [ 180.486276][ T7609] alloc_charge_folio+0x1a8/0xa80 [ 180.488035][ T7609] collapse_huge_page+0x17f/0x3c60 [ 180.489796][ T7609] collapse_single_pmd+0x313c/0x45a0 [ 180.491644][ T7609] madvise_collapse+0x329/0x750 [ 180.493324][ T7609] madvise_vma_behavior+0x107c/0x2240 [ 180.495198][ T7609] madvise_walk_vmas+0x2fe/0xa90 [ 180.496938][ T7609] madvise_do_behavior+0x1ea/0x510 [ 180.498697][ T7609] do_madvise+0x238/0x290 [ 180.500251][ T7609] __ia32_sys_madvise+0xa7/0x110 [ 180.501961][ T7609] __do_fast_syscall_32+0xe7/0x970 [ 180.503729][ T7609] do_fast_syscall_32+0x32/0x70 [ 180.505347][ T7609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.507495][ T7609] [ 180.507495][ T7609] other info that might help us debug this: [ 180.507495][ T7609] [ 180.510576][ T7609] Possible unsafe locking scenario: [ 180.510576][ T7609] [ 180.512894][ T7609] CPU0 CPU1 [ 180.514561][ T7609] ---- ---- [ 180.516254][ T7609] lock(fs_reclaim); [ 180.517485][ T7609] lock(&f->sem); [ 180.519387][ T7609] lock(fs_reclaim); [ 180.521357][ T7609] lock(&f->sem); [ 180.522526][ T7609] [ 180.522526][ T7609] *** DEADLOCK *** [ 180.522526][ T7609] [ 180.525084][ T7609] 2 locks held by syz.2.329/7609: [ 180.526674][ T7609] #0: ffffffff8edb95e0 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0x13f2/0x2dc0 [ 180.529900][ T7609] #1: ffff88805cf4c0d8 (&type->s_umount_key#89){.+.+}-{4:4}, at: super_cache_scan+0x98/0x550 [ 180.533076][ T7609] [ 180.533076][ T7609] stack backtrace: [ 180.534929][ T7609] CPU: 0 UID: 0 PID: 7609 Comm: syz.2.329 Not tainted syzkaller #0 PREEMPT(full) [ 180.534942][ T7609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.534959][ T7609] Call Trace: [ 180.534971][ T7609] [ 180.534976][ T7609] dump_stack_lvl+0x100/0x190 [ 180.534989][ T7609] print_circular_bug.cold+0x178/0x1c7 [ 180.535013][ T7609] check_noncircular+0x146/0x160 [ 180.535030][ T7609] check_prev_add+0xeb/0xe60 [ 180.535047][ T7609] __lock_acquire+0x136c/0x1a40 [ 180.535058][ T7609] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 180.535070][ T7609] lock_acquire+0x1b9/0x370 [ 180.535079][ T7609] ? jffs2_do_clear_inode+0x5a/0x470 [ 180.535092][ T7609] ? __pfx___might_resched+0x10/0x10 [ 180.535107][ T7609] ? __schedule+0x126e/0x6730 [ 180.535121][ T7609] __mutex_lock+0x1a4/0x1bd0 [ 180.535136][ T7609] ? jffs2_do_clear_inode+0x5a/0x470 [ 180.535147][ T7609] ? jffs2_do_clear_inode+0x5a/0x470 [ 180.535160][ T7609] ? __pfx___mutex_lock+0x10/0x10 [ 180.535174][ T7609] ? __pfx___schedule+0x10/0x10 [ 180.535188][ T7609] ? preempt_schedule_common+0x42/0xc0 [ 180.535201][ T7609] ? preempt_schedule_thunk+0x16/0x40 [ 180.535217][ T7609] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 180.535230][ T7609] ? jffs2_do_clear_inode+0x5a/0x470 [ 180.535242][ T7609] jffs2_do_clear_inode+0x5a/0x470 [ 180.535253][ T7609] ? clear_inode+0x151/0x1c0 [ 180.535263][ T7609] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 180.535276][ T7609] evict+0x3c2/0xad0 [ 180.535288][ T7609] ? _raw_spin_unlock+0x28/0x50 [ 180.535300][ T7609] ? __list_lru_walk_one+0x26d/0x550 [ 180.535312][ T7609] ? __pfx_evict+0x10/0x10 [ 180.535324][ T7609] ? _raw_spin_unlock+0x28/0x50 [ 180.535336][ T7609] ? dentry_kill+0x584/0xc20 [ 180.535349][ T7609] dispose_list+0x117/0x1e0 [ 180.535363][ T7609] prune_icache_sb+0xea/0x150 [ 180.535376][ T7609] ? list_lru_count_one+0x147/0x320 [ 180.535386][ T7609] ? __pfx_prune_icache_sb+0x10/0x10 [ 180.535402][ T7609] super_cache_scan+0x373/0x550 [ 180.535418][ T7609] do_shrink_slab+0x416/0x1200 [ 180.535432][ T7609] shrink_slab+0xa7d/0x12e0 [ 180.535444][ T7609] ? shrink_slab+0x690/0x12e0 [ 180.535457][ T7609] ? __pfx_shrink_slab+0x10/0x10 [ 180.535472][ T7609] shrink_one+0x398/0x850 [ 180.535482][ T7609] ? shrink_node+0x2701/0x3e90 [ 180.535492][ T7609] shrink_node+0x2721/0x3e90 [ 180.535502][ T7609] ? lockdep_hardirqs_on+0x78/0x100 [ 180.535516][ T7609] ? irqentry_exit+0x24d/0xa00 [ 180.535530][ T7609] ? shrink_node+0x246f/0x3e90 [ 180.535542][ T7609] ? __pfx_shrink_node+0x10/0x10 [ 180.535552][ T7609] ? queue_work_on+0x13b/0x1e0 [ 180.535567][ T7609] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 180.535584][ T7609] ? rcu_is_watching+0x12/0xc0 [ 180.535597][ T7609] ? do_try_to_free_pages+0x33e/0x16d0 [ 180.535607][ T7609] do_try_to_free_pages+0x33e/0x16d0 [ 180.535622][ T7609] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 180.535633][ T7609] ? get_page_from_freelist+0x1d3f/0x3530 [ 180.535650][ T7609] try_to_free_pages+0x2a0/0x740 [ 180.535662][ T7609] ? __pfx_try_to_free_pages+0x10/0x10 [ 180.535675][ T7609] ? find_held_lock+0x2b/0x80 [ 180.535687][ T7609] ? fs_reclaim_acquire+0x70/0x100 [ 180.535701][ T7609] ? fs_reclaim_acquire+0x70/0x100 [ 180.535716][ T7609] __alloc_frozen_pages_noprof+0x1447/0x2dc0 [ 180.535729][ T7609] ? __css_rstat_updated+0x1c0/0x5a0 [ 180.535747][ T7609] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 180.535760][ T7609] ? __cgroup_account_cputime+0xd5/0x130 [ 180.535770][ T7609] ? rcu_is_watching+0x12/0xc0 [ 180.535781][ T7609] ? update_curr_dl_se+0x4aa/0xca0 [ 180.535797][ T7609] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 180.535810][ T7609] ? pick_task_fair+0xe6/0x1bf0 [ 180.535822][ T7609] ? kvm_sched_clock_read+0x11/0x20 [ 180.535835][ T7609] ? sched_clock+0x38/0x60 [ 180.535846][ T7609] __folio_alloc_noprof+0x13/0x260 [ 180.535858][ T7609] alloc_charge_folio+0x1a8/0xa80 [ 180.535875][ T7609] collapse_huge_page+0x17f/0x3c60 [ 180.535892][ T7609] ? __lock_acquire+0x49f/0x1a40 [ 180.535901][ T7609] ? do_raw_spin_lock+0x128/0x260 [ 180.535913][ T7609] ? __pfx_collapse_huge_page+0x10/0x10 [ 180.535930][ T7609] ? mark_held_locks+0x40/0x70 [ 180.535946][ T7609] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 180.535960][ T7609] ? __up_read+0x333/0x980 [ 180.535970][ T7609] ? collapse_single_pmd+0x2ef1/0x45a0 [ 180.535986][ T7609] ? collapse_single_pmd+0x2ef1/0x45a0 [ 180.536002][ T7609] ? __bitmap_weight+0xd7/0x110 [ 180.536021][ T7609] collapse_single_pmd+0x313c/0x45a0 [ 180.536041][ T7609] ? __pfx_collapse_single_pmd+0x10/0x10 [ 180.536058][ T7609] ? __pfx___might_resched+0x10/0x10 [ 180.536073][ T7609] ? queue_work_on+0x11b/0x1e0 [ 180.536088][ T7609] ? lockdep_hardirqs_on+0x78/0x100 [ 180.536102][ T7609] ? __lru_add_drain_all+0x441/0x650 [ 180.536115][ T7609] madvise_collapse+0x329/0x750 [ 180.536125][ T7609] ? __pfx_madvise_collapse+0x10/0x10 [ 180.536135][ T7609] ? mtree_range_walk+0x72b/0xb70 [ 180.536149][ T7609] ? find_held_lock+0x2b/0x80 [ 180.536161][ T7609] ? mt_find+0x687/0x8e0 [ 180.536170][ T7609] madvise_vma_behavior+0x107c/0x2240 [ 180.536187][ T7609] ? mt_find+0x45e/0x8e0 [ 180.536195][ T7609] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 180.536211][ T7609] ? __pfx_mt_find+0x10/0x10 [ 180.536221][ T7609] ? find_vma_prev+0xd8/0x150 [ 180.536237][ T7609] ? find_vma+0xbf/0x140 [ 180.536249][ T7609] ? __pfx_find_vma+0x10/0x10 [ 180.536262][ T7609] ? irqentry_exit+0x24d/0xa00 [ 180.536275][ T7609] ? lockdep_hardirqs_on+0x78/0x100 [ 180.536289][ T7609] madvise_walk_vmas+0x2fe/0xa90 [ 180.536306][ T7609] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 180.536322][ T7609] ? madvise_do_behavior+0x1e2/0x510 [ 180.536338][ T7609] madvise_do_behavior+0x1ea/0x510 [ 180.536354][ T7609] ? __pfx_madvise_do_behavior+0x10/0x10 [ 180.536370][ T7609] ? down_read+0x13b/0x4c0 [ 180.536388][ T7609] do_madvise+0x238/0x290 [ 180.536403][ T7609] ? __pfx_do_madvise+0x10/0x10 [ 180.536418][ T7609] ? do_futex+0x190/0x440 [ 180.536430][ T7609] ? lockdep_hardirqs_on+0x78/0x100 [ 180.536448][ T7609] __ia32_sys_madvise+0xa7/0x110 [ 180.536457][ T7609] ? lockdep_hardirqs_on+0x78/0x100 [ 180.536470][ T7609] __do_fast_syscall_32+0xe7/0x970 [ 180.536486][ T7609] do_fast_syscall_32+0x32/0x70 [ 180.536501][ T7609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.536515][ T7609] RIP: 0023:0xf7f27fec [ 180.536530][ T7609] Code: Unable to access opcode bytes at 0xf7f27fc2. [ 180.536535][ T7609] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 180.536545][ T7609] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000 [ 180.536552][ T7609] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.536558][ T7609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.536563][ T7609] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 180.536569][ T7609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.536578][ T7609]