last executing test programs: 7m53.826735898s ago: executing program 1 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 7m51.813484287s ago: executing program 1 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) 7m50.234291336s ago: executing program 1 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) 7m48.965450367s ago: executing program 1 (id=80): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x177a42, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r1, 0x1) set_mempolicy(0x4005, &(0x7f0000000080)=0x8, 0x8) r4 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="060000080000000000000000"]) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = mq_open(&(0x7f0000000240)='/dev/cpu/#/msr\x00', 0x40, 0x17, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0xffffffffffffff65, 0x3}) mq_notify(r6, &(0x7f0000000440)={0x0, 0xc, 0x4, @thr={&(0x7f0000000340)="b9c76c2924ac9490fe0888948a1483d8", &(0x7f0000000380)="8aad4f3cab2284323f35c037cf0432ea18c6ee6d262aa737bab73d0f9dad5e6c61693217b8ee270cb130c6696d9af5c0a9aa450027ecc19c9d2e4fa02a447139970a27c1dfae536365da6bf810d9bf30a90bdea6e8c41a5eb96f4a0cb7e83bd442b7f0c3f7b09ecc4fbf2a5c14bb1321e7f71aee96bb3aecc13393fb18f4e6766ddace205ce8f21b61cb3a635f49e736721d1072bcfa5fe754f924e2fcf96cdb742a038ad8a800192dcafc1af2212725"}}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xb, 0x80000, 0x4274) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES64=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 7m44.470703798s ago: executing program 1 (id=86): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) 7m37.853670432s ago: executing program 1 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 7m37.340542734s ago: executing program 32 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 5m43.463701285s ago: executing program 3 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) 5m40.587577995s ago: executing program 3 (id=316): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x202, 0x82) 5m39.521577842s ago: executing program 3 (id=318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) keyctl$dh_compute(0x72, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) inotify_init1(0x800) r4 = syz_open_dev$video4linux(&(0x7f0000000480), 0xf, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0x80b, 0x2, 0x1013, 0x1, 0x10008, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x80, 0x4, 0x80000004, 0x4, 0x3, 0xeb]}) 5m38.612080914s ago: executing program 3 (id=320): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x177a42, 0x15) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r1, 0x1) r4 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB]) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = mq_open(0x0, 0x40, 0x17, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0xffffffffffffff65, 0x3}) mq_notify(r6, &(0x7f0000000440)={0x0, 0xc, 0x4, @thr={&(0x7f0000000340)="b9c76c2924ac9490fe0888948a1483d8", &(0x7f0000000380)="8aad4f3cab2284323f35c037cf0432ea18c6ee6d262aa737bab73d0f9dad5e6c61693217b8ee270cb130c6696d9af5c0a9aa450027ecc19c9d2e4fa02a447139970a27c1dfae536365da6bf810d9bf30a90bdea6e8c41a5eb96f4a0cb7e83bd442b7f0c3f7b09ecc4fbf2a5c14bb1321e7f71aee96bb3aecc13393fb18f4e6766ddace205ce8f21b61cb3a635f49e736721d1072bcfa5fe754f924e2fcf96cdb742a038ad8a800192dcafc1af2212725"}}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xb, 0x80000, 0x4274) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES64=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 5m35.794761684s ago: executing program 3 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 5m33.155892009s ago: executing program 3 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m31.215653347s ago: executing program 33 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m22.939139872s ago: executing program 6 (id=452): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 4m21.671223393s ago: executing program 6 (id=455): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x177a42, 0x15) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r1, 0x1) r4 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB]) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = mq_open(&(0x7f0000000240)='/dev/cpu/#/msr\x00', 0x40, 0x17, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0xffffffffffffff65, 0x3}) mq_notify(r6, &(0x7f0000000440)={0x0, 0xc, 0x4, @thr={&(0x7f0000000340)="b9c76c2924ac9490fe0888948a1483d8", 0x0}}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xb, 0x80000, 0x4274) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES64=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 4m19.640525063s ago: executing program 6 (id=460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_GS(0x1e, r1, 0x0, 0x1004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) timer_getoverrun(r4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 4m16.562037959s ago: executing program 6 (id=465): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$eJzs3U1rXFUcB+D/JJPXmhe1VlsQD7pRhLHJwpULg7QgBpRoCioIt2aiQyYzITMERsTGlSvBjyHq0p0gfoFs3AjuBEEkG5ddiFcmM7WZzKSNjZ1geZ7NPZxzfvfcl9wLN9wzd/+lLzY31hul9awZI4VCFLfGongzRYqRGI2O3Xju2k+/PPnm2++8trS8fGUlpatLby28mFKafer7dz/+5ukfmueufTv73UTszb+3/8fir3sX9i7u//V1VBqp0ki1ejNl6Xq93syuV8tprdLYKKX0RrWcNcqpUmuUt3va16v1ra1WymprM9Nb2+VGI2W1Vtoot1KzkJrbrZR9kFVqqVQqpZnp4DRWv7qZ53lEno/FeOR5nk/FdJyLh2ImZmMu5uPheCQejfPxWFyIx+OJuHjQ66y3GwAAAAAAAAAAAAAAAAAAAB4sd5n/XzD/HwAAAAAAAAAAAAAAAAAAAO6/o/P/ixG+/w8AAAAAAAAAAAAAAAAAAABDdpfv/x+Z///8ofn/o2e96QAAAAAAAAAAAAAAAAAAAPDgmOwsVlKajNj8bGd1Z7Wz7NQvrUclqlGOyzEXf8bB7P+OTvnqq8tXLqcD8/HC5o1u/sbO6mhvfmFsLuYLA/MLnXzqzU/E9OH8YszF+cHjLw7MT8azz7Tzn3bypZiLH9+PelRjLaLQ3fuD/CcLKb3y+vJUb/5Su9+x/PoBAAAA/yel9I/+5/fdbqeB7Z2m7vN56vYs3OH/A0eez4txqXhWe80tjdZHG1m1Wt6+x8L48esZP92a+wqFiMjicM3s9G8r7cH/syHutTA61EHH7tznFOc0ivf3YLZP4TAO1O9fHqqZjOH+SYx0L4ms2r5/niwVu3ne1/TyieMnuE4HNU3crvm5L3X8PaMwhPsSw3H7pJ/1lgAAAAAAAAAAAPBvDHxncCoi+t4H/LCv5tbr4b3x/jUfP/rnQ9hDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPibHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FUAAAD//8DezoA=") r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x177a42, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r1, 0x1) set_mempolicy(0x4005, &(0x7f0000000080)=0x8, 0x8) r4 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="060000080000000000000000"]) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = mq_open(&(0x7f0000000240)='/dev/cpu/#/msr\x00', 0x40, 0x17, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0xffffffffffffff65, 0x3}) mq_notify(r6, &(0x7f0000000440)={0x0, 0xc, 0x4, @thr={&(0x7f0000000340)="b9c76c2924ac9490fe0888948a1483d8", &(0x7f0000000380)="8aad4f3cab2284323f35c037cf0432ea18c6ee6d262aa737bab73d0f9dad5e6c61693217b8ee270cb130c6696d9af5c0a9aa450027ecc19c9d2e4fa02a447139970a27c1dfae536365da6bf810d9bf30a90bdea6e8c41a5eb96f4a0cb7e83bd442b7f0c3f7b09ecc4fbf2a5c14bb1321e7f71aee96bb3aecc13393fb18f4e6766ddace205ce8f21b61cb3a635f49e736721d1072bcfa5fe754f924e2fcf96cdb742a038ad8a800192dcafc1af2212725"}}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xb, 0x80000, 0x4274) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES64=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 4m13.170853432s ago: executing program 6 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) 4m9.777747707s ago: executing program 6 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x10000008}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 4m9.103704293s ago: executing program 34 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x10000008}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 1m30.440098898s ago: executing program 2 (id=1023): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) io_uring_enter(r1, 0x2219, 0xc888, 0x52, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x480c0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/xhci-hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='serial8250\x00', 0xb) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1m29.95183561s ago: executing program 2 (id=1029): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffce5) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 1m28.589746154s ago: executing program 2 (id=1034): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r3 = dup(r2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x9f0000, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x9b0962, 0xffffbfff, '\x00', @p_u32=0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m24.201170922s ago: executing program 2 (id=1039): syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xa, 0x2, 0x400, 0x7, 0x60, 0xc}, {0x9, 0x5, 0x7, 0x2, 0x240, 0x1, 0x5, 0x4}, {0x9, 0x5, 0x0, 0x3, 0x400, 0x2, 0x5, 0x8}}}}}}]}}, 0x0) 1m21.912263169s ago: executing program 2 (id=1048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) gettid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040084) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x25000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m20.852485715s ago: executing program 2 (id=1049): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) 1m2.605902115s ago: executing program 35 (id=1049): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) 10.727916125s ago: executing program 7 (id=1268): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000054c0)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0x0, 0x2000b3404, {0x7, 0x2d, 0x4, 0x210420, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30) read$FUSE(r0, &(0x7f00000074c0)={0x2020}, 0x2020) 9.525953325s ago: executing program 7 (id=1270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 9.092458276s ago: executing program 7 (id=1278): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r3 = dup(r2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x9f0000, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x9b0962, 0xffffbfff, '\x00', @p_u32=0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 7.948432094s ago: executing program 7 (id=1283): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') 5.711626759s ago: executing program 0 (id=1289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 5.097781014s ago: executing program 7 (id=1290): syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3c", 0xbd}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e0", 0x4b}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd7226", 0xa3}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e79", 0x65}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.784221162s ago: executing program 0 (id=1294): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r3 = dup(r2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x9f0000, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x9b0962, 0xffffbfff, '\x00', @p_u32=0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.359594412s ago: executing program 5 (id=1296): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0xa, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 3.972329682s ago: executing program 8 (id=1297): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x8044) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.971643352s ago: executing program 4 (id=1298): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') 3.938904223s ago: executing program 0 (id=1299): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e", 0xb9}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.482039784s ago: executing program 5 (id=1300): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') 2.767704731s ago: executing program 4 (id=1301): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x8, 0x1, 0x10, "73c1d46d86e6160ae96a8ece176358496681cf9085f5702a896a5d8f07ed8861", 0x38414761}) 2.763891102s ago: executing program 7 (id=1302): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d03"], 0x0) 2.669633594s ago: executing program 4 (id=1303): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x7fff, 0x2, 0x6, 0x9a6, 0x8000, 0x8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.650912545s ago: executing program 5 (id=1304): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) fcntl$lock(r6, 0x7, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 2.604424666s ago: executing program 8 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.677465938s ago: executing program 8 (id=1306): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x6}, 0x1, 0x0, 0x0, 0x4000001}, 0x44040) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 1.60561686s ago: executing program 0 (id=1307): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 1.604885791s ago: executing program 5 (id=1308): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000001300)=0x4) 1.587392031s ago: executing program 4 (id=1309): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd27, 0xfffffffe, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 1.429382904s ago: executing program 0 (id=1310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000340)=0x2, 0x8b000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d) ioctl(r2, 0x4048aec9, &(0x7f00000000c0)="030000") syz_open_dev$dri(0x0, 0x0, 0x10200) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000740)=@v3={0x3000000, [{0x6, 0x3}, {0x7, 0x4}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) 1.429064724s ago: executing program 8 (id=1311): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mount(0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x800000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000070)='syz0:', 0x5) 1.298872068s ago: executing program 5 (id=1312): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x100, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@ll={0x11, 0x17, r5, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x0) 568.846976ms ago: executing program 4 (id=1313): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000500)="ebc5101058b66aac8f2ec5", 0x0, 0x3822, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 194.941475ms ago: executing program 0 (id=1314): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0xde5a, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 109.729737ms ago: executing program 8 (id=1315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) ioctl(r1, 0x4048aec9, &(0x7f00000000c0)="030000") 61.706078ms ago: executing program 5 (id=1316): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffce5) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)) fcntl$getflags(r2, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 823.15µs ago: executing program 4 (id=1317): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e", 0xb9}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 8 (id=1318): io_uring_setup(0x7f69, &(0x7f0000000000)={0x0, 0x23e3, 0x0, 0x3, 0x2a2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000002c0)={0xfffffffd, 0x100005fb, 0x36d2, 0xd, 0x6, "94b994e0991636c8158e5114ca81bf00", 0xabd1679, 0x3}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/fib_triestat\x00') r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x3e, '\x00', @data=0x8, 0x8}, {0x36, '\x00', @st={0x4, [{0x0, @uvalue=0x9}, {0x0, @svalue=0xd}, {0x2, @svalue=0x10000}, {0x3, @svalue=0x8000000000000001}]}, 0x1c}]}) kernel console output (not intermixed with test programs): HSR network [ 140.939124][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.970979][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.000259][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.139710][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 141.164897][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.226755][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.409536][ T5228] loop3: detected capacity change from 0 to 8192 [ 141.677627][ T5236] program syz.3.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.718686][ T5236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.118'. [ 143.094265][ T4449] device hsr_slave_0 left promiscuous mode [ 143.151793][ T4449] device hsr_slave_1 left promiscuous mode [ 143.183245][ T4234] Bluetooth: hci2: command 0x0405 tx timeout [ 143.211701][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.226131][ T4449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.254407][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.273529][ T4449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.307216][ T4449] device bridge_slave_1 left promiscuous mode [ 143.323994][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.384472][ T4449] device bridge_slave_0 left promiscuous mode [ 143.400444][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.504739][ T4449] device veth1_macvtap left promiscuous mode [ 143.522138][ T4449] device veth0_macvtap left promiscuous mode [ 143.531606][ T4449] device veth1_vlan left promiscuous mode [ 143.545278][ T4449] device veth0_vlan left promiscuous mode [ 143.599003][ T5249] loop2: detected capacity change from 0 to 8192 [ 143.837519][ T5254] program syz.2.117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.410331][ T4449] team0 (unregistering): Port device team_slave_1 removed [ 144.435368][ T4449] team0 (unregistering): Port device team_slave_0 removed [ 144.459632][ T4449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.477463][ T4449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.723812][ T4449] bond0 (unregistering): Released all slaves [ 144.931955][ T5254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 146.367601][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.416514][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.451218][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.474461][ T5275] loop0: detected capacity change from 0 to 8192 [ 148.567517][ T5277] loop2: detected capacity change from 0 to 8192 [ 149.921189][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.944127][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.989626][ T5325] tipc: Enabled bearer , priority 0 [ 150.051470][ T5327] device syzkaller0 entered promiscuous mode [ 150.092407][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.127558][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.223924][ T5097] device veth0_vlan entered promiscuous mode [ 150.371024][ T5325] tipc: Resetting bearer [ 150.426586][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.434471][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.545201][ T5097] device veth1_vlan entered promiscuous mode [ 150.626163][ T5320] tipc: Resetting bearer [ 150.786269][ T5320] tipc: Disabling bearer [ 150.935984][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.954967][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.016251][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.078125][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.114674][ T5343] loop3: detected capacity change from 0 to 8192 [ 151.123875][ T5097] device veth0_macvtap entered promiscuous mode [ 151.161475][ T5346] tipc: Started in network mode [ 151.204394][ T5346] tipc: Node identity d2d39589a825, cluster identity 4711 [ 151.235987][ T5346] tipc: Enabled bearer , priority 0 [ 151.245554][ T5097] device veth1_macvtap entered promiscuous mode [ 151.420719][ T5352] program syz.3.134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.459684][ T5352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 151.491126][ T5347] device syzkaller0 entered promiscuous mode [ 151.745570][ T5346] Zero length message leads to an empty skb [ 151.760663][ T5349] loop0: detected capacity change from 0 to 8192 [ 151.776142][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.821735][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.842558][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.885829][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.929129][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.032023][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.165886][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.178657][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.198960][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.230916][ T5347] tipc: Resetting bearer [ 152.429809][ T5345] tipc: Resetting bearer [ 152.468879][ T5345] tipc: Disabling bearer [ 152.495684][ T5357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 152.506332][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.514639][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.527091][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.560312][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.571801][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.614025][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.679982][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.734163][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.775317][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.814450][ T5360] loop3: detected capacity change from 0 to 8192 [ 152.824279][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.875812][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.899432][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.941857][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.958260][ T5366] loop0: detected capacity change from 0 to 8192 [ 152.970147][ T13] tipc: Node number set to 2062980489 [ 152.976510][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.005758][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.044889][ T5097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.082653][ T5097] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.466110][ T5097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.478469][ T5097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.675485][ T5381] program syz.0.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.066575][ T5374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 154.075628][ T5381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 154.824208][ T4521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.171581][ T4521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.559257][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.612987][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.666013][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.743368][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.988540][ T5418] program syz.3.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.027108][ T5418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.145'. [ 158.488267][ T5412] loop0: detected capacity change from 0 to 8192 [ 159.397262][ T5436] program syz.0.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.424904][ T5436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 160.792363][ T5433] loop4: detected capacity change from 0 to 8192 [ 161.638603][ T5468] program syz.5.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.678187][ T5468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.151'. [ 163.630624][ T5482] loop3: detected capacity change from 0 to 8192 [ 163.932087][ T5488] program syz.3.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.971871][ T5488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.148'. [ 164.381624][ T5485] loop0: detected capacity change from 0 to 8192 [ 165.828721][ T5508] program syz.0.155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.969760][ T5508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 169.454479][ T5529] loop4: detected capacity change from 0 to 8192 [ 170.508554][ T5557] program syz.4.160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.530387][ T5557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.160'. [ 171.174664][ T5577] device syzkaller0 entered promiscuous mode [ 171.877436][ T5577] tipc: Enabled bearer , priority 0 [ 174.443732][ T5573] tipc: Resetting bearer [ 175.477057][ T5573] tipc: Disabling bearer [ 180.129463][ T5624] loop3: detected capacity change from 0 to 8192 [ 180.322427][ T5629] loop5: detected capacity change from 0 to 8192 [ 180.533996][ T5647] program syz.3.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.380226][ T5657] program syz.5.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.415061][ T5657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.177'. [ 183.587479][ T5676] loop0: detected capacity change from 0 to 8192 [ 183.588516][ T5669] device syzkaller0 entered promiscuous mode [ 183.890420][ T5686] program syz.0.187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.914533][ T5686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.187'. [ 185.635352][ T5701] loop4: detected capacity change from 0 to 8192 [ 185.692810][ T5710] loop3: detected capacity change from 0 to 8192 [ 186.044416][ T5724] program syz.4.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.820022][ T5710] program syz.3.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.834633][ T5710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 187.349619][ T5742] program syz.4.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.362546][ T5742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 191.329486][ T4454] Bluetooth: hci1: command 0x0406 tx timeout [ 191.361479][ T4454] Bluetooth: hci0: command 0x0406 tx timeout [ 191.507203][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 191.513278][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 191.720460][ T5767] loop0: detected capacity change from 0 to 8192 [ 191.970448][ T5780] program syz.0.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.996282][ T5780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 192.060208][ T5771] loop2: detected capacity change from 0 to 8192 [ 192.076487][ T5773] loop5: detected capacity change from 0 to 8192 [ 192.457710][ T5784] program syz.2.208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.902681][ T5787] program syz.5.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.918905][ T5787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.209'. [ 193.757221][ T5801] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.138567][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.144971][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.592937][ T5831] loop3: detected capacity change from 0 to 8192 [ 197.924811][ T5842] tipc: Enabled bearer , priority 0 [ 197.942531][ T5846] program syz.3.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.956230][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 198.009066][ T5842] tipc: Resetting bearer [ 198.042836][ T5840] tipc: Disabling bearer [ 198.284583][ T5853] loop5: detected capacity change from 0 to 8192 [ 199.395883][ T5863] program syz.5.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.422323][ T5863] netlink: 28 bytes leftover after parsing attributes in process `syz.5.220'. [ 200.334896][ T5857] loop3: detected capacity change from 0 to 8192 [ 201.452682][ T5880] program syz.3.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.477792][ T5895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 202.671534][ T5896] loop0: detected capacity change from 0 to 8192 [ 203.470187][ T5905] tipc: Started in network mode [ 203.475115][ T5905] tipc: Node identity a20c1660b5b, cluster identity 4711 [ 203.494182][ T5905] tipc: Enabled bearer , priority 0 [ 203.685484][ T5912] program syz.0.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.710273][ T5912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.222'. [ 204.044377][ T5905] tipc: Resetting bearer [ 204.271531][ T5904] tipc: Disabling bearer [ 204.850665][ T5934] device syzkaller0 entered promiscuous mode [ 204.940125][ T5938] tipc: Enabled bearer , priority 0 [ 204.948366][ T5929] loop5: detected capacity change from 0 to 8192 [ 205.574058][ T5932] loop3: detected capacity change from 0 to 8192 [ 205.867078][ T5934] tipc: Resetting bearer [ 206.041284][ T5948] program syz.5.235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.066528][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.235'. [ 206.566176][ T5933] tipc: Resetting bearer [ 206.615600][ T5956] program syz.3.236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.692848][ T5933] tipc: Disabling bearer [ 206.725647][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.236'. [ 207.893583][ T5973] tipc: Enabled bearer , priority 0 [ 208.249231][ T5973] tipc: Resetting bearer [ 208.780771][ T5971] tipc: Disabling bearer [ 208.809389][ T5981] loop3: detected capacity change from 0 to 8192 [ 210.388950][ T5990] program syz.3.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.400648][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 212.528578][ T6017] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 212.734709][ T6008] loop5: detected capacity change from 0 to 8192 [ 213.779729][ T6027] program syz.5.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.795360][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.248'. [ 217.357098][ T6045] loop0: detected capacity change from 0 to 8192 [ 217.392555][ T6049] loop3: detected capacity change from 0 to 8192 [ 218.192968][ T6071] program syz.3.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.590495][ T6062] loop2: detected capacity change from 0 to 8192 [ 221.944464][ T6091] loop5: detected capacity change from 0 to 8192 [ 222.557653][ T6128] program syz.5.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.577011][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.264'. [ 224.867128][ T6125] loop4: detected capacity change from 0 to 8192 [ 225.028213][ T6145] loop5: detected capacity change from 0 to 8192 [ 225.113060][ T6144] loop0: detected capacity change from 0 to 8192 [ 226.537422][ T6166] program syz.5.271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.559702][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.271'. [ 226.929952][ T6169] program syz.0.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.965058][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.274'. [ 228.175460][ T6176] loop3: detected capacity change from 0 to 8192 [ 229.807938][ T6212] program syz.3.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.835739][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 232.280080][ T6214] loop5: detected capacity change from 0 to 8192 [ 232.781030][ T6226] loop2: detected capacity change from 0 to 8192 [ 234.331883][ T6250] program syz.2.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.798961][ T6236] loop0: detected capacity change from 0 to 8192 [ 234.842557][ T6253] tipc: Enabled bearer , priority 0 [ 234.856630][ T6253] tipc: Resetting bearer [ 234.876688][ T6251] tipc: Disabling bearer [ 235.345150][ T6268] program syz.0.291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.497542][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 237.843050][ T6297] device syzkaller0 entered promiscuous mode [ 237.986525][ T6303] tipc: Enabled bearer , priority 0 [ 239.026368][ T6296] tipc: Resetting bearer [ 239.180032][ T6296] tipc: Disabling bearer [ 239.289966][ T13] tipc: Node number set to 537407903 [ 239.487473][ T6317] tipc: Enabled bearer , priority 0 [ 239.510395][ T6317] tipc: Resetting bearer [ 240.525647][ T6328] program syz.0.300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.557165][ T6313] tipc: Disabling bearer [ 240.586781][ T4274] tipc: Node number set to 3786662589 [ 240.593064][ T6328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 240.666629][ T6331] loop2: detected capacity change from 0 to 8192 [ 240.957845][ T6337] program syz.2.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.000733][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'. [ 247.446586][ T6383] tipc: Enabled bearer , priority 0 [ 247.583257][ T6383] tipc: Resetting bearer [ 247.888433][ T6381] tipc: Disabling bearer [ 248.228598][ T6379] loop2: detected capacity change from 0 to 8192 [ 248.370900][ T6384] loop0: detected capacity change from 0 to 8192 [ 248.406841][ T6391] loop5: detected capacity change from 0 to 8192 [ 248.784492][ T6406] program syz.2.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.323604][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'. [ 249.389574][ T6404] program syz.0.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.615034][ T6393] loop3: detected capacity change from 0 to 8192 [ 249.785087][ T6412] program syz.5.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.831374][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.319'. [ 250.126517][ T6414] device syzkaller0 entered promiscuous mode [ 250.453611][ T6423] program syz.3.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.494171][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.320'. [ 251.085199][ T6414] tipc: Enabled bearer , priority 0 [ 251.626964][ T4200] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 251.639886][ T4200] FAT-fs (loop3): Filesystem has been set read-only [ 251.677504][ T4200] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 251.703667][ T6422] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 251.758078][ T6422] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 251.774458][ T6414] tipc: Resetting bearer [ 251.799596][ T6421] loop2: detected capacity change from 0 to 8192 [ 251.896898][ T6413] tipc: Resetting bearer [ 252.048737][ T6413] tipc: Disabling bearer [ 252.076340][ T6438] loop0: detected capacity change from 0 to 8192 [ 252.096449][ T6443] program syz.2.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.194504][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'. [ 252.261781][ T6442] loop5: detected capacity change from 0 to 8192 [ 252.434093][ T6447] program syz.0.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.453542][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'. [ 252.620871][ T4200] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 252.718020][ T4449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.441264][ T6442] program syz.5.329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.608318][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.329'. [ 253.625178][ T4449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.761200][ T6456] loop2: detected capacity change from 0 to 8192 [ 253.840359][ T4449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.029652][ T6461] program syz.2.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.239098][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'. [ 255.305124][ T6466] loop5: detected capacity change from 0 to 8192 [ 255.359381][ T4449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.572208][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.579267][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.611609][ T6480] program syz.5.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.740318][ T6467] loop4: detected capacity change from 0 to 8192 [ 256.145917][ T6484] loop0: detected capacity change from 0 to 8192 [ 256.296077][ T6490] program syz.4.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.399736][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.335'. [ 256.670479][ T6493] tipc: Enabled bearer , priority 0 [ 257.467019][ T6484] program syz.0.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.586367][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.337'. [ 257.657369][ T6491] tipc: Resetting bearer [ 257.665533][ T4454] Bluetooth: hci2: command 0x0406 tx timeout [ 258.036855][ T6487] tipc: Disabling bearer [ 258.199449][ T4454] tipc: Node number set to 398202464 [ 258.284989][ T4449] tipc: Left network mode [ 258.468094][ T6517] loop0: detected capacity change from 0 to 8192 [ 258.835195][ T6529] program syz.0.342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.909992][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'. [ 258.941960][ T6523] loop5: detected capacity change from 0 to 8192 [ 260.112727][ T6542] program syz.5.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.138383][ T3518] Bluetooth: hci4: command 0x0409 tx timeout [ 261.671772][ T6542] netlink: 28 bytes leftover after parsing attributes in process `syz.5.343'. [ 261.698945][ T6504] chnl_net:caif_netlink_parms(): no params data found [ 263.313327][ T4454] Bluetooth: hci4: command 0x041b tx timeout [ 263.748454][ T6504] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.784399][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.817763][ T6504] device bridge_slave_0 entered promiscuous mode [ 263.836169][ T6564] tipc: Enabling of bearer rejected, failed to enable media [ 263.854819][ T6504] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.864915][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.876809][ T6504] device bridge_slave_1 entered promiscuous mode [ 263.923328][ T6556] loop0: detected capacity change from 0 to 8192 [ 264.029853][ T6504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.876661][ T6504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.954635][ T6577] program syz.0.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.981736][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'. [ 265.248586][ T6504] team0: Port device team_slave_0 added [ 265.342375][ T6504] team0: Port device team_slave_1 added [ 265.409617][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 265.450268][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.506227][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.582798][ T6504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.702061][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.774090][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.416147][ T6504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.885784][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 269.929912][ T4449] device hsr_slave_0 left promiscuous mode [ 269.965983][ T4274] Bluetooth: hci4: command 0x0405 tx timeout [ 269.980711][ T4449] device hsr_slave_1 left promiscuous mode [ 270.050033][ T6615] loop4: detected capacity change from 0 to 8192 [ 270.064193][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.082242][ T4449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.103235][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.107677][ T6612] loop2: detected capacity change from 0 to 8192 [ 270.131476][ T4449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.256507][ T4449] device bridge_slave_1 left promiscuous mode [ 270.263204][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.187096][ T6628] program syz.4.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.456822][ T4449] device bridge_slave_0 left promiscuous mode [ 271.569881][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.723469][ T6632] program syz.2.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.067213][ T4449] device veth1_macvtap left promiscuous mode [ 272.077065][ T4449] device veth0_macvtap left promiscuous mode [ 272.083187][ T4449] device veth1_vlan left promiscuous mode [ 272.106966][ T4449] device veth0_vlan left promiscuous mode [ 272.708387][ T4449] team0 (unregistering): Port device team_slave_1 removed [ 272.730891][ T4449] team0 (unregistering): Port device team_slave_0 removed [ 272.818853][ T4449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.886744][ T4449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.200306][ T4449] bond0 (unregistering): Released all slaves [ 273.322046][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.357'. [ 273.376694][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 273.501340][ T6504] device hsr_slave_0 entered promiscuous mode [ 273.512667][ T6504] device hsr_slave_1 entered promiscuous mode [ 273.525250][ T6504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.627408][ T6504] Cannot create hsr debugfs directory [ 275.868856][ T6651] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 275.899429][ T6647] loop4: detected capacity change from 0 to 8192 [ 276.224833][ T6666] program syz.4.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.482411][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.361'. [ 276.692383][ T6660] loop0: detected capacity change from 0 to 8192 [ 276.736751][ T6504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.422525][ T6504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.727471][ T6504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.761446][ T6680] program syz.0.366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.810159][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.366'. [ 277.821799][ T6504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.871655][ T6504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.948856][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.975510][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.027138][ T6504] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.556597][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.616283][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.695398][ T4521] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.702575][ T4521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.857790][ T6687] loop4: detected capacity change from 0 to 8192 [ 279.896857][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.942418][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.027126][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.043472][ T6692] loop0: detected capacity change from 0 to 8192 [ 280.206949][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.214103][ T4521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.288119][ T6705] program syz.4.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.689162][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.750323][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.037441][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.371'. [ 281.225316][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 281.250263][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.327945][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.386809][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.440589][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.496262][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.538634][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.562134][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.571879][ T6711] loop2: detected capacity change from 0 to 8192 [ 281.586947][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.672754][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.711955][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.998861][ T6727] program syz.2.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.322445][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.374'. [ 282.507544][ T6715] loop5: detected capacity change from 0 to 8192 [ 282.675043][ T6734] device syzkaller0 entered promiscuous mode [ 282.850125][ T6741] program syz.5.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.957043][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.5.377'. [ 282.979428][ T6735] tipc: Enabled bearer , priority 0 [ 283.182779][ T6734] tipc: Resetting bearer [ 283.197308][ T6732] tipc: Resetting bearer [ 283.621794][ T6732] tipc: Disabling bearer [ 284.838715][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.882290][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.770039][ T6770] loop5: detected capacity change from 0 to 8192 [ 286.783529][ T6504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.531214][ T6800] program syz.5.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.883575][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.5.384'. [ 287.934397][ T6797] tipc: Enabled bearer , priority 0 [ 287.989051][ T6797] tipc: Resetting bearer [ 288.083217][ T6796] tipc: Disabling bearer [ 288.254025][ T6795] loop4: detected capacity change from 0 to 8192 [ 288.924399][ T6823] program syz.4.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.961890][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.388'. [ 289.057882][ T6812] loop0: detected capacity change from 0 to 8192 [ 289.752698][ T6838] program syz.0.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.776493][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.391'. [ 291.918506][ T6842] loop5: detected capacity change from 0 to 8192 [ 291.955883][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.964703][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.196615][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.209054][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.351295][ T6861] program syz.5.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.783117][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.397'. [ 292.797410][ T6504] device veth0_vlan entered promiscuous mode [ 292.862616][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.879475][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.303018][ T6504] device veth1_vlan entered promiscuous mode [ 293.473003][ T6858] loop0: detected capacity change from 0 to 8192 [ 294.324264][ T6504] device veth0_macvtap entered promiscuous mode [ 294.460181][ T6878] program syz.0.395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.870645][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'. [ 294.899443][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.910324][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.934692][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.980200][ T6504] device veth1_macvtap entered promiscuous mode [ 295.041696][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.121296][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.160701][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.199978][ T6882] loop5: detected capacity change from 0 to 8192 [ 295.204325][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.246400][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.295758][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.315870][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.335968][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.358260][ T6504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.369419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.397768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.435804][ T6887] loop0: detected capacity change from 0 to 8192 [ 295.446550][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.515722][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.630747][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.653035][ T6894] program syz.5.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.736958][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.747561][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.758594][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.769604][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.780303][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.794621][ T6504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.804397][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.400'. [ 295.819508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.888895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.039899][ T6504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.106457][ T6504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.156172][ T6504] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.257645][ T6899] program syz.0.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.300520][ T6504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.325778][ T6899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.403'. [ 296.735559][ T6896] loop2: detected capacity change from 0 to 8192 [ 296.796021][ T6907] device syzkaller0 entered promiscuous mode [ 297.002359][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.213114][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.786816][ T6905] loop5: detected capacity change from 0 to 8192 [ 297.867452][ T6914] program syz.2.404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.996788][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.154860][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'. [ 298.202963][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.214903][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.265075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.408236][ T6921] program syz.5.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.425088][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.405'. [ 298.790820][ T6916] loop0: detected capacity change from 0 to 8192 [ 299.939542][ T6932] loop2: detected capacity change from 0 to 8192 [ 300.324434][ T6944] program syz.0.407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.360656][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.407'. [ 305.747065][ T6962] loop2: detected capacity change from 0 to 8192 [ 309.042765][ T7014] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 309.776554][ T7017] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 310.898007][ T7025] device syzkaller0 entered promiscuous mode [ 311.720449][ T7031] device syzkaller0 entered promiscuous mode [ 313.110460][ T7047] loop2: detected capacity change from 0 to 8192 [ 313.871897][ T7064] program syz.2.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.941081][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'. [ 314.061671][ T7052] loop4: detected capacity change from 0 to 8192 [ 314.233474][ T7068] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 314.278707][ T7068] IPVS: Error connecting to the multicast addr [ 317.009657][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.016064][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.101607][ T7093] loop0: detected capacity change from 0 to 8192 [ 317.103313][ T7097] device syzkaller0 entered promiscuous mode [ 317.306309][ T7089] loop5: detected capacity change from 0 to 8192 [ 317.504442][ T7105] program syz.0.439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.544137][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.439'. [ 318.102766][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'. [ 318.145357][ T7114] program syz.5.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.163599][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.438'. [ 321.279975][ T7147] tipc: Enabling of bearer rejected, failed to enable media [ 323.134863][ T7157] loop2: detected capacity change from 0 to 8192 [ 323.530726][ T7168] program syz.2.448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.546704][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.448'. [ 325.262215][ T7173] loop2: detected capacity change from 0 to 8192 [ 326.338661][ T7203] program syz.2.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.380472][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'. [ 326.709774][ T7186] loop6: detected capacity change from 0 to 8192 [ 327.024501][ T7200] loop4: detected capacity change from 0 to 8192 [ 327.082387][ T7210] program syz.6.455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.095210][ T7210] netlink: 28 bytes leftover after parsing attributes in process `syz.6.455'. [ 327.146868][ T7207] loop2: detected capacity change from 0 to 8192 [ 328.189508][ T7220] program syz.2.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.226521][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'. [ 329.202412][ T7234] program syz.4.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.336102][ T7237] loop2: detected capacity change from 0 to 8192 [ 330.821079][ T7257] program syz.2.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.848962][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 331.127076][ T7248] loop6: detected capacity change from 0 to 8192 [ 331.549156][ T7259] loop4: detected capacity change from 0 to 8192 [ 333.534863][ T7277] device syzkaller0 entered promiscuous mode [ 333.895061][ T7289] program syz.4.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.313041][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.464'. [ 334.625999][ T7294] device syzkaller0 entered promiscuous mode [ 335.822592][ T6504] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 335.839513][ T6504] FAT-fs (loop6): Filesystem has been set read-only [ 335.893894][ T6504] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 336.177091][ T7313] loop2: detected capacity change from 0 to 8192 [ 336.513125][ T7324] program syz.2.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.965543][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.475'. [ 337.139320][ T7321] loop5: detected capacity change from 0 to 8192 [ 337.174378][ T4240] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.434500][ T7342] program syz.5.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.491525][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.478'. [ 337.828006][ T4240] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.024987][ T7350] loop0: detected capacity change from 0 to 8192 [ 338.046317][ T7330] loop2: detected capacity change from 0 to 8192 [ 338.079548][ T7343] tipc: Enabling of bearer rejected, failed to enable media [ 338.222984][ T7356] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 338.652632][ T4240] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.322559][ T4240] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.337020][ T7368] program syz.0.483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.483605][ T7362] tipc: Enabling of bearer rejected, failed to enable media [ 339.584011][ T7368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.483'. [ 339.635315][ T7371] device syzkaller0 entered promiscuous mode [ 339.744261][ T7371] tipc: Enabled bearer , priority 0 [ 339.777664][ T7371] tipc: Resetting bearer [ 339.851912][ T7370] tipc: Resetting bearer [ 339.878028][ T7370] tipc: Disabling bearer [ 340.245340][ T7394] program syz.4.490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.725479][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.490'. [ 340.796398][ T7395] tipc: Enabling of bearer rejected, failed to enable media [ 341.645693][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 342.388698][ T7422] loop0: detected capacity change from 0 to 8192 [ 342.775173][ T7372] chnl_net:caif_netlink_parms(): no params data found [ 343.163170][ T7436] program syz.0.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.530407][ T7419] loop2: detected capacity change from 0 to 8192 [ 343.537165][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.494'. [ 343.735788][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 343.823230][ T7444] program syz.2.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.962633][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.493'. [ 344.081745][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.234734][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.408191][ T7372] device bridge_slave_0 entered promiscuous mode [ 344.463374][ T7446] loop5: detected capacity change from 0 to 8192 [ 345.298227][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.410114][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.527532][ T7372] device bridge_slave_1 entered promiscuous mode [ 345.815805][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 346.557136][ T7481] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 348.004700][ T7372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.027030][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 348.395336][ T7372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.642274][ T4240] device hsr_slave_0 left promiscuous mode [ 348.658607][ T4240] device hsr_slave_1 left promiscuous mode [ 348.699124][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.772790][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.843797][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.045744][ T4233] Bluetooth: hci4: command 0x0405 tx timeout [ 350.448105][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.994711][ T7512] loop2: detected capacity change from 0 to 4096 [ 351.108503][ T4240] device bridge_slave_1 left promiscuous mode [ 351.114795][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.190828][ T4240] device bridge_slave_0 left promiscuous mode [ 351.199265][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.219188][ T7512] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 351.246898][ T4240] device veth1_macvtap left promiscuous mode [ 351.256118][ T4240] device veth0_macvtap left promiscuous mode [ 351.386544][ T4240] device veth1_vlan left promiscuous mode [ 351.392618][ T4240] device veth0_vlan left promiscuous mode [ 354.800043][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 354.824686][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 354.838810][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.855387][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.980758][ T4240] bond0 (unregistering): Released all slaves [ 355.348873][ T7589] loop4: detected capacity change from 0 to 8192 [ 355.368231][ T7372] team0: Port device team_slave_0 added [ 355.404251][ T7372] team0: Port device team_slave_1 added [ 357.536613][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.538933][ T7599] program syz.4.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.573307][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.648266][ T7372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.659663][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.514'. [ 357.689956][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.878505][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.945731][ T7372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.046577][ T7607] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 358.125829][ T7604] loop0: detected capacity change from 0 to 4096 [ 358.200258][ T7372] device hsr_slave_0 entered promiscuous mode [ 358.226425][ T7372] device hsr_slave_1 entered promiscuous mode [ 358.238391][ T7372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.257665][ T7372] Cannot create hsr debugfs directory [ 358.341400][ T7604] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 358.365099][ T7610] device syzkaller0 entered promiscuous mode [ 358.393128][ T7619] tipc: Enabled bearer , priority 0 [ 358.405293][ T7621] loop2: detected capacity change from 0 to 8192 [ 359.629031][ T7636] program syz.2.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.957958][ T7608] tipc: Resetting bearer [ 360.464601][ T7608] tipc: Disabling bearer [ 360.522725][ T7636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 360.733238][ T7639] loop0: detected capacity change from 0 to 8192 [ 362.226902][ T7372] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 362.579905][ T7665] program syz.0.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.078198][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'. [ 363.153858][ T7372] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 363.412529][ T7372] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 363.574303][ T7372] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 366.170667][ T7687] IPVS: Error connecting to the multicast addr [ 366.318521][ T7688] program syz.0.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.361867][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.529'. [ 366.509815][ T7690] loop2: detected capacity change from 0 to 4096 [ 366.665151][ T7690] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 366.746212][ T7372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.987373][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.995346][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.074476][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.148823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.196583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.239306][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.246548][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.324339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.351785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.405251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.466629][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.473855][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.595432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.828244][ T7707] device syzkaller0 entered promiscuous mode [ 368.893792][ T7710] tipc: Enabled bearer , priority 0 [ 369.035887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.056501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.067538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.086799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.115318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.124426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.349125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.514449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.651164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.790447][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.790114][ T7710] tipc: Resetting bearer [ 370.958823][ T7710] tipc: Disabling bearer [ 371.024436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 374.723311][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.774222][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.841965][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.827411][ T7768] loop4: detected capacity change from 0 to 8192 [ 376.051363][ T7780] IPVS: Error connecting to the multicast addr [ 377.070236][ T7786] program syz.4.540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.111464][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.540'. [ 377.443715][ T7779] loop0: detected capacity change from 0 to 8192 [ 377.777911][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.965129][ T7801] program syz.0.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.341450][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.361443][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 378.437790][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.450163][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.456500][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.500950][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.528964][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.201655][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.396705][ T7372] device veth0_vlan entered promiscuous mode [ 379.460633][ T7372] device veth1_vlan entered promiscuous mode [ 379.622970][ T7812] tipc: Enabled bearer , priority 0 [ 380.125113][ T7818] device syzkaller0 entered promiscuous mode [ 380.422269][ T7811] tipc: Resetting bearer [ 380.501983][ T7811] tipc: Disabling bearer [ 380.558240][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.606705][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.635243][ T7372] device veth0_macvtap entered promiscuous mode [ 380.671059][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.694301][ T7372] device veth1_macvtap entered promiscuous mode [ 380.752626][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.821030][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.836243][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.850386][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.895797][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.932083][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.088414][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.135921][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.162883][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.939951][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.966586][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.997840][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.023963][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.071929][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.097826][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.130325][ T7850] loop4: detected capacity change from 0 to 8192 [ 382.147153][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.217964][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.227994][ T7372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.238503][ T7372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.249624][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.262446][ T7372] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.271224][ T7372] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.279975][ T7372] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.290394][ T7372] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.161950][ T7859] program syz.4.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.187111][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 383.305014][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.393127][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.554'. [ 383.882005][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.924083][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.033729][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 384.066384][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.093751][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.128424][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 384.237464][ T7874] loop5: detected capacity change from 0 to 8192 [ 385.995542][ T7905] program syz.5.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.043430][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.5.559'. [ 387.566642][ T7913] loop2: detected capacity change from 0 to 8192 [ 387.816864][ T7927] loop7: detected capacity change from 0 to 8192 [ 387.965710][ T7939] program syz.2.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.005467][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.563'. [ 388.361495][ T7934] loop5: detected capacity change from 0 to 8192 [ 388.527759][ T7944] program syz.7.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.556534][ T7944] netlink: 28 bytes leftover after parsing attributes in process `syz.7.566'. [ 389.067297][ T7951] program syz.5.567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.082014][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.567'. [ 390.124981][ T7964] loop0: detected capacity change from 0 to 8192 [ 391.546748][ T7986] program syz.0.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.559523][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 391.763364][ T7985] loop7: detected capacity change from 0 to 8192 [ 392.300270][ T7984] loop2: detected capacity change from 0 to 8192 [ 392.603309][ T7995] program syz.2.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.644125][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.575'. [ 393.749225][ T8003] program syz.7.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.790279][ T8003] netlink: 28 bytes leftover after parsing attributes in process `syz.7.574'. [ 394.094652][ T8009] device syzkaller0 entered promiscuous mode [ 394.106951][ T7999] loop5: detected capacity change from 0 to 8192 [ 394.420640][ T8022] program syz.5.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.869015][ T8024] loop2: detected capacity change from 0 to 4096 [ 394.962762][ T8024] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 395.040505][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.577'. [ 396.797191][ T8046] IPVS: Error connecting to the multicast addr [ 396.826963][ T8042] loop0: detected capacity change from 0 to 8192 [ 397.930427][ T8068] program syz.0.584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.950119][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'. [ 398.292204][ T8044] loop4: detected capacity change from 0 to 8192 [ 398.587402][ T8066] loop5: detected capacity change from 0 to 8192 [ 398.803888][ T8079] program syz.4.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.841927][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.587'. [ 399.382691][ T8066] program syz.5.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.401654][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.589'. [ 399.512378][ T8086] device syzkaller0 entered promiscuous mode [ 399.571592][ T8089] tipc: Enabled bearer , priority 0 [ 399.600343][ T8086] tipc: Enabled bearer , priority 0 [ 399.649618][ T8088] tipc: Disabling bearer [ 399.682358][ T8085] tipc: Resetting bearer [ 399.746292][ T8085] tipc: Disabling bearer [ 399.889972][ T8093] loop5: detected capacity change from 0 to 4096 [ 400.411389][ T8093] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 401.159881][ T8108] loop2: detected capacity change from 0 to 8192 [ 401.261253][ T8112] loop4: detected capacity change from 0 to 8192 [ 401.677429][ T8127] program syz.4.597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.850064][ T8129] program syz.2.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.862890][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'. [ 402.284452][ T8133] loop0: detected capacity change from 0 to 8192 [ 402.329701][ T8140] device syzkaller0 entered promiscuous mode [ 402.470033][ T8145] program syz.4.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.508954][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.602'. [ 402.876560][ T8140] tipc: Enabled bearer , priority 0 [ 403.092538][ T8143] tipc: Resetting bearer [ 404.403147][ T8159] program syz.0.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.446378][ T8139] tipc: Resetting bearer [ 404.491375][ T8139] tipc: Disabling bearer [ 404.786619][ T8163] loop4: detected capacity change from 0 to 8192 [ 405.613852][ T8166] loop0: detected capacity change from 0 to 8192 [ 405.904582][ T8179] program syz.4.607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.921305][ T8178] device syzkaller0 entered promiscuous mode [ 406.061479][ T8183] program syz.0.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.101391][ T8183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 406.633327][ T8191] tipc: Enabled bearer , priority 0 [ 406.697829][ T8189] tipc: Disabling bearer [ 407.556603][ T8201] loop7: detected capacity change from 0 to 4096 [ 407.622572][ T8207] loop2: detected capacity change from 0 to 8192 [ 407.661259][ T8204] loop4: detected capacity change from 0 to 8192 [ 407.740376][ T8201] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 407.909196][ T8213] program syz.2.618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.944392][ T8213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'. [ 408.545259][ T8221] program syz.4.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.570464][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.617'. [ 409.781457][ T8247] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 409.944243][ T8256] kvm [8254]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0xffffffffffffffff [ 409.985861][ T8260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.633'. [ 410.188364][ T8268] serial 00:03: in use; can't configure [ 410.470601][ T8282] overlayfs: failed to clone upperpath [ 410.647029][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'. [ 410.695902][ T8293] 8021q: VLANs not supported on eql [ 412.219188][ T8356] CIFS: Attempting to mount \\127.0.0.1\share [ 412.399826][ T8363] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 412.489629][ T8356] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 412.610444][ T8356] CIFS: VFS: cifs_mount failed w/return code = -11 [ 413.085867][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 413.373283][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 414.035997][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 414.118576][ T8391] netlink: 'syz.2.674': attribute type 4 has an invalid length. [ 414.156051][ T4231] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.175733][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.274091][ T8399] netlink: 'syz.2.674': attribute type 4 has an invalid length. [ 414.358748][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.370394][ T4231] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.383541][ T4231] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 414.392738][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.746193][ T4231] usb 5-1: GET_CAPABILITIES returned 0 [ 414.771453][ T4231] usbtmc 5-1:16.0: can't read capabilities [ 415.258689][ T4231] usb 5-1: USB disconnect, device number 2 [ 415.533703][ T8420] netlink: 32 bytes leftover after parsing attributes in process `syz.7.677'. [ 415.952980][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.960403][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.115996][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 416.676344][ T7] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 416.689113][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.698293][ T7] usb 5-1: Product: syz [ 416.702554][ T7] usb 5-1: Manufacturer: syz [ 416.707964][ T7] usb 5-1: SerialNumber: syz [ 416.714874][ T7] usb 5-1: config 0 descriptor?? [ 416.758158][ T7] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 003 [ 416.788872][ T8400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.833029][ T8400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.970179][ T7] (null): failure setting delay to 10us [ 416.980660][ T7] i2c-tiny-usb: probe of 5-1:0.0 failed with error -5 [ 416.994338][ T7] usb 5-1: USB disconnect, device number 3 [ 417.469129][ T8400] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.478570][ T8400] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.487721][ T8400] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.496786][ T8400] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.687711][ T8423] netlink: 288 bytes leftover after parsing attributes in process `syz.7.678'. [ 417.847583][ T8450] tmpfs: Bad value for 'mpol' [ 417.935956][ T4231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 418.072247][ T8460] wlan0 speed is unknown, defaulting to 1000 [ 418.079081][ T8460] wlan0 speed is unknown, defaulting to 1000 [ 418.096081][ T8460] wlan0 speed is unknown, defaulting to 1000 [ 418.121568][ T8460] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 418.156316][ T8460] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 418.227665][ T8460] wlan0 speed is unknown, defaulting to 1000 [ 418.235672][ T8460] wlan0 speed is unknown, defaulting to 1000 [ 418.242549][ T8460] wlan0 speed is unknown, defaulting to 1000 [ 418.249558][ T8460] wlan0 speed is unknown, defaulting to 1000 [ 418.256482][ T8460] wlan0 speed is unknown, defaulting to 1000 [ 418.686865][ T8483] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 418.755783][ T4231] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 418.769532][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.819310][ T8491] capability: warning: `syz.5.696' uses deprecated v2 capabilities in a way that may be insecure [ 418.971595][ T8497] syz.0.697 uses obsolete (PF_INET,SOCK_PACKET) [ 419.407306][ T8444] tipc: New replicast peer: 172.30.0.5 [ 419.509632][ T8444] tipc: Enabled bearer , priority 10 [ 419.677395][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 419.712337][ T8505] tipc: Disabling bearer [ 420.450686][ T4232] Bluetooth: hci0: command 0x0c1a tx timeout [ 420.618529][ T4231] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0001/input/input5 [ 421.307000][ T4231] rc_core: IR keymap rc-rc6-mce not found [ 421.315103][ T4231] Registered IR keymap rc-empty [ 421.457510][ T4231] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0001/rc/rc0 [ 421.751920][ T4231] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0001/rc/rc0/input6 [ 422.134444][ T4231] hid-picolcd 0003:04D8:C002.0001: No report with id 0x94 found [ 422.199839][ T4231] hid-picolcd 0003:04D8:C002.0001: failed to configure display [ 422.662521][ T8549] process 'syz.5.708' launched './file0' with NULL argv: empty string added [ 423.521485][ T4232] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 423.870801][ T4231] usb 5-1: USB disconnect, device number 4 [ 424.066062][ T4454] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 424.549231][ T4454] usb 3-1: Using ep0 maxpacket: 16 [ 424.575781][ T4232] usb 8-1: Using ep0 maxpacket: 32 [ 424.725868][ T4232] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 424.728945][ T4454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.734938][ T4232] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 424.763344][ T4232] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 424.795707][ T4454] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 424.808990][ T4232] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 424.875863][ T4232] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 424.903222][ T4454] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 424.932293][ T4454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.936206][ T4232] usb 8-1: config 0 interface 0 has no altsetting 0 [ 424.993558][ T4454] usb 3-1: config 0 descriptor?? [ 425.155965][ T4232] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 425.173172][ T4232] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 425.207046][ T4232] usb 8-1: Product: syz [ 425.220526][ T4232] usb 8-1: Manufacturer: syz [ 425.236672][ T4232] usb 8-1: SerialNumber: syz [ 425.261049][ T4232] usb 8-1: config 0 descriptor?? [ 425.319092][ T4232] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 425.366224][ T4232] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 425.407134][ T4232] usb 8-1: USB disconnect, device number 2 [ 425.458065][ T4232] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 425.529801][ T4454] hid-generic 0003:057E:2019.0002: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 425.968735][ T4454] usb 3-1: USB disconnect, device number 2 [ 427.977444][ T8637] overlayfs: failed to resolve './file1': -2 [ 431.419882][ T4454] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 431.686037][ T4454] usb 1-1: Using ep0 maxpacket: 8 [ 431.954679][ T4454] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.985680][ T4454] usb 1-1: config 1 interface 0 has no altsetting 0 [ 432.027573][ T4454] usb 1-1: language id specifier not provided by device, defaulting to English [ 432.181809][ T4454] usb 1-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.40 [ 432.201225][ T4454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.229124][ T4454] usb 1-1: Product: syz [ 432.233391][ T4454] usb 1-1: Manufacturer: 态뢽ఖ蕳Ẋ␲엌ၺ䆥ⷃ㷽鰣娴ꝵ탦伋䍘猤驶銐㥒﨑竈鐉恷튙ᦶ悚띥ọ梲잍㥆䤳ࡹഗ둃账咁⌥醇ⶊ궶໣鑑艗⃜解 [ 432.257904][ T4454] usb 1-1: SerialNumber: syz [ 433.147214][ T4454] usbhid 1-1:1.0: can't add hid device: -71 [ 437.015969][ T26] audit: type=1800 audit(1786180518.429:2): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.751" name="/" dev="fuse" ino=4 res=0 errno=0 [ 437.641257][ T4454] usbhid: probe of 1-1:1.0 failed with error -71 [ 437.651762][ T4454] usb 1-1: USB disconnect, device number 2 [ 438.215739][ T4454] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 438.342540][ T8797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.762'. [ 438.636116][ T4454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.686049][ T4454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.715666][ T4454] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 438.765880][ T4454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.812987][ T4454] usb 1-1: config 0 descriptor?? [ 439.499976][ T4454] hid-generic 0003:1038:12B6.0003: unknown main item tag 0x0 [ 439.515667][ T4454] hid-generic 0003:1038:12B6.0003: unknown main item tag 0x0 [ 439.526048][ T4454] hid-generic 0003:1038:12B6.0003: unknown main item tag 0x0 [ 439.966682][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.974008][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.127972][ T4454] hid-generic 0003:1038:12B6.0003: unknown main item tag 0x0 [ 440.135507][ T4454] hid-generic 0003:1038:12B6.0003: unknown main item tag 0x0 [ 440.143032][ T4454] hid-generic 0003:1038:12B6.0003: unknown main item tag 0x0 [ 440.151158][ T4454] hid-generic 0003:1038:12B6.0003: unknown main item tag 0x0 [ 440.160136][ T4454] hid-generic 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 440.302356][ T4454] usb 1-1: USB disconnect, device number 3 [ 440.524646][ T8836] fido_id[8836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 440.674976][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 440.730737][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 440.758387][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 440.773140][ T8850] qnx6: unable to read the first superblock [ 440.812064][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 440.832468][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 440.867766][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 440.919948][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 440.947317][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 440.971190][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 440.994792][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 441.014728][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 441.035845][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 441.057019][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 441.078747][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 441.101054][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 441.123629][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 441.145704][ T4231] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 441.212859][ T4231] hid-generic 0F98:0004:0009.0004: hidraw0: HID v0.04 Device [syz1] on syz0 [ 441.380442][ T8861] fido_id[8861]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 441.509847][ T8865] CIFS: Attempting to mount \\127.0.0.1\share [ 441.555820][ T4230] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 441.841075][ T4230] usb 8-1: Using ep0 maxpacket: 32 [ 441.987202][ T4230] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 442.004808][ T4230] usb 8-1: config 0 has no interface number 0 [ 442.255897][ T4230] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 442.265106][ T4230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.318747][ T8865] CIFS: VFS: Error connecting to socket. Aborting operation. [ 442.325757][ T4230] usb 8-1: Product: syz [ 442.335994][ T4230] usb 8-1: Manufacturer: syz [ 442.347879][ T8865] CIFS: VFS: cifs_mount failed w/return code = -4 [ 442.365833][ T4230] usb 8-1: SerialNumber: syz [ 442.416036][ T4230] usb 8-1: config 0 descriptor?? [ 442.497096][ T4230] smsc95xx v2.0.0 [ 442.648461][ T8902] ucma_write: process 599 (syz.2.786) changed security contexts after opening file descriptor, this is not allowed. [ 443.746038][ T4230] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 443.976373][ T4230] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 444.010758][ T4230] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 444.043386][ T4230] usb 8-1: USB disconnect, device number 3 [ 444.071702][ T8939] Process accounting resumed [ 444.156796][ T4237] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 444.227510][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.797'. [ 444.445714][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 444.516070][ T4237] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 444.525846][ T4237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.619485][ T4237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.418961][ T8961] syz.5.799 (8961) used greatest stack depth: 17136 bytes left [ 445.468724][ T8963] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.527809][ T4237] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 445.545701][ T4237] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 445.553831][ T4237] usb 3-1: Manufacturer: syz [ 445.574738][ T4237] usb 3-1: config 0 descriptor?? [ 445.616246][ T8969] CIFS: Attempting to mount \\127.0.0.1\share [ 445.627780][ T4237] igorplugusb 3-1:0.0: endpoint incorrect [ 445.669076][ T8972] netlink: 'syz.5.803': attribute type 1 has an invalid length. [ 445.669246][ T8973] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 445.685713][ T8972] netlink: 11834 bytes leftover after parsing attributes in process `syz.5.803'. [ 445.708198][ T8969] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 445.727364][ T8969] CIFS: VFS: cifs_mount failed w/return code = -11 [ 445.829404][ T4230] usb 3-1: USB disconnect, device number 3 [ 447.462962][ T9021] CIFS: Attempting to mount \\127.0.0.1\share [ 447.514917][ T9024] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 447.535790][ T9021] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 447.542902][ T9021] CIFS: VFS: cifs_mount failed w/return code = -11 [ 447.665946][ T4237] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 448.885915][ T4237] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 448.915231][ T4237] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 448.970315][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.037562][ T9017] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 449.097229][ T4237] opticon 3-1:1.0: opticon converter detected [ 449.150091][ T4237] usb 3-1: opticon converter now attached to ttyUSB0 [ 450.308862][ T4237] usb 3-1: USB disconnect, device number 4 [ 450.326169][ T4237] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 450.341395][ T4237] opticon 3-1:1.0: device disconnected [ 450.798981][ T9080] netlink: 32 bytes leftover after parsing attributes in process `syz.7.833'. [ 450.815757][ T9080] netlink: 9 bytes leftover after parsing attributes in process `syz.7.833'. [ 452.084408][ T9093] device wlan0 entered promiscuous mode [ 452.196746][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.841'. [ 452.525701][ T4231] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 453.652462][ T4231] usb 8-1: Using ep0 maxpacket: 32 [ 453.795941][ T4231] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.814984][ T4231] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.835779][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 454.025911][ T4231] usb 8-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 454.047545][ T4231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.077488][ T4231] usb 8-1: Product: syz [ 454.092764][ T4231] usb 8-1: Manufacturer: syz [ 454.101621][ T4231] usb 8-1: SerialNumber: syz [ 454.127487][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 454.225911][ T4233] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.247293][ T4233] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 454.267668][ T4233] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.287923][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.305170][ T9135] CIFS: Attempting to mount \\127.0.0.1\share [ 454.328125][ T9121] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 454.370016][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 454.400270][ T4231] usb 8-1: interface 1 not found [ 454.429911][ T4231] usb 8-1: USB disconnect, device number 4 [ 454.514838][ T4230] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 454.531499][ T4230] usb 1-1: config 0 has no interface number 0 [ 454.539932][ T4230] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 454.807045][ T9145] ODEBUG: Out of memory. ODEBUG disabled [ 455.398595][ T9135] CIFS: VFS: Error connecting to socket. Aborting operation. [ 455.457210][ T9135] CIFS: VFS: cifs_mount failed w/return code = -4 [ 455.462531][ T4230] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 455.656462][ T4230] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 455.678415][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.715470][ T4230] usb 1-1: Product: syz [ 455.749780][ T4230] usb 1-1: Manufacturer: syz [ 455.770956][ T9154] kernel profiling enabled (shift: 9) [ 455.781584][ T4230] usb 1-1: SerialNumber: syz [ 455.811169][ T4230] usb 1-1: config 0 descriptor?? [ 455.843034][ T9157] jffs2: notice: (9157) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 455.860551][ T9128] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 455.880056][ T9128] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 456.118565][ T9128] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 456.148159][ T9128] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 456.355698][ T4454] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 456.406227][ T4230] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 456.867360][ T4454] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 457.306056][ T4230] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 457.684192][ T4454] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.694069][ T4230] asix: probe of 1-1:0.34 failed with error -71 [ 458.458298][ T4454] usb 8-1: config 0 descriptor?? [ 458.467981][ T4230] usb 1-1: USB disconnect, device number 4 [ 458.527871][ T4454] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 458.726754][ T4454] gp8psk: usb in 128 operation failed. [ 458.748281][ T4454] gp8psk: usb in 137 operation failed. [ 458.755359][ T4454] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 458.918057][ T4454] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 458.956957][ T4454] usb 8-1: USB disconnect, device number 5 [ 459.359129][ T9178] CIFS: Attempting to mount \\127.0.0.1\share [ 460.059247][ T9188] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 460.100594][ T9178] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 460.155873][ T9178] CIFS: VFS: cifs_mount failed w/return code = -11 [ 460.285052][ T9193] netlink: 20 bytes leftover after parsing attributes in process `syz.7.874'. [ 460.381053][ T9195] jffs2: notice: (9195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 462.445809][ T4235] Bluetooth: hci4: command 0x0406 tx timeout [ 462.502805][ T4233] usb 5-1: USB disconnect, device number 5 [ 463.630954][ T4235] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 463.696338][ T9265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.902'. [ 463.823299][ T9270] siw: device registration error -23 [ 463.860123][ T9273] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 463.937511][ T9273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.948843][ T9275] device macvlan2 entered promiscuous mode [ 463.967988][ T9275] device bond1 entered promiscuous mode [ 463.974685][ T9275] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.984019][ T9275] team0: Port device macvlan2 added [ 464.017795][ T9273] bond1: (slave ip6gretap2): making interface the new active one [ 464.026056][ T9273] device ip6gretap2 entered promiscuous mode [ 464.033877][ T9273] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 464.043297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 464.047982][ T4235] usb 3-1: unable to get BOS descriptor or descriptor too short [ 464.066099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 464.145936][ T4235] usb 3-1: config 100 has an invalid interface number: 173 but max is 0 [ 464.155755][ T4235] usb 3-1: config 100 has no interface number 0 [ 464.162083][ T4235] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 464.173073][ T4235] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 464.185240][ T4235] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 464.197155][ T4235] usb 3-1: config 100 interface 173 has no altsetting 0 [ 464.206051][ T4233] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 464.876058][ T4235] usb 3-1: string descriptor 0 read error: -22 [ 464.888725][ T4235] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 464.936326][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.215984][ T9244] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 465.233436][ T9244] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 465.248657][ T4235] metro_usb 3-1:100.173: Metrologic USB to Serial converter detected [ 465.269136][ T4235] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 465.425817][ T4233] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 465.439329][ T4233] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 465.461745][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.505677][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 465.506370][ T9244] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 465.525004][ T4233] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 465.576604][ T1108] usb 3-1: USB disconnect, device number 5 [ 465.591880][ T1108] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 465.604898][ T1108] metro_usb 3-1:100.173: device disconnected [ 465.865953][ T4230] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 465.879624][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.033439][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 466.055681][ T9301] netlink: 'syz.5.915': attribute type 22 has an invalid length. [ 466.063453][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.915'. [ 466.111944][ T9301] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.121287][ T9301] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.130142][ T9301] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.138925][ T9301] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.207319][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 466.238944][ T9301] netlink: 'syz.5.915': attribute type 22 has an invalid length. [ 466.256637][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.915'. [ 466.368168][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 466.513433][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.530947][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.548373][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.592284][ T9313] device bridge_slave_0 left promiscuous mode [ 466.608247][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.673080][ T9313] device bridge_slave_1 left promiscuous mode [ 466.684296][ T4230] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0005/input/input7 [ 466.715974][ T4233] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 466.736114][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.765804][ T9313] bond0: (slave bond_slave_0): Releasing backup interface [ 467.017465][ T9313] bond0: (slave bond_slave_1): Releasing backup interface [ 467.465419][ T9313] team0: Port device team_slave_0 removed [ 467.497491][ T4233] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 467.508914][ T4233] stv0680 8-1:4.0: last error: 140, command = 0x80 [ 467.521916][ T4233] usb 8-1: USB disconnect, device number 6 [ 467.527874][ T4230] rc_core: IR keymap rc-rc6-mce not found [ 467.533625][ T4230] Registered IR keymap rc-empty [ 467.541797][ T4230] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0005/rc/rc0 [ 467.569984][ T4230] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0005/rc/rc0/input8 [ 469.931240][ T4230] hid-picolcd 0003:04D8:C002.0005: No report with id 0x94 found [ 471.349228][ T4230] hid-picolcd 0003:04D8:C002.0005: failed to configure display [ 471.518967][ T9313] team0: Port device team_slave_1 removed [ 471.555439][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.783883][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.000246][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.015731][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.035974][ T4230] usb 1-1: USB disconnect, device number 5 [ 472.068625][ T9340] netdevsim0 speed is unknown, defaulting to 1000 [ 472.075205][ T9340] netdevsim0 speed is unknown, defaulting to 1000 [ 472.082271][ T9340] netdevsim0 speed is unknown, defaulting to 1000 [ 472.095150][ T9340] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 472.115083][ T9340] netdevsim0 speed is unknown, defaulting to 1000 [ 472.122807][ T9340] netdevsim0 speed is unknown, defaulting to 1000 [ 472.130203][ T9340] netdevsim0 speed is unknown, defaulting to 1000 [ 472.137591][ T9340] netdevsim0 speed is unknown, defaulting to 1000 [ 472.145050][ T9340] netdevsim0 speed is unknown, defaulting to 1000 [ 474.398109][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 474.805012][ T9371] Process accounting resumed [ 475.056141][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 477.053285][ T4230] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 477.088491][ T4230] usb 1-1: can't read configurations, error -71 [ 478.006043][ T9413] capability: warning: `syz.5.951' uses 32-bit capabilities (legacy support in use) [ 478.338452][ T9418] Process accounting resumed [ 480.157544][ T9465] trusted_key: encrypted_key: insufficient parameters specified [ 482.392221][ T9493] CIFS: Attempting to mount \\127.0.0.1\share [ 482.445996][ T9494] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 482.521005][ T9494] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 482.573113][ T9493] CIFS: VFS: cifs_mount failed w/return code = -112 [ 482.909885][ T9504] 9pnet: p9_fd_create_tcp (9504): problem binding to privport [ 483.946274][ T9514] trusted_key: encrypted_key: insufficient parameters specified [ 484.095326][ T9520] netlink: 168 bytes leftover after parsing attributes in process `syz.5.989'. [ 484.969846][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 486.425770][ T4237] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 487.178730][ T9556] trusted_key: encrypted_key: key user:syz not found [ 487.995874][ T4237] usb 1-1: Using ep0 maxpacket: 8 [ 489.889269][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 490.235823][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 490.356063][ T1108] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 490.382502][ T1108] usb 3-1: config 0 has no interface number 0 [ 490.390012][ T4237] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 490.434754][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 490.639070][ T4237] usb 1-1: config 0 descriptor?? [ 490.656139][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 490.698537][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.736024][ T4237] usb 1-1: can't set config #0, error -71 [ 490.810543][ T1108] usb 3-1: Product: syz [ 490.826317][ T4237] usb 1-1: USB disconnect, device number 8 [ 490.866901][ T1108] usb 3-1: Manufacturer: syz [ 490.911610][ T1108] usb 3-1: SerialNumber: syz [ 490.994999][ T1108] usb 3-1: config 0 descriptor?? [ 491.038125][ T1108] usb 3-1: can't set config #0, error -71 [ 492.763253][ T1108] usb 3-1: USB disconnect, device number 6 [ 492.919891][ T9564] Process accounting resumed [ 493.159320][ T9597] trusted_key: encrypted_key: key user:syz not found [ 494.081312][ T9613] wlan0 speed is unknown, defaulting to 1000 [ 494.095927][ T9613] netdevsim0 speed is unknown, defaulting to 1000 [ 494.662110][ T9620] device bridge1 entered promiscuous mode [ 494.821843][ T9620] team0: Port device bridge1 added [ 495.365813][ T4235] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 496.444683][ T9630] Process accounting resumed [ 496.457918][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1024'. [ 496.512316][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1024'. [ 496.565923][ T4235] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 496.575434][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.673934][ T9645] jffs2: notice: (9645) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 496.695901][ T4235] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 496.736429][ T4235] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 496.759442][ T4235] usb 5-1: Manufacturer: syz [ 496.784312][ T4235] usb 5-1: config 0 descriptor?? [ 496.848199][ T4235] igorplugusb 5-1:0.0: incorrect number of endpoints [ 497.071906][ T4230] usb 5-1: USB disconnect, device number 6 [ 501.329108][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.335786][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.579519][ T9685] Process accounting resumed [ 502.758017][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 502.906027][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.913512][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.925748][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 503.296099][ T1108] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 503.311330][ T1108] usb 3-1: config 1 has no interface number 0 [ 503.337323][ T1108] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 503.373671][ T1108] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 576 [ 503.384433][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 503.419918][ T1108] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 503.616247][ T1108] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 503.635698][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 503.641742][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.670840][ T1108] usb 3-1: Product: syz [ 503.688404][ T1108] usb 3-1: Manufacturer: syz [ 503.708630][ T1108] usb 3-1: SerialNumber: syz [ 503.796448][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 503.806177][ T9699] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 503.819748][ T9699] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 503.863394][ T1108] usb 3-1: Expected 3 endpoints, found: 2 [ 503.907248][ T7] usb 1-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 503.928714][ T7] usb 1-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 504.096169][ T7] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 504.128393][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.190479][ T7] usb 1-1: Product: syz [ 504.217500][ T7] usb 1-1: Manufacturer: syz [ 504.245120][ T7] usb 1-1: SerialNumber: syz [ 504.398703][ T4232] usb 3-1: USB disconnect, device number 7 [ 504.667568][ T7] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 504.898065][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1047'. [ 505.002059][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1047'. [ 505.434518][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.534798][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.554015][ T7] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 505.573038][ T7] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 505.602727][ T7] usb 1-1: USB disconnect, device number 9 [ 505.644609][ T4232] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 505.671225][ T4232] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 506.165707][ T9657] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.174628][ T9657] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.183986][ T9657] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.194713][ T9657] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.312756][ T9657] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.321731][ T9657] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.330906][ T9657] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.339820][ T9657] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.401474][ T9731] wlan0 speed is unknown, defaulting to 1000 [ 506.431413][ T9731] netdevsim0 speed is unknown, defaulting to 1000 [ 507.120910][ T9744] orangefs_mount: mount request failed with -4 [ 510.505380][ T9747] device dummy0 entered promiscuous mode [ 510.511921][ T9743] Process accounting resumed [ 510.653380][ T9765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 510.837981][ T9765] device vlan2 entered promiscuous mode [ 510.869004][ T9765] device gretap0 entered promiscuous mode [ 510.914503][ T9769] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 510.941372][ T9769] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.948737][ T9769] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.159587][ T9769] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.166780][ T9769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.174222][ T9769] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.181345][ T9769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.334727][ T9769] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 512.385805][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1060'. [ 512.475949][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 516.669351][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 518.480767][ T9838] netlink: 'syz.5.1085': attribute type 12 has an invalid length. [ 518.509932][ T9838] netlink: 'syz.5.1085': attribute type 29 has an invalid length. [ 518.571300][ T9838] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1085'. [ 518.721732][ T9838] netlink: 'syz.5.1085': attribute type 3 has an invalid length. [ 518.871859][ T9838] netlink: 'syz.5.1085': attribute type 2 has an invalid length. [ 519.007275][ T9838] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1085'. [ 519.337869][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 519.683098][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1089'. [ 519.705759][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1089'. [ 520.473418][ T9882] ======================================================= [ 520.473418][ T9882] WARNING: The mand mount option has been deprecated and [ 520.473418][ T9882] and is ignored by this kernel. Remove the mand [ 520.473418][ T9882] option from the mount to silence this warning. [ 520.473418][ T9882] ======================================================= [ 526.420864][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 526.889347][ T9913] wlan0 speed is unknown, defaulting to 1000 [ 526.896855][ T9913] netdevsim0 speed is unknown, defaulting to 1000 [ 527.035657][ T4230] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 527.216947][ T9913] chnl_net:caif_netlink_parms(): no params data found [ 527.315762][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 527.555826][ T4230] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 527.568399][ T4230] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 527.580788][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.646015][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.411586][ T9913] device bridge_slave_0 entered promiscuous mode [ 528.507298][ T4230] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.517403][ T4230] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.528487][ T4230] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.542550][ T4230] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 528.551683][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.557000][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.612023][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.689559][ T9913] device bridge_slave_1 entered promiscuous mode [ 528.781333][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.798753][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.808178][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1110'. [ 528.835833][ T4230] usb 5-1: usb_control_msg returned -32 [ 528.841582][ T4230] usbtmc 5-1:16.0: can't read capabilities [ 528.910150][ T9947] bridge2: port 1(erspan0) entered blocking state [ 528.925713][ T8437] Bluetooth: hci5: command 0x0409 tx timeout [ 528.952253][ T9947] bridge2: port 1(erspan0) entered disabled state [ 528.983736][ T9947] device erspan0 entered promiscuous mode [ 529.134357][ T9913] team0: Port device team_slave_0 added [ 529.155118][ T9913] team0: Port device team_slave_1 added [ 529.385855][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.413136][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.692898][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.110247][ T9959] orangefs_mount: mount request failed with -4 [ 530.128803][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.138109][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.195773][ T8437] usb 5-1: USB disconnect, device number 7 [ 530.275995][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.378684][ T9913] device hsr_slave_0 entered promiscuous mode [ 530.422546][ T9913] device hsr_slave_1 entered promiscuous mode [ 530.451640][ T9975] tmpfs: Unknown parameter 'usrquota' [ 530.466071][ T9913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.473702][ T9913] Cannot create hsr debugfs directory [ 530.721317][ T9989] netlink: 'syz.4.1117': attribute type 1 has an invalid length. [ 531.006008][ T4176] Bluetooth: hci5: command 0x041b tx timeout [ 531.863872][ T9913] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 531.909276][ T9913] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 531.921975][ T9913] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 531.991036][T10009] fuse: Bad value for 'fd' [ 532.052396][T10011] input: syz1 as /devices/virtual/input/input9 [ 532.064849][ T9913] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 532.521711][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.089094][ T9913] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.139842][ T9681] Bluetooth: hci5: command 0x040f tx timeout [ 533.160032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 533.188830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 533.604036][T10026] orangefs_mount: mount request failed with -4 [ 533.757175][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 533.802447][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.865880][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.873008][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.961290][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.992477][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.027261][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.034391][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.050446][T10041] fuse: Bad value for 'fd' [ 534.060578][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.077071][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.105501][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 534.158409][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.189089][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.201930][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.223025][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.274908][ T9913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.300271][ T9913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.331774][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.342416][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.355148][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.364298][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 534.373622][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 534.391518][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 534.514670][ T4240] tipc: Left network mode [ 534.886256][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.297013][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.402426][T10078] netlink: 'syz.5.1139': attribute type 1 has an invalid length. [ 535.635249][T10078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.655793][ T9681] Bluetooth: hci5: command 0x0419 tx timeout [ 535.687569][T10081] device macvlan2 entered promiscuous mode [ 535.750155][ T9913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.810125][T10082] bond1: (slave ip6gretap2): making interface the new active one [ 535.867207][T10082] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 535.901784][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 536.967463][T10103] orangefs_mount: mount request failed with -4 [ 537.141168][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 537.176489][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.259239][ T9913] device veth0_vlan entered promiscuous mode [ 537.274757][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.285331][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 537.320209][ T9913] device veth1_vlan entered promiscuous mode [ 537.344622][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.375422][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.400048][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 537.423425][ T4240] device hsr_slave_0 left promiscuous mode [ 537.445075][ T4240] device hsr_slave_1 left promiscuous mode [ 537.496372][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.546391][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.574932][ T4240] device bridge_slave_1 left promiscuous mode [ 537.719147][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.752198][ T4240] device bridge_slave_0 left promiscuous mode [ 537.955883][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.701724][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 539.306710][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 539.406351][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.462673][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.634964][ T4240] bond0 (unregistering): Released all slaves [ 539.746378][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 539.754452][T10140] netlink: 'syz.0.1152': attribute type 1 has an invalid length. [ 540.842272][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 540.876967][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 540.902181][ T9913] device veth0_macvtap entered promiscuous mode [ 540.934559][ T9913] device veth1_macvtap entered promiscuous mode [ 541.462952][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.776778][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.947510][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.070428][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.226678][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.414851][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 542.460124][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 542.613253][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 542.727082][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.852524][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.862867][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.873400][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.885066][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.895467][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 542.954392][T10199] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10199] [ 543.626522][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 543.778343][ T9913] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.815690][ T9913] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.949451][ T9913] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.087785][ T9913] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.441266][T10211] netlink: 'syz.5.1170': attribute type 1 has an invalid length. [ 544.650920][T10211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.892082][T10213] device macvlan2 entered promiscuous mode [ 544.898485][T10213] device bond2 entered promiscuous mode [ 544.905299][T10213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 544.913836][T10213] team0: Port device macvlan2 added [ 545.769291][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.884562][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.911814][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 545.959739][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.032045][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.126795][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 547.355731][T10265] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10265] [ 547.554414][T10261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.859395][T10261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.847718][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1186'. [ 548.944711][T10299] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 549.030171][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1186'. [ 549.076578][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 549.154514][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1189'. [ 550.712334][T10309] team0 (unregistering): Port device team_slave_0 removed [ 550.904313][T10309] team0 (unregistering): Port device team_slave_1 removed [ 551.021906][T10309] device bond1 left promiscuous mode [ 551.031131][T10309] device ip6gretap2 left promiscuous mode [ 551.239553][T10309] team0 (unregistering): Port device macvlan2 removed [ 552.040012][T10337] jffs2: notice: (10337) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 554.615236][T10371] ERROR: device name not specified. [ 556.377290][T10304] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.385679][T10304] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.933084][T10304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.005281][T10304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.249715][T10408] ERROR: device name not specified. [ 559.393035][T10304] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.402122][T10304] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.411119][T10304] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.420160][T10304] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.866174][T10422] xt_nfacct: accounting object `syz0' does not exist [ 562.778099][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.784635][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.421154][ T9733] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 565.046802][ T9733] usb 5-1: Using ep0 maxpacket: 8 [ 565.165799][ T9733] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.229944][ T9733] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 565.299088][T10492] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 565.918658][ T9733] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 567.085742][ T9733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.122419][ T9733] usb 5-1: Product: syz [ 567.200939][ T9733] usb 5-1: Manufacturer: syz [ 567.217072][T10513] input: syz0 as /devices/virtual/input/input11 [ 567.887242][ T4232] usb 1-1: [UEAGLE-ATM] firmware is not available [ 569.265177][ T9733] usb 5-1: SerialNumber: syz [ 569.525709][ T9733] usb 5-1: can't set config #1, error -71 [ 569.544369][ T9733] usb 5-1: USB disconnect, device number 8 [ 569.752607][T10536] jffs2: notice: (10536) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 572.780309][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1254'. [ 574.176007][ T4230] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 574.476008][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 574.616171][ T4230] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 574.660284][ T4230] usb 5-1: config 0 has no interface number 0 [ 574.694829][ T4230] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 574.725193][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.764922][ T4230] usb 5-1: config 0 descriptor?? [ 574.985939][ T4230] viperboard 5-1:0.143: version 0.00 found at bus 005 address 009 [ 575.044237][T10579] udc-core: couldn't find an available UDC or it's busy [ 575.053828][ T4230] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 575.085647][T10579] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 575.119131][ T4230] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 575.173823][T10579] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1256'. [ 575.403152][T10614] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7372] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10614] [ 575.551146][ T4230] usb 5-1: USB disconnect, device number 9 [ 578.191189][T10661] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10661] [ 579.180002][T10673] siw: device registration error -23 [ 582.220957][T10710] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10710] [ 585.602831][T10767] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10767] [ 586.837485][T10782] input: syz0 as /devices/virtual/input/input12 [ 587.161934][ T4230] [ 587.164404][ T4230] ====================================================== [ 587.171431][ T4230] WARNING: possible circular locking dependency detected [ 587.178492][ T4230] syzkaller #0 Not tainted [ 587.182912][ T4230] ------------------------------------------------------ [ 587.189933][ T4230] kworker/1:4/4230 is trying to acquire lock: [ 587.196004][ T4230] ffff888077925028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 587.207186][ T4230] [ 587.207186][ T4230] but task is already holding lock: [ 587.214554][ T4230] ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 587.223687][ T4230] [ 587.223687][ T4230] which lock already depends on the new lock. [ 587.223687][ T4230] [ 587.234095][ T4230] [ 587.234095][ T4230] the existing dependency chain (in reverse order) is: [ 587.243136][ T4230] [ 587.243136][ T4230] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 587.251140][ T4230] __mutex_lock_common+0x1e5/0x2400 [ 587.256948][ T4230] mutex_lock_nested+0x17/0x20 [ 587.262248][ T4230] rfkill_register+0x2f/0x970 [ 587.267471][ T4230] hci_register_dev+0x459/0x980 [ 587.273216][ T4230] vhci_create_device+0x32e/0x5c0 [ 587.278845][ T4230] vhci_write+0x389/0x440 [ 587.283717][ T4230] vfs_write+0x748/0xd70 [ 587.288520][ T4230] ksys_write+0x153/0x260 [ 587.293384][ T4230] do_syscall_64+0x4c/0xa0 [ 587.298343][ T4230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 587.304775][ T4230] [ 587.304775][ T4230] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 587.312640][ T4230] __mutex_lock_common+0x1e5/0x2400 [ 587.318379][ T4230] mutex_lock_nested+0x17/0x20 [ 587.323678][ T4230] vhci_send_frame+0x88/0x100 [ 587.328885][ T4230] hci_send_frame+0x1a9/0x2e0 [ 587.334096][ T4230] hci_tx_work+0x9b5/0x16d0 [ 587.339154][ T4230] process_one_work+0x867/0xff0 [ 587.344595][ T4230] worker_thread+0xad7/0x12a0 [ 587.349798][ T4230] kthread+0x42e/0x520 [ 587.354414][ T4230] ret_from_fork+0x1f/0x30 [ 587.359382][ T4230] [ 587.359382][ T4230] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 587.368597][ T4230] __flush_work+0x116/0x210 [ 587.373627][ T4230] hci_dev_do_close+0x201/0x1020 [ 587.379094][ T4230] hci_unregister_dev+0x2eb/0x590 [ 587.384674][ T4230] vhci_release+0x73/0xc0 [ 587.389532][ T4230] __fput+0x212/0x8c0 [ 587.394080][ T4230] task_work_run+0x125/0x1a0 [ 587.399197][ T4230] do_exit+0x635/0x2110 [ 587.403926][ T4230] do_group_exit+0x12c/0x2f0 [ 587.409046][ T4230] get_signal+0x7eb/0x12e0 [ 587.414024][ T4230] arch_do_signal_or_restart+0xe6/0x12a0 [ 587.420231][ T4230] exit_to_user_mode_loop+0x9e/0x130 [ 587.426068][ T4230] exit_to_user_mode_prepare+0xee/0x180 [ 587.432164][ T4230] irqentry_exit_to_user_mode+0x5/0x30 [ 587.438177][ T4230] exc_page_fault+0x88/0x100 [ 587.443304][ T4230] asm_exc_page_fault+0x22/0x30 [ 587.448686][ T4230] [ 587.448686][ T4230] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 587.456332][ T4230] __mutex_lock_common+0x1e5/0x2400 [ 587.462075][ T4230] mutex_lock_nested+0x17/0x20 [ 587.467374][ T4230] bg_scan_update+0x44/0x3b0 [ 587.472562][ T4230] process_one_work+0x867/0xff0 [ 587.477939][ T4230] worker_thread+0xad7/0x12a0 [ 587.483162][ T4230] kthread+0x42e/0x520 [ 587.487777][ T4230] ret_from_fork+0x1f/0x30 [ 587.492726][ T4230] [ 587.492726][ T4230] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 587.502547][ T4230] __lock_acquire+0x2c66/0x7b50 [ 587.508002][ T4230] lock_acquire+0x19e/0x400 [ 587.513037][ T4230] __flush_work+0x116/0x210 [ 587.518079][ T4230] __cancel_work_timer+0x3f4/0x560 [ 587.523718][ T4230] hci_request_cancel_all+0xcc/0x300 [ 587.529550][ T4230] hci_dev_do_close+0x4e/0x1020 [ 587.534937][ T4230] hci_rfkill_set_block+0x101/0x180 [ 587.540669][ T4230] rfkill_set_block+0x1c1/0x3c0 [ 587.546052][ T4230] rfkill_epo+0x75/0x170 [ 587.550827][ T4230] rfkill_op_handler+0x76/0x220 [ 587.556473][ T4230] process_one_work+0x867/0xff0 [ 587.561877][ T4230] worker_thread+0xad7/0x12a0 [ 587.567088][ T4230] kthread+0x42e/0x520 [ 587.571687][ T4230] ret_from_fork+0x1f/0x30 [ 587.576637][ T4230] [ 587.576637][ T4230] other info that might help us debug this: [ 587.576637][ T4230] [ 587.586870][ T4230] Chain exists of: [ 587.586870][ T4230] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 587.586870][ T4230] [ 587.602607][ T4230] Possible unsafe locking scenario: [ 587.602607][ T4230] [ 587.610085][ T4230] CPU0 CPU1 [ 587.615470][ T4230] ---- ---- [ 587.620845][ T4230] lock(rfkill_global_mutex); [ 587.625622][ T4230] lock(&data->open_mutex); [ 587.632741][ T4230] lock(rfkill_global_mutex); [ 587.640035][ T4230] lock((work_completion)(&hdev->bg_scan_update)); [ 587.646637][ T4230] [ 587.646637][ T4230] *** DEADLOCK *** [ 587.646637][ T4230] [ 587.654888][ T4230] 3 locks held by kworker/1:4/4230: [ 587.660097][ T4230] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 587.670378][ T4230] #1: ffffc9000317fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 587.680821][ T4230] #2: ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 587.690334][ T4230] [ 587.690334][ T4230] stack backtrace: [ 587.696229][ T4230] CPU: 1 PID: 4230 Comm: kworker/1:4 Not tainted syzkaller #0 [ 587.703702][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.713782][ T4230] Workqueue: events rfkill_op_handler [ 587.719187][ T4230] Call Trace: [ 587.722555][ T4230] [ 587.725561][ T4230] dump_stack_lvl+0x188/0x250 [ 587.730340][ T4230] ? load_image+0x410/0x410 [ 587.734900][ T4230] ? show_regs_print_info+0x20/0x20 [ 587.740126][ T4230] ? print_circular_bug+0x12b/0x1a0 [ 587.745356][ T4230] check_noncircular+0x296/0x330 [ 587.750315][ T4230] ? look_up_lock_class+0x71/0x110 [ 587.755549][ T4230] ? add_chain_block+0x9b0/0x9b0 [ 587.760517][ T4230] ? lockdep_lock+0xf1/0x1f0 [ 587.765131][ T4230] ? __lock_acquire+0x1305/0x7b50 [ 587.770175][ T4230] ? mark_lock+0x94/0x320 [ 587.774529][ T4230] ? _find_first_zero_bit+0xd1/0xf0 [ 587.779814][ T4230] __lock_acquire+0x2c66/0x7b50 [ 587.784794][ T4230] ? verify_lock_unused+0x140/0x140 [ 587.790014][ T4230] ? verify_lock_unused+0x140/0x140 [ 587.795253][ T4230] lock_acquire+0x19e/0x400 [ 587.799779][ T4230] ? __flush_work+0xfa/0x210 [ 587.804391][ T4230] ? __lock_acquire+0x7b50/0x7b50 [ 587.809439][ T4230] ? read_lock_is_recursive+0x10/0x10 [ 587.814854][ T4230] ? start_flush_work+0x784/0x830 [ 587.819920][ T4230] ? __lock_acquire+0x13dc/0x7b50 [ 587.824966][ T4230] __flush_work+0x116/0x210 [ 587.829486][ T4230] ? __flush_work+0xfa/0x210 [ 587.834114][ T4230] ? flush_work+0x20/0x20 [ 587.838455][ T4230] ? try_to_grab_pending+0xfb/0x820 [ 587.843837][ T4230] ? mark_lock+0x94/0x320 [ 587.848297][ T4230] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 587.854312][ T4230] ? lock_chain_count+0x20/0x20 [ 587.859188][ T4230] ? mark_lock+0x94/0x320 [ 587.863538][ T4230] ? __cancel_work_timer+0x36a/0x560 [ 587.868853][ T4230] __cancel_work_timer+0x3f4/0x560 [ 587.873989][ T4230] ? cancel_work_sync+0x20/0x20 [ 587.878860][ T4230] ? __cancel_work+0x1f9/0x2e0 [ 587.883652][ T4230] ? lockdep_hardirqs_on+0x94/0x140 [ 587.888873][ T4230] ? __cancel_work+0x27b/0x2e0 [ 587.893660][ T4230] ? cancel_work+0x20/0x20 [ 587.898114][ T4230] ? __rwlock_init+0x140/0x140 [ 587.902994][ T4230] hci_request_cancel_all+0xcc/0x300 [ 587.908304][ T4230] hci_dev_do_close+0x4e/0x1020 [ 587.913177][ T4230] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 587.919085][ T4230] ? _raw_spin_unlock+0x40/0x40 [ 587.923971][ T4230] hci_rfkill_set_block+0x101/0x180 [ 587.929185][ T4230] ? rcu_lock_release+0x20/0x20 [ 587.934048][ T4230] rfkill_set_block+0x1c1/0x3c0 [ 587.938910][ T4230] rfkill_epo+0x75/0x170 [ 587.943166][ T4230] rfkill_op_handler+0x76/0x220 [ 587.948031][ T4230] process_one_work+0x867/0xff0 [ 587.953000][ T4230] ? worker_detach_from_pool+0x240/0x240 [ 587.958648][ T4230] ? lockdep_hardirqs_off+0x70/0x100 [ 587.963951][ T4230] ? _raw_spin_lock_irq+0xb7/0xf0 [ 587.968978][ T4230] ? _raw_spin_lock_irqsave+0x100/0x100 [ 587.974532][ T4230] ? wq_worker_running+0x97/0x170 [ 587.979572][ T4230] worker_thread+0xad7/0x12a0 [ 587.984290][ T4230] kthread+0x42e/0x520 [ 587.988382][ T4230] ? rcu_lock_release+0x20/0x20 [ 587.993245][ T4230] ? kthread_blkcg+0xd0/0xd0 [ 587.997849][ T4230] ret_from_fork+0x1f/0x30 [ 588.002278][ T4230] [ 588.299501][ T23] wlan0 speed is unknown, defaulting to 1000