last executing test programs: 43.300524017s ago: executing program 1 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/raw6\x00') sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000000)=@l2={0x1f, 0x3, @none, 0x8, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYBLOB="8a2aae0d294e38d55a878b108276820562d42ad50378c3016c8576f0737e90f6861385f3963800bdc2926ba66e719381bcc6388325b66673824ac12c58875c95c0ee738dd97ad3e83fb1345d327a37fc04ff2123cc6d38cdddc71623", @ANYBLOB="04233ddcac0f6d6a4805b36dd8412a43ca9259ab65881659882839cb3df45092a8c4374ee56b222b7f", @ANYRES64=r5, @ANYRESOCT, @ANYRES32=r6, @ANYRES32=r5], 0x10}, 0x8000) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f00000000c0)) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=ANY=[], 0x14c}, 0x1, 0x0, 0x0, 0x8001}, 0x4810) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @void}, 0x10) (async, rerun: 32) r7 = socket$kcm(0x2, 0x5, 0x0) (async) fsopen(&(0x7f00000001c0)='erofs\x00', 0x0) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r8, 0xeb, 0x10, &(0x7f0000000340)=""/40, &(0x7f0000000000)=0x28) (async) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000500)="9f", 0x1}], 0x1}, 0x4cbe8) (async, rerun: 32) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100), 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRESDEC=r4], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x22}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'rose0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r10, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 43.070060349s ago: executing program 1 (id=633): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/189, 0xbd}, {0x0}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/213, 0xd5}, {&(0x7f0000001880)=""/190, 0xbe}], 0x4, &(0x7f00000019c0)=""/219, 0xdb}, 0x1000}, {{&(0x7f0000001ac0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=""/205, 0xcd}, 0x2}], 0x4, 0x100, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000d80)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) 42.180315274s ago: executing program 1 (id=635): r0 = openat$sr(0xffffff9c, 0x0, 0x80080, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000d80)={'\x00', 0x2d25, 0x1, 0xfffffffb, 0x6, 0x4}) 42.100532102s ago: executing program 1 (id=636): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x801, 0x70bd23, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21514}, [@IFLA_GROUP={0x8}, @IFLA_MAP={0x20, 0xe, {0x0, 0xfffffffeffffffff, 0x0, 0x7, 0x4, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa044}, 0x44014) 42.10032422s ago: executing program 1 (id=637): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) (async) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) recvmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x14006) r5 = epoll_create1(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000000)={0x2}) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000140)={0x80000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000140)={0x80000000}) r6 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r6, 0x0, 0x29, 0x0, &(0x7f0000000100)) close(r0) 41.835118748s ago: executing program 1 (id=638): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r1, 0x89f1, &(0x7f0000000100)={0x3ff, 0x2, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7c) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58010000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="0600cd000000000031013300000000000802110000010802110000005050505050505f00ffffffff"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) writev(r0, &(0x7f0000000180), 0x0) 41.722495817s ago: executing program 32 (id=638): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r1, 0x89f1, &(0x7f0000000100)={0x3ff, 0x2, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7c) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58010000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="0600cd000000000031013300000000000802110000010802110000005050505050505f00ffffffff"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) writev(r0, &(0x7f0000000180), 0x0) 37.232202496s ago: executing program 4 (id=640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_CMP_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x96f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r6, r5, 0x4, r5}, 0x10) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) 36.130382584s ago: executing program 4 (id=658): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x9) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4004040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4040080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000100)=""/209) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xb) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, 0x0, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 34.849695981s ago: executing program 4 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x78201, 0x80) r1 = openat(r0, &(0x7f0000000140)='./file2\x00', 0x621c2, 0x10) ftruncate(r1, 0x8800000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r6) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x30) keyctl$clear(0x7, 0xfffffffffffffffb) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r7 = syz_io_uring_setup(0x28cb, &(0x7f0000000200)={0x0, 0xd365, 0x10100, 0x3, 0x80000000}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r7, 0x48e9, 0x225e, 0x2, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 33.905036338s ago: executing program 4 (id=672): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_submit(0x0, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfe}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0xffffffffffffffc2, 0x0, 0x0, 0x0, r1}]) openat(r1, &(0x7f0000000080)='./file0/../file0\x00', 0x4a280, 0x41) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x241, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10010, &(0x7f0000000340)={[{@redirect_dir_follow, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r5, 0x9, 0x2) getdents64(r5, 0x0, 0x4f) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffe0, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000080) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delchain={0x54, 0x65, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0x6}, {0x2, 0xb}, {0xb, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x7}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4db48645c10c8c65}, 0x4008000) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r7, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x44844, &(0x7f0000001100)={0xa, 0x0, 0xfffffffe, @loopback, 0x6}, 0x1c) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x20000852, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000000bbbb00800000080045380200000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000817f00000100186371ae9b1c030000"], 0x0) 33.458235519s ago: executing program 4 (id=676): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) removexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.opaque\x00') ioctl$TCFLSH(r0, 0x540b, 0x2) 33.289095227s ago: executing program 4 (id=677): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x5) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000094c0)=0xfffffffd, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x10000060, 0x8, 0x0, 0x6, 0x1, 0x10000, 0xc, 0x8}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000224e0000", 0x58}], 0x1) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, 0x0, 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000600180100002020ff00000000bfa100000000000007010014f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x60, r2, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x8000) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 17.882971528s ago: executing program 33 (id=677): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x5) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000094c0)=0xfffffffd, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x10000060, 0x8, 0x0, 0x6, 0x1, 0x10000, 0xc, 0x8}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000224e0000", 0x58}], 0x1) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, 0x0, 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000600180100002020ff00000000bfa100000000000007010014f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x60, r2, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x8000) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 9.790075737s ago: executing program 3 (id=783): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61726b00000000ca6c180e1659e65298da0a01390d80b3abf72666c7449b7776e5e1382387bb168310234e267ca08ddb95e8f5cb7d3afdbdbb83d2311e3f73532d405868d4293a849404ec0fa65bde1c8df2aed9b467d2aed55c0ff1a763a4cfdcfd4b71f0dacf2f798c3dfcdfeda0c1a57329fa561b6d2462507046af6ff05d95c9585431b3b5301a700ca48fcfaee7670622db472f700e8a706c5f"], 0x58}, 0x1, 0x0, 0x0, 0x110}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2a060400) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) 7.031900701s ago: executing program 0 (id=792): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/189, 0xbd}, {0x0}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/213, 0xd5}, {&(0x7f0000001880)=""/190, 0xbe}], 0x4, &(0x7f00000019c0)=""/219, 0xdb}, 0x1000}, {{&(0x7f0000001ac0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=""/205, 0xcd}, 0x2}], 0x4, 0x100, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) 7.000005301s ago: executing program 3 (id=793): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x4, 0x4, 0x4, 0xfffffffffffffff0, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x1000, 0x1, 0xfffffdfc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0x8, 0x8, 0xe, 0x3, 0xbfff8001, 0x6, 0x3, 0x2, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x0, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5b, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x8, 0x80000001, 0x40, 0x3ff, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x40000004, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x7d, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x6, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x8, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x10001, 0x4, 0x71c], [0x81, 0x6, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x29, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x4, 0x0, 0x6d, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x8, 0x7, 0x4, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x1, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(&(0x7f0000000080)) 6.008348972s ago: executing program 0 (id=798): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0000000210001002abd7000fddbdf25ff010000000000000000000000000001fc020000001693dfb0000000000000014e220ffd4624fffc020000802f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b06b6e000200000050001100fc0200000000000000000000000000006401010000000000000000000000000000000000000000000000000000000000ff0200000000000000000000000000012b0000000135000002000200"], 0xa0}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x658, 0x0, r2, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r3, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r3, r4, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r3, r4, 0x8000, 0x1ff8000, 0x7000000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r3, r4, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r3, r4, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r3, r4, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r3, r4, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r3, r4, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r4, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x40, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 5.926228115s ago: executing program 0 (id=799): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f50b8fe7d596533f400500050005000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61726b00"/88], 0x58}, 0x1, 0x0, 0x0, 0x110}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='task_rename\x00', r4}, 0x18) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xc27c3, 0x10b) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.449911844s ago: executing program 3 (id=803): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000080)='-1\x00', 0x3) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 4.389862792s ago: executing program 5 (id=810): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x4c) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x58}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) get_mempolicy(0x0, 0x0, 0xf23a, &(0x7f0000ffe000/0x1000)=nil, 0x3) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r6, 0x29, 0x1a, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00', r9}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0x40045304, &(0x7f0000000300)={0x8106, 0xc93b, 0x1, 'queue0\x00', 0x80000001}) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\xeb\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x5) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) 4.319499238s ago: executing program 0 (id=811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/59, 0x3b}], 0x2, &(0x7f0000000340)=""/28, 0x50}, 0x2}, {{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000006c0)=""/111, 0x6f}], 0x5, &(0x7f0000000780)=""/53, 0x35}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)=""/165, 0xa5}, {&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f00000007c0)}, {&(0x7f0000000a80)=""/72, 0x48}, {&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/212, 0xd4}], 0x6, &(0x7f0000000d00)=""/228, 0xe4}, 0x7fff}, {{&(0x7f0000000e00)=@phonet, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/1, 0x1}], 0x2000000000000221, &(0x7f0000000f00)=""/238, 0xee}, 0x7}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001000)=""/93, 0x5d}, {&(0x7f0000001080)=""/111, 0x6f}], 0x2, &(0x7f0000001140)=""/82, 0x52}, 0x6}, {{&(0x7f00000011c0)=@isdn, 0x80, &(0x7f0000002540)=[{&(0x7f00000007c0)=""/17, 0xb}, {&(0x7f0000001280)=""/44, 0x2c}, {&(0x7f0000002300)=""/6, 0x6}, {&(0x7f0000002340)=""/133, 0x85}, {&(0x7f0000001240)=""/59, 0x34}, {&(0x7f0000002440)=""/248, 0xf8}], 0x6}, 0x59a6}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002580)=""/208, 0xd0}, {&(0x7f0000002680)=""/192, 0xc0}, {&(0x7f0000002740)=""/182, 0xb6}, {&(0x7f0000002800)=""/165, 0xa5}, {&(0x7f00000028c0)=""/177, 0xb1}], 0x5}, 0x7}], 0x7, 0xa043, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) unshare(0x40020000) r3 = socket$nl_route(0x10, 0x3, 0x0) migrate_pages(0x0, 0x7f, &(0x7f0000000000)=0x8000000000000001, &(0x7f0000000040)=0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1002}}]}]}}}]}, 0x6c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 4.318529268s ago: executing program 5 (id=812): getrusage(0x0, &(0x7f0000000400)={{0x0}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000b00)={'das1800\x00', [0xfffffe01, 0x7fffffff, 0x1, 0xffff, 0x7, 0x27d1, 0xb80, 0xfffffffa, 0x7ff, 0x0, 0x6, 0x8, 0x0, 0x5, 0x9, 0xf5, 0x6, 0x9235, 0xe259, 0xffff, 0x7, 0x41d, 0x7, 0x9, 0x799, 0x6669, 0x2, 0x1000, 0x68b, 0x2, 0x7ff, 0x8]}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3, r6}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x40000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f0000000280)="71869f89efd70000", 0x8}], 0x2, &(0x7f0000000280)}, {0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000900)="8e5722737ca71e2161c9273d6e14eb173b36e2c2f9e310d3c6da2a69da4e05d2ed0ceadc347ee3fbf62788136ca86cdbd0f61321f09fb850bc01129f9a4213e2155112c3202fb91f6e775fea6564cd61ece37b9063dee04070fdb25e3ca753bce0e9ad612dda49ef8e9003cb11d2a975a755de15b0ec8055fe3a938bd2f942810f07159b5e0a54afbdf92e3ea312fee48105eb91c2b9cd83361811e3081a3b68a359717d8dd256bb51fc576bdb8babbd13535470409ba02ca3c3c0081d2372a7af37fa3aca7f7415cd64ad6cb5eede18eb00fde4e9ae5d05e461a6404a219ca78c59c54b63974fa6dc7c5a4c64a13cda847e07e7a7", 0xf5}, {&(0x7f0000000a00)="8698f156a6d48bb46c9ac5188710a87491d6614d52fb045003981a634fd824e946f23aaedd3c34c09fc543fc953166fe4c88c719407d381d113505565669e0c21bec29a3cf93e499fe9ec6448622beffabe9da2affc02d7e9b743207bbce48c4e4959064a664bb56150bce07dd34e8c1339f7251ae52ac7b3bb93db92b5c43b34b4a49ee75b85b7e6fd3ba2dec10fcf834f78095859f12cb775fc660cfb9b37e28e602e54d5a33fcb8dac24226c144d7f6c6824ddd2f0fb8f39bd8fab7f7ec37d6b12b61364cc44e3851c25e8b2fedc5eae6a4", 0xd3}, {&(0x7f0000000500)="6f2be49a5269574759ba2a46ab80119e9a74483c6c03086018422c2b7c6b5ab7d55b056b07bb7c3090a0118429accf0bc0027fe52c2d664b3376ff0fab67b3f9dc594ed333367d5ec752f927ac6bda9c7164560b8c96a802948350834c7ccb9979fde82ddd91b0b65b8419ec630e69adeea972e10241478e0e16de2f41f1936e", 0x80}, {&(0x7f0000000780)="15499da05d738b5d247971c2d1b5bcd5bee7afaedaf0a98d0cd2ff79927bf78cf7cec8eaed08ae9b5d084c9fb4249a87269672380e573adbd45eb597e1942c7583f5aacca460b9fa46971ad89882281d8a23e78f89d821f588d168491bbb20df336a26210602b5d5a824bff531ebf0a1a1fc06d501e67ac8d97d3c33dfc26ca41666734b0b85ecff7e71", 0x8a}], 0x5, &(0x7f00000041c0)=[@iv={0x44, 0x117, 0x2, 0x33, "f936b074abf717b458844f920f831c7933ce2ebcd6e44f5b3d0f8485951f79b576e9958dd2ece29d69f005377bc8d456d3566c"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x45, "050878e4f6c3979d67410557ae794028005d37017339c7afa587732879c9aac8456194afcf86e8c61f23da364f2ed0ae49d10562be72cb6dc721b954f0223687d3c3369cc8"}, @iv={0xf4, 0x117, 0x2, 0xe3, "6bed7ad49914d6ba524b6d0d52a101ed4060567e75a867555137d363c8273afd1bf4c88a5a21ab0a4098f02582d5b1fbd958a00116e149f7eef9638eac5f1569a122d484d64f0343df2dbb1d34c227f3734744ffa9b6af34ff3b85a9a61d1084b4f877a9890d6af1166459947414cd8f55807683eeb55a3e94c97f2faba9614d8f7fb36d902392ece0c55d40b7e73ca68b1602818018f689e9f4928a0a84b6a89acba9bbb218aef44ec8314cbe29d298eb9b1c04bfba6f492dbaeeb5a0ef823a082c523e12054dddb526ce99b04c3fe632935eea292c9b5bb275134b963514c5a51faa"}], 0x1c0, 0x8081}, {0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)="cf8d7ceddc19d1722604772d497b7b92cb3bc77bcc8aa40ca2d57096db05171e9c5091dfb6d84dbcb786ed77cc0571d12bae3a475b", 0x35}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="1000000017010000040000000200000038040000000000000000000027000000aadf5a286219b532c511c8f2f48f5e31405e4353834704b9e48013f71671c87acdfa5a0569282900"], 0x48, 0x1}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="75f4f001addb15dd8bedb3954e13148e71a18c790ac293c8ca2751fcca00251931e19cb5cc62bcde26ee49fa528626e2b264450fad9edb6328a500f3", 0x3c}], 0x1, &(0x7f0000000d40)=[@assoc={0x10, 0x117, 0x4, 0xbc}], 0x10, 0x4845}, {0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="5b9fb7c68b9da87ff05e939a89483408801be2e35615bc7fc876fc43961d26e3ab60f52fafa2d3a4f28d6b987b7cf28bf35b9440586d156b54d14e25f78fa78d593102266a5bdd6703f70ba13ef0970508403b33", 0x54}, {&(0x7f0000002e00)="327fa75fb60cb6fe55d16e9a81c6e3678aa6b56eb6b5b4dabf99008d0d60105d0b291b1b5441b629df5a487eb644736048dc3fbd7248e8679f4cc82d2c087388f688ed71e37801194f74377e8f7766c4e3b38ad22a9c2aa9b2a8e9dd67ea3dee566680c97965b4c3a2213b8b527bdee0dea623ee34a3766718efdb8b5b326734c20c8eee472fecdc277425ab86a3a564c80bd45d7d3bd2cc13150bb49281b8d11ff3d783f1181359", 0xa8}], 0x4, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"/728], 0x2d8, 0x4000044}, {0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003200)="7d307046883a7cdb422a8178d28433108d78684d6484a540d77618594422d2cf6a1b0a45c1a7aa3f9a66be3387f7f09e27bc52c4a2fae72baf6995adb3490412777d257cb8a7475fb1c2a79c8e18dc5de948150d06130622ec54460038da574d7ff73ab7bd25917628a8b53f62e1d7d6ebc5af61c362559c9c60387f1c2ccd09576045083fdf", 0x86}, {&(0x7f00000032c0)="f62346f10002e988558a86d81d9d2016652c0f016a4d9b40c5d998a17be0c0f8544ab2a1045ba4974651aeffbf3b1dccf434bbd715bf9c14e7bc3a48f1574da67927fef2ea2a54e094be381cb7db65e0426076748698ba2bdf33565587b36a822d13d69f533dd5417e6e71600377329bfe0bcdfd1ef30bc218febf29c24af55aa33e99531b6734fc57a7720a710f", 0x8e}, {&(0x7f0000003380)="b1381c9632378615a2517ed36da39e0a1454ffd9eaa2acc4b9789b7d7b810d4cceb5fc2cabd552a382e0cf9b7612aa77d02fce7c751cbe74eddcd30edb727cf80fd228c8d5f269a2e631a5474a798ae739aa8347ceb94084b88d54a609d5d4b0b2dcf7ae81fc494842d111fcb5ef13a53ee160dd3a1cd0ead72579549847b02df30d647533d34e59f7cd1e8a19ae418526180d9b20b7ff20424c66627b365a3768e134732c25f62d37ea10dac275621f2a11d41a68b562bc70ed752afba6c78310d48bc02095df431a27a25a1df1edda10b4", 0xd2}, {&(0x7f0000003480)="0d296849a5696ab2d595b4173fdb29d42306f466", 0x14}], 0x4, &(0x7f0000003500)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0xcc, 0x117, 0x2, 0xbc, "67b981ff6e3c2f7c55a5d6818b957a5724c804a914d7de0b47b9c2acadc14a4211042b308ac0ed4c13f9ba5bfc0f1fc91107130e253a12afa9b8523d58b6f89d6700165b4bd1c2bb5322137620405e4a03f34d2fbb761650ea1d9dfe71e1565cd9626bd1ef4bb54b8821efa3407ecc551739d54bc97a35fee6a33c92e33ad4e84da9b99b0de5ccf9286558a952f22b65efb19af5678fccc1b44a0958ca812641d21c1b6466fde125ad060388855ff364e9a0af39d7ff71f8d9a3de0f"}, @op={0x10, 0x117, 0x3, 0x1}], 0xec}, {0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003600)="5fd59a9e463da224bf16a8c5afcc2266899debc901d58daaa8ea6acaf244407a335619e9111ef41154d30200eb204a2aab2ae066b84436cd6c6a57a365ce61e11b565a241397fc597ba13e3ab72e87cafb1efe807d7fa5ab045cc2e2318eb97128fb23232148e3fd3ce45e87e047a1b69526cd319c635c", 0x77}, {&(0x7f0000003680)="827f863e89e144b65d0a56d4eba92a18141b75940cb1adc6520f745bc57e004af5a2c5e82563dbf04e378e7788945f780d226e1f23ee262c03f74057b6f7c3fe8fc365f8b080f3f00a48df6680bda04c3b7bdc81420cd3dc29d8216fa181ae2687d13b9ea8343043182af24afb333bbe02950b452b9e37ed3c3209a6c21d292467c72ba67b", 0x85}, {&(0x7f0000003740)="91ec6e7a4508925f2e77a0f702548b04147bff2378bef4aaedcd3f03646916b690f82e770860f802e238e97d5deebcb87c32f6ad3fab1175154f674d9b8085e293c29b2c705cc499a142b34091d6433a806cf9", 0x53}, {&(0x7f00000037c0)="bb38112bafe2292d927f2fd30b3ea03a8b4877ea848bacaa5e020bd7c9975cf026a52d03f14afa774b493e0d0cc5387fa547eb91a64a8deb07adf2df47133ca52b2987504bf2e9b1872e51e78acc7f8d82aa5fcc80d12fde26889d1082d1898dbf9003ce10ba321ca8812912160a69be0bd123c9d614a169d23048c1407dcd80d4fb980d3d98d4651f49fd69366b7394cedee2fee88c89c6d12fb5fa804f235e9e0dae4d4a56cd4d8dda2ebbff5fbdfbf275", 0xb2}], 0x4, &(0x7f00000038c0)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x69c}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x200}, @iv={0x94, 0x117, 0x2, 0x81, "121e6f49247c5d68e0190e2b64f2443edc255b96df5a4b4d15c05f273e5f94585e85a67587476a289b8f19b8f0acded9c6aa9c51bfc864fec0f7d148b2cb7d4830a899e84925f613692ec505e00178eb1df6bea9b1c329a618233b75a5a12cb0f7514293a4e9fdeb5160072ca94162d20576446cb84669643e7ed2bce5d086afcf"}, @iv={0x88, 0x117, 0x2, 0x78, "84e9458c905b3a4257da49abbf5865cec6711d18e315b170c84376b3c57672aabc438d51aa075ff6e620303b9e952b27f799e8170da14949812b715972c5fbe973dfc380a8e60eef64b62066437209e383d7ac301d6c6e45f37a91d26f12b65781f9813953daacab800f148916314114683afca84a9486a6"}, @iv={0xe8, 0x117, 0x2, 0xd6, "0d787547e5c150e1bb4d1c4335e8f28b99745d1aa285e37ff2742545ac62522e774882e778c004c21279bb3c2dd591f081c6d9cbaf07e776e1c892916e43f5c059d8ea225b4669b6323dc45c3b5f695b7577a7b1fae14b082ffce78cb4c2997daae2ca366aba26d9780d66bfbcfa8734ee4b23c29f583e8b409e92f1de70e4c2cecb3376f627f157951320a8ff4e640059ba0d076b04cd602f111c07e4a159e6217557b456f46b9f21092e1028bc128183bf8baef24f042f1ef7f4954bfe93120f82b1d2d05221203962008bfbd1b07c59e43e45896c"}, @op={0x10, 0x117, 0x3, 0x1}], 0x274, 0x881}, {0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003b40)="7b7462531d4b0f677c167db058d5ca93ffc1e864d309e6e268ebc53c414044e4e8dcb49f33dfa3d9a5090618a78619c38079419392cd3dcbf2933a3d80e976a740e36b35f2a50fa4485b3616c8bc421da1b9713555892562b2f91b784cc6003cfd4cb4307b33cc3e7c0aaeceea6e93e7f1d5773eb4e8480b12", 0x79}, {&(0x7f0000003bc0)="d759cf3d6016", 0x6}, {&(0x7f0000003c00)="ee396c8dfd1c8fe09274f2984ae6c26726cfb84ae28b4ebe8978678535bf8cef188ce5695acaccad300254f55191fae0ca5ed622e7e519450318330066191e11b74445a3b5cae9c278d4021f52dc4def807fff213f8d60661886c61e8a17bc855eb834bd71cc575f4bc114b6ca72b2aacfec3bbc", 0x74}, {&(0x7f0000003c80)="9813894de3c108c02cbd90f34867cd6428681a5b2438b7f0a5c7536f5e6236adebf76bf6baf75ad07be1ab302ce9163795b30540cd5cbb7820dbc5b2c80ac0267eeaf823a70450eec4b039ab10e60dcb0ff0fc2cfec1dded6e457fbc4fc86b4a", 0x60}, {0x0}, {&(0x7f0000003e00)="ba4a182a680587d936ff5cb06ff86a78a16114fa387eadfcd2cd79c3206a72ed45196dc777c4828597cee17f31cbaa2523d65ed0748fa1f5197a7ea4c081224c26cb0b4cc36df30021f2b3c3bff4c71d9b21560c2c2892f3d1d07a58c953c40df813d487e6ca926b5a41072412a8d371e776fb1aa98b6c5af3cf97ae94d50cca89c515508172e8c3db31eb58bd93642f6462c001e2d08bab011e2d1e914c0033e1883af88e5c465d5269e0e1d8a799d1327cd26a87de7fe9baffd883fdb36e4e1a11b5789d40910ddc05770cb299406aa4bdf63f5f267b8f56e6ef3cc7bdea131b29c02c678e9cdd2847bc5c614335c7c7dec9", 0xf3}], 0x6, &(0x7f0000004380)=[@op={0x10}, @iv={0x64, 0x117, 0x2, 0x52, "8ea8153ceb23c9f55d1149673f8f28e0b4e2b5c30b44e8f8f8d0400363841989538eb05951b9c28ced0b5f087a65ba8b602de5a0eae9a823f5ae6fad067732360b7781df4f7fac3a4169ffdaa1fc8eb8a4ca"}, @iv={0xcc, 0x117, 0x2, 0xb9, "cffcfd1904e72fbdc3b3bb21c6de780ec551ace4e1bb3c1b1a36b8d7f616ed80b22703769b1097328eea4ff0f630840be7e2f99bdfc0f009fe0d5f83964143bb45798f01a0381d0669789a4b1b507ee9d9ef8d46250e912b3ec5fd8ba2d312e5df2847bd6dec2ab589784c425c9cd1f2919865c79fb17f2519a9d666bc25b7aadf554e2a1cf15d693a3481e8dd2531b18d5e7d2a7d2d94e4c64a62548c8bad914dba7bff7a6f4b97eb8eac40f30d424d1b38592247aa7ec605"}, @op={0x10, 0x117, 0x3, 0x1}], 0x150, 0x40041}], 0x8, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.472049689s ago: executing program 2 (id=813): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x78201, 0x80) r1 = openat(r0, &(0x7f0000000140)='./file2\x00', 0x621c2, 0x10) ftruncate(r1, 0x8800000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r6) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r7 = syz_io_uring_setup(0x28cb, &(0x7f0000000200)={0x0, 0xd365, 0x10100, 0x3, 0x80000000}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r7, 0x48e9, 0x225e, 0x2, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 3.119452077s ago: executing program 0 (id=814): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/189, 0xbd}, {0x0}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/213, 0xd5}, {&(0x7f0000001880)=""/190, 0xbe}], 0x4, &(0x7f00000019c0)=""/219, 0xdb}, 0x1000}, {{&(0x7f0000001ac0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=""/205, 0xcd}, 0x2}], 0x4, 0x100, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) 2.431942627s ago: executing program 5 (id=815): r0 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8000, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8005) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd24, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) r5 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delqdisc={0xa0, 0x25, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa4f3df85aefccad2, 0xc}, {0xc, 0xfff1}, {0xfff1, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3d9}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x40, 0x4d00, 0xffff, 0x2, 0x808, 0x6402c4fd}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x5, 0x0, 0x2, 0x0, 0x0, 0xfffff1d2, 0x2}}, {0x8, 0x2, [0x3, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}, @TCA_RATE={0x16, 0x5, {0x7, 0x55}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xab6f}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r8 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x5, 0x287}, &(0x7f00000004c0)=0x0, &(0x7f0000000340)=0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) fchmod(r11, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) io_uring_enter(r8, 0x3498, 0x969, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) dup3(r8, r6, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 2.429585708s ago: executing program 3 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x68}}, 0x4008099) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x2) (rerun: 64) 2.349813788s ago: executing program 2 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x78201, 0x80) r1 = openat(r0, &(0x7f0000000140)='./file2\x00', 0x621c2, 0x10) ftruncate(r1, 0x8800000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r6) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r7 = syz_io_uring_setup(0x28cb, &(0x7f0000000200)={0x0, 0xd365, 0x10100, 0x3, 0x80000000}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r7, 0x48e9, 0x225e, 0x2, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 2.34961339s ago: executing program 3 (id=818): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401020000"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x45}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x45}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0) 2.216348236s ago: executing program 3 (id=819): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x18, 0x29, 0x36, '\x00'}], 0x18}}], 0x1, 0x4000000) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, &(0x7f0000000180)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000240)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x11) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l@\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 2.069586998s ago: executing program 5 (id=820): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x4c) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x58}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) get_mempolicy(0x0, 0x0, 0xf23a, &(0x7f0000ffe000/0x1000)=nil, 0x3) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r6, 0x29, 0x1a, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00', r9}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0x40045304, &(0x7f0000000300)={0x8106, 0xc93b, 0x1, 'queue0\x00', 0x80000001}) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\xeb\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x5) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) 1.954697379s ago: executing program 5 (id=821): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=\v\x00\x00\x00\x00\x00\x00\x00000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRES64=r0]) read$FUSE(r2, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x2f3b, 0x104}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x400000000800, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f0000000280)='./file1\x00', 0xe) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000080)) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 1.819023664s ago: executing program 0 (id=822): r0 = io_uring_setup(0x986, &(0x7f0000000180)={0x0, 0x1915, 0x0, 0x0, 0x170}) r1 = io_uring_setup(0x52fc, &(0x7f0000000100)={0x0, 0xba83, 0x800, 0x20000000, 0x194, 0x0, r0}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, 0x0, 0x0) r2 = openat$sr(0xffffff9c, &(0x7f0000000a80), 0x80080, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x5b04, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000d80)={'\x00', 0x2d25, 0x1, 0xfffffffb, 0x6, 0x4}) 1.439500918s ago: executing program 2 (id=823): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x4c) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0}, 0x14) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, 0x0) memfd_create(0x0, 0x5) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) 1.32963469s ago: executing program 2 (id=824): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1f, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x8002, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x8000, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000140)={0x8f, 0x0, 0xf5c2ae81ff56709f}) madvise(&(0x7f000061d000/0x9000)=nil, 0x9000, 0xb) 1.039989227s ago: executing program 5 (id=825): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000080)='-1\x00', 0x3) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 957.554311ms ago: executing program 2 (id=826): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x78201, 0x80) r1 = openat(r0, &(0x7f0000000140)='./file2\x00', 0x621c2, 0x10) ftruncate(r1, 0x8800000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r7 = syz_io_uring_setup(0x28cb, &(0x7f0000000200)={0x0, 0xd365, 0x10100, 0x3, 0x80000000}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r7, 0x48e9, 0x225e, 0x2, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 0s ago: executing program 2 (id=827): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x8dc, "7329561c838c1964cf4318635d01a313f6b01de01ff58bce22494eda47fd0038", 0xffffffffffffffff}) creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0x3c, 0x31, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r5, 0x0, 0x31, 0x0, &(0x7f0000000100)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x811) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') prctl$PR_GET_NAME(0x25, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="0002"], 0x18) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000280)={"7559a1003dce4cb36b333bfc169701a7d0e694e10e4c132c376b39260dd35577", r0}) kernel console output (not intermixed with test programs): ][ T6005] usb 38-1: SetAddress Request (2) to port 0 [ 57.494985][ T6005] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 57.550446][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 57.567259][ T6101] bridge_slave_1: left allmulticast mode [ 57.569206][ T6101] bridge_slave_1: left promiscuous mode [ 57.573757][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.707348][ T6101] bridge_slave_0: left allmulticast mode [ 57.709532][ T6101] bridge_slave_0: left promiscuous mode [ 57.710576][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.815906][ T6095] vhci_hcd: connection reset by peer [ 57.829399][ T46] vhci_hcd vhci_hcd.0: stop threads [ 57.831483][ T46] vhci_hcd vhci_hcd.0: release socket [ 57.833746][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 57.895820][ T5944] Bluetooth: hci3: command tx timeout [ 57.895853][ T5951] Bluetooth: hci1: command tx timeout [ 57.897658][ T5944] Bluetooth: hci2: command tx timeout [ 57.899864][ T5951] Bluetooth: hci0: command tx timeout [ 58.640795][ T6112] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 58.651130][ T6112] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18'. [ 58.907621][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 59.844583][ T40] audit: type=1326 audit(1766034868.779:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.19" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x0 [ 59.974863][ T5942] Bluetooth: hci0: command tx timeout [ 59.985196][ T5942] Bluetooth: hci2: command tx timeout [ 59.985269][ T5951] Bluetooth: hci1: command tx timeout [ 59.985297][ T5951] Bluetooth: hci3: command tx timeout [ 61.289227][ T10] cfg80211: failed to load regulatory.db [ 61.429605][ T6148] comedi comedi0: Minor 47 could not be opened [ 61.444623][ T6148] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.536155][ T6005] usb 38-1: device descriptor read/8, error -110 [ 63.230361][ T6005] usb usb38-port1: attempt power cycle [ 63.445274][ T76] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.645167][ T76] usb 5-1: Using ep0 maxpacket: 32 [ 63.692637][ T76] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.706035][ T76] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.730905][ T76] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.744065][ T76] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.756388][ T76] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.768036][ T76] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.776475][ T76] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 63.788653][ T76] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.805672][ T6005] usb usb38-port1: unable to enumerate USB device [ 63.819001][ T76] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.838869][ T76] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.960691][ T76] usb 5-1: config 0 descriptor?? [ 64.236036][ T76] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 65.517980][ T34] usb 5-1: USB disconnect, device number 2 [ 65.535186][ T34] usblp0: removed [ 66.478007][ T6194] capability: warning: `syz.1.35' uses deprecated v2 capabilities in a way that may be insecure [ 66.507304][ T6194] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 67.506346][ T6198] cdrom: dropping to single frame dma [ 67.900082][ T6205] netlink: 'syz.0.38': attribute type 15 has an invalid length. [ 67.902524][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'. [ 67.982771][ T6210] process 'syz.1.40' launched './file0' with NULL argv: empty string added [ 68.578994][ T6221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.584028][ T6221] block device autoloading is deprecated and will be removed. [ 69.723121][ T6233] team0: entered allmulticast mode [ 69.725414][ T6233] team_slave_0: entered allmulticast mode [ 69.727824][ T6233] team_slave_1: entered allmulticast mode [ 69.731137][ T6233] team0: left allmulticast mode [ 69.733360][ T6233] team_slave_0: left allmulticast mode [ 69.738812][ T6233] team_slave_1: left allmulticast mode [ 69.987749][ T6236] tipc: Started in network mode [ 69.989755][ T6236] tipc: Node identity 4, cluster identity 4711 [ 69.992176][ T6236] tipc: Node number set to 4 [ 70.820173][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.49'. [ 70.835183][ T6248] mmap: syz.0.51 (6248) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.850070][ T6246] sit1: entered allmulticast mode [ 71.984233][ T6268] x_tables: duplicate underflow at hook 1 [ 72.780127][ T6288] usb 1-1: USB disconnect, device number 2 [ 72.883259][ T6294] netlink: 'syz.2.62': attribute type 10 has an invalid length. [ 72.889124][ T6294] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.926418][ T6294] bond0: (slave team0): Enslaving as an active interface with an up link [ 73.116452][ T6290] binder: 6289:6290 ioctl c0306201 80000000 returned -22 [ 73.291203][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 73.294375][ T6298] netlink: 'syz.2.65': attribute type 8 has an invalid length. [ 74.059064][ T6337] loop3: detected capacity change from 0 to 456 [ 74.064665][ T6337] loop3: unable to read partition table [ 74.080419][ T6337] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 75.612512][ T6360] ªªªªª»: renamed from hsr0 (while UP) [ 75.719156][ T6362] Bluetooth: MGMT ver 1.23 [ 75.786881][ T6371] binder: 6369:6371 ioctl c0306201 80000680 returned -14 [ 75.808209][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 75.978344][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.980473][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.058595][ T6379] loop6: detected capacity change from 0 to 2640 [ 76.061868][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.064415][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.067427][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.070024][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.072686][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.075699][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.078440][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.081028][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.083704][ T5941] ldm_validate_partition_table(): Disk read failed. [ 76.087583][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.090279][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.092891][ T5941] Dev loop6: unable to read RDB block 0 [ 76.095219][ T5941] loop6: unable to read partition table [ 76.109528][ T6379] ldm_validate_partition_table(): Disk read failed. [ 76.111932][ T6379] Dev loop6: unable to read RDB block 0 [ 76.113814][ T6379] loop6: unable to read partition table [ 76.118415][ T6379] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 76.224185][ T6381] netlink: 'syz.3.88': attribute type 10 has an invalid length. [ 76.235166][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.237688][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.243493][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.245863][ T6381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.248281][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.250619][ T6381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.255517][ T6381] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 76.492257][ T6390] 9pnet_virtio: no channels available for device syz [ 76.691110][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 77.212137][ T6408] kernel profiling enabled (shift: 17) [ 77.221193][ T6408] hsr0: entered promiscuous mode [ 77.255850][ T6408] hsr0: left promiscuous mode [ 77.348848][ T6397] syz.2.94 (6397) used greatest stack depth: 19000 bytes left [ 77.457266][ T6416] netlink: 296 bytes leftover after parsing attributes in process `syz.0.102'. [ 77.832441][ T6419] MTD: Couldn't look up '': -2 [ 78.272310][ T6426] netlink: 76 bytes leftover after parsing attributes in process `syz.0.105'. [ 78.377239][ T6430] can: request_module (can-proto-4) failed. [ 78.382677][ T6417] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 78.384753][ T6417] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 78.415630][ T6417] vhci_hcd vhci_hcd.0: Device attached [ 78.675121][ T6434] vhci_hcd: connection closed [ 78.676036][ T13] vhci_hcd vhci_hcd.2: stop threads [ 78.679951][ T13] vhci_hcd vhci_hcd.2: release socket [ 78.682502][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 78.684920][ T6005] usb 42-1: enqueue for inactive port 0 [ 79.215643][ T6005] usb usb42-port1: attempt power cycle [ 79.663196][ T6472] tmpfs: Bad value for 'mpol' [ 79.805679][ T6005] usb usb42-port1: unable to enumerate USB device [ 80.178449][ T6457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 80.181375][ T6457] openvswitch: netlink: Flow key attr not present in new flow. [ 80.184236][ T6457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'. [ 80.507751][ T6488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.122'. [ 80.513486][ T6488] netlink: 640 bytes leftover after parsing attributes in process `syz.2.122'. [ 80.520870][ T6488] netlink: 640 bytes leftover after parsing attributes in process `syz.2.122'. [ 80.889073][ T6496] netlink: 'syz.2.126': attribute type 15 has an invalid length. [ 80.897988][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.126'. [ 81.108419][ T6502] FAULT_INJECTION: forcing a failure. [ 81.108419][ T6502] name failslab, interval 1, probability 0, space 0, times 0 [ 81.112593][ T6502] CPU: 2 UID: 0 PID: 6502 Comm: syz.3.128 Not tainted syzkaller #0 PREEMPT(full) [ 81.112607][ T6502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.112614][ T6502] Call Trace: [ 81.112618][ T6502] [ 81.112622][ T6502] dump_stack_lvl+0x16c/0x1f0 [ 81.112641][ T6502] should_fail_ex+0x512/0x640 [ 81.112653][ T6502] ? __kmalloc_noprof+0xca/0x910 [ 81.112666][ T6502] should_failslab+0xc2/0x120 [ 81.112681][ T6502] __kmalloc_noprof+0xeb/0x910 [ 81.112692][ T6502] ? sctp_auth_create_key+0x35/0xd0 [ 81.112710][ T6502] ? sctp_auth_create_key+0x35/0xd0 [ 81.112723][ T6502] sctp_auth_create_key+0x35/0xd0 [ 81.112738][ T6502] sctp_auth_set_key+0x2a9/0xb40 [ 81.112756][ T6502] sctp_setsockopt+0xb662/0xb8c0 [ 81.112767][ T6502] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 81.112785][ T6502] ? __pfx_sctp_setsockopt+0x10/0x10 [ 81.112796][ T6502] ? find_held_lock+0x2b/0x80 [ 81.112811][ T6502] ? aa_sock_opt_perm+0xfd/0x1b0 [ 81.112826][ T6502] ? sock_common_setsockopt+0x2e/0xf0 [ 81.112842][ T6502] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 81.112858][ T6502] do_sock_setsockopt+0xf3/0x1d0 [ 81.112875][ T6502] __sys_setsockopt+0x120/0x1a0 [ 81.112889][ T6502] __ia32_sys_setsockopt+0xbc/0x160 [ 81.112901][ T6502] ? syscall_trace_enter+0xee/0x220 [ 81.112914][ T6502] __do_fast_syscall_32+0xe8/0x680 [ 81.112931][ T6502] do_fast_syscall_32+0x32/0x80 [ 81.112947][ T6502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.112960][ T6502] RIP: 0023:0xf7fe2579 [ 81.112968][ T6502] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 81.112978][ T6502] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 81.112992][ T6502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 81.113001][ T6502] RDX: 0000000000000017 RSI: 0000000080000400 RDI: 0000000000000009 [ 81.113010][ T6502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.113019][ T6502] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 81.113028][ T6502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.113051][ T6502] [ 81.253917][ T6504] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 81.256569][ T6504] netlink: 396 bytes leftover after parsing attributes in process `syz.3.129'. [ 81.261598][ T6504] tipc: Started in network mode [ 81.263303][ T6504] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 81.267618][ T6504] tipc: Enabled bearer , priority 10 [ 81.719517][ T6516] bond0: (slave bridge0): Releasing backup interface [ 81.723222][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.725598][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.733439][ T6516] bridge_slave_0: left allmulticast mode [ 81.736387][ T6516] bridge_slave_0: left promiscuous mode [ 81.739250][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.749488][ T6516] bridge_slave_1: left allmulticast mode [ 81.751416][ T6516] bridge_slave_1: left promiscuous mode [ 81.753382][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.776986][ T6516] bond0: (slave bond_slave_0): Releasing backup interface [ 81.796183][ T6516] bond0: (slave bond_slave_1): Releasing backup interface [ 81.802742][ T6516] team0: Port device team_slave_0 removed [ 81.826789][ T6516] team0: Port device team_slave_1 removed [ 81.829212][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.831683][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.843175][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.846424][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.851522][ T6516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.428661][ T6005] tipc: Node number set to 4269801488 [ 82.629850][ T6535] FAULT_INJECTION: forcing a failure. [ 82.629850][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.640747][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.3.137 Not tainted syzkaller #0 PREEMPT(full) [ 82.640783][ T6535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.640789][ T6535] Call Trace: [ 82.640793][ T6535] [ 82.640797][ T6535] dump_stack_lvl+0x16c/0x1f0 [ 82.640817][ T6535] should_fail_ex+0x512/0x640 [ 82.640831][ T6535] _copy_to_user+0x32/0xd0 [ 82.640843][ T6535] simple_read_from_buffer+0xcb/0x170 [ 82.640858][ T6535] proc_fail_nth_read+0x197/0x240 [ 82.640876][ T6535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.640893][ T6535] ? rw_verify_area+0xcf/0x6c0 [ 82.640906][ T6535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.640923][ T6535] vfs_read+0x1e4/0xcf0 [ 82.640937][ T6535] ? __pfx___mutex_lock+0x10/0x10 [ 82.640955][ T6535] ? __pfx_vfs_read+0x10/0x10 [ 82.640967][ T6535] ? find_held_lock+0x2b/0x80 [ 82.640985][ T6535] ? __fget_files+0x20e/0x3c0 [ 82.641003][ T6535] ksys_read+0x12a/0x250 [ 82.641017][ T6535] ? __pfx_ksys_read+0x10/0x10 [ 82.641035][ T6535] __do_fast_syscall_32+0xe8/0x680 [ 82.641052][ T6535] do_fast_syscall_32+0x32/0x80 [ 82.641068][ T6535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.641081][ T6535] RIP: 0023:0xf7fe2579 [ 82.641093][ T6535] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 82.641102][ T6535] RSP: 002b:00000000f54d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 82.641112][ T6535] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54d6620 [ 82.641118][ T6535] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 82.641124][ T6535] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 82.641129][ T6535] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 82.641135][ T6535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.641148][ T6535] [ 82.806450][ T6540] Illegal XDP return value 4294967262 on prog (id 25) dev syz_tun, expect packet loss! [ 83.008390][ T6542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 83.011055][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.014173][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 83.042408][ T6546] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 83.048322][ T6546] netlink: 224 bytes leftover after parsing attributes in process `syz.1.140'. [ 83.294996][ T6025] usb 44-1: SetAddress Request (2) to port 0 [ 83.297056][ T6025] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 83.693895][ T6543] vhci_hcd: connection reset by peer [ 83.696616][ T13] vhci_hcd vhci_hcd.3: stop threads [ 83.698846][ T13] vhci_hcd vhci_hcd.3: release socket [ 83.701171][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 84.046096][ T6560] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 84.048821][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 84.059912][ T6560] vhci_hcd vhci_hcd.0: Device attached [ 84.458933][ T10] usb 40-1: SetAddress Request (2) to port 0 [ 84.461553][ T10] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 85.198089][ T6567] vhci_hcd: connection reset by peer [ 85.203721][ T46] vhci_hcd vhci_hcd.1: stop threads [ 85.205618][ T46] vhci_hcd vhci_hcd.1: release socket [ 85.207661][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 86.578294][ T6589] overlayfs: failed to resolve './file1': -2 [ 87.118912][ T6593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 87.710639][ T6601] trusted_key: encrypted_key: insufficient parameters specified [ 87.872732][ T6610] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 87.886824][ T6610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.909535][ T6610] bond1: (slave veth0_to_bond): making interface the new active one [ 87.913157][ T6610] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 87.953355][ T6610] bond1: entered promiscuous mode [ 87.955732][ T6610] veth0_to_bond: entered promiscuous mode [ 87.958350][ T6610] bond1: entered allmulticast mode [ 87.960649][ T6610] veth0_to_bond: entered allmulticast mode [ 87.975642][ T6614] ksmbd: Unknown IPC event: 3, ignore. [ 88.396289][ T6025] usb 44-1: device descriptor read/8, error -110 [ 88.535902][ T6639] ======================================================= [ 88.535902][ T6639] WARNING: The mand mount option has been deprecated and [ 88.535902][ T6639] and is ignored by this kernel. Remove the mand [ 88.535902][ T6639] option from the mount to silence this warning. [ 88.535902][ T6639] ======================================================= [ 88.570414][ T6639] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.630525][ T6639] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 88.646638][ T6639] overlayfs: failed to look up (tracing) for ino (-66) [ 88.733221][ T6663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.735350][ T6663] netlink: 188 bytes leftover after parsing attributes in process `syz.1.170'. [ 88.796631][ T6025] usb usb44-port1: attempt power cycle [ 89.355432][ T6025] usb usb44-port1: unable to enumerate USB device [ 89.478292][ T6692] netlink: 48 bytes leftover after parsing attributes in process `syz.0.174'. [ 89.494867][ T10] usb 40-1: device descriptor read/8, error -110 [ 89.872271][ T6719] 9p: Bad value for 'wfdno' [ 89.893886][ T6719] tmpfs: Bad value for 'nr_blocks' [ 89.905459][ T10] usb usb40-port1: attempt power cycle [ 89.944235][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 90.401102][ T6731] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.182'. [ 90.467618][ T10] usb usb40-port1: unable to enumerate USB device [ 90.821889][ T6746] i2c i2c-1: Invalid block write size 34 [ 90.934387][ T6750] mkiss: ax0: crc mode is auto. [ 93.361738][ T6791] netlink: 'syz.3.198': attribute type 15 has an invalid length. [ 93.364265][ T6791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'. [ 93.835658][ T6807] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 93.838333][ T6807] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 93.842180][ T6807] vhci_hcd vhci_hcd.0: Device attached [ 94.121960][ T6005] usb 44-1: SetAddress Request (6) to port 0 [ 94.122015][ T6005] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 94.450742][ T6812] wg2 speed is unknown, defaulting to 1000 [ 94.474094][ T6812] wg2 speed is unknown, defaulting to 1000 [ 94.511627][ T6812] wg2 speed is unknown, defaulting to 1000 [ 94.688413][ T6808] vhci_hcd: connection reset by peer [ 94.693432][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.693803][ T29] wg2 speed is unknown, defaulting to 1000 [ 94.695560][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.695623][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 94.701876][ T6812] infiniband syz2: set active [ 94.703485][ T6812] infiniband syz2: added wg2 [ 94.742094][ T6812] RDS/IB: syz2: added [ 94.743619][ T6812] smc: adding ib device syz2 with port count 1 [ 94.776286][ T6812] smc: ib device syz2 port 1 has no pnetid [ 94.779223][ T29] wg2 speed is unknown, defaulting to 1000 [ 94.790023][ T6812] wg2 speed is unknown, defaulting to 1000 [ 94.966017][ T6812] wg2 speed is unknown, defaulting to 1000 [ 95.207166][ T6812] wg2 speed is unknown, defaulting to 1000 [ 95.386282][ T6812] wg2 speed is unknown, defaulting to 1000 [ 95.524955][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 95.688703][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.692319][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.698557][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.705016][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.709147][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.742713][ T10] usb 7-1: config 0 descriptor?? [ 95.870017][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 95.875327][ T6834] netlink: 'syz.0.208': attribute type 13 has an invalid length. [ 96.071158][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 96.177450][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.192661][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.203626][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.210194][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.216564][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.219458][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.222332][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.244649][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.248275][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.251217][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 96.268937][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 96.488085][ T10] usb 7-1: USB disconnect, device number 2 [ 96.750310][ T6857] ubi31: attaching mtd0 [ 96.753738][ T6857] ubi31: scanning is finished [ 96.755579][ T6857] ubi31: empty MTD device detected [ 96.818819][ T6857] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 96.821980][ T6857] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 96.826185][ T6857] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 96.831232][ T6857] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 96.836698][ T6857] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 96.839443][ T6857] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 96.842652][ T6857] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1393409815 [ 96.846910][ T6857] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 96.850880][ T6859] ubi31: background thread "ubi_bgt31d" started, PID 6859 [ 97.478934][ T6878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.220'. [ 97.482798][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.220'. [ 97.485752][ T6878] openvswitch: netlink: Flow key attr not present in new flow. [ 98.356168][ T6898] netlink: 'syz.1.225': attribute type 15 has an invalid length. [ 98.359505][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.225'. [ 98.490795][ T6904] 9p: Bad value for 'rfdno' [ 98.592156][ T6025] IPVS: starting estimator thread 0... [ 98.676500][ T6910] IPVS: using max 46 ests per chain, 110400 per kthread [ 99.126970][ T6928] netlink: 'syz.2.234': attribute type 15 has an invalid length. [ 99.129560][ T6928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.234'. [ 99.174909][ T6005] usb 44-1: device descriptor read/8, error -110 [ 99.588251][ T6005] usb usb44-port1: attempt power cycle [ 99.636753][ T6948] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 99.639399][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.653049][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 99.662345][ T40] audit: type=1800 audit(1766034908.619:3): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.233" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 99.871454][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.956956][ T6025] usb 40-1: SetAddress Request (6) to port 0 [ 99.962785][ T6025] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 100.568992][ T40] audit: type=1326 audit(1766034909.529:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.3.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 100.577133][ T40] audit: type=1326 audit(1766034909.529:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.3.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 100.586297][ T40] audit: type=1326 audit(1766034909.529:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.3.240" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 100.775318][ T6152] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 100.841766][ T40] audit: type=1326 audit(1766034909.799:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.3.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 100.848824][ T40] audit: type=1326 audit(1766034909.799:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.3.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 101.105279][ T6005] usb usb44-port1: unable to enumerate USB device [ 101.161617][ T6982] Invalid ELF header type: 2 != 1 [ 101.280072][ T6985] netlink: 'syz.3.243': attribute type 15 has an invalid length. [ 101.283314][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 101.894947][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 101.988731][ T6949] vhci_hcd: connection reset by peer [ 101.992882][ T1144] vhci_hcd vhci_hcd.1: stop threads [ 102.015316][ T1144] vhci_hcd vhci_hcd.1: release socket [ 102.087074][ T1144] vhci_hcd vhci_hcd.1: disconnect device [ 103.091441][ T7013] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 103.102262][ T7013] team0: Cannot enslave team device to itself [ 103.128991][ T7013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.250'. [ 103.289716][ T7023] netlink: 'syz.2.252': attribute type 15 has an invalid length. [ 103.292402][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'. [ 103.899599][ T7035] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 103.909425][ T7035] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 103.979898][ T7026] loop2: detected capacity change from 0 to 7 [ 103.984406][ T5941] Dev loop2: unable to read RDB block 7 [ 103.987426][ T5941] loop2: unable to read partition table [ 103.989851][ T5941] loop2: partition table beyond EOD, truncated [ 104.005191][ T7026] Dev loop2: unable to read RDB block 7 [ 104.007450][ T7026] loop2: unable to read partition table [ 104.009815][ T7026] loop2: partition table beyond EOD, truncated [ 104.026474][ T7026] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 104.118968][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 104.523295][ T7056] netlink: 'syz.2.261': attribute type 15 has an invalid length. [ 104.525743][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 104.666786][ T7060] netlink: 'syz.2.263': attribute type 1 has an invalid length. [ 105.388608][ T6025] usb 40-1: device descriptor read/8, error -110 [ 105.430821][ T7051] [U] ÿ [ 105.856730][ T6025] usb usb40-port1: attempt power cycle [ 105.974961][ T5951] Bluetooth: hci0: command 0x0401 tx timeout [ 105.994946][ T5942] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 106.054844][ T40] audit: type=1326 audit(1766034923.013:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.083174][ T40] audit: type=1326 audit(1766034923.033:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.093278][ T40] audit: type=1326 audit(1766034923.033:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.119291][ T40] audit: type=1326 audit(1766034923.033:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.132672][ T40] audit: type=1326 audit(1766034923.033:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.141630][ T40] audit: type=1326 audit(1766034923.033:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.151990][ T40] audit: type=1326 audit(1766034923.033:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.160880][ T40] audit: type=1326 audit(1766034923.033:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.169547][ T40] audit: type=1326 audit(1766034923.033:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.178393][ T40] audit: type=1326 audit(1766034923.033:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.1.266" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 106.418580][ T6025] usb usb40-port1: unable to enumerate USB device [ 106.877744][ T6269] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.074843][ T6269] usb 6-1: Using ep0 maxpacket: 32 [ 107.079913][ T6269] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 107.082546][ T6269] usb 6-1: config 0 has no interface number 0 [ 107.084532][ T6269] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 107.094448][ T6269] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 107.103588][ T6269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.109915][ T6269] usb 6-1: Product: syz [ 107.113985][ T6269] usb 6-1: Manufacturer: syz [ 107.118561][ T6269] usb 6-1: SerialNumber: syz [ 107.131102][ T6269] usb 6-1: config 0 descriptor?? [ 107.137990][ T7082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.349132][ T6025] usb 6-1: USB disconnect, device number 2 [ 107.899188][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 108.316981][ T7112] netlink: 'syz.3.277': attribute type 10 has an invalid length. [ 108.323475][ T7112] bond0: (slave wlan1): Opening slave failed [ 108.859857][ T7106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.249687][ T7104] Set syz1 is full, maxelem 65536 reached [ 109.263109][ T7121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.280'. [ 109.609632][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 111.290115][ T7186] x_tables: duplicate underflow at hook 1 [ 111.888104][ T7203] wg2 speed is unknown, defaulting to 1000 [ 113.800193][ T7272] netlink: 'syz.0.319': attribute type 32 has an invalid length. [ 113.803518][ T7272] netlink: 'syz.0.319': attribute type 32 has an invalid length. [ 113.812674][ T7277] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.318'. [ 113.816677][ T7277] openvswitch: netlink: nsh attr 0 has unexpected len 5 expected 0 [ 113.873532][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 114.746473][ T7310] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 114.749065][ T7310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.754900][ T7310] vhci_hcd vhci_hcd.0: Device attached [ 114.766091][ T7313] vhci_hcd: connection closed [ 114.767559][ T12] vhci_hcd vhci_hcd.3: stop threads [ 114.772338][ T12] vhci_hcd vhci_hcd.3: release socket [ 114.779608][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 116.007106][ T7343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.332'. [ 116.283050][ T7348] tmpfs: Bad value for 'mpol' [ 116.848905][ T6269] kernel write not supported for file /vbi3 (pid: 6269 comm: kworker/0:7) [ 116.858554][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 116.866573][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.869741][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.908091][ T6152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.542535][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.987045][ T6196] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.056379][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 118.056391][ T40] audit: type=1326 audit(1766034935.023:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.065026][ T40] audit: type=1326 audit(1766034935.023:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.071589][ T40] audit: type=1326 audit(1766034935.023:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.094867][ T40] audit: type=1326 audit(1766034935.023:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.101424][ T40] audit: type=1326 audit(1766034935.023:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.109601][ T40] audit: type=1326 audit(1766034935.033:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.124981][ T40] audit: type=1326 audit(1766034935.033:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.135063][ T40] audit: type=1326 audit(1766034935.033:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.154954][ T40] audit: type=1326 audit(1766034935.033:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.169001][ T40] audit: type=1326 audit(1766034935.033:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 118.240132][ T7375] overlayfs: conflicting lowerdir path [ 118.948452][ T7387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.067588][ T7390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 119.069756][ T7390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 119.072797][ T7390] vhci_hcd vhci_hcd.0: Device attached [ 119.214812][ T6023] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 119.364925][ T6269] usb 38-1: SetAddress Request (6) to port 0 [ 119.366978][ T6269] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 119.384844][ T6023] usb 7-1: Using ep0 maxpacket: 32 [ 119.388200][ T6023] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 119.390897][ T6023] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 119.393584][ T6023] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 119.396437][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.399419][ T6023] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.404971][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.407995][ T6023] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.411013][ T6023] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.424880][ T6023] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.427708][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.431780][ T6023] usb 7-1: config 0 descriptor?? [ 119.507586][ T7396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.570652][ T7395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.576507][ T7395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.645416][ T7391] vhci_hcd: connection reset by peer [ 119.658742][ T13] vhci_hcd vhci_hcd.0: stop threads [ 119.661078][ T13] vhci_hcd vhci_hcd.0: release socket [ 119.664566][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 119.669583][ T6023] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.954225][ T10] wg2 speed is unknown, defaulting to 1000 [ 119.954264][ T6163] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.959338][ T10] syz2: Port: 1 Link DOWN [ 119.961851][ T6163] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.966610][ T6163] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.970526][ T10] wg2 speed is unknown, defaulting to 1000 [ 119.970570][ T6163] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.163917][ T7404] sd 0:0:0:0: PR command failed: 1026 [ 120.166423][ T7403] sd 0:0:0:0: PR command failed: 1026 [ 120.168730][ T7403] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 120.171635][ T7404] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 120.174297][ T7404] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 120.177522][ T7403] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 120.934954][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.733328][ T7428] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.740994][ T7428] overlayfs: failed to set xattr on upper [ 121.790821][ T7428] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.794673][ T7428] overlayfs: ...falling back to index=off. [ 121.797286][ T7428] overlayfs: ...falling back to uuid=null. [ 121.810582][ T7431] netlink: 'syz.1.360': attribute type 21 has an invalid length. [ 121.813599][ T7431] netlink: 128 bytes leftover after parsing attributes in process `syz.1.360'. [ 121.817116][ T7431] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 121.817923][ T7428] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.819703][ T7431] netlink: 'syz.1.360': attribute type 3 has an invalid length. [ 121.822472][ T7428] overlayfs: failed to set xattr on upper [ 121.822481][ T7428] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.822487][ T7428] overlayfs: ...falling back to index=off. [ 121.822492][ T7428] overlayfs: ...falling back to uuid=null. [ 121.833468][ T7431] netlink: 3 bytes leftover after parsing attributes in process `syz.1.360'. [ 121.843756][ T76] usb 7-1: USB disconnect, device number 3 [ 121.848012][ T76] usblp0: removed [ 122.062001][ T7433] netlink: 68 bytes leftover after parsing attributes in process `syz.0.361'. [ 122.090150][ T7441] netlink: 68 bytes leftover after parsing attributes in process `syz.0.361'. [ 122.125483][ T7433] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 122.128247][ T7433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.131380][ T7433] vhci_hcd vhci_hcd.0: Device attached [ 122.141194][ T7447] netlink: 'syz.2.362': attribute type 15 has an invalid length. [ 122.144994][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.362'. [ 122.526138][ T7444] vhci_hcd: connection closed [ 122.529782][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 122.533820][ T1144] vhci_hcd vhci_hcd.0: release socket [ 122.536380][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 122.821536][ T7469] bridge0: entered promiscuous mode [ 122.823359][ T7469] bridge0: entered allmulticast mode [ 122.828542][ T7469] team0: Port device bridge0 added [ 122.839579][ T7469] bridge0: port 1(team0) entered blocking state [ 122.842087][ T7469] bridge0: port 1(team0) entered disabled state [ 122.844543][ T7469] team0: entered allmulticast mode [ 122.847973][ T7469] team_slave_0: entered allmulticast mode [ 122.849892][ T7469] team_slave_1: entered allmulticast mode [ 122.862868][ T7469] team0: left allmulticast mode [ 122.865038][ T7469] team_slave_0: left allmulticast mode [ 122.867293][ T7469] team_slave_1: left allmulticast mode [ 122.874140][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 123.361508][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 123.361519][ T40] audit: type=1800 audit(1766034940.323:69): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.372" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 123.460877][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.374'. [ 124.380204][ T40] audit: type=1400 audit(1766034941.343:70): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFE08977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A092C91 pid=7491 comm="syz.2.378" [ 124.454958][ T6269] usb 38-1: device descriptor read/8, error -110 [ 124.580507][ T40] audit: type=1326 audit(1766034941.543:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 124.591192][ T40] audit: type=1326 audit(1766034941.553:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 124.600135][ T40] audit: type=1326 audit(1766034941.563:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 124.610776][ T40] audit: type=1326 audit(1766034941.563:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 124.620887][ T40] audit: type=1326 audit(1766034941.563:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 124.624833][ T61] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 124.629756][ T40] audit: type=1326 audit(1766034941.563:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 124.640980][ T40] audit: type=1326 audit(1766034941.563:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 124.644873][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 124.649840][ T40] audit: type=1326 audit(1766034941.563:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 124.817101][ T61] usb 7-1: not running at top speed; connect to a high speed hub [ 124.821687][ T61] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 124.828758][ T61] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.837068][ T61] usb 7-1: config 1 interface 0 has no altsetting 0 [ 124.845023][ T61] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 124.852756][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.860236][ T61] usb 7-1: Product: â³á¿·é±ŸÌ¢ãŠ¸ì§¨ì§‡á›è£¿êž´é–Šì¼å¼¡êèˆï¯™æ¨±Ã–᳈႑줺쒇宙êٽ鳨嵘ꉽ录ì±î·§ê€¾ì²»ì°¬áº»êª¢æ¨«í…¤â³¹ä«£ã²ˆê†¹æ¹é–¡èŸ æ…¬ì©¦å“‹à±“ç¡’æ‰á’éîƒè‰ì›¼ë„ï¡©è½°åºá”ŸÓ°ì°”㋩㡶茙리ᗭ怔ધ≇絲˶鸦랎ᬰ齚䦋값뗎補Ⳡ曇ޕ欂膙꯲ [ 124.877659][ T61] usb 7-1: Manufacturer: ⻭鉸句è¶á¸æ¾¼ì²œ×¦à´Šå¡í™Žï†•ë€¿äŸ€á¥£ë谽뙱è¥è“›é³„핤ꀩ줥﷟籇ꉯçŠàºŽê€˜ë’䳎î‚箪㛂눿嵐礋⦲Պ业鳰ԑã«æ”¬èŸ®ëœ®å“Ÿæ¬«ï¡ìšçœŒè¢Ÿ×¿àµƒî½Š [ 124.888598][ T61] usb 7-1: SerialNumber: 玤열봦뷟⹟íŠî­ë†ã‘¥ê§çœ¸å¶¿ä†¡ç¶»ë ²î€„ë‡ïšžç–’䯜쵰ᯋ䌭èˆê˜µï‡¨î§Žá¸¤æ¸œá§¨ï‰¡ì§ãµ¨ã®Œí˜ªç™žï¹¤í‘€á” [ 124.905260][ T7492] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.937901][ T7506] vivid-007: disconnect [ 125.123640][ T61] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 1 proto 1 vid 0x04B8 pid 0x0202 [ 125.131687][ T61] usb 7-1: USB disconnect, device number 4 [ 125.135637][ T61] usblp0: removed [ 125.467806][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 125.496749][ T7518] tmpfs: Unknown parameter 'õóÂ' [ 125.648399][ T7502] vivid-007: reconnect [ 125.707202][ T6269] usb usb38-port1: attempt power cycle [ 125.718326][ T7519] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 125.721118][ T7519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.734924][ T7519] vhci_hcd vhci_hcd.0: Device attached [ 125.985399][ T7523] vhci_hcd: connection closed [ 125.988693][ T6163] vhci_hcd vhci_hcd.1: stop threads [ 126.004887][ T6163] vhci_hcd vhci_hcd.1: release socket [ 126.007143][ T6163] vhci_hcd vhci_hcd.1: disconnect device [ 126.040186][ T7532] netlink: 'syz.3.389': attribute type 15 has an invalid length. [ 126.042741][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'. [ 126.063171][ T10] usb 40-1: enqueue for inactive port 0 [ 126.157474][ T7538] netlink: 'syz.2.392': attribute type 15 has an invalid length. [ 126.160104][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.392'. [ 126.265786][ T6269] usb usb38-port1: unable to enumerate USB device [ 126.575581][ T10] usb usb40-port1: attempt power cycle [ 127.136946][ T10] usb usb40-port1: unable to enumerate USB device [ 129.094972][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.226302][ T7582] vivid-000: disconnect [ 130.409187][ T7596] capability: warning: `syz.1.408' uses 32-bit capabilities (legacy support in use) [ 131.058944][ T7581] vivid-000: reconnect [ 131.308270][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.413'. [ 131.311246][ T7624] netlink: 260 bytes leftover after parsing attributes in process `syz.3.413'. [ 132.197750][ T7644] x_tables: duplicate underflow at hook 1 [ 132.242160][ T7646] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 132.278136][ T7648] netlink: 168 bytes leftover after parsing attributes in process `syz.1.420'. [ 132.302987][ T7642] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 132.305402][ T7642] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 132.308091][ T7642] vhci_hcd vhci_hcd.0: Device attached [ 132.344521][ T7649] vhci_hcd: connection closed [ 132.345067][ T6163] vhci_hcd vhci_hcd.2: stop threads [ 132.348962][ T6163] vhci_hcd vhci_hcd.2: release socket [ 132.350715][ T6163] vhci_hcd vhci_hcd.2: disconnect device [ 132.494237][ T7662] vlan2: entered promiscuous mode [ 132.497169][ T7662] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 132.674944][ T6196] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 132.824942][ T6196] usb 6-1: Using ep0 maxpacket: 32 [ 132.828712][ T6196] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 132.831943][ T6196] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 132.835747][ T6196] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.839637][ T6196] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 132.847661][ T6196] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 132.851255][ T6196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.856290][ T6196] usb 6-1: Product: syz [ 132.858056][ T6196] usb 6-1: Manufacturer: syz [ 132.859881][ T6196] usb 6-1: SerialNumber: syz [ 132.871669][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 132.878823][ T6196] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input7 [ 132.972820][ T7672] nr0: entered promiscuous mode [ 133.084854][ T6196] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 133.087994][ T6196] (id 0x00) [ 133.146403][ T6196] rc_core: IR keymap rc-imon-pad not found [ 133.148536][ T6196] Registered IR keymap rc-empty [ 133.150520][ T6196] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 133.154529][ T6196] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 133.160883][ T7680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.429'. [ 133.286487][ T6196] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 133.291986][ T6196] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input8 [ 133.300171][ T6196] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:3> initialized [ 133.476467][ T6196] usb 6-1: USB disconnect, device number 3 [ 133.837953][ T7690] IPVS: length: 134 != 8 [ 134.208955][ T7708] 9p: Bad value for 'rfdno' [ 135.137382][ T7712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.637486][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 136.756911][ T7753] netlink: 'syz.2.448': attribute type 15 has an invalid length. [ 136.760183][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'. [ 136.827485][ T7757] openvswitch: netlink: IP tunnel dst address not specified [ 136.853756][ T7757] program syz.0.449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.955377][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 136.957822][ T1113] ata1.00: irq_stat 0x40000000 [ 136.959445][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 136.961483][ T1113] ata1.00: cmd 9f/02:00:00:00:00/01:00:00:00:00/40 tag 7 [ 136.961483][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 136.966810][ T1113] ata1.00: status: { DRDY ERR } [ 136.968466][ T1113] ata1.00: error: { ABRT } [ 136.970005][ T1113] ata1.00: device reported invalid CHS sector 0 [ 137.428618][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.775286][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 137.924866][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 137.928948][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 137.935701][ T34] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 137.939369][ T34] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 137.942731][ T34] usb 6-1: Product: syz [ 137.944620][ T34] usb 6-1: Manufacturer: syz [ 137.946710][ T34] usb 6-1: SerialNumber: syz [ 137.955332][ T34] usb 6-1: config 0 descriptor?? [ 137.960174][ T7771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 138.226721][ T7775] netlink: 'syz.1.452': attribute type 13 has an invalid length. [ 138.348491][ T10] usb 6-1: USB disconnect, device number 4 [ 138.567265][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 138.567281][ T40] audit: type=1400 audit(1766034955.533:84): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="S" pid=7779 comm="syz.2.454" [ 138.655527][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.455'. [ 138.815917][ T7796] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 138.818332][ T7796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.492935][ T7832] ubi: mtd0 is already attached to ubi31 [ 140.501247][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 141.100551][ T7822] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 141.103322][ T7822] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 141.106808][ T7822] vhci_hcd vhci_hcd.0: Device attached [ 141.374874][ T6833] usb 44-1: SetAddress Request (10) to port 0 [ 141.376874][ T6833] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 141.409200][ T7847] vhci_hcd: connection reset by peer [ 141.411884][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 141.414036][ T1146] vhci_hcd vhci_hcd.3: release socket [ 141.420218][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 142.790471][ T7872] binder: 7869:7872 ioctl 81e8943c 80000500 returned -22 [ 142.954737][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 142.958579][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 142.972924][ T1144] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.978869][ T1144] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.981768][ T1144] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.984701][ T1144] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.019425][ T7877] overlayfs: conflicting lowerdir path [ 144.923913][ T7907] sp0: Synchronizing with TNC [ 144.950881][ T7907] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 144.950881][ T7907] program syz.0.476 not setting count and/or reply_len properly [ 144.965158][ T7909] netlink: 'syz.2.477': attribute type 5 has an invalid length. [ 144.975038][ T7912] netlink: 'syz.3.478': attribute type 15 has an invalid length. [ 144.977502][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'. [ 145.097124][ T40] audit: type=1326 audit(1766034962.063:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.3.480" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2579 code=0x0 [ 145.306772][ T1146] Bluetooth: Error in BCSP hdr checksum [ 145.565564][ T1144] Bluetooth: Error in BCSP hdr checksum [ 145.860343][ T12] Bluetooth: Error in BCSP hdr checksum [ 146.375123][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.454902][ T6833] usb 44-1: device descriptor read/8, error -110 [ 146.719329][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 146.845365][ T6833] usb usb44-port1: attempt power cycle [ 146.968122][ T7941] netlink: 'syz.0.488': attribute type 15 has an invalid length. [ 146.977470][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 147.094868][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 147.095072][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 147.211534][ T7946] wg2 speed is unknown, defaulting to 1000 [ 147.249808][ T7947] netlink: 'syz.2.490': attribute type 14 has an invalid length. [ 147.417844][ T6833] usb usb44-port1: unable to enumerate USB device [ 147.990972][ T7957] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 148.050489][ T7957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.058321][ T7959] bond1: (slave veth0_to_bond): making interface the new active one [ 148.062301][ T7959] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 148.573737][ T40] audit: type=1326 audit(1766034965.533:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 148.582450][ T40] audit: type=1326 audit(1766034965.533:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 148.591412][ T40] audit: type=1326 audit(1766034965.553:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.494" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 148.615892][ T40] audit: type=1326 audit(1766034965.573:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 148.622911][ T40] audit: type=1326 audit(1766034965.583:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 148.631720][ T40] audit: type=1326 audit(1766034965.583:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.494" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 148.638867][ T40] audit: type=1326 audit(1766034965.583:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 148.646352][ T40] audit: type=1326 audit(1766034965.583:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 148.653964][ T40] audit: type=1326 audit(1766034965.603:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.494" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 148.679928][ T7967] wg2 speed is unknown, defaulting to 1000 [ 148.728502][ T7974] qnx6: unable to read the first superblock [ 148.764601][ T6030] IPVS: starting estimator thread 0... [ 149.114990][ T7976] IPVS: using max 46 ests per chain, 110400 per kthread [ 149.363835][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.497'. [ 149.441320][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.498'. [ 149.502593][ T7993] netlink: 'syz.0.500': attribute type 15 has an invalid length. [ 149.507964][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'. [ 150.930853][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'. [ 151.660135][ T8050] Bluetooth: MGMT ver 1.23 [ 151.737960][ T8052] wg2 speed is unknown, defaulting to 1000 [ 151.806076][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 151.895466][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 151.895730][ T40] audit: type=1326 audit(1766034968.863:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.1.518" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x0 [ 151.951864][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 151.965862][ T8052] can0: slcan on ttyS3. [ 152.035284][ T8052] can0 (unregistered): slcan off ttyS3. [ 153.435480][ T8093] netlink: 'syz.0.526': attribute type 21 has an invalid length. [ 153.438879][ T8093] netlink: 128 bytes leftover after parsing attributes in process `syz.0.526'. [ 153.442476][ T8093] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 153.446198][ T8093] netlink: 'syz.0.526': attribute type 3 has an invalid length. [ 153.449510][ T8093] netlink: 3 bytes leftover after parsing attributes in process `syz.0.526'. [ 153.648245][ T8098] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 154.987303][ T6030] libceph: connect (1)[c::]:6789 error -101 [ 155.196592][ T8116] ceph: No mds server is up or the cluster is laggy [ 155.201157][ T6030] libceph: mon0 (1)[c::]:6789 connect error [ 155.388741][ T8137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.391216][ T8137] IPv6: NLM_F_CREATE should be set when creating new route [ 155.420603][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 155.460352][ T40] audit: type=1326 audit(1766034972.423:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.2.535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 155.491534][ T40] audit: type=1326 audit(1766034972.423:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.2.535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 155.502811][ T40] audit: type=1326 audit(1766034972.423:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.2.535" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 155.510541][ T40] audit: type=1326 audit(1766034972.423:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.2.535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 155.518357][ T40] audit: type=1326 audit(1766034972.423:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.2.535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 155.525973][ T40] audit: type=1326 audit(1766034972.443:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.2.535" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 155.532689][ T40] audit: type=1326 audit(1766034972.443:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.2.535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 155.541983][ T40] audit: type=1326 audit(1766034972.443:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.2.535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 155.552512][ T40] audit: type=1326 audit(1766034972.443:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.2.535" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 155.715174][ T6269] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 155.979268][ T8145] ceph: No mds server is up or the cluster is laggy [ 156.072306][ T6269] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 156.084045][ T6269] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 156.088519][ T6269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.091727][ T6269] usb 7-1: Product: syz [ 156.093435][ T6269] usb 7-1: Manufacturer: syz [ 156.095541][ T6269] usb 7-1: SerialNumber: syz [ 156.107817][ T8150] fuse: Bad value for 'rootmode' [ 156.350401][ T5942] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 156.350432][ T5942] Bluetooth: hci2: Unknown advertising packet type: 0x7c [ 156.352875][ T5942] Bluetooth: hci2: Malformed LE Event: 0x0d [ 156.678964][ T8158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'. [ 157.119645][ T8170] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 157.122076][ T8170] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.126735][ T8170] vhci_hcd vhci_hcd.0: Device attached [ 157.129001][ T8165] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 157.131990][ T8165] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.149743][ T8165] vhci_hcd vhci_hcd.0: Device attached [ 157.257868][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 157.314109][ T8172] vhci_hcd: connection closed [ 157.314238][ T8171] vhci_hcd: connection closed [ 157.316381][ T1149] vhci_hcd vhci_hcd.0: stop threads [ 157.316677][ T1149] vhci_hcd vhci_hcd.0: release socket [ 157.324999][ T1149] vhci_hcd vhci_hcd.0: disconnect device [ 157.327575][ T1149] vhci_hcd vhci_hcd.0: stop threads [ 157.330429][ T1149] vhci_hcd vhci_hcd.0: release socket [ 157.333424][ T1149] vhci_hcd vhci_hcd.0: disconnect device [ 157.800715][ T8194] netlink: 64 bytes leftover after parsing attributes in process `syz.1.550'. [ 157.834844][ T6196] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.984808][ T6196] usb 5-1: Using ep0 maxpacket: 16 [ 157.993752][ T6196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.000957][ T6196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.004014][ T6196] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 158.024822][ T6196] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 158.027677][ T6196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.034073][ T6196] usb 5-1: config 0 descriptor?? [ 158.318083][ T6269] as10x_usb: device has been detected [ 158.320524][ T6269] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 158.340913][ T6269] usb 7-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 158.357048][ T6269] as10x_usb: error during firmware upload part1 [ 158.358782][ T8200] Bluetooth: Invalid esc byte 0x02 [ 158.359339][ T6269] Registered device Elgato EyeTV DTT Deluxe [ 158.369624][ T6269] usb 7-1: USB disconnect, device number 5 [ 158.379861][ T4715] Bluetooth: (null): Invalid header checksum [ 158.407790][ T6269] Unregistered device Elgato EyeTV DTT Deluxe [ 158.414599][ T6269] as10x_usb: device has been disconnected [ 158.444122][ T6196] hid_parser_main: 5 callbacks suppressed [ 158.444133][ T6196] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 158.449689][ T6196] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 158.451888][ T6196] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 158.454126][ T6196] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 158.456382][ T6196] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 158.464298][ T6196] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 158.493776][ T6196] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 158.496059][ T1144] Bluetooth: (null): Invalid header checksum [ 158.496739][ T6196] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 158.608805][ T4715] Bluetooth: (null): Invalid header checksum [ 158.643457][ T8192] random: crng reseeded on system resumption [ 158.658808][ T6152] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 158.667072][ T61] usb 5-1: USB disconnect, device number 3 [ 158.669062][ T6152] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 158.677987][ T6152] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 158.682753][ T6152] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 158.722125][ T4715] Bluetooth: (null): Invalid header checksum [ 158.835245][ T4715] Bluetooth: (null): Invalid header checksum [ 158.945991][ T4715] Bluetooth: (null): Invalid header checksum [ 159.082655][ T6163] Bluetooth: (null): Invalid header checksum [ 159.179172][ T4715] Bluetooth: (null): Invalid header checksum [ 159.291727][ T8218] tipc: Enabling of bearer rejected, failed to enable media [ 159.489766][ T8234] syzkaller1: entered promiscuous mode [ 159.491812][ T8234] syzkaller1: entered allmulticast mode [ 161.206208][ T5942] Bluetooth: hci0: Malformed Event: 0x13 [ 161.208686][ T8301] netlink: 'syz.1.572': attribute type 15 has an invalid length. [ 161.211127][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.572'. [ 161.589568][ T8286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.593181][ T8286] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.605396][ T8286] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.610506][ T8286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.613257][ T8286] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.619412][ T8286] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.622628][ T8286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.624628][ T8286] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.627991][ T8286] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.631145][ T8286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.633119][ T8286] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.636275][ T8286] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.797691][ T8320] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.987983][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 161.987999][ T40] audit: type=1326 audit(2000000005.740:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.1.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7fc00000 [ 162.814015][ T8336] 9pnet_virtio: no channels available for device syz [ 162.860941][ T8339] netlink: 'syz.0.583': attribute type 15 has an invalid length. [ 162.863430][ T8339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'. [ 163.244927][ T8343] bridge_slave_0: left allmulticast mode [ 163.247971][ T8343] bridge_slave_0: left promiscuous mode [ 163.253050][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.355647][ T8343] bridge_slave_1: left allmulticast mode [ 163.358723][ T8343] bridge_slave_1: left promiscuous mode [ 163.363326][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.407796][ T8343] bond1: (slave veth0_to_bond): Releasing active interface [ 163.410837][ T8343] veth0_to_bond: left promiscuous mode [ 163.414834][ T8343] veth0_to_bond: left allmulticast mode [ 163.414835][ T5942] Bluetooth: hci0: command 0x0401 tx timeout [ 163.429738][ T8343] bond0: (slave bond_slave_0): Releasing backup interface [ 163.440366][ T8343] bond0: (slave bond_slave_1): Releasing backup interface [ 163.458583][ T8343] team0: Port device team_slave_0 removed [ 163.470039][ T8343] team0: Port device team_slave_1 removed [ 163.473858][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.476793][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.485607][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.488212][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.499024][ T8343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.623755][ T8353] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 163.654824][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.657000][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.659161][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.075284][ T8369] netlink: 'syz.0.592': attribute type 15 has an invalid length. [ 164.078197][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 164.248625][ T8380] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 164.251850][ T8380] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 164.543587][ T8398] netlink: 'syz.1.603': attribute type 15 has an invalid length. [ 164.545854][ T8392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.546872][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.603'. [ 164.658456][ T40] audit: type=1326 audit(2000000008.410:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 164.669608][ T40] audit: type=1326 audit(2000000008.420:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.605" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 164.683569][ T40] audit: type=1326 audit(2000000008.420:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 164.698632][ T40] audit: type=1326 audit(2000000008.420:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.605" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 164.714831][ T40] audit: type=1326 audit(2000000008.420:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 164.721314][ T40] audit: type=1326 audit(2000000008.420:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 164.745024][ T40] audit: type=1326 audit(2000000008.430:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.605" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 164.753690][ T40] audit: type=1326 audit(2000000008.430:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 164.762349][ T40] audit: type=1326 audit(2000000008.430:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 164.818662][ T8402] infiniband !yz!: set active [ 164.820794][ T8402] infiniband !yz!: added team_slave_0 [ 164.850830][ T8402] RDS/IB: !yz!: added [ 164.852577][ T8402] smc: adding ib device !yz! with port count 1 [ 164.857068][ T8402] smc: ib device !yz! port 1 has no pnetid [ 165.399981][ T8417] netlink: 144 bytes leftover after parsing attributes in process `syz.1.609'. [ 165.403754][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 165.476113][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 165.484790][ T8420] netlink: 'syz.3.607': attribute type 5 has an invalid length. [ 165.495107][ T5951] Bluetooth: hci0: command 0x0401 tx timeout [ 165.495250][ T8420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 165.667361][ T8420] geneve2: entered promiscuous mode [ 165.669120][ T8420] geneve2: entered allmulticast mode [ 165.686933][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 165.690913][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 165.694571][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 165.699962][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 165.734879][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.734886][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.740165][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.971587][ T8435] netlink: 'syz.0.612': attribute type 15 has an invalid length. [ 165.974149][ T8435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.612'. [ 166.371877][ T8452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.575318][ T5942] Bluetooth: hci0: command 0x0401 tx timeout [ 167.582388][ T8478] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.815313][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.815424][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.815445][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.834640][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 168.834652][ T40] audit: type=1326 audit(2000000012.580:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 168.845517][ T40] audit: type=1326 audit(2000000012.590:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 168.853076][ T40] audit: type=1326 audit(2000000012.590:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 168.861910][ T40] audit: type=1326 audit(2000000012.590:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 168.871989][ T40] audit: type=1326 audit(2000000012.590:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 168.883068][ T40] audit: type=1326 audit(2000000012.600:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 168.896190][ T40] audit: type=1326 audit(2000000012.600:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 168.909333][ T40] audit: type=1326 audit(2000000012.600:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 168.924934][ T40] audit: type=1326 audit(2000000012.600:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 168.943468][ T40] audit: type=1326 audit(2000000012.600:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.1.633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 170.053350][ T1149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.170104][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.174194][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.178043][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.182047][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.186657][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.231626][ T1149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.256651][ T8524] wg2 speed is unknown, defaulting to 1000 [ 170.364161][ T1149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.549954][ T8524] chnl_net:caif_netlink_parms(): no params data found [ 170.615382][ T1149] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.705510][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.707926][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.710282][ T8524] bridge_slave_0: entered allmulticast mode [ 170.713126][ T8524] bridge_slave_0: entered promiscuous mode [ 170.758359][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.764639][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.767214][ T8524] bridge_slave_1: entered allmulticast mode [ 170.796802][ T8524] bridge_slave_1: entered promiscuous mode [ 170.866219][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.921456][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.992758][ T8524] team0: Port device team_slave_0 added [ 171.009336][ T8524] team0: Port device team_slave_1 added [ 171.240033][ T1149] team0: Port device bridge0 removed [ 171.308387][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.314849][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.318650][ T1149] bond0 (unregistering): Released all slaves [ 171.390724][ T1149] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 171.394515][ T1149] bond1 (unregistering): Released all slaves [ 171.410946][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.413916][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.424947][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.431024][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.433863][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.445415][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.453104][ T8550] netlink: 'syz.2.646': attribute type 27 has an invalid length. [ 171.531047][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.534623][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.606967][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.615395][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.718797][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.774988][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.783008][ T8524] hsr_slave_0: entered promiscuous mode [ 171.788476][ T8524] hsr_slave_1: entered promiscuous mode [ 171.791367][ T8524] debugfs: 'hsr0' already exists in 'hsr' [ 171.793716][ T8524] Cannot create hsr debugfs directory [ 171.796495][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.799335][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.876625][ T8555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.215920][ T1149] hsr_slave_0: left promiscuous mode [ 172.224843][ T1149] hsr_slave_1: left promiscuous mode [ 172.224939][ T5951] Bluetooth: hci0: command tx timeout [ 172.227355][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.231327][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.259383][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.262297][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.285929][ T1149] veth1_macvtap: left promiscuous mode [ 172.288609][ T1149] veth0_macvtap: left promiscuous mode [ 172.290990][ T1149] veth1_vlan: left promiscuous mode [ 172.293302][ T1149] veth0_vlan: left promiscuous mode [ 172.912964][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 172.940140][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 172.945678][ T12] smc: removing ib device !yz! [ 173.198049][ T8570] wg2 speed is unknown, defaulting to 1000 [ 173.332400][ T8524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.349151][ T8524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.365128][ T8524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.381040][ T8524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.547057][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.639404][ T8524] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.647949][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.651011][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.665440][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.668419][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.845845][ T8524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.849225][ T8524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.979427][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.100238][ T8605] tipc: Enabled bearer , priority 0 [ 174.129913][ T8605] tipc: Disabling bearer [ 174.305012][ T5951] Bluetooth: hci0: command tx timeout [ 174.322151][ T8524] veth0_vlan: entered promiscuous mode [ 174.340431][ T8524] veth1_vlan: entered promiscuous mode [ 174.380966][ T8524] veth0_macvtap: entered promiscuous mode [ 174.387700][ T8524] veth1_macvtap: entered promiscuous mode [ 174.397397][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.403032][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.409313][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.413100][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.434277][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.444776][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.507370][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.509461][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.524081][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.527111][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.666243][ T8637] netlink: 68 bytes leftover after parsing attributes in process `syz.0.655'. [ 175.145328][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 175.584814][ T6023] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 175.749868][ T6023] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.753810][ T6023] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.764888][ T6023] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.767716][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.777694][ T8646] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.792790][ T6023] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.896475][ T8653] wireguard0: entered promiscuous mode [ 175.898197][ T8653] wireguard0: entered allmulticast mode [ 176.120366][ T8661] fuseblk: Bad value for 'group_id' [ 176.122173][ T8661] fuseblk: Bad value for 'group_id' [ 176.128786][ T8661] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 176.131008][ T8661] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 176.135577][ T8661] vhci_hcd vhci_hcd.0: Device attached [ 176.166021][ T8646] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.240036][ T8672] vhci_hcd: connection closed [ 176.242431][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 176.256554][ T1144] vhci_hcd vhci_hcd.0: release socket [ 176.256626][ T6023] usb 7-1: USB disconnect, device number 6 [ 176.274955][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 176.375134][ T5951] Bluetooth: hci0: command tx timeout [ 176.901166][ T8680] bridge1: entered promiscuous mode [ 176.903453][ T8680] bridge1: entered allmulticast mode [ 176.968519][ T8680] team0: Port device bridge1 added [ 176.976856][ T8686] Set syz1 is full, maxelem 65536 reached [ 176.993009][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 176.996118][ T8680] bridge_slave_1: left allmulticast mode [ 176.997978][ T8680] bridge_slave_1: left promiscuous mode [ 176.999856][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.003483][ T8680] bridge_slave_0: left allmulticast mode [ 177.005446][ T8680] bridge_slave_0: left promiscuous mode [ 177.007824][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.204250][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 177.204273][ T40] audit: type=1326 audit(2000000020.950:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.215154][ T40] audit: type=1326 audit(2000000020.950:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.224172][ T40] audit: type=1326 audit(2000000020.950:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.231441][ T40] audit: type=1326 audit(2000000020.950:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.240135][ T40] audit: type=1326 audit(2000000020.950:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.248990][ T40] audit: type=1326 audit(2000000020.950:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.259140][ T40] audit: type=1326 audit(2000000020.960:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.275946][ T40] audit: type=1326 audit(2000000020.960:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.294796][ T40] audit: type=1326 audit(2000000020.960:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.303081][ T40] audit: type=1326 audit(2000000020.960:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.0.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 177.775319][ T8691] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 177.928706][ T8704] syzkaller0: entered promiscuous mode [ 177.934857][ T8704] syzkaller0: entered allmulticast mode [ 177.951819][ T8704] overlay: Bad value for 'redirect_dir' [ 178.377627][ T8716] sp0: Synchronizing with TNC [ 178.637019][ T8717] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 178.639426][ T8717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.642599][ T8717] vhci_hcd vhci_hcd.0: Device attached [ 178.695180][ T8717] rdma_rxe: rxe_newlink: failed to add wg2 [ 178.918143][ T6833] usb 38-1: SetAddress Request (12) to port 0 [ 178.920026][ T6833] usb 38-1: new SuperSpeed USB device number 12 using vhci_hcd [ 178.970432][ T8730] bond0: (slave team0): Releasing backup interface [ 178.982964][ T8730] bond0: (slave bond_slave_0): Releasing backup interface [ 178.991280][ T8730] bond0: (slave bond_slave_1): Releasing backup interface [ 178.999450][ T8730] team0: Port device team_slave_0 removed [ 179.003794][ T8730] team0: Port device team_slave_1 removed [ 179.006559][ T8730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.010517][ T8730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.014096][ T8730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.023127][ T8718] vhci_hcd: connection closed [ 179.023788][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 179.028057][ T1144] vhci_hcd vhci_hcd.0: release socket [ 179.030249][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 179.186920][ T5951] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 179.190322][ T5951] Bluetooth: hci3: Injecting HCI hardware error event [ 179.193976][ T5942] Bluetooth: hci3: hardware error 0x00 [ 179.654871][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.726169][ T6833] usb 38-1: enqueue for inactive port 0 [ 179.989848][ T8741] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.034761][ T6196] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 180.115943][ T6833] usb usb38-port1: attempt power cycle [ 180.194785][ T6196] usb 7-1: Using ep0 maxpacket: 16 [ 180.197747][ T6196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.201262][ T6196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.204171][ T6196] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 180.208480][ T6196] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 180.211222][ T6196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.216478][ T6196] usb 7-1: config 0 descriptor?? [ 180.621351][ T8740] random: crng reseeded on system resumption [ 180.629573][ T6196] usbhid 7-1:0.0: can't add hid device: -71 [ 180.632420][ T6196] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 180.640375][ T6196] usb 7-1: USB disconnect, device number 7 [ 180.675367][ T6833] usb usb38-port1: unable to enumerate USB device [ 181.253532][ T8753] netlink: 'syz.0.686': attribute type 15 has an invalid length. [ 181.257391][ T5942] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 181.260346][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'. [ 181.775211][ T8771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.630486][ T8784] netlink: 'syz.2.697': attribute type 15 has an invalid length. [ 182.633793][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.697'. [ 182.736247][ T8789] sp0: Synchronizing with TNC [ 182.837542][ T8799] overlayfs: failed to resolve './file1': -2 [ 182.907235][ T8801] sctp: [Deprecated]: syz.2.701 (pid 8801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.907235][ T8801] Use struct sctp_sack_info instead [ 183.916891][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 183.916901][ T40] audit: type=1326 audit(2000000027.660:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.3.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 183.927339][ T40] audit: type=1326 audit(2000000027.660:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.3.703" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 183.933683][ T40] audit: type=1326 audit(2000000027.670:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.3.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 183.944959][ T40] audit: type=1326 audit(2000000027.670:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.3.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 183.957340][ T40] audit: type=1326 audit(2000000027.670:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.3.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 183.975343][ T40] audit: type=1326 audit(2000000027.670:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.3.703" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 183.982654][ T40] audit: type=1326 audit(2000000027.670:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.3.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 183.990423][ T40] audit: type=1326 audit(2000000027.680:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.3.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 185.161732][ T8876] sp0: Synchronizing with TNC [ 185.287482][ T8882] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 185.322139][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 187.326962][ T8934] raw_sendmsg: syz.2.719 forgot to set AF_INET. Fix it! [ 188.052445][ T8954] sp0: Synchronizing with TNC [ 188.244224][ T8962] netlink: 'syz.2.726': attribute type 15 has an invalid length. [ 188.246507][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.726'. [ 189.895565][ T8982] sp0: Synchronizing with TNC [ 193.195874][ T9012] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 193.198706][ T9012] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 193.215030][ T9012] vhci_hcd vhci_hcd.0: Device attached [ 193.484812][ T61] usb 38-1: SetAddress Request (16) to port 0 [ 193.486809][ T61] usb 38-1: new SuperSpeed USB device number 16 using vhci_hcd [ 194.042215][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.048986][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.052738][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.079717][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.089534][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.165660][ T9013] vhci_hcd: connection reset by peer [ 194.168352][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 194.170766][ T1146] vhci_hcd vhci_hcd.0: release socket [ 194.173097][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 194.177789][ T9022] wg2 speed is unknown, defaulting to 1000 [ 194.313929][ T1144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.411731][ T1144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.505564][ T1144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.578095][ T1144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.593076][ T9022] chnl_net:caif_netlink_parms(): no params data found [ 194.668057][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.670996][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.674140][ T9022] bridge_slave_0: entered allmulticast mode [ 194.678341][ T9022] bridge_slave_0: entered promiscuous mode [ 194.700459][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.703308][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.719325][ T9022] bridge_slave_1: entered allmulticast mode [ 194.744828][ T9022] bridge_slave_1: entered promiscuous mode [ 194.877794][ T9022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.885927][ T9022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.935832][ T1144] bridge_slave_1: left allmulticast mode [ 194.938768][ T1144] bridge_slave_1: left promiscuous mode [ 194.942794][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.951335][ T1144] bridge_slave_0: left allmulticast mode [ 194.953612][ T1144] bridge_slave_0: left promiscuous mode [ 194.957600][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.290846][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.296752][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.300872][ T1144] bond0 (unregistering): Released all slaves [ 195.306454][ T9022] team0: Port device team_slave_0 added [ 195.315728][ T9022] team0: Port device team_slave_1 added [ 195.332278][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.335537][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.347028][ T9022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.354240][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.357673][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.366498][ T9022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.403673][ T9022] hsr_slave_0: entered promiscuous mode [ 195.406060][ T9022] hsr_slave_1: entered promiscuous mode [ 195.666444][ T9022] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.671943][ T9022] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.687405][ T9022] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.695150][ T9022] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.811110][ T1144] hsr_slave_0: left promiscuous mode [ 195.845115][ T1144] hsr_slave_1: left promiscuous mode [ 195.847252][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.849610][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.853302][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.858095][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.900269][ T1144] veth1_macvtap: left promiscuous mode [ 195.902640][ T1144] veth0_macvtap: left promiscuous mode [ 195.915923][ T1144] veth1_vlan: left promiscuous mode [ 195.918364][ T1144] veth0_vlan: left promiscuous mode [ 196.134897][ T5942] Bluetooth: hci4: command tx timeout [ 196.482808][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 196.514182][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 196.638024][ T9073] netlink: 'syz.3.752': attribute type 15 has an invalid length. [ 196.640538][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.752'. [ 196.851287][ T9066] wg2 speed is unknown, defaulting to 1000 [ 196.868100][ T9022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.888950][ T9022] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.898248][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.901474][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.911054][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.914266][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.979310][ T9077] syzkaller1: entered promiscuous mode [ 196.985491][ T9077] syzkaller1: entered allmulticast mode [ 197.158045][ T9022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.449389][ T9022] veth0_vlan: entered promiscuous mode [ 197.454520][ T9022] veth1_vlan: entered promiscuous mode [ 197.467764][ T9022] veth0_macvtap: entered promiscuous mode [ 197.471784][ T9022] veth1_macvtap: entered promiscuous mode [ 197.484049][ T9112] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 197.486177][ T9112] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 197.487229][ T9022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.506653][ T9022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.506912][ T9112] vhci_hcd vhci_hcd.0: Device attached [ 197.514210][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.519792][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.537415][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.554497][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.627164][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.630844][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.685720][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.692569][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.774909][ T76] usb 44-1: SetAddress Request (14) to port 0 [ 197.782020][ T76] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 197.790351][ T9126] FAULT_INJECTION: forcing a failure. [ 197.790351][ T9126] name failslab, interval 1, probability 0, space 0, times 0 [ 197.794680][ T9126] CPU: 3 UID: 0 PID: 9126 Comm: syz.5.742 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.794709][ T9126] Tainted: [L]=SOFTLOCKUP [ 197.794712][ T9126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.794718][ T9126] Call Trace: [ 197.794723][ T9126] [ 197.794727][ T9126] dump_stack_lvl+0x16c/0x1f0 [ 197.794747][ T9126] should_fail_ex+0x512/0x640 [ 197.794759][ T9126] ? __kvmalloc_node_noprof+0x129/0xa40 [ 197.794775][ T9126] should_failslab+0xc2/0x120 [ 197.794791][ T9126] __kvmalloc_node_noprof+0x14a/0xa40 [ 197.794806][ T9126] ? io_alloc_cache_init+0x38/0x170 [ 197.794825][ T9126] ? io_alloc_cache_init+0x38/0x170 [ 197.794840][ T9126] io_alloc_cache_init+0x38/0x170 [ 197.794856][ T9126] io_uring_setup+0x5da/0x1f60 [ 197.794871][ T9126] ? __pfx_io_uring_setup+0x10/0x10 [ 197.794885][ T9126] ? __mutex_unlock_slowpath+0x161/0x790 [ 197.794902][ T9126] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.794924][ T9126] ? fput+0x70/0xf0 [ 197.794934][ T9126] ? ksys_write+0x1ac/0x250 [ 197.794948][ T9126] ? __pfx_ksys_write+0x10/0x10 [ 197.794965][ T9126] __ia32_sys_io_uring_setup+0xc2/0x170 [ 197.794979][ T9126] __do_fast_syscall_32+0xe8/0x680 [ 197.794997][ T9126] do_fast_syscall_32+0x32/0x80 [ 197.795013][ T9126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.795026][ T9126] RIP: 0023:0xf70ed579 [ 197.795034][ T9126] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 197.795044][ T9126] RSP: 002b:00000000f54dd50c EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 197.795054][ T9126] RAX: ffffffffffffffda RBX: 0000000000002c0e RCX: 0000000080000400 [ 197.795061][ T9126] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.795066][ T9126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.795072][ T9126] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 197.795082][ T9126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.795095][ T9126] [ 198.029988][ T9114] vhci_hcd: connection reset by peer [ 198.037266][ T12] vhci_hcd vhci_hcd.3: stop threads [ 198.039265][ T12] vhci_hcd vhci_hcd.3: release socket [ 198.042058][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 198.074328][ T9143] netlink: 'syz.5.760': attribute type 15 has an invalid length. [ 198.090579][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.760'. [ 198.214894][ T5942] Bluetooth: hci4: command tx timeout [ 198.431329][ T9149] sp0: Synchronizing with TNC [ 198.534803][ T61] usb 38-1: device descriptor read/8, error -110 [ 198.754383][ T9158] FAULT_INJECTION: forcing a failure. [ 198.754383][ T9158] name failslab, interval 1, probability 0, space 0, times 0 [ 198.758884][ T9158] CPU: 0 UID: 0 PID: 9158 Comm: syz.0.766 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.758907][ T9158] Tainted: [L]=SOFTLOCKUP [ 198.758912][ T9158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.758921][ T9158] Call Trace: [ 198.758926][ T9158] [ 198.758932][ T9158] dump_stack_lvl+0x16c/0x1f0 [ 198.758959][ T9158] should_fail_ex+0x512/0x640 [ 198.758976][ T9158] ? __kvmalloc_node_noprof+0x129/0xa40 [ 198.758999][ T9158] should_failslab+0xc2/0x120 [ 198.759021][ T9158] __kvmalloc_node_noprof+0x14a/0xa40 [ 198.759042][ T9158] ? trace_kmalloc+0x2b/0xb0 [ 198.759063][ T9158] ? __kvmalloc_node_noprof+0x3c9/0xa40 [ 198.759081][ T9158] ? io_alloc_cache_init+0x38/0x170 [ 198.759102][ T9158] ? io_alloc_cache_init+0x38/0x170 [ 198.759117][ T9158] io_alloc_cache_init+0x38/0x170 [ 198.759134][ T9158] io_rsrc_cache_init+0x26/0x50 [ 198.759150][ T9158] io_uring_setup+0x5e8/0x1f60 [ 198.759165][ T9158] ? __pfx_io_uring_setup+0x10/0x10 [ 198.759178][ T9158] ? __mutex_unlock_slowpath+0x161/0x790 [ 198.759196][ T9158] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.759217][ T9158] ? fput+0x70/0xf0 [ 198.759227][ T9158] ? ksys_write+0x1ac/0x250 [ 198.759246][ T9158] ? __pfx_ksys_write+0x10/0x10 [ 198.759276][ T9158] __ia32_sys_io_uring_setup+0xc2/0x170 [ 198.759292][ T9158] __do_fast_syscall_32+0xe8/0x680 [ 198.759309][ T9158] do_fast_syscall_32+0x32/0x80 [ 198.759325][ T9158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.759338][ T9158] RIP: 0023:0xf70dd579 [ 198.759346][ T9158] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 198.759356][ T9158] RSP: 002b:00000000f54cd50c EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 198.759367][ T9158] RAX: ffffffffffffffda RBX: 0000000000002c0e RCX: 0000000080000400 [ 198.759374][ T9158] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.759380][ T9158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.759387][ T9158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 198.759395][ T9158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.759416][ T9158] [ 198.857220][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.955580][ T61] usb usb38-port1: attempt power cycle [ 199.573049][ T61] usb usb38-port1: unable to enumerate USB device [ 199.959110][ T9172] netem: change failed [ 200.294748][ T5942] Bluetooth: hci4: command tx timeout [ 200.504880][ T9184] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 200.507490][ T9184] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 200.511948][ T9184] vhci_hcd vhci_hcd.0: Device attached [ 200.794984][ T61] usb 42-1: SetAddress Request (6) to port 0 [ 200.804198][ T61] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 200.881329][ T9185] vhci_hcd: connection reset by peer [ 200.883258][ T60] vhci_hcd vhci_hcd.2: stop threads [ 200.885762][ T60] vhci_hcd vhci_hcd.2: release socket [ 200.889716][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 202.156104][ T9226] wg2 speed is unknown, defaulting to 1000 [ 202.374858][ T5942] Bluetooth: hci4: command tx timeout [ 202.935019][ T76] usb 44-1: device descriptor read/8, error -110 [ 203.182934][ T9227] overlayfs: failed to resolve './file0:/': -2 [ 203.228170][ T9226] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.595301][ T76] usb usb44-port1: attempt power cycle [ 203.636698][ T9234] tmpfs: Unknown parameter 'quota¤¿srquota_inÝÒüÈ®©' [ 203.827370][ T9242] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 203.829998][ T9242] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 203.844830][ T9242] vhci_hcd vhci_hcd.0: Device attached [ 203.954823][ T76] usb 44-1: SetAddress Request (16) to port 0 [ 203.957147][ T76] usb 44-1: new SuperSpeed USB device number 16 using vhci_hcd [ 204.184794][ T841] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 204.334769][ T841] usb 7-1: Using ep0 maxpacket: 16 [ 204.338111][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.342202][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.345665][ T841] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.349612][ T841] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 204.352424][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.356752][ T841] usb 7-1: config 0 descriptor?? [ 204.706656][ T9243] vhci_hcd: connection reset by peer [ 204.709109][ T46] vhci_hcd vhci_hcd.3: stop threads [ 204.710761][ T46] vhci_hcd vhci_hcd.3: release socket [ 204.712538][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 204.763130][ T841] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 204.767779][ T841] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 204.771354][ T841] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 204.773659][ T841] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 204.785013][ T841] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 204.788431][ T841] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 204.812275][ T841] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 204.815986][ T841] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 204.962346][ T9250] random: crng reseeded on system resumption [ 204.977078][ T6005] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 204.980854][ T6005] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 204.984633][ T841] usb 7-1: USB disconnect, device number 8 [ 204.991026][ T6005] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 204.994651][ T6005] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 205.036712][ T40] audit: type=1326 audit(2000000048.790:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.055723][ T40] audit: type=1326 audit(2000000048.790:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.064374][ T40] audit: type=1326 audit(2000000048.790:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.080113][ T9269] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 205.082545][ T9269] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 205.095037][ T9269] vhci_hcd vhci_hcd.0: Device attached [ 205.106558][ T40] audit: type=1326 audit(2000000048.790:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.114500][ T40] audit: type=1326 audit(2000000048.790:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.139648][ T40] audit: type=1326 audit(2000000048.810:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.152959][ T40] audit: type=1326 audit(2000000048.810:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.185509][ T40] audit: type=1326 audit(2000000048.810:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.192304][ T40] audit: type=1326 audit(2000000048.810:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.207798][ T40] audit: type=1326 audit(2000000048.810:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.792" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 205.241876][ T9269] syz2: rxe_newlink: already configured on wg2 [ 205.684053][ T9270] vhci_hcd: connection closed [ 205.684329][ T1149] vhci_hcd vhci_hcd.3: stop threads [ 205.689257][ T1149] vhci_hcd vhci_hcd.3: release socket [ 205.691709][ T1149] vhci_hcd vhci_hcd.3: disconnect device [ 205.744540][ T9283] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 205.899004][ T61] usb 42-1: device descriptor read/8, error -110 [ 206.035335][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 206.285753][ T61] usb usb42-port1: attempt power cycle [ 206.349398][ T9302] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 206.352048][ T9302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 206.362888][ T9302] vhci_hcd vhci_hcd.0: Device attached [ 206.634848][ T5943] usb 38-1: SetAddress Request (20) to port 0 [ 206.637145][ T5943] usb 38-1: new SuperSpeed USB device number 20 using vhci_hcd [ 206.794628][ T9304] vhci_hcd: connection reset by peer [ 206.798943][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 206.800880][ T1146] vhci_hcd vhci_hcd.0: release socket [ 206.803334][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 206.879229][ T61] usb usb42-port1: unable to enumerate USB device [ 207.135716][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'. [ 207.414262][ T9334] netlink: 'syz.5.810': attribute type 15 has an invalid length. [ 207.424755][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.810'. [ 207.674271][ T9341] wg2 speed is unknown, defaulting to 1000 [ 209.014800][ T76] usb 44-1: device descriptor read/8, error -110 [ 209.555361][ T76] usb usb44-port1: unable to enumerate USB device [ 209.753449][ T9400] netlink: 'syz.5.820': attribute type 15 has an invalid length. [ 209.764867][ T9400] netlink: 24 bytes leftover after parsing attributes in process `syz.5.820'. [ 209.966039][ T9410] fuse: Bad value for 'rootmode' [ 210.059518][ T1149] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.062410][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.314793][ T76] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 210.484751][ T76] usb 5-1: Using ep0 maxpacket: 8 [ 210.488155][ T76] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 210.492234][ T76] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 210.492251][ T76] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.492269][ T76] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.492302][ T76] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.492321][ T76] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.697517][ T76] usb 5-1: usb_control_msg returned -32 [ 210.700050][ T76] usbtmc 5-1:16.0: can't read capabilities [ 211.015396][ T61] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 211.059867][ T9424] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 211.068294][ T6152] usb 5-1: USB disconnect, device number 4 [ 211.197088][ T61] usb 10-1: Using ep0 maxpacket: 16 [ 211.202987][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.208147][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.212296][ T61] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 211.217917][ T61] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 211.221715][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.232197][ T61] usb 10-1: config 0 descriptor?? [ 211.645357][ T61] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.648025][ T61] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.650363][ T61] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.652683][ T61] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.656073][ T61] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 211.662856][ T61] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 211.678600][ T61] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 211.681262][ T61] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 211.734847][ T5943] usb 38-1: device descriptor read/8, error -110 [ 211.845021][ T9420] random: crng reseeded on system resumption [ 211.856387][ T61] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 211.859891][ T6024] usb 10-1: USB disconnect, device number 2 [ 211.864235][ T61] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 211.866721][ T6024] ------------[ cut here ]------------ [ 211.869548][ T6024] workqueue: work disable count underflowed [ 211.871427][ T61] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 211.871492][ T6024] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#1: kworker/1:4/6024 [ 211.877980][ T6024] Modules linked in: [ 211.879616][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.881174][ T61] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 211.883101][ T6024] Tainted: [L]=SOFTLOCKUP [ 211.883107][ T6024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.883115][ T6024] Workqueue: usb_hub_wq hub_event [ 211.883130][ T6024] RIP: 0010:enable_work+0x2ca/0x310 [ 211.894811][ T6024] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 c7 e6 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d d6 69 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 14 d0 a2 00 e9 f7 fd ff [ 211.902491][ T6024] RSP: 0018:ffffc90004f3f348 EFLAGS: 00010093 [ 211.904925][ T6024] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846933 [ 211.908148][ T6024] RDX: ffff8880286aa4c0 RSI: ffffffff81846b03 RDI: ffffffff908bd4e0 [ 211.911308][ T6024] RBP: ffff88806a047738 R08: 0000000000000005 R09: 0000000000000000 [ 211.914607][ T6024] R10: 0000000000000000 R11: ffff8880286aaff0 R12: 1ffff920009e7e6a [ 211.917969][ T6024] R13: ffffffff8fc51cdf R14: ffff88806a047698 R15: ffff88806a047730 [ 211.921334][ T6024] FS: 0000000000000000(0000) GS:ffff8880977fd000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.925031][ T6024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.927885][ T6024] CR2: 000000003081fff8 CR3: 000000004e4d1000 CR4: 0000000000352ef0 [ 211.931196][ T6024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.934389][ T6024] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 211.937586][ T6024] Call Trace: [ 211.939008][ T6024] [ 211.940275][ T6024] ? __pfx_enable_work+0x10/0x10 [ 211.942397][ T6024] cancel_delayed_work_sync+0x96/0xf0 [ 211.944580][ T6024] thermal_zone_device_unregister+0x28e/0x4d0 [ 211.946866][ T6024] ? __pfx_shield_remove+0x10/0x10 [ 211.948757][ T6024] power_supply_unregister+0x10a/0x150 [ 211.950788][ T6024] shield_remove+0x75/0x130 [ 211.952424][ T6024] ? __pfx_shield_remove+0x10/0x10 [ 211.954013][ T6024] hid_device_remove+0xd1/0x260 [ 211.955564][ T6024] ? __pfx_hid_device_remove+0x10/0x10 [ 211.957410][ T6024] device_remove+0xcb/0x170 [ 211.959103][ T6024] device_release_driver_internal+0x44b/0x620 [ 211.961195][ T6024] bus_remove_device+0x22f/0x450 [ 211.962758][ T6024] device_del+0x396/0x9f0 [ 211.964132][ T6024] ? __pfx_device_del+0x10/0x10 [ 211.965686][ T6024] ? do_raw_spin_lock+0x12c/0x2b0 [ 211.967283][ T6024] hid_destroy_device+0x19c/0x240 [ 211.968887][ T6024] usbhid_disconnect+0xa0/0xe0 [ 211.970407][ T6024] usb_unbind_interface+0x1dd/0x9e0 [ 211.972066][ T6024] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 211.974012][ T6024] ? __pfx_usb_unbind_interface+0x10/0x10 [ 211.975807][ T6024] device_remove+0x125/0x170 [ 211.977301][ T6024] device_release_driver_internal+0x44b/0x620 [ 211.979207][ T6024] bus_remove_device+0x22f/0x450 [ 211.980833][ T6024] device_del+0x396/0x9f0 [ 211.982256][ T6024] ? __pfx_device_del+0x10/0x10 [ 211.983801][ T6024] ? kobject_put+0x218/0x6f0 [ 211.985340][ T6024] usb_disable_device+0x355/0x820 [ 211.986938][ T6024] usb_disconnect+0x2e1/0x9e0 [ 211.988441][ T6024] hub_event+0x1d84/0x52f0 [ 211.989871][ T6024] ? __lock_acquire+0x436/0x2890 [ 211.991463][ T6024] ? do_raw_spin_unlock+0x172/0x230 [ 211.993130][ T6024] ? __pfx_hub_event+0x10/0x10 [ 211.994653][ T6024] ? interval_tree_iter_next+0x1a0/0x2e0 [ 211.996432][ T6024] ? finish_task_switch.isra.0+0x202/0xbd0 [ 211.998301][ T6024] ? rcu_is_watching+0x12/0xc0 [ 211.999851][ T6024] process_one_work+0x9ba/0x1b20 [ 212.001584][ T6024] ? __pfx_process_one_work+0x10/0x10 [ 212.003329][ T6024] ? assign_work+0x1a0/0x250 [ 212.004809][ T6024] worker_thread+0x6c8/0xf10 [ 212.006309][ T6024] ? __kthread_parkme+0x19e/0x250 [ 212.007945][ T6024] ? __pfx_worker_thread+0x10/0x10 [ 212.009612][ T6024] kthread+0x3c5/0x780 [ 212.010938][ T6024] ? __pfx_kthread+0x10/0x10 [ 212.012446][ T6024] ? rcu_is_watching+0x12/0xc0 [ 212.013989][ T6024] ? __pfx_kthread+0x10/0x10 [ 212.015482][ T6024] ret_from_fork+0x983/0xb10 [ 212.016967][ T6024] ? __pfx_ret_from_fork+0x10/0x10 [ 212.018585][ T6024] ? __switch_to+0x7af/0x10d0 [ 212.020084][ T6024] ? __pfx_kthread+0x10/0x10 [ 212.021599][ T6024] ret_from_fork_asm+0x1a/0x30 [ 212.023134][ T6024] [ 212.024133][ T6024] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.026420][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.029798][ T6024] Tainted: [L]=SOFTLOCKUP [ 212.031183][ T6024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.034690][ T6024] Workqueue: usb_hub_wq hub_event [ 212.036280][ T6024] Call Trace: [ 212.037367][ T6024] [ 212.038310][ T6024] dump_stack_lvl+0x3d/0x1f0 [ 212.039773][ T6024] vpanic+0x640/0x6f0 [ 212.041046][ T6024] ? enable_work+0x2ca/0x310 [ 212.042630][ T6024] panic+0xca/0xd0 [ 212.043848][ T6024] ? __pfx_panic+0x10/0x10 [ 212.045283][ T6024] ? check_panic_on_warn+0x1f/0xb0 [ 212.046901][ T6024] check_panic_on_warn+0xab/0xb0 [ 212.048441][ T6024] __warn+0x108/0x3c0 [ 212.049729][ T6024] __report_bug+0x2a0/0x520 [ 212.051171][ T6024] ? enable_work+0x2ca/0x310 [ 212.052566][ T6024] ? __pfx___report_bug+0x10/0x10 [ 212.054121][ T6024] ? __wait_for_common+0x1e0/0x4e0 [ 212.055686][ T6024] ? enable_work+0x2c3/0x310 [ 212.057138][ T6024] ? enable_work+0xf3/0x310 [ 212.058579][ T6024] ? find_held_lock+0x2b/0x80 [ 212.060066][ T6024] report_bug_entry+0xe1/0x290 [ 212.061627][ T6024] ? enable_work+0x2ca/0x310 [ 212.063084][ T6024] handle_bug+0x18a/0x260 [ 212.064447][ T6024] exc_invalid_op+0x17/0x50 [ 212.065925][ T6024] asm_exc_invalid_op+0x1a/0x20 [ 212.067437][ T6024] RIP: 0010:enable_work+0x2ca/0x310 [ 212.069074][ T6024] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 c7 e6 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d d6 69 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 14 d0 a2 00 e9 f7 fd ff [ 212.075226][ T6024] RSP: 0018:ffffc90004f3f348 EFLAGS: 00010093 [ 212.077153][ T6024] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846933 [ 212.079620][ T6024] RDX: ffff8880286aa4c0 RSI: ffffffff81846b03 RDI: ffffffff908bd4e0 [ 212.082111][ T6024] RBP: ffff88806a047738 R08: 0000000000000005 R09: 0000000000000000 [ 212.084587][ T6024] R10: 0000000000000000 R11: ffff8880286aaff0 R12: 1ffff920009e7e6a [ 212.087076][ T6024] R13: ffffffff8fc51cdf R14: ffff88806a047698 R15: ffff88806a047730 [ 212.089563][ T6024] ? enable_work+0xf3/0x310 [ 212.091006][ T6024] ? enable_work+0x2c3/0x310 [ 212.092492][ T6024] ? enable_work+0x2c3/0x310 [ 212.093971][ T6024] ? __pfx_enable_work+0x10/0x10 [ 212.095532][ T6024] cancel_delayed_work_sync+0x96/0xf0 [ 212.097237][ T6024] thermal_zone_device_unregister+0x28e/0x4d0 [ 212.099140][ T6024] ? __pfx_shield_remove+0x10/0x10 [ 212.100810][ T6024] power_supply_unregister+0x10a/0x150 [ 212.102517][ T6024] shield_remove+0x75/0x130 [ 212.103947][ T6024] ? __pfx_shield_remove+0x10/0x10 [ 212.105566][ T6024] hid_device_remove+0xd1/0x260 [ 212.107103][ T6024] ? __pfx_hid_device_remove+0x10/0x10 [ 212.108814][ T6024] device_remove+0xcb/0x170 [ 212.110268][ T6024] device_release_driver_internal+0x44b/0x620 [ 212.112183][ T6024] bus_remove_device+0x22f/0x450 [ 212.113761][ T6024] device_del+0x396/0x9f0 [ 212.115125][ T6024] ? __pfx_device_del+0x10/0x10 [ 212.116664][ T6024] ? do_raw_spin_lock+0x12c/0x2b0 [ 212.118242][ T6024] hid_destroy_device+0x19c/0x240 [ 212.119766][ T6024] usbhid_disconnect+0xa0/0xe0 [ 212.121314][ T6024] usb_unbind_interface+0x1dd/0x9e0 [ 212.122962][ T6024] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 212.124727][ T6024] ? __pfx_usb_unbind_interface+0x10/0x10 [ 212.126485][ T6024] device_remove+0x125/0x170 [ 212.127954][ T6024] device_release_driver_internal+0x44b/0x620 [ 212.129877][ T6024] bus_remove_device+0x22f/0x450 [ 212.131468][ T6024] device_del+0x396/0x9f0 [ 212.132842][ T6024] ? __pfx_device_del+0x10/0x10 [ 212.134393][ T6024] ? kobject_put+0x218/0x6f0 [ 212.135860][ T6024] usb_disable_device+0x355/0x820 [ 212.137460][ T6024] usb_disconnect+0x2e1/0x9e0 [ 212.138950][ T6024] hub_event+0x1d84/0x52f0 [ 212.140374][ T6024] ? __lock_acquire+0x436/0x2890 [ 212.141943][ T6024] ? do_raw_spin_unlock+0x172/0x230 [ 212.143581][ T6024] ? __pfx_hub_event+0x10/0x10 [ 212.145102][ T6024] ? interval_tree_iter_next+0x1a0/0x2e0 [ 212.146762][ T6024] ? finish_task_switch.isra.0+0x202/0xbd0 [ 212.148550][ T6024] ? rcu_is_watching+0x12/0xc0 [ 212.150074][ T6024] process_one_work+0x9ba/0x1b20 [ 212.151656][ T6024] ? __pfx_process_one_work+0x10/0x10 [ 212.153375][ T6024] ? assign_work+0x1a0/0x250 [ 212.154855][ T6024] worker_thread+0x6c8/0xf10 [ 212.156331][ T6024] ? __kthread_parkme+0x19e/0x250 [ 212.157931][ T6024] ? __pfx_worker_thread+0x10/0x10 [ 212.159456][ T6024] kthread+0x3c5/0x780 [ 212.160753][ T6024] ? __pfx_kthread+0x10/0x10 [ 212.162247][ T6024] ? rcu_is_watching+0x12/0xc0 [ 212.163765][ T6024] ? __pfx_kthread+0x10/0x10 [ 212.165242][ T6024] ret_from_fork+0x983/0xb10 [ 212.166707][ T6024] ? __pfx_ret_from_fork+0x10/0x10 [ 212.168328][ T6024] ? __switch_to+0x7af/0x10d0 [ 212.169825][ T6024] ? __pfx_kthread+0x10/0x10 [ 212.171313][ T6024] ret_from_fork_asm+0x1a/0x30 [ 212.172841][ T6024] [ 212.174488][ T6024] Kernel Offset: disabled [ 212.175853][ T6024] Rebooting in 86400 seconds..