last executing test programs: 25m25.674752275s ago: executing program 32 (id=227): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, 0x0, 0x404c080) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 24m52.275539428s ago: executing program 3 (id=300): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000009f0000599dc1b767b858ff182b7fbfe998ed0b284fba1f674235"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r6 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r5, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x10}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 24m50.457512417s ago: executing program 3 (id=302): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r7, 0x1, 0x0, &(0x7f0000000380), 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) 24m48.98534651s ago: executing program 3 (id=304): socket$netlink(0x10, 0x3, 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 24m42.313219315s ago: executing program 3 (id=314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 24m36.147336437s ago: executing program 3 (id=323): socket$inet_mptcp(0x2, 0x1, 0x106) truncate(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[], 0x1, 0x1061d, &(0x7f0000010640)="$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") chdir(&(0x7f0000000400)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x4, 0x2, 0x6}, {0x3, 0x2, 0xc}], 0x10, 0x4f}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000100), 0x80) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r6, 0x79f, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) 24m34.323800938s ago: executing program 3 (id=325): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbe) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, 0x0, 0x404c080) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 24m27.736170563s ago: executing program 5 (id=338): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2(&(0x7f0000001440), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24m26.695079081s ago: executing program 5 (id=340): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r7, 0x1, 0x0, &(0x7f0000000380), 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) 24m24.806658385s ago: executing program 5 (id=341): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRESOCT, @ANYRES64=r0, @ANYRES8], 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500)={0xa6, 0x29, 0x1, {0x2, [{{0x10, 0x0, 0x407}, 0x2, 0xff, 0x7, './file0'}, {{0x10, 0x2, 0x1}, 0x3800000000000, 0x4, 0x7, './file0'}, {{0x20, 0x3, 0x2}, 0x5, 0x2, 0x7, './file0'}, {{0x20, 0x3, 0x1}, 0x7ab, 0x6, 0x7, './file0'}, {{0x0, 0x1}, 0x8001, 0x4, 0x7, './file0'}]}}, 0xa6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe28, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) inotify_init1(0x80800) 24m23.690457913s ago: executing program 5 (id=344): syz_emit_ethernet(0xbb, &(0x7f00000001c0)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x85, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x4d98]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c047c4b8d25dc7ce1030c1b7a5b9f80ac509cedbdbbbef820331f9c7c7cac5023e608bf41d578422a9a46756018189a801a443f8099cdb227f1bdf144b72d5"}, {0xdd86}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl(0xffffffffffffffff, 0x824e, &(0x7f000001b000)="948660701fe81e8a5c6978026ddd587ad0acea2d877ffd26204126730f05bf9c5767d2dd1c2fba3bc23b5c12cf939b9fbcef6b1ace2e2a0befba0c637ba5f26648e5c0e66570b9c2fdaddf91203d3d088b15e5493dcc554aa69bcc7413ab9bc692616914e23c5f7959dd7601a5c863c3245f9f9a53939231faeea8b056dd772b344da09c77e543589663caaca1d554ed067c67b95f7f88608494b78e9695807ebb4f5b79d158d70440d1199b372ac1ae921d4ef4de0d048393bb94858d7e233676af93f68ce65d2ca962ffa7082c7e5100a17e49d3d1dd1ef293757e1f1f3b9f1eef933b66ca33ce763f6dca42e1b5a8e4cae31ff557c2ec90e73e9226983f36f8cf6c45af60df072da6a486b019bb72fc74c5016af63c1c596ece5940bc2b143b51b8036c324b2e18b2c382724767cb5c6b4be1901667fce02b7abf2992f76b3bdc6060ab71b446d26c12311118fcbe84ba17dfe0c36673f766a2e1fe0cd1149a63e7dabcb6842b7d56de2ff017776464d7c419e772b48e7f479c92efa2fbb77630639c7d39ffd42c669a35ef7a481905d8192800d68d5dfa7cb8c5198004cfe777c78a25827023beff2dec16e7e5ba2e22555a48ec6005e670d9744a82900f9aa1ebf4a8c4b1adbb04227b88230ae47e3b68665353b46e5d6b1aa4610136445acf7c5904c354e14feb5b3d48e42279ffaae3b192ebeddd72dd966f4bcc8a0d4d27c3edbcd07a42076ffc8a05fc4d1dbbdcc7578bad66438035d0f336c0996b3a6a004cbfcab5f5a85badaa57197f5378642db5197c1a3bac39ccf5366918979939df4dda98629ecb7133ab9220a470bd2d8e3bf112892510ae8cd16b26c89144e42a37c7fe4dc2dc706810bf5686a2c084916e5ab9dda56da3c9ee35afb4cfcb37b4e049a1ae76c9db596b258a42b8a7e24a32caa745ee8e38ca15dae1e190fec6bf7f98b9988b0ada0ed90357888fe5cdc104577acc17be8a734197b2ae771c98373796a865bae25d727e3cae45b56f393b3e883af6ac9b64b57958004e3e321fd8df4b97ac4ad12717bb7ab6ef3dc1c289dbd98d24d8750779f1d3c962ddc95b23b50a6aef2dae8c79ce990c7a1c2a9b1ca1fac0540efd9cf58a092933c4cd4fd3543ee8da10a67fddd920b5119a0cb8b3d41d9ce9a8881edaccc992b89d430ba093804d4a907a1a030fd6eb12fc627d59d4a59c85f3860a045943d1569c402a723e9bd01ab6cbb5343ceb2798c4060ae6952e031aa730abcaa8ccea6ac2f37887fda1a5e8f55730263c369c7a103a161945f7b09d8ea2449a83fe1df57e940742f6a37fed175ba16adc2ed79f654a16a59f43fe2c90f1adbb0ce6d56b22f3cca87dbbdba64a6d9dba63590e16134fe1b21eaa4a36e4017ff062213866bce5d2d6b877880e22123599a5f4a11954174b47d8b5d9f4a6c78aed303c7e85d7b5884caf5e49b1e2d7a3f390d9b88391001eb56ca26b6fd69e8700c4502a1c15bd1690c466ac6e0f131f177dad130db20035b527a8f256377bc0233edb57f96c6a8812b897717e3993e35c22b1ec0cb84727bd337f6d2abd6e11894fdb60f95f24256b15a51fde8d628294095591ef11790782feeb02149bec9ca96bfc8592d22e0756a55fe4f8c302de5521c24c3de227212ea179bbe0952f24255ca64e3414491963f3dd594f6900d5f02da3a28eb3ab234234082da5fec6e873d502f669e449754e6c9d91c1090159bd7a636c782ba7843a0237988114ee368cef120ddee24b03c2fbc058c100c05bea16ec63f00d9e3005a160bc779d5bdd4b7486d532181ad6cbe0914d64ff81d563f187c50e6aa4768da4292a61706d4be48a4388309f2a37554b140825523411053d7296df8b4ff95419fe5c580973c899707dfb523fd1d81501be543d285f927c9ef4ca94bb2ff464eb45bc4af3400dd52feb14c9d5136bddc79d6e9bd84ae7df225c567d23fb40c765d6f92ddc29580d9e328956bc614c5cc0e6c512ba1aca75c9210e1f9e8be2db7442498c81e2ddab1fb37bea81eec7b4aeeec44c5baf3233fc48b84b9692a3ee098f634dd573052f34fef93fcede1e62de0423e470b3fb245efc9abb6fee2f0a7d70b838f2b4cb028a65cd2f6ca32f81dca8208dd8441472c38b8d1d18f86448b9ac5ee763455bdee933e2e28514e127a9214ed4d23ec5b9794b263a7c2fbf750edebede55ac3ce149c7f3e701374cf44880d075ce0d27ae3e995a9c7f80dc5600954bec26d124732775d852c55e26b1cca10d7e6b3f0c6e8d119750698b18b0cadab3fb04b24cc3b81c7aa14a437ca3c235f79f2197349eaee86fa5c9f3c8d87f320c443a5f4bab304d786c3b398b052d12440941fc40d5bab1403b56f2167305b33dfd8d7b3e0850201b7b8a279d9a73e6c08220643fff5d0bbf3432a8abfa341c1881ba6d39810f5c41186fbcfdb893286ef0af57070e85c5ee0bb8d6601d4ee119bed10c5c6721e38f6dea7645d46a61697c3bd00aecc5d7a2b0568dd2d1fb9788b6bdfd6a711811c0a167315c572613fbc7e8393688818bc1968ea9571530d6c64c9bbbb19bbc6fb50a84f17e2c129f9fc8dfaf6ab744b63f1e8f86714f2ce001e463059a17c14b783ce78342d71758564cad81bc3a608b66e6f1f663c7128918aada498b80f46244b06a3f56f842183fb27cda153e4b7d2ae546c0d120cded96670c6c7bbfe137180fd0014914ec87585f794c65881ec62c03bc348ea5038a6b4e7c0a95b153b6047f0c2f07183259f1655c20f8dcfd1ab5d6aa7e8b88e02f30b3c22e396eeb71d595489d857398a2b8f1cca24c5cdd66da6414b083638f8d564a190865a5410e1baa6c0432210414f3d4d99b81268830032df9cc52b917b3eeea5f187c29a041c1249f1e4280bfbfe3e465ef3066b9d15d56340a2065e78a60d03aed696a877aca8f74ac0b361a53bb360096df1098572b24f8b3fcfb9ccbd8917daab2f51c12e6acc2bf074df74d6eda2978785da34e6990354bccfb837540ba920860a56e436decfad21d0de8605eebe99f0205cc1a9dc0df2ab465d700f6945eb9bc5f053e652c1c92b519a09e626475341bba583bd3988fac5849aa38747f309dc08dfdf719f162e2e65a461109d68e897823c3eb066d0a25e0d1f3e555f617a9e3b0f977bcff1926224dbed7ce514af6cde8575a179e88117505a6a5e7f251174e7ca956d2159e9fb5b175d49797475add1f578149729c837838d54111804f17a3d246a3ab8d559666c59fd7350f4f9e17d9346075f3cc4b19769dd8419e519e7140c3faeacd1231c3b38e567a102842fcee2f75868366d5ca591733118c435dfd01f327c4159b3e88665d06481362879777ccbfc33d3a949003e57f032bd793e9916f63f0d0c292a3f20f7f3d28f4c891e1312fd9fb9552e84de3aeadf9a69b3abf74812521b25e56c70477c9d644c9710116455cf5b28ee1e2faa182c66a0f4cdd05d078ba1bd2846fa200852101ecd8201864dd0ae8c6aaf8e35ebbe31f190a6c85079b71ad611d22ea3297d2d02de72f2e245c02bfeb47f03b543edbbec6b6ae20706ae7a0d225628cfe04603fb79f6c43d55a8f492c44b93be02213a1dc0b31d65b0156a1a39bab92c6a76da048f4a0ecfb7a560ce01e46f5d08bf83d890c034b09f5be9152beb11955ca0e419efa4fa69d5ffe7d96945341e5a094188de83dfd4b20f28899f7ce6d0a07ea27c5838631f755bde1eef79f194cf0a72cdfb037b98de4625b7d1550c3c964691b08faa262ccba24dbe2f78a7d6f4f78155e32195cfcbf4ea8a18802a19fe5ad9086abd2169fa61ed5ae59f393dc094680f6be8e13fdf11eb4badbd82f697bac3ee26def2c6e61ad06e7ce07e5e2bb172a619246648550d8dd05d392584149a483221ed68723c87b9b62c6f523e1c7f68c8c8dec6d945079957504e78e9db9b410da800eeaf308f993f81ccf9b017d34feff449d645cc7bc722f878bca44b7b19d19ffcf1cddc90b7b81758e90e7bdbf1784f8ee18a9fa947d2f2edd1ec422d6ef0a72645e62a87dcf0757655701481b258f1ba3a579b3fd9e33480927d87de8eff6ad3fbf47bdbc7600d1cc0f7f8b5702cb97ca2add85aa5447b497764f5b3f4543b8e5972e81b0ad75f4b2290568b6078d48bd9d4d99cc569f9686e0f77f77bb114d628ee27f262372fba036b32b290b8e879ffadbb4425c5d15b6f9dbf06bce176e8a4ed73a2cb344bec1583294533f2873dc521d3f233fa9dadd86230ab0e0bb42c3763d80e62ac653b741053bf03fbde19358ac457bd9f12acb6cedb70bbffe8da432ca8903077757ff89116423c35cb786df63ae24cc1768bed020237e21d61f5c014167af821c286be98628d6caa78685d6b84e776d99a45fc128ba8dedfeb3271275abba7fc41f69315da0e09ca5b992d4c8494850f469e4635b6187d3c5fc5e790008fd2ae3ec84ea4aec1fc4fa27839bc09d5e6011ac6393b7ed2c9ff76c84c5a434918a738ea967024799c9524703ef8cec12036c270d08f313a95402dcee5bfc4c1763eaf2d76b818c9704a34f4aadafd507bf1a4069ab3e9e53ef8f14b9964f99963053fd2e03ea821c4a7e4f2718323996a9c895818bbd9bb05b39cbd6a90d411a053734574dd69b200f13d59ebf368b2987b3c9f55627b3cc76eb90f833ffcb1a2933e4bda8753337027d8ca1a123e83dbde350866804bda306314be3f44111b40c9b1f4da18c384ddfb41d84e2521a44b555af80ad332aabf9e97e0ea99e33e9da338ec840881e461a7aeb21bb63ee41") sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) 24m21.117388271s ago: executing program 5 (id=351): socket$inet_mptcp(0x2, 0x1, 0x106) truncate(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[], 0x1, 0x1061d, &(0x7f0000010640)="$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") chdir(&(0x7f0000000400)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000100), 0x80) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r6, 0x79f, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) 24m18.453977444s ago: executing program 33 (id=325): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbe) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, 0x0, 0x404c080) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b041"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 24m13.613996071s ago: executing program 5 (id=363): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x4, 0xe9, [0x3, 0x8, 0x3, 0x250e06c4, 0xedf6, 0xce8], 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000340)=""/233}, &(0x7f00000001c0)=0x78) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRES8=r4], 0x0, 0x3}, 0x94) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r5, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ustat(0x6, &(0x7f0000000080)) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a0b040000000000000000020000000900fecf45487dcfffb6bb25cec10124010073797a300000000009f4020073797a3200000000140000001100"], 0x54}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, 0x0, 0x400c0c4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0x0, 0xd05}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x0, 0x5, r10}]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) dup(0xffffffffffffffff) openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) 23m57.922130746s ago: executing program 34 (id=363): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x4, 0xe9, [0x3, 0x8, 0x3, 0x250e06c4, 0xedf6, 0xce8], 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000340)=""/233}, &(0x7f00000001c0)=0x78) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRES8=r4], 0x0, 0x3}, 0x94) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r5, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ustat(0x6, &(0x7f0000000080)) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a0b040000000000000000020000000900fecf45487dcfffb6bb25cec10124010073797a300000000009f4020073797a3200000000140000001100"], 0x54}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, 0x0, 0x400c0c4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0x0, 0xd05}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x0, 0x5, r10}]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) dup(0xffffffffffffffff) openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) 22m8.773552048s ago: executing program 7 (id=382): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x403, 0x800000}, 0x10}, 0x94) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) r0 = syz_io_uring_setup(0x913, &(0x7f0000000300)={0x0, 0x400600, 0x0, 0x1000001, 0xf7fffffc}, 0x0, &(0x7f0000000200)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) fcntl$dupfd(r2, 0x0, r2) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x40000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) write(r4, &(0x7f0000000040)="05000000010000", 0x7) 21m53.368710986s ago: executing program 35 (id=382): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x403, 0x800000}, 0x10}, 0x94) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) r0 = syz_io_uring_setup(0x913, &(0x7f0000000300)={0x0, 0x400600, 0x0, 0x1000001, 0xf7fffffc}, 0x0, &(0x7f0000000200)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) fcntl$dupfd(r2, 0x0, r2) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x40000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) write(r4, &(0x7f0000000040)="05000000010000", 0x7) 6m1.244097217s ago: executing program 4 (id=2058): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) dup(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x46, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x1000001, 0x15b}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(0xffffffffffffffff) 5m59.62104586s ago: executing program 4 (id=2060): r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ab}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$peeksig(0x4209, r3, &(0x7f0000000180)={0xfffffffffffffffa, 0x0, 0x1}, &(0x7f00000002c0)=[{}]) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)="d93db731205681d52d10713337237ab8f409e9d0286ac4f933a70765062bd617b586b1232882b4bd1d68", 0xf000}, {0x0, 0xffffffc0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)={[&(0x7f00000001c0)='\x00', &(0x7f0000000340)='GPL\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\xff\xff']}, &(0x7f0000000640)={[&(0x7f0000000540)='{\x00', &(0x7f0000000580)='\x00']}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, 0x0) bind$alg(r0, 0x0, 0xffffffffffffffa4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r6, 0xffffffffffffffff, 0x0) 5m57.729570432s ago: executing program 4 (id=2063): r0 = syz_mount_image$ntfs3(&(0x7f000001f800), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000200)=ANY=[@ANYBLOB='prealloc,umask=00000000000000000000003,umask=00000000000000000000011,force,\x00'], 0x1, 0x1f846, &(0x7f000001f840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x4, 0x2af, 0x48, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x20, 0x7, 0x4}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './bus\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x12, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f00000003c0)='syzkaller\x00', 0x50, 0x64, &(0x7f0000000400)=""/100, 0x40f00, 0x21, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000600)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xd, 0x2424, 0x8001}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x5, 0x4, 0x10, 0x6}, {0x5, 0x2, 0x10, 0xc}, {0x3, 0x2, 0x5, 0x3}], 0x10, 0xfe3}, 0x94) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x10) 5m54.250866488s ago: executing program 4 (id=2070): socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe5000/0x1000)=nil, r8, 0x1, 0x11, r7, 0x0) 5m42.804920221s ago: executing program 4 (id=2090): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6}) 5m41.587892089s ago: executing program 4 (id=2092): socket$netlink(0x10, 0x3, 0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 5m25.266692275s ago: executing program 36 (id=2092): socket$netlink(0x10, 0x3, 0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 5m5.750231707s ago: executing program 6 (id=2148): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x4, 0xe9, [0x3, 0x8, 0x3, 0x250e06c4, 0xedf6, 0xce8], 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000340)=""/233}, &(0x7f00000001c0)=0x78) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0, 0x3}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ustat(0x6, &(0x7f0000000080)) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a0b040000000000000000020000000900fecf45487dcfffb6bb25cec10124010073797a300000000009f4020073797a3200000000140000001100"], 0x54}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, 0x0, 0x400c0c4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0x0, 0xd05}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x0, 0x5, r9}]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) dup(0xffffffffffffffff) 5m0.771629403s ago: executing program 6 (id=2155): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="76eb2bbd7000fedbdf2510000000080007004b2feec60f0000006a8ffb3547ddd268286c476976303400018014000200", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d30000000000000080006000400000008000700010000000800090006000000180001801400020074756e6c300000000000000000000000080007000200"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x35dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0xd, 0xa}, {0x3, 0xf}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50}, 0x50) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 4m58.368917423s ago: executing program 6 (id=2157): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@buf) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32000000001400000011000100"], 0x88}}, 0x0) 4m56.853084739s ago: executing program 6 (id=2162): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000003c0)=@buf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32000000001400000011000100"], 0x88}}, 0x0) 4m53.977772443s ago: executing program 6 (id=2166): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x26c0}}, 0x4c000) syz_open_dev$evdev(&(0x7f0000000740), 0x8, 0xab42) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100, 0x0, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r7, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x700) 4m52.659641989s ago: executing program 6 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$qrtrtun(0xffffffffffffffff, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1e, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 4m37.513987767s ago: executing program 37 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$qrtrtun(0xffffffffffffffff, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1e, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 16.907105715s ago: executing program 9 (id=2564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=@newchain={0x46c, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x43c, 0x2, [@TCA_ROUTE4_ACT={0x438, 0x6, [@m_police={0x434, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa63c, 0x800, 0x6, 0x7fff, 0x7, 0x10001, 0x9, 0x10001, 0x3, 0x5, 0x1, 0x6, 0x401, 0x1, 0x5, 0x6, 0xd6c0, 0x7ff, 0x5, 0x206, 0x9, 0xffffffff, 0x8, 0x3, 0x3, 0x17, 0x401, 0x9df, 0x5, 0x9e, 0x9, 0x2, 0xc4a, 0x2, 0xff, 0x3000, 0x9, 0x6, 0x8000, 0x8, 0x92e6, 0x5, 0xffff, 0x41708fa2, 0x5, 0x5, 0x7, 0x80000000, 0x9, 0xffffffff, 0x1ff, 0xd0, 0xc180, 0x80, 0xa, 0x2, 0x4, 0x8, 0x7, 0x1, 0x7ff, 0x8, 0x1, 0x5, 0x0, 0x9, 0x61fc3436, 0x7cbd, 0x8000, 0xd, 0xffffff81, 0x47, 0x6, 0x5, 0x4, 0xc87, 0xfffffff7, 0x4, 0x9, 0x4, 0xa, 0x10000, 0x1ff, 0x0, 0x10000, 0x1, 0xc000000, 0x3, 0x4, 0x7, 0x4, 0xffffffff, 0x1, 0xb58, 0x5, 0x77, 0x9, 0xa, 0x1000000, 0x6, 0x72f38f87, 0x1, 0x5, 0xae3, 0x2, 0xf, 0x2, 0x8, 0x7, 0x8, 0x101, 0x4, 0x4, 0x0, 0x5abd, 0x2, 0x0, 0x8, 0xd, 0xd0, 0x286, 0x5, 0x649, 0x7, 0x0, 0xd, 0x4, 0x2, 0x61b0, 0x0, 0x80000001, 0x3ff, 0x7, 0x4, 0x80000001, 0x6, 0x5, 0xb, 0x3, 0x4, 0x6, 0x55, 0x7, 0x6e2, 0x5, 0x2, 0x144, 0x3, 0x10000004, 0x2, 0x2, 0x3, 0x1, 0x6, 0x0, 0x5, 0x8, 0x8a7, 0x2, 0x1, 0xfd0, 0x7f, 0x8, 0xf, 0x800, 0xcd, 0xff, 0xbf0, 0x9a, 0x4, 0x6, 0x10001, 0xf9eb, 0x80081, 0x79ac, 0x3, 0x3, 0x0, 0x8, 0x8, 0xd, 0x1ff, 0x4000000, 0x0, 0x401, 0xc4fa, 0x1, 0x6, 0x0, 0x81, 0x1, 0x42, 0x4, 0x51, 0x9, 0xa03, 0x9, 0x5, 0x8, 0x10000, 0x7, 0xaa18, 0x3, 0x0, 0x1, 0x9, 0x4, 0x8, 0x8, 0x10000, 0x5, 0x1, 0x4, 0x0, 0x101, 0x0, 0x7, 0x400, 0x8, 0x80, 0x1ff, 0x80000000, 0x7, 0x2, 0x7fff, 0x400, 0x8, 0x2, 0x1, 0x5, 0x80000001, 0xc888, 0x5e6, 0x2, 0x4, 0x7faa, 0x8, 0x3, 0x4, 0x2, 0x7ff, 0x6, 0x1, 0x7, 0x1, 0xa25, 0x1, 0x2, 0x7, 0x10, 0x2, 0x948, 0x10, 0x6, 0x8000, 0x8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x20844) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)={0x11, @rand_addr=0x64010101, 0x4e20, 0x1, 'fo\x00', 0x12, 0x9, 0x5d}, 0x2c) 14.800657203s ago: executing program 9 (id=2566): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000003f80)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80003ec0, 0xfeffff07, 0x0, 0x80003ef0, 0x80003f20], 0xf9ffff00, 0x0, &(0x7f0000003ec0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1000000, 0xffffffffffffffff}]}, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 14.742992669s ago: executing program 8 (id=2567): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xb4}}, 0x20050800) unshare(0x40020000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 14.347697625s ago: executing program 9 (id=2569): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) 13.920279232s ago: executing program 0 (id=2570): syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x64, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c047c4b8d25dc7ce1030c1b7a5b9f80ac509cedbdbbbef820331f9c7c7cac502"}, {0xdd86}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl(0xffffffffffffffff, 0x824e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 12.800454351s ago: executing program 2 (id=2571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480), 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0, 0x800009, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendfile(r2, r1, 0x0, 0x101) 12.733097859s ago: executing program 8 (id=2573): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)) 12.108097236s ago: executing program 0 (id=2574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) write$qrtrtun(r1, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11.82336596s ago: executing program 8 (id=2575): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x26c0}}, 0x4c000) syz_open_dev$evdev(&(0x7f0000000740), 0x8, 0xab42) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100, 0x0, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r6, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x700) 11.79284464s ago: executing program 1 (id=2576): keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) dup2(r1, r1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8}, 0x10) 10.241829593s ago: executing program 0 (id=2577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0xc, &(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC, @ANYBLOB="5a0923dda9e74418f04c5adabeb470f4866e5fa71ab6e5333938c34dc78975ddbc6c911c38735a866479b25d58a95ca785a77984bcf7ffbe6ff31bb03223aaa299cd378f00c35d85574237e9ce752a49a2fd671a591b99e07dad32df19f53d1334e11c6972fa387dcea64c826b5a2d72a5fa428e9a47bb", @ANYRES8, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ecbb5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) 9.535993823s ago: executing program 2 (id=2578): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(0x0, 0x7, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='asymmetric\x00', 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34565348, 0x0, 0x0, [{}, {0xfffffffc}, {}, {0x4}, {0x0, 0x10}], 0x0, 0x0, 0x6}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9.444946927s ago: executing program 8 (id=2579): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000003f80)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80003ec0, 0xfeffff07, 0x0, 0x80003ef0, 0x80003f20], 0xf9ffff00, 0x0, &(0x7f0000003ec0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1000000, 0xffffffffffffffff}]}, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 9.317137472s ago: executing program 1 (id=2580): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(0x0, 0x7, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='asymmetric\x00', 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34565348, 0x0, 0x0, [{}, {0xfffffffc}, {}, {0x4}, {0x0, 0x10}], 0x0, 0x0, 0x6}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8.310377008s ago: executing program 2 (id=2581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x4}) pipe2$watch_queue(&(0x7f0000000340), 0x80) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4001}, {{0x0, 0x0, &(0x7f00000003c0)}, 0x80000003}], 0x4, 0x12100, 0x0) 8.127167555s ago: executing program 9 (id=2582): r0 = fsopen(&(0x7f0000000240)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800009c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x4000, 0xa4, &(0x7f0000000400)=""/164}, {0xf000, 0x46, &(0x7f0000000100)=""/70}, {0x4, 0x1b, &(0x7f00000001c0)=""/27}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000808dd4992861ac10000000000000000000000b00", "90be6c09306003d8006000", [0x1, 0x10000]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102400, 0x19000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5453, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000003060108005e1e0000000000030000080500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44084) 7.277324142s ago: executing program 1 (id=2583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=@newchain={0x46c, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x43c, 0x2, [@TCA_ROUTE4_ACT={0x438, 0x6, [@m_police={0x434, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa63c, 0x800, 0x6, 0x7fff, 0x7, 0x10001, 0x9, 0x10001, 0x3, 0x5, 0x1, 0x6, 0x401, 0x1, 0x5, 0x6, 0xd6c0, 0x7ff, 0x5, 0x206, 0x9, 0xffffffff, 0x8, 0x3, 0x3, 0x17, 0x401, 0x9df, 0x5, 0x9e, 0x9, 0x2, 0xc4a, 0x2, 0xff, 0x3000, 0x9, 0x6, 0x8000, 0x8, 0x92e6, 0x5, 0xffff, 0x41708fa2, 0x5, 0x5, 0x7, 0x80000000, 0x9, 0xffffffff, 0x1ff, 0xd0, 0xc180, 0x80, 0xa, 0x2, 0x4, 0x8, 0x7, 0x1, 0x7ff, 0x8, 0x1, 0x5, 0x0, 0x9, 0x61fc3436, 0x7cbd, 0x8000, 0xd, 0xffffff81, 0x47, 0x6, 0x5, 0x4, 0xc87, 0xfffffff7, 0x4, 0x9, 0x4, 0xa, 0x10000, 0x1ff, 0x0, 0x10000, 0x1, 0xc000000, 0x3, 0x4, 0x7, 0x4, 0xffffffff, 0x1, 0xb58, 0x5, 0x77, 0x9, 0xa, 0x1000000, 0x6, 0x72f38f87, 0x1, 0x5, 0xae3, 0x2, 0xf, 0x2, 0x8, 0x7, 0x8, 0x101, 0x4, 0x4, 0x0, 0x5abd, 0x2, 0x0, 0x8, 0xd, 0xd0, 0x286, 0x5, 0x649, 0x7, 0x0, 0xd, 0x4, 0x2, 0x61b0, 0x0, 0x80000001, 0x3ff, 0x7, 0x4, 0x80000001, 0x6, 0x5, 0xb, 0x3, 0x4, 0x6, 0x55, 0x7, 0x6e2, 0x5, 0x2, 0x144, 0x3, 0x10000004, 0x2, 0x2, 0x3, 0x1, 0x6, 0x0, 0x5, 0x8, 0x8a7, 0x2, 0x1, 0xfd0, 0x7f, 0x8, 0xf, 0x800, 0xcd, 0xff, 0xbf0, 0x9a, 0x4, 0x6, 0x10001, 0xf9eb, 0x80081, 0x79ac, 0x3, 0x3, 0x0, 0x8, 0x8, 0xd, 0x1ff, 0x4000000, 0x0, 0x401, 0xc4fa, 0x1, 0x6, 0x0, 0x81, 0x1, 0x42, 0x4, 0x51, 0x9, 0xa03, 0x9, 0x5, 0x8, 0x10000, 0x7, 0xaa18, 0x3, 0x0, 0x1, 0x9, 0x4, 0x8, 0x8, 0x10000, 0x5, 0x1, 0x4, 0x0, 0x101, 0x0, 0x7, 0x400, 0x8, 0x80, 0x1ff, 0x80000000, 0x7, 0x2, 0x7fff, 0x400, 0x8, 0x2, 0x1, 0x5, 0x80000001, 0xc888, 0x5e6, 0x2, 0x4, 0x7faa, 0x8, 0x3, 0x4, 0x2, 0x7ff, 0x6, 0x1, 0x7, 0x1, 0xa25, 0x1, 0x2, 0x7, 0x10, 0x2, 0x948, 0x10, 0x6, 0x8000, 0x8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x20844) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)={0x11, @rand_addr=0x64010101, 0x4e20, 0x1, 'fo\x00', 0x12, 0x9, 0x5d}, 0x2c) 6.972252599s ago: executing program 0 (id=2584): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(0x0, 0x7, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='asymmetric\x00', 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34565348, 0x0, 0x0, [{}, {0xfffffffc}, {}, {0x4}, {0x0, 0x10}], 0x0, 0x0, 0x6}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6.202284515s ago: executing program 2 (id=2585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x3) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) write$qrtrtun(r1, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 5.718472522s ago: executing program 8 (id=2586): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)) 4.797892544s ago: executing program 0 (id=2587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) writev(r5, 0x0, 0x0) io_setup(0x8, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200630140000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.748544071s ago: executing program 9 (id=2588): socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_unix(0x0, 0x0, 0x0, 0x802ca2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x58}}, 0x0) socket$inet(0x10, 0x3, 0x0) 4.708884777s ago: executing program 1 (id=2589): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x26c0}}, 0x4c000) syz_open_dev$evdev(&(0x7f0000000740), 0x8, 0xab42) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100, 0x0, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r6, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x700) 4.219334058s ago: executing program 2 (id=2590): keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) dup2(r1, r1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 3.53769634s ago: executing program 0 (id=2591): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xf4254) read$midi(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x510, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x10, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x80, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x3, {0x7, 0x25, 0x1, 0x80, 0x2, 0xb4}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "430437089d641d5c4112505023b0a7b4"}]}}) 3.027703064s ago: executing program 9 (id=2592): socket$alg(0x26, 0x5, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='&)\xc2!]\x00', 0x0) r1 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1}, &(0x7f0000000440)=""/59, 0x3b, &(0x7f0000000580)={&(0x7f0000000480)={'sha1-neon\x00'}, &(0x7f00000004c0)="294b0fb98eacb49a81b400a15ff30904fb5ff52088cd56e5b533b773174d70140548abc1f5101d607a1160513efc249e54f4cd1f4a949e4d5de67158ec42f7cb7806bbf9fe9ec01add13bf6fe0a2c0b1105a4a368a74fcda357881289e95493bde7b6d3fb9fe12cdc8464a0bb823c306b5b9bcb5e0c2eb04ec49c4d8a78a356ece60563500dbde9e", 0x88}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 2.722682406s ago: executing program 8 (id=2593): socket$inet6(0xa, 0x1, 0x6) socket$packet(0x11, 0x2, 0x300) socket(0xb, 0x80000, 0xfffffffc) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x4004010) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4004804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) gettid() syz_emit_ethernet(0x46, &(0x7f0000000740)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) landlock_create_ruleset(&(0x7f00000000c0)={0x5801, 0x3, 0x1}, 0x18, 0x3) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) 2.722349509s ago: executing program 1 (id=2594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 847.148783ms ago: executing program 1 (id=2595): socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe5000/0x1000)=nil, r9, 0x1, 0x11, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 0s ago: executing program 2 (id=2596): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000003f80)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80003ec0, 0xfeffff07, 0x0, 0x80003ef0, 0x80003f20], 0xf9ffff00, 0x0, &(0x7f0000003ec0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1000000, 0xffffffffffffffff}]}, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): ff88805b5df800: rx timeout, send abort [ 866.216466][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b306400: rx timeout, send abort [ 866.225462][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b5df800: abort rx timeout. Force session deactivation [ 866.239112][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1168'. [ 866.257530][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1168'. [ 866.267229][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1168'. [ 866.724744][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b306400: abort rx timeout. Force session deactivation [ 870.265682][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.272231][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.235835][T11762] loop8: detected capacity change from 0 to 4096 [ 871.881241][T11762] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 872.691456][T11762] ntfs3(loop8): ino=19, mi_enum_attr [ 872.713815][T11762] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 873.197031][T11784] netlink: 'syz.4.1181': attribute type 4 has an invalid length. [ 877.893931][T11822] loop4: detected capacity change from 0 to 7 [ 877.953823][T11822] Dev loop4: unable to read RDB block 7 [ 877.959762][T11822] loop4: unable to read partition table [ 878.132626][T11822] loop4: partition table beyond EOD, truncated [ 878.239080][T11822] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 883.294369][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880334efc00: rx timeout, send abort [ 883.794524][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880334ed400: rx timeout, send abort [ 883.802930][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880334efc00: abort rx timeout. Force session deactivation [ 884.302827][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880334ed400: abort rx timeout. Force session deactivation [ 887.640031][T11908] loop6: detected capacity change from 0 to 64 [ 890.097684][T11929] hub 9-0:1.0: USB hub found [ 890.104304][T11929] hub 9-0:1.0: 1 port detected [ 894.531697][T11962] loop6: detected capacity change from 0 to 131072 [ 894.594889][T11962] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 894.604351][T11962] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 894.614273][T11962] F2FS-fs (loop6): invalid crc value [ 894.705082][T11962] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 894.712531][T11962] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 894.726958][T11962] F2FS-fs (loop6): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 895.208876][T11973] syz.6.1216 (11973): drop_caches: 2 [ 895.218890][T11973] syz.6.1216 (11973): drop_caches: 2 [ 896.397500][T11963] loop8: detected capacity change from 0 to 32768 [ 897.005229][T11963] JBD2: journal reset failed [ 897.009946][T11963] (syz.8.1217,11963,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 897.111455][T11963] (syz.8.1217,11963,0):ocfs2_check_volume:2374 ERROR: ocfs2 journal load failed! -4 [ 898.181717][T12003] input: syz1 as /devices/virtual/input/input19 [ 899.791265][T12019] loop4: detected capacity change from 0 to 64 [ 900.970483][ T5986] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 901.197878][T12040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 901.237070][T12040] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 901.931986][ T5986] usb 3-1: Using ep0 maxpacket: 16 [ 901.975663][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 902.009235][ T5986] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 902.045133][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.097642][ T5986] usb 3-1: Product: syz [ 902.117861][ T5986] usb 3-1: Manufacturer: syz [ 902.151366][ T5986] usb 3-1: SerialNumber: syz [ 902.200278][ T5986] usb 3-1: config 0 descriptor?? [ 902.283783][ T5986] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 903.053945][ T5986] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 903.129502][T12036] loop8: detected capacity change from 0 to 32768 [ 903.349111][T12036] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 903.449291][ T30] audit: type=1800 audit(1751349979.078:54): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1231" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 903.493055][ T5986] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 904.580145][ T5986] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 904.631700][ T5986] em28xx 3-1:0.0: board has no eeprom [ 904.691179][ T8649] ocfs2: Unmounting device (7,8) on (node local) [ 904.747744][ T5986] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 905.020049][ T5986] em28xx 3-1:0.0: dvb set to bulk mode. [ 905.025889][ T9] em28xx 3-1:0.0: Binding DVB extension [ 905.226764][ T5986] usb 3-1: USB disconnect, device number 5 [ 905.396295][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a619400: rx timeout, send abort [ 905.822875][ T5986] em28xx 3-1:0.0: Disconnecting em28xx [ 905.896462][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a619000: rx timeout, send abort [ 905.904843][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a619400: abort rx timeout. Force session deactivation [ 906.111809][ T9] em28xx 3-1:0.0: Registering input extension [ 906.404781][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a619000: abort rx timeout. Force session deactivation [ 907.298274][T12080] loop8: detected capacity change from 0 to 131072 [ 907.333136][T12080] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 907.341357][T12080] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 907.351823][T12080] F2FS-fs (loop8): invalid crc value [ 907.370280][T12086] trusted_key: syz.0.1237 sent an empty control message without MSG_MORE. [ 907.437063][ T5986] em28xx 3-1:0.0: Closing input extension [ 907.465458][T12080] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 907.472574][T12080] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 907.493703][ T5986] em28xx 3-1:0.0: Freeing device [ 907.499436][T12080] F2FS-fs (loop8): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 910.276025][T12105] loop6: detected capacity change from 0 to 131072 [ 910.343884][T12105] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 910.352130][T12105] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 910.609416][T12105] F2FS-fs (loop6): invalid crc value [ 911.528050][T12105] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 911.537828][T12105] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 912.072470][T12122] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 912.116812][T12122] syz.6.1240 (12122): drop_caches: 2 [ 912.125827][T12122] syz.6.1240 (12122): drop_caches: 2 [ 915.990996][T12146] loop4: detected capacity change from 0 to 32768 [ 916.403399][T12146] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 917.144911][ T30] audit: type=1800 audit(1751349992.748:55): pid=12146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1245" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 917.641718][T12171] fuse: Bad value for 'fd' [ 917.778687][ T5830] ocfs2: Unmounting device (7,4) on (node local) [ 918.395515][T12191] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 919.330556][T12202] loop0: detected capacity change from 0 to 64 [ 926.366512][T12251] loop2: detected capacity change from 0 to 131072 [ 926.683201][T12251] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 926.691406][T12251] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 926.813638][T12251] F2FS-fs (loop2): invalid crc value [ 926.875207][ T5824] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 927.039142][T12251] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 927.046278][T12251] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 927.061253][T12251] F2FS-fs (loop2): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 928.060954][T12263] loop0: detected capacity change from 0 to 131072 [ 928.106374][ T5824] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 928.124397][T12263] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 928.132583][T12263] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 928.143687][T12263] F2FS-fs (loop0): invalid crc value [ 928.155141][ T5824] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 928.166398][ T5824] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 928.178472][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.186233][T12264] syz.2.1263 (12264): drop_caches: 2 [ 928.194040][T12264] syz.2.1263 (12264): drop_caches: 2 [ 928.280297][T12253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 928.323720][T12263] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 928.330877][T12263] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 928.520173][ T5824] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 928.720814][ T5899] usb 7-1: USB disconnect, device number 4 [ 928.859684][T12276] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 928.881593][T12276] syz.0.1264 (12276): drop_caches: 2 [ 928.890810][T12276] syz.0.1264 (12276): drop_caches: 2 [ 931.833536][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.839937][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.632631][ T8951] Bluetooth: hci4: command 0x0405 tx timeout [ 934.325761][T12314] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 936.650718][T12336] input: syz1 as /devices/virtual/input/input21 [ 937.126478][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1278'. [ 938.286693][T12346] loop4: detected capacity change from 0 to 131072 [ 938.327800][T12346] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 938.336442][T12346] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 938.950175][T12346] F2FS-fs (loop4): invalid crc value [ 939.220624][T12346] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 939.227800][T12346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 939.252007][T12346] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 940.524854][T12366] syz.4.1280 (12366): drop_caches: 2 [ 940.530820][T12366] syz.4.1280 (12366): drop_caches: 2 [ 940.641961][T12369] uprobe: syz.2.1270:12369 failed to unregister, leaking uprobe [ 940.650172][T12369] uprobe: syz.2.1270:12369 failed to unregister, leaking uprobe [ 941.778996][T12394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.789583][T12394] netlink: 'syz.6.1286': attribute type 1 has an invalid length. [ 942.701147][T12394] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 945.417310][T12416] loop0: detected capacity change from 0 to 131072 [ 945.968455][T12416] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 945.976693][T12416] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 946.021825][T12416] F2FS-fs (loop0): invalid crc value [ 946.183020][T12416] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 946.190153][T12416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 947.134598][T12443] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 947.152972][T12443] syz.0.1291 (12443): drop_caches: 2 [ 947.158686][T12443] syz.0.1291 (12443): drop_caches: 2 [ 947.303495][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1292'. [ 947.319282][T12438] bridge_slave_1: left allmulticast mode [ 947.331621][T12438] bridge_slave_1: left promiscuous mode [ 947.382759][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.625468][T12446] input: syz1 as /devices/virtual/input/input22 [ 947.986620][T12449] loop2: detected capacity change from 0 to 64 [ 948.408055][T12438] bridge_slave_0: left allmulticast mode [ 948.464961][T12438] bridge_slave_0: left promiscuous mode [ 948.480977][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.809783][T12459] loop6: detected capacity change from 0 to 32768 [ 950.944967][T12459] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 951.254079][ T30] audit: type=1800 audit(1751350026.888:56): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1296" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 953.706699][ T8889] ocfs2: Unmounting device (7,6) on (node local) [ 958.010007][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1312'. [ 958.930288][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1310'. [ 962.526816][ T30] audit: type=1400 audit(1751350038.158:57): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12579 comm="syz.6.1318" [ 963.441443][ T5899] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 964.263511][ T5899] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 964.333240][ T5899] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 964.392117][ T5899] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 964.792643][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.176479][T12580] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 965.513842][ T5899] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 967.361787][ T5899] usb 7-1: USB disconnect, device number 5 [ 967.812003][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 967.985166][T12631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1327'. [ 967.994320][T12631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1327'. [ 970.296493][T12634] loop6: detected capacity change from 0 to 4096 [ 970.372774][T12634] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 971.378725][T12634] ntfs3(loop6): ino=19, mi_enum_attr [ 971.429099][T12634] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 977.421496][T12423] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 977.785171][T12423] usb 9-1: Using ep0 maxpacket: 16 [ 980.298505][T12423] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 980.370924][T12423] usb 9-1: can't read configurations, error -71 [ 990.310572][ T8951] Bluetooth: hci4: command 0x0405 tx timeout [ 991.105383][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'. [ 992.109229][T12815] devtmpfs: Bad value for 'nr_inodes' [ 993.288163][T12824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.322256][T12824] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 993.844372][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.850722][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.143757][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 996.355823][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 996.517235][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 996.672416][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 997.016638][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 997.024670][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 997.032273][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 997.039784][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 997.047610][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 997.055044][T12423] hid-generic 0002:0004:0009.0008: unknown main item tag 0x0 [ 998.032976][T12423] hid-generic 0002:0004:0009.0008: hidraw0: HID v0.04 Device [syz0] on syz0 [ 999.521000][T12858] fido_id[12858]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 999.763766][ T30] audit: type=1400 audit(1751350075.378:58): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12860 comm="syz.2.1382" [ 1001.821747][ T5899] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1002.055421][ T5899] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1002.272326][ T5899] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1002.313020][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1002.345161][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.368217][T12863] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1002.526296][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1002.689713][T12884] hub 9-0:1.0: USB hub found [ 1002.695556][T12884] hub 9-0:1.0: 1 port detected [ 1003.717611][ T5899] usb 3-1: USB disconnect, device number 6 [ 1005.085248][T12893] loop2: detected capacity change from 0 to 4096 [ 1005.279850][T12888] loop6: detected capacity change from 0 to 524287999 [ 1005.319859][T12893] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1006.015826][T12893] ntfs3(loop2): ino=19, mi_enum_attr [ 1006.045495][T12893] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1008.526267][T12927] loop4: detected capacity change from 0 to 131072 [ 1008.569411][T12927] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1008.577610][T12927] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1008.613381][T12927] F2FS-fs (loop4): invalid crc value [ 1008.745669][T12927] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1008.752942][T12927] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1009.030764][T12941] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1009.067501][T12941] syz.4.1395 (12941): drop_caches: 2 [ 1009.087530][T12941] syz.4.1395 (12941): drop_caches: 2 [ 1009.245187][T12925] loop6: detected capacity change from 0 to 4096 [ 1009.304633][T12925] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1009.439930][T12925] ntfs3(loop6): ino=19, mi_enum_attr [ 1009.463206][T12925] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1020.848095][T13026] loop2: detected capacity change from 0 to 131072 [ 1020.888112][T13026] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1020.896410][T13026] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1020.924152][T13026] F2FS-fs (loop2): invalid crc value [ 1021.399265][T13033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.891993][ T30] audit: type=1326 audit(1751350097.058:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.6.1410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa19b8e929 code=0x0 [ 1022.408636][T13026] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1022.415936][T13026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1022.706129][T13046] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1022.735889][T13046] syz.2.1409 (13046): drop_caches: 2 [ 1022.760471][T13046] syz.2.1409 (13046): drop_caches: 2 [ 1022.791114][T13047] hub 9-0:1.0: USB hub found [ 1022.799380][T13047] hub 9-0:1.0: 1 port detected [ 1023.688491][T13051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.720842][T13051] netlink: 'syz.4.1399': attribute type 1 has an invalid length. [ 1024.739049][T13057] hub 9-0:1.0: USB hub found [ 1024.751880][T13057] hub 9-0:1.0: 1 port detected [ 1031.246777][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880330aa000: rx timeout, send abort [ 1031.746930][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b324800: rx timeout, send abort [ 1031.761830][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880330aa000: abort rx timeout. Force session deactivation [ 1032.255298][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b324800: abort rx timeout. Force session deactivation [ 1032.709676][T13116] loop8: detected capacity change from 0 to 131072 [ 1032.832111][T13116] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1032.840331][T13116] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1032.852107][T13116] F2FS-fs (loop8): invalid crc value [ 1033.006204][T13130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1033.142818][T13116] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1033.150143][T13116] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 1033.672701][ T30] audit: type=1326 audit(1751350108.828:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13118 comm="syz.6.1428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa19b8e929 code=0x0 [ 1033.825610][T13116] F2FS-fs (loop8): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 1034.086820][ T3074] hid_parser_main: 7 callbacks suppressed [ 1034.086837][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1034.148884][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1034.327815][T13139] syz.8.1426 (13139): drop_caches: 2 [ 1034.336482][T13139] syz.8.1426 (13139): drop_caches: 2 [ 1034.365451][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1035.076169][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1035.147206][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1035.154970][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1035.162670][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1035.170080][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1035.177861][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1035.186775][ T3074] hid-generic 0002:0004:0009.0009: unknown main item tag 0x0 [ 1035.386689][ T3074] hid-generic 0002:0004:0009.0009: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1036.327549][T13149] fido_id[13149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1037.879251][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 1038.901639][ T8951] Bluetooth: hci4: command 0x0405 tx timeout [ 1043.092323][T13203] loop6: detected capacity change from 0 to 524287999 [ 1047.127814][T13239] loop0: detected capacity change from 0 to 4096 [ 1047.210992][T13239] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1048.210695][T13239] ntfs3(loop0): ino=19, mi_enum_attr [ 1048.531680][T13239] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1049.926080][T13260] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1050.081734][T13262] uprobe: syz.8.1449:13262 failed to unregister, leaking uprobe [ 1050.098773][T13262] uprobe: syz.8.1449:13262 failed to unregister, leaking uprobe [ 1051.505737][T13278] loop8: detected capacity change from 0 to 64 [ 1051.634024][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1453'. [ 1054.589170][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.600661][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.511086][T13331] uprobe: syz.6.1465:13331 failed to unregister, leaking uprobe [ 1058.519149][T13331] uprobe: syz.6.1465:13331 failed to unregister, leaking uprobe [ 1058.898612][T13347] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1466'. [ 1058.909280][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1466'. [ 1059.737136][T13356] loop2: detected capacity change from 0 to 64 [ 1062.940722][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1472'. [ 1066.753582][T13412] loop0: detected capacity change from 0 to 64 [ 1073.942525][T13450] loop6: detected capacity change from 0 to 524287999 [ 1077.857272][T13479] loop4: detected capacity change from 0 to 64 [ 1078.027298][T13469] uprobe: syz.8.1493:13469 failed to unregister, leaking uprobe [ 1078.035282][T13469] uprobe: syz.8.1493:13469 failed to unregister, leaking uprobe [ 1081.455408][T13501] hub 9-0:1.0: USB hub found [ 1081.657383][T13501] hub 9-0:1.0: 1 port detected [ 1082.181657][T11623] Bluetooth: hci4: command 0x0405 tx timeout [ 1085.057843][ T5926] hid_parser_main: 7 callbacks suppressed [ 1085.057866][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.071608][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.079043][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.086577][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.099666][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.111591][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.120647][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.142943][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.150375][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.245069][ T5926] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 1085.417493][ T5926] hid-generic 0002:0004:0009.000A: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1085.496088][T13565] loop0: detected capacity change from 0 to 64 [ 1086.539622][T13568] loop6: detected capacity change from 0 to 524287999 [ 1086.560443][T13567] fido_id[13567]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1087.941564][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 1089.157719][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1513'. [ 1090.075227][T13599] block device autoloading is deprecated and will be removed. [ 1093.349944][T13611] hub 9-0:1.0: USB hub found [ 1093.356194][T13611] hub 9-0:1.0: 1 port detected [ 1095.352274][T13616] loop4: detected capacity change from 0 to 131072 [ 1095.455799][T13616] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1095.464188][T13616] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1095.497838][T13616] F2FS-fs (loop4): invalid crc value [ 1095.557663][T13624] loop8: detected capacity change from 0 to 64 [ 1095.771055][T13616] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1095.779605][T13616] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1096.122123][T13632] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1096.201365][T13633] syz.4.1518 (13633): drop_caches: 2 [ 1096.208660][T13633] syz.4.1518 (13633): drop_caches: 2 [ 1097.502122][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b1a6c00: rx timeout, send abort [ 1098.002269][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b1a4400: rx timeout, send abort [ 1098.010696][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b1a6c00: abort rx timeout. Force session deactivation [ 1098.210833][T13644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1098.383522][ T30] audit: type=1326 audit(1751350173.878:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.0.1521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85cab8e929 code=0x0 [ 1098.510688][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b1a4400: abort rx timeout. Force session deactivation [ 1099.508546][T13652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.813892][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1528'. [ 1102.884401][T13687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1102.933689][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1528'. [ 1102.947648][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1528'. [ 1103.878388][T13694] 9pnet_fd: Insufficient options for proto=fd [ 1104.320893][T13698] loop6: detected capacity change from 0 to 64 [ 1105.407705][T13700] loop0: detected capacity change from 0 to 131072 [ 1105.470158][T13700] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1105.470192][T13700] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1105.475095][T13700] F2FS-fs (loop0): invalid crc value [ 1105.537064][T13713] loop6: detected capacity change from 0 to 524287999 [ 1105.593205][T13700] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1105.593233][T13700] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1105.898043][T13726] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1106.332404][T13726] syz.0.1533 (13726): drop_caches: 2 [ 1106.341072][T13726] syz.0.1533 (13726): drop_caches: 2 [ 1108.456281][ T30] audit: type=1400 audit(1751350184.078:62): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=13742 comm="syz.2.1540" [ 1108.752010][ T5986] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1109.388686][ T5986] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1109.469377][ T5986] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1109.499604][ T5986] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1109.573556][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.614892][T13744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1109.673138][ T5986] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1109.680684][T13760] delete_channel: no stack [ 1111.279395][ T5986] usb 3-1: USB disconnect, device number 7 [ 1111.851467][ T9064] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1112.054242][ T9064] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1112.094322][ T9064] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1112.148072][ T9064] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1112.260237][ T9064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.318607][T13768] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1112.323791][T13780] loop4: detected capacity change from 0 to 64 [ 1112.389983][ T9064] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1113.463764][T13784] loop2: detected capacity change from 0 to 131072 [ 1113.484871][T13784] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1113.493143][T13784] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1113.511678][T13784] F2FS-fs (loop2): invalid crc value [ 1113.600642][T13784] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1113.607793][T13784] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1113.880903][T13794] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1113.926247][T13794] syz.2.1547 (13794): drop_caches: 2 [ 1113.987373][T13794] syz.2.1547 (13794): drop_caches: 2 [ 1114.676075][T13612] usb 9-1: USB disconnect, device number 9 [ 1116.044213][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.050959][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.864340][T13813] loop6: detected capacity change from 0 to 64 [ 1120.032944][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1551'. [ 1122.722492][T13844] loop4: detected capacity change from 0 to 64 [ 1124.124533][T13860] loop6: detected capacity change from 0 to 524287999 [ 1125.771418][T13612] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1125.941339][T13612] usb 5-1: Using ep0 maxpacket: 8 [ 1125.955410][T13612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1126.115833][T13612] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1126.127328][T13612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.138385][T13612] usb 5-1: config 0 descriptor?? [ 1126.149120][T13612] hso 5-1:0.0: Can't find BULK IN endpoint [ 1128.325774][T12423] usb 5-1: USB disconnect, device number 7 [ 1129.302198][T13903] loop4: detected capacity change from 0 to 64 [ 1130.309514][T13910] hub 9-0:1.0: USB hub found [ 1130.320204][T13910] hub 9-0:1.0: 1 port detected [ 1133.399402][T13934] loop2: detected capacity change from 0 to 4096 [ 1133.561067][T13934] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1134.539988][T13946] loop8: detected capacity change from 0 to 64 [ 1136.490542][T13934] ntfs3(loop2): Failed to read $UpCase (-4). [ 1136.542101][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805afdd800: rx timeout, send abort [ 1137.042228][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805afde400: rx timeout, send abort [ 1137.051308][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805afdd800: abort rx timeout. Force session deactivation [ 1137.550495][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805afde400: abort rx timeout. Force session deactivation [ 1138.496365][T13964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1141.001330][T13993] loop6: detected capacity change from 0 to 524287999 [ 1142.078990][T14000] loop4: detected capacity change from 0 to 64 [ 1144.622952][ T30] audit: type=1400 audit(1751350220.248:63): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14005 comm="syz.0.1595" [ 1144.891354][T12423] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1145.054224][T12423] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1145.096527][T12423] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1145.216108][T12423] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1145.225567][T12423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.406955][T14014] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1145.454921][T12423] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1147.784507][T14060] hub 9-0:1.0: USB hub found [ 1147.791516][T14060] hub 9-0:1.0: 1 port detected [ 1148.465578][T14061] loop8: detected capacity change from 0 to 64 [ 1149.339568][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1602'. [ 1151.469459][T14081] loop6: detected capacity change from 0 to 524287999 [ 1152.446514][T12423] usb 1-1: USB disconnect, device number 8 [ 1152.699483][T14104] trusted_key: encrypted_key: insufficient parameters specified [ 1152.770363][T14104] trusted_key: encrypted_key: keylen parameter is missing [ 1154.766496][T14110] ptrace attach of "./syz-executor exec"[8649] was attempted by "./syz-executor exec"[14110] [ 1155.778617][T14110] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1155.786985][T14110] overlayfs: failed to set xattr on upper [ 1155.793050][T14110] overlayfs: ...falling back to redirect_dir=nofollow. [ 1155.800633][T14110] overlayfs: ...falling back to index=off. [ 1155.807400][T14110] overlayfs: ...falling back to uuid=null. [ 1155.817723][T14110] overlayfs: maximum fs stacking depth exceeded [ 1158.974216][T14135] hub 9-0:1.0: USB hub found [ 1158.980547][T14135] hub 9-0:1.0: 1 port detected [ 1159.461465][T11623] Bluetooth: hci4: command 0x0405 tx timeout [ 1163.071571][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1631'. [ 1167.976406][ T30] audit: type=1400 audit(1751350243.608:64): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14215 comm="syz.8.1638" [ 1168.482595][ T9064] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1169.497117][ T9064] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1169.759895][ T9064] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1170.001300][ T9064] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1170.052502][ T9064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.639471][ T9064] usb 9-1: can't set config #27, error -71 [ 1170.655711][ T9064] usb 9-1: USB disconnect, device number 10 [ 1170.918798][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1644'. [ 1171.309337][T14256] hub 9-0:1.0: USB hub found [ 1171.315129][T14256] hub 9-0:1.0: 1 port detected [ 1173.101262][T14273] trusted_key: encrypted_key: keylen parameter is missing [ 1177.469947][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.476345][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.032859][T14319] hub 9-0:1.0: USB hub found [ 1178.039185][T14319] hub 9-0:1.0: 1 port detected [ 1178.979912][T14330] loop4: detected capacity change from 0 to 7 [ 1178.993021][T14330] Dev loop4: unable to read RDB block 7 [ 1179.027949][T14330] loop4: unable to read partition table [ 1179.801630][T14330] loop4: partition table beyond EOD, truncated [ 1179.940515][T14330] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1185.562638][T14348] loop6: detected capacity change from 0 to 32768 [ 1186.539099][T14348] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1186.540224][T14348] (syz.6.1665,14348,1):ocfs2_initialize_super:2227 ERROR: status = -12 [ 1186.561532][T14348] (syz.6.1665,14348,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 1187.817982][T14397] loop2: detected capacity change from 0 to 131072 [ 1187.918693][T14397] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1187.927061][T14397] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1188.141368][T14397] F2FS-fs (loop2): invalid crc value [ 1188.269274][T14397] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1188.278193][T14397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1188.549960][T14406] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1188.679509][T14406] syz.2.1675 (14406): drop_caches: 2 [ 1188.702797][T14406] syz.2.1675 (14406): drop_caches: 2 [ 1191.641816][T14427] loop0: detected capacity change from 0 to 64 [ 1193.444225][T14433] trusted_key: encrypted_key: keylen parameter is missing [ 1194.608651][T14427] hfs: unable to open extent tree [ 1194.752026][T14427] hfs: can't find a HFS filesystem on dev loop0 [ 1202.172714][T14486] loop6: detected capacity change from 0 to 64 [ 1202.682032][T14489] 9pnet_fd: Insufficient options for proto=fd [ 1202.886685][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1694'. [ 1203.286141][T14493] loop4: detected capacity change from 0 to 64 [ 1204.425898][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 1208.268019][ T30] audit: type=1400 audit(1751350283.828:65): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14518 comm="syz.4.1701" [ 1208.651409][ T5986] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1209.697418][ T5986] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1209.769973][ T5986] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1209.831292][ T5986] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1210.791148][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.493112][ T5986] usb 5-1: can't set config #27, error -71 [ 1211.513666][ T5986] usb 5-1: USB disconnect, device number 8 [ 1218.501492][T14592] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[14592] [ 1218.577373][T14592] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1218.590968][T14592] overlayfs: failed to set xattr on upper [ 1218.598662][T14592] overlayfs: ...falling back to redirect_dir=nofollow. [ 1218.605882][T14592] overlayfs: ...falling back to index=off. [ 1218.612114][T14592] overlayfs: ...falling back to uuid=null. [ 1218.618672][T14592] overlayfs: maximum fs stacking depth exceeded [ 1221.112766][T14620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1221.961378][ T30] audit: type=1326 audit(1751350296.768:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.4.1722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d98e929 code=0x0 [ 1223.114007][ T5986] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1223.311315][ T5986] usb 9-1: Using ep0 maxpacket: 8 [ 1223.366457][ T5986] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.450998][ T5986] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1223.696866][ T5986] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1223.893189][ T5986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.614724][ T5986] usbtmc 9-1:16.0: bulk endpoints not found [ 1226.111310][ T9] usb 9-1: USB disconnect, device number 11 [ 1229.739719][T14694] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[14694] [ 1229.893000][T14694] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1229.900110][T14694] overlayfs: failed to set xattr on upper [ 1229.906089][T14694] overlayfs: ...falling back to redirect_dir=nofollow. [ 1229.913121][T14694] overlayfs: ...falling back to index=off. [ 1229.919047][T14694] overlayfs: ...falling back to uuid=null. [ 1229.925040][T14694] overlayfs: maximum fs stacking depth exceeded [ 1231.016333][T14705] ptrace attach of "./syz-executor exec"[8649] was attempted by "./syz-executor exec"[14705] [ 1231.185184][T14705] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1231.415742][T14705] overlayfs: failed to set xattr on upper [ 1231.575172][T14705] overlayfs: ...falling back to redirect_dir=nofollow. [ 1231.721413][T14705] overlayfs: ...falling back to index=off. [ 1231.727432][T14705] overlayfs: ...falling back to uuid=null. [ 1231.737797][T14705] overlayfs: maximum fs stacking depth exceeded [ 1235.153340][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'. [ 1236.751852][ T8951] Bluetooth: hci4: command 0x0405 tx timeout [ 1236.862083][T14757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1236.911340][ T3074] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1237.401279][ T3074] usb 9-1: Using ep0 maxpacket: 8 [ 1237.408346][ T3074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1237.432131][ T3074] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1237.467712][ T3074] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.497349][ T3074] usb 9-1: config 0 descriptor?? [ 1237.800813][ T3074] hso 9-1:0.0: Can't find BULK IN endpoint [ 1239.122261][T14770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1755'. [ 1239.312968][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.437893][ T9] usb 9-1: USB disconnect, device number 12 [ 1239.459036][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.033424][ T5824] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1241.284165][T14798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1241.385951][ T30] audit: type=1326 audit(1751350317.018:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14794 comm="syz.2.1759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e1f8e929 code=0x0 [ 1241.407866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.571065][ T5824] usb 1-1: not running at top speed; connect to a high speed hub [ 1241.584355][ T5824] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1242.119463][ T5824] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1242.171329][ T5824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1242.205968][ T5824] usb 1-1: string descriptor 0 read error: -71 [ 1242.212557][ T5824] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1242.221781][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.240893][ T5824] usb 1-1: can't set config #1, error -71 [ 1242.263985][ T5824] usb 1-1: USB disconnect, device number 9 [ 1247.069603][T14834] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1255.765619][ T30] audit: type=1400 audit(1751350331.288:68): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14895 comm="syz.6.1783" [ 1257.562748][ T5902] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1257.609945][ T30] audit: type=1400 audit(1751350332.998:69): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14907 comm="syz.0.1788" [ 1257.735980][ T5902] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1257.789754][ T5902] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1257.870950][ T5902] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1258.361350][ T9064] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1258.838506][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.861329][ T9064] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1258.888826][ T5902] usb 7-1: can't set config #27, error -71 [ 1258.897966][ T5902] usb 7-1: USB disconnect, device number 6 [ 1258.941745][ T9064] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1259.016419][ T9064] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1259.063596][ T9064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.237587][T14912] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1259.284539][ T9064] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1260.744211][T14937] ptrace attach of "./syz-executor exec"[8889] was attempted by "./syz-executor exec"[14937] [ 1260.859009][ T9064] usb 1-1: USB disconnect, device number 10 [ 1261.142437][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1796'. [ 1265.954217][T14975] hub 9-0:1.0: USB hub found [ 1265.960469][T14975] hub 9-0:1.0: 1 port detected [ 1271.907667][ T30] audit: type=1400 audit(1751350347.538:70): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=15013 comm="syz.4.1816" [ 1272.261323][T15029] hub 9-0:1.0: USB hub found [ 1272.267547][T15029] hub 9-0:1.0: 1 port detected [ 1272.865149][ T5824] hid_parser_main: 7 callbacks suppressed [ 1272.865172][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1272.922641][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1273.035163][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1273.090920][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1273.146161][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1273.181605][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1273.223151][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1273.378325][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1273.531819][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1273.761302][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1273.786692][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1273.854025][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1273.928044][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1274.093551][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.126462][ T5824] hid-generic 0002:0004:0009.000B: unknown main item tag 0x0 [ 1274.534063][ T9] usb 5-1: can't set config #27, error -71 [ 1274.780274][ T5824] hid-generic 0002:0004:0009.000B: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1275.043718][ T9] usb 5-1: USB disconnect, device number 9 [ 1282.318965][T15119] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[15119] [ 1282.390363][T15119] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1282.397891][T15119] overlayfs: failed to set xattr on upper [ 1282.403853][T15119] overlayfs: ...falling back to redirect_dir=nofollow. [ 1282.410822][T15119] overlayfs: ...falling back to index=off. [ 1282.416960][T15119] overlayfs: ...falling back to uuid=null. [ 1282.423022][T15119] overlayfs: maximum fs stacking depth exceeded [ 1285.292787][T15141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 1285.738831][T15150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1285.757308][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1845'. [ 1291.931319][ T5824] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1293.069544][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 1293.131781][ T5824] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1293.178438][ T5824] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1293.189331][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.211324][ T5824] usb 7-1: Product: syz [ 1293.215543][ T5824] usb 7-1: Manufacturer: syz [ 1293.237676][ T5824] usb 7-1: SerialNumber: syz [ 1293.254458][ T5824] usb 7-1: config 0 descriptor?? [ 1293.437141][T15185] loop0: detected capacity change from 0 to 32768 [ 1294.356332][T15198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.367735][T15198] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1856'. [ 1294.484003][T15185] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 1295.191288][ T30] audit: type=1800 audit(1751350370.178:71): pid=15185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1857" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 1296.062478][ T5986] usb 7-1: USB disconnect, device number 7 [ 1296.276791][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 1297.104260][T15222] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1300.346357][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.498997][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.334095][T15241] loop6: detected capacity change from 0 to 524287999 [ 1303.056355][T15275] loop8: detected capacity change from 0 to 64 [ 1303.144702][T15276] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[15276] [ 1303.207606][T15276] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1303.231207][T15276] overlayfs: failed to set xattr on upper [ 1303.239116][T15276] overlayfs: ...falling back to redirect_dir=nofollow. [ 1303.246783][T15276] overlayfs: ...falling back to index=off. [ 1303.253837][T15276] overlayfs: ...falling back to uuid=null. [ 1303.260419][T15276] overlayfs: maximum fs stacking depth exceeded [ 1303.950191][ T8951] Bluetooth: hci4: command 0x0405 tx timeout [ 1305.524580][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1877'. [ 1307.116212][T15295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.654074][ T30] audit: type=1326 audit(1751350382.778:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.6.1881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa19b8e929 code=0x0 [ 1308.402540][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 1310.887383][T15317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.907904][T15317] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1885'. [ 1312.422482][T15322] loop6: detected capacity change from 0 to 4096 [ 1312.511414][T15322] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1312.580474][T15322] ntfs3(loop6): ino=19, mi_enum_attr [ 1312.601245][T15322] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1313.631401][T15329] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1318.042181][T15358] loop4: detected capacity change from 0 to 4096 [ 1318.071309][T15358] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1318.198412][T15365] loop0: detected capacity change from 0 to 64 [ 1318.384609][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 1319.183915][T15358] ntfs3(loop4): ino=19, mi_enum_attr [ 1319.189288][T15358] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1323.057587][T15390] loop0: detected capacity change from 0 to 64 [ 1324.925086][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 1325.188586][T15395] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1325.238694][T15397] loop6: detected capacity change from 0 to 524287999 [ 1325.579910][T15404] loop4: detected capacity change from 0 to 64 [ 1326.216157][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 1326.517272][T15409] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[15409] [ 1326.548282][T15409] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1326.555515][T15409] overlayfs: failed to set xattr on upper [ 1326.561446][T15409] overlayfs: ...falling back to redirect_dir=nofollow. [ 1327.146068][T15409] overlayfs: ...falling back to index=off. [ 1327.154236][T15409] overlayfs: ...falling back to uuid=null. [ 1327.160097][T15409] overlayfs: maximum fs stacking depth exceeded [ 1331.136850][T15423] loop8: detected capacity change from 0 to 4096 [ 1331.174922][T15423] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1331.293076][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'. [ 1331.347889][T15423] ntfs3(loop8): ino=19, mi_enum_attr [ 1331.361316][T15423] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1331.811921][T11623] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1332.676934][T15445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1918'. [ 1333.246350][ T5824] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1333.420501][ T5824] usb 9-1: Using ep0 maxpacket: 8 [ 1333.501444][ T5824] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1333.519784][ T5824] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1333.608710][ T5824] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1333.635483][ T5824] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1333.660166][ T5824] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1333.695874][ T5824] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1333.726929][ T5824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.788643][ T5824] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 1335.006059][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 1336.349640][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'. [ 1337.112910][ T5926] usb 9-1: USB disconnect, device number 13 [ 1338.714608][T12423] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1339.501349][T12423] usb 7-1: Using ep0 maxpacket: 16 [ 1339.508657][T12423] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1339.549403][T12423] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1339.586338][T12423] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.613471][T12423] usb 7-1: Product: syz [ 1339.837820][T12423] usb 7-1: Manufacturer: syz [ 1339.851465][T12423] usb 7-1: SerialNumber: syz [ 1339.913634][T15498] netlink: 'syz.8.1928': attribute type 4 has an invalid length. [ 1340.476649][T12423] usb 7-1: config 0 descriptor?? [ 1340.617735][T12423] usb 7-1: can't set config #0, error -71 [ 1340.679725][T12423] usb 7-1: USB disconnect, device number 8 [ 1340.794941][T15505] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1340.851707][T15505] overlayfs: failed to set xattr on upper [ 1341.412377][T15505] overlayfs: ...falling back to redirect_dir=nofollow. [ 1341.466728][T15505] overlayfs: ...falling back to index=off. [ 1341.496001][T15505] overlayfs: ...falling back to uuid=null. [ 1341.545529][T15505] overlayfs: maximum fs stacking depth exceeded [ 1342.017749][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1932'. [ 1343.091403][T15522] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1344.719911][T15523] loop6: detected capacity change from 0 to 4096 [ 1345.882175][T15523] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1345.989517][T15540] 9pnet_fd: Insufficient options for proto=fd [ 1346.260959][T15523] ntfs3(loop6): Failed to read $UpCase (-4). [ 1346.639986][T15546] netlink: 'syz.2.1940': attribute type 4 has an invalid length. [ 1348.412075][T15560] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1348.420461][T15560] overlayfs: failed to set xattr on upper [ 1348.427422][T15560] overlayfs: ...falling back to redirect_dir=nofollow. [ 1348.434615][T15560] overlayfs: ...falling back to index=off. [ 1348.440554][T15560] overlayfs: ...falling back to uuid=null. [ 1348.591317][T15560] overlayfs: maximum fs stacking depth exceeded [ 1352.736112][T15587] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1951'. [ 1356.283490][T15596] loop6: detected capacity change from 0 to 4096 [ 1356.418048][T15596] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1356.622352][T15596] ntfs3(loop6): Failed to read $UpCase (-4). [ 1358.462163][T15618] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[15618] [ 1358.518530][T15618] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1358.525682][T15618] overlayfs: failed to set xattr on upper [ 1358.531630][T15618] overlayfs: ...falling back to redirect_dir=nofollow. [ 1358.538620][T15618] overlayfs: ...falling back to index=off. [ 1358.544663][T15618] overlayfs: ...falling back to uuid=null. [ 1358.550589][T15618] overlayfs: maximum fs stacking depth exceeded [ 1359.323357][T15627] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1359.330512][T15627] overlayfs: failed to set xattr on upper [ 1359.336697][T15627] overlayfs: ...falling back to redirect_dir=nofollow. [ 1359.343846][T15627] overlayfs: ...falling back to index=off. [ 1359.349829][T15627] overlayfs: ...falling back to uuid=null. [ 1359.355940][T15627] overlayfs: maximum fs stacking depth exceeded [ 1361.952046][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.958403][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.844299][T15645] hub 9-0:1.0: USB hub found [ 1362.851267][T15645] hub 9-0:1.0: 1 port detected [ 1363.287982][T15650] loop2: detected capacity change from 0 to 64 [ 1366.385073][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 1366.533558][T15661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1367.454829][ T30] audit: type=1326 audit(1751350442.198:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.0.1970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85cab8e929 code=0x0 [ 1367.790952][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1969'. [ 1368.571646][T15675] 9pnet_fd: Insufficient options for proto=fd [ 1369.460504][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1977'. [ 1372.364267][T15705] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1372.371766][T15705] overlayfs: failed to set xattr on upper [ 1372.377484][T15705] overlayfs: ...falling back to redirect_dir=nofollow. [ 1372.384560][T15705] overlayfs: ...falling back to index=off. [ 1372.391677][T15705] overlayfs: ...falling back to uuid=null. [ 1372.397539][T15705] overlayfs: maximum fs stacking depth exceeded [ 1376.857408][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1989'. [ 1377.932133][T15755] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1382.052077][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1995'. [ 1386.402765][T15807] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1388.771383][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2009'. [ 1395.098916][T15867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1395.108271][T15867] netlink: 'syz.6.2018': attribute type 1 has an invalid length. [ 1398.919166][T15891] loop0: detected capacity change from 0 to 64 [ 1399.042540][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 1400.521367][T15903] loop2: detected capacity change from 0 to 64 [ 1401.157244][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 1403.207193][T15928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1403.230575][T15928] netlink: 'syz.8.2030': attribute type 1 has an invalid length. [ 1405.962870][T15937] loop8: detected capacity change from 0 to 4096 [ 1405.990423][T15937] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1406.681239][ T5986] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1406.709235][T15937] ntfs3(loop8): ino=19, mi_enum_attr [ 1406.858521][T15937] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1407.607059][T11623] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1407.930528][ T5986] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1407.955683][ T5986] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1407.965701][ T5986] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1408.210107][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.369638][ T5986] usb 3-1: can't set config #27, error -71 [ 1410.061270][ T9064] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1410.634209][ T5986] usb 3-1: USB disconnect, device number 8 [ 1410.942684][ T9064] usb 9-1: Using ep0 maxpacket: 8 [ 1410.949813][ T9064] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1410.970560][ T9064] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1411.740891][ T9064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.761633][ T9064] usb 9-1: config 0 descriptor?? [ 1411.767205][ T9064] usb 9-1: can't set config #0, error -71 [ 1411.774683][ T9064] usb 9-1: USB disconnect, device number 14 [ 1412.922485][T15992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.940157][T15992] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 1414.084042][ T8951] Bluetooth: hci4: command 0x0405 tx timeout [ 1416.221364][ T9064] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1416.631211][ T9064] usb 1-1: Using ep0 maxpacket: 8 [ 1417.126101][T16006] loop8: detected capacity change from 0 to 4096 [ 1417.275014][ T9064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1417.284655][T16006] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1417.293788][ T9064] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1417.293816][ T9064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.297408][ T9064] usb 1-1: config 0 descriptor?? [ 1417.395292][ T9064] hso 1-1:0.0: Can't find BULK IN endpoint [ 1417.436195][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2051'. [ 1417.762982][T16006] ntfs3(loop8): ino=19, mi_enum_attr [ 1417.782535][T16006] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1418.182374][T11623] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1418.616183][ T9064] usb 1-1: USB disconnect, device number 11 [ 1421.431311][ T9064] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1421.911684][ T9064] usb 9-1: Using ep0 maxpacket: 8 [ 1421.927661][ T9064] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1422.741253][ T9064] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1422.750427][ T9064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.803482][ T9064] usb 9-1: config 0 descriptor?? [ 1422.845915][ T9064] hso 9-1:0.0: Can't find BULK IN endpoint [ 1423.052082][ T9064] usb 9-1: USB disconnect, device number 15 [ 1423.249028][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.255602][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.704147][T16056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1424.725437][T16056] netlink: 'syz.8.2059': attribute type 1 has an invalid length. [ 1425.503807][ T30] audit: type=1326 audit(1751350501.138:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16051 comm="syz.4.2060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf2d98e929 code=0x0 [ 1426.898132][T16065] loop4: detected capacity change from 0 to 4096 [ 1427.123040][T16065] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1428.238551][T16081] netlink: 'syz.2.2067': attribute type 4 has an invalid length. [ 1428.641246][T16065] ntfs3(loop4): ino=19, mi_enum_attr [ 1428.646698][T16065] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1430.981318][T16101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1431.003515][T16101] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 1432.881432][ T30] audit: type=1326 audit(1751350507.718:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.2.2074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e1f8e929 code=0x0 [ 1435.680761][T16137] loop8: detected capacity change from 0 to 4096 [ 1435.732318][T16137] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1436.545688][T16137] ntfs3(loop8): ino=19, mi_enum_attr [ 1436.597380][T16137] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1437.169796][T11623] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1439.037838][T16155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1439.060166][T16155] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 1443.660884][T16167] ref_ctr_offset mismatch. inode: 0x60a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 1446.221587][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1446.649213][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1446.675467][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1446.708426][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1446.740108][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.958454][T16198] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1447.694145][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1448.003304][ T9] usb 9-1: USB disconnect, device number 16 [ 1454.621270][T16263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1456.101377][ T8951] Bluetooth: hci4: command 0x0405 tx timeout [ 1457.671303][ T5926] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1458.061242][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 1458.864002][ T5926] usb 1-1: device descriptor read/all, error -71 [ 1460.600126][T16302] hub 9-0:1.0: USB hub found [ 1460.611044][T16302] hub 9-0:1.0: 1 port detected [ 1461.169318][ T8951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1461.182152][ T8951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1461.191869][ T8951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1461.220213][ T8951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1461.230050][ T8951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1462.429218][ T1338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.059945][ T1338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.461322][T11623] Bluetooth: hci5: command tx timeout [ 1464.474436][ T1338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.445476][T16327] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1465.452733][T16327] overlayfs: failed to set xattr on upper [ 1465.458579][T16327] overlayfs: ...falling back to redirect_dir=nofollow. [ 1465.541274][T11623] Bluetooth: hci5: command tx timeout [ 1465.673124][T16327] overlayfs: ...falling back to index=off. [ 1465.678983][T16327] overlayfs: ...falling back to uuid=null. [ 1466.050355][T16327] overlayfs: maximum fs stacking depth exceeded [ 1467.771192][T11623] Bluetooth: hci5: command tx timeout [ 1469.262715][ T1338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.336145][ T30] audit: type=1400 audit(1751350544.968:76): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16364 comm="syz.2.2135" [ 1469.800911][T11623] Bluetooth: hci5: command tx timeout [ 1470.041310][ T5954] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1470.093534][T16309] chnl_net:caif_netlink_parms(): no params data found [ 1470.437731][ T5954] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1470.448952][ T5954] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1470.459429][ T5954] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1470.468885][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.148551][T16366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1471.716949][ T5954] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1472.491613][ T5954] usb 3-1: USB disconnect, device number 9 [ 1473.684255][ T1338] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 1473.709477][ T1338] ip6gre1 (unregistering): left promiscuous mode [ 1478.664029][T16438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2148'. [ 1479.933635][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.261204][ T5986] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1480.607722][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.633009][ T1338] bond0 (unregistering): Released all slaves [ 1480.642822][ T5986] usb 1-1: Using ep0 maxpacket: 8 [ 1480.663773][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1480.666172][ T1338] bond1 (unregistering): Released all slaves [ 1480.679770][ T5986] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1480.697643][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.713203][ T5986] usb 1-1: config 0 descriptor?? [ 1480.718536][ T1338] bond2 (unregistering): Released all slaves [ 1480.752692][ T5986] hso 1-1:0.0: Can't find BULK IN endpoint [ 1481.523662][ T1338] bond3 (unregistering): Released all slaves [ 1481.856295][ T1338] bond4 (unregistering): Released all slaves [ 1482.253779][ T1338] bond5 (unregistering): Released all slaves [ 1482.378582][ T30] audit: type=1400 audit(1751350558.008:77): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16455 comm="syz.2.2153" [ 1482.383019][ T1338] bond6 (unregistering): Released all slaves [ 1482.673321][ T5954] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1482.724107][ T9] usb 1-1: USB disconnect, device number 14 [ 1482.936511][ T5954] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1482.947692][ T5954] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1482.950276][ T1338] bond7 (unregistering): Released all slaves [ 1482.961440][ T5954] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1482.987506][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.049776][T16441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2148'. [ 1483.059271][T16441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2148'. [ 1483.234227][T16457] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1483.278454][ T5954] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1484.677454][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.684196][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.141847][ T5954] usb 3-1: USB disconnect, device number 10 [ 1485.411320][T12277] udevd[12277]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1487.036511][T16309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.130996][T16309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.181399][T16309] bridge_slave_0: entered allmulticast mode [ 1487.238491][T16309] bridge_slave_0: entered promiscuous mode [ 1488.841717][T16309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.909238][T16309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.086517][T16309] bridge_slave_1: entered allmulticast mode [ 1489.555588][T16309] bridge_slave_1: entered promiscuous mode [ 1491.007131][T16309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.019799][T16309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.265212][ T1338] hsr_slave_0: left promiscuous mode [ 1491.345061][ T1338] hsr_slave_1: left promiscuous mode [ 1491.356405][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1491.364366][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.376850][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.384604][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1491.640046][ T1338] veth1_macvtap: left promiscuous mode [ 1491.651215][ T1338] veth0_macvtap: left promiscuous mode [ 1491.656893][ T1338] veth1_vlan: left promiscuous mode [ 1491.683820][ T1338] veth0_vlan: left promiscuous mode [ 1492.610372][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 1493.467504][T16546] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1499.150427][T16309] team0: Port device team_slave_0 added [ 1499.264370][T16309] team0: Port device team_slave_1 added [ 1499.350563][T16579] loop8: detected capacity change from 0 to 64 [ 1499.624064][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2175'. [ 1502.157339][T16309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1502.183541][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.981310][T16309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.013274][T16309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.020242][T16309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.248496][T16309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.297161][T16309] hsr_slave_0: entered promiscuous mode [ 1506.355043][T16309] hsr_slave_1: entered promiscuous mode [ 1509.898216][T16646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1509.907740][T16646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1509.917461][T16646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1509.925629][T16646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1509.950804][T16646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1511.662163][ T1338] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.022433][T11623] Bluetooth: hci0: command tx timeout [ 1513.634735][ T1338] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.327093][T16646] Bluetooth: hci0: command tx timeout [ 1514.686420][T16309] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1514.857896][T16675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1514.913836][T16309] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1515.782638][ T1338] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.080239][T16309] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1516.096526][T16309] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1516.524720][T16646] Bluetooth: hci0: command 0x040f tx timeout [ 1518.906481][T11623] Bluetooth: hci0: command 0x040f tx timeout [ 1519.430956][ T1338] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.530719][T16309] kthread_run failed with err -4 [ 1520.304431][T16644] chnl_net:caif_netlink_parms(): no params data found [ 1520.991884][T11623] Bluetooth: hci0: command 0x040f tx timeout [ 1521.858135][T16646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1521.867650][T16646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1521.880090][T16646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1521.894591][T16646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1521.903251][T16646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1523.490334][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2205'. [ 1523.581962][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1523.595976][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1523.606377][ T1338] bond0 (unregistering): Released all slaves [ 1523.728281][ T1338] bond1 (unregistering): Released all slaves [ 1523.747241][ T1338] bond2 (unregistering): Released all slaves [ 1523.942038][T11623] Bluetooth: hci4: command tx timeout [ 1524.146153][T16644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.153491][T16644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.160766][T16644] bridge_slave_0: entered allmulticast mode [ 1524.168370][T16644] bridge_slave_0: entered promiscuous mode [ 1524.359516][T16755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1524.382275][T16755] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 1524.870014][T16644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.879820][T16644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.887630][T16644] bridge_slave_1: entered allmulticast mode [ 1524.896399][T16644] bridge_slave_1: entered promiscuous mode [ 1526.301174][T11623] Bluetooth: hci4: command tx timeout [ 1526.551368][T16644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.620658][T16644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.944040][ T1338] hsr_slave_0: left promiscuous mode [ 1526.956018][ T1338] hsr_slave_1: left promiscuous mode [ 1526.962215][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1526.970763][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.662904][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1527.683155][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.681369][T11623] Bluetooth: hci4: command tx timeout [ 1528.706050][ T1338] veth1_macvtap: left promiscuous mode [ 1528.713277][ T1338] veth0_macvtap: left promiscuous mode [ 1528.718942][ T1338] veth1_vlan: left promiscuous mode [ 1528.900660][ T1338] veth0_vlan: left promiscuous mode [ 1530.561313][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 1530.619387][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 1530.747183][T11623] Bluetooth: hci4: command tx timeout [ 1531.622755][T16644] team0: Port device team_slave_0 added [ 1531.935319][T16644] team0: Port device team_slave_1 added [ 1532.199113][T16644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.215416][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.285443][T16644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.337776][T16644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.369269][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.465225][T16644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.511908][T16815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1532.531604][T16815] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 1533.176772][T16644] hsr_slave_0: entered promiscuous mode [ 1533.209432][T16644] hsr_slave_1: entered promiscuous mode [ 1533.239763][T16644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1533.464184][T16644] Cannot create hsr debugfs directory [ 1534.935110][T16829] blktrace: Concurrent blktraces are not allowed on sg0 [ 1537.525972][T16732] chnl_net:caif_netlink_parms(): no params data found [ 1539.204320][T16866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1539.226785][T16866] netlink: 'syz.8.2225': attribute type 1 has an invalid length. [ 1540.974593][T16882] loop2: detected capacity change from 0 to 64 [ 1541.253505][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2229'. [ 1542.523356][T16732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.530543][T16732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.548086][T16732] bridge_slave_0: entered allmulticast mode [ 1542.563360][T16732] bridge_slave_0: entered promiscuous mode [ 1542.943284][T16732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.953349][T16732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.960623][T16732] bridge_slave_1: entered allmulticast mode [ 1543.088655][T16732] bridge_slave_1: entered promiscuous mode [ 1544.132625][T16732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.367906][T16732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.167209][T16732] team0: Port device team_slave_0 added [ 1545.188841][T16732] team0: Port device team_slave_1 added [ 1545.272723][T16732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.287787][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1545.374973][T16732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.784513][T16732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.893166][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.107829][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.120387][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.157361][T16732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.012749][ T1338] bridge_slave_1: left allmulticast mode [ 1548.018416][ T1338] bridge_slave_1: left promiscuous mode [ 1548.024499][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.036880][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2236'. [ 1548.186774][ T1338] bridge_slave_0: left allmulticast mode [ 1548.194290][ T1338] bridge_slave_0: left promiscuous mode [ 1548.338913][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.811700][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.845945][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.882886][ T1338] bond0 (unregistering): Released all slaves [ 1549.129750][T16732] hsr_slave_0: entered promiscuous mode [ 1549.141955][T16732] hsr_slave_1: entered promiscuous mode [ 1549.163027][T16732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1549.170631][T16732] Cannot create hsr debugfs directory [ 1549.253610][ T1338] hsr_slave_0: left promiscuous mode [ 1549.321362][ T1338] hsr_slave_1: left promiscuous mode [ 1549.333759][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1549.391933][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.774653][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2241'. [ 1552.578095][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 1552.627304][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 1554.731161][T16962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2241'. [ 1554.740234][T16962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2241'. [ 1555.316916][T16644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1555.400488][T16980] loop2: detected capacity change from 0 to 64 [ 1555.595265][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'. [ 1555.809287][T16644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1559.294469][T16986] hub 9-0:1.0: USB hub found [ 1559.302165][T16986] hub 9-0:1.0: 1 port detected [ 1559.946445][T16644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1560.199365][T16644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1563.313369][T16644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.872812][T16644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.092983][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.100151][ T7126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.146618][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.153832][T11227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.488531][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'. [ 1565.591885][T17041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2254'. [ 1565.600942][T17041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2254'. [ 1567.806643][T17056] loop2: detected capacity change from 0 to 64 [ 1568.026438][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'. [ 1569.539472][T16732] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1569.661793][T16732] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1569.795470][T16732] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1569.865336][T16732] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1570.814742][T16732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.861412][T16732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.915056][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.922272][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.982752][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.989885][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.284998][T16646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1572.330789][T16646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1572.347648][T16646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1572.388928][T16646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1572.421629][T16646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1572.526511][T16732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1573.293322][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2264'. [ 1573.399349][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2264'. [ 1573.408541][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2264'. [ 1574.696882][T11623] Bluetooth: hci0: command tx timeout [ 1576.752344][T11623] Bluetooth: hci0: command tx timeout [ 1576.934024][T16732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.437118][T11227] bridge_slave_1: left allmulticast mode [ 1578.442928][T11227] bridge_slave_1: left promiscuous mode [ 1578.448700][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.499840][T11227] bridge_slave_0: left allmulticast mode [ 1578.540427][T11227] bridge_slave_0: left promiscuous mode [ 1578.569014][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.824604][T11623] Bluetooth: hci0: command tx timeout [ 1579.012083][ T30] audit: type=1400 audit(1751350654.638:78): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17156 comm="syz.2.2272" [ 1579.415155][ T5926] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1579.616127][ T5926] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1579.678156][ T5926] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1579.890063][ T5926] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1579.906110][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.124288][T17173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1580.150758][T17173] netlink: 'syz.0.2274': attribute type 1 has an invalid length. [ 1580.553585][T17157] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1580.566325][ T5926] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1580.860325][ T5926] usb 3-1: USB disconnect, device number 11 [ 1580.907685][T11623] Bluetooth: hci0: command tx timeout [ 1580.940109][T17020] udevd[17020]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1581.160085][T11227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.208439][T16646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1581.218210][T16646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1581.232694][T16646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1581.233002][T11227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.258396][T16646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1581.262515][T11227] bond0 (unregistering): Released all slaves [ 1581.276382][T16646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1581.966868][T11227] hsr_slave_0: left promiscuous mode [ 1582.156791][T11227] hsr_slave_1: left promiscuous mode [ 1582.823968][T11227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.919118][T11227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1583.672517][T11623] Bluetooth: hci5: command tx timeout [ 1585.438432][T11227] team0 (unregistering): Port device team_slave_1 removed [ 1585.701365][T11623] Bluetooth: hci5: command tx timeout [ 1585.709807][T11227] team0 (unregistering): Port device team_slave_0 removed [ 1587.571421][T17100] chnl_net:caif_netlink_parms(): no params data found [ 1587.890750][T11623] Bluetooth: hci5: command tx timeout [ 1591.201604][T11623] Bluetooth: hci5: command tx timeout [ 1591.502917][T17100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.524031][T17100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.565142][T17100] bridge_slave_0: entered allmulticast mode [ 1591.613156][T17100] bridge_slave_0: entered promiscuous mode [ 1591.640207][T17179] chnl_net:caif_netlink_parms(): no params data found [ 1591.680530][T17100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.700770][T17100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.715117][T17100] bridge_slave_1: entered allmulticast mode [ 1591.745340][T17100] bridge_slave_1: entered promiscuous mode [ 1592.436966][T17100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.634587][T17100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.612211][T17274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2293'. [ 1593.667591][T17100] team0: Port device team_slave_0 added [ 1593.699258][T17100] team0: Port device team_slave_1 added [ 1593.727571][T17277] blktrace: Concurrent blktraces are not allowed on sg0 [ 1593.940345][T17179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.959571][T17179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.976590][T17179] bridge_slave_0: entered allmulticast mode [ 1594.007686][T17179] bridge_slave_0: entered promiscuous mode [ 1594.518156][T17179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.538549][T17179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.547745][T17179] bridge_slave_1: entered allmulticast mode [ 1594.563256][T17179] bridge_slave_1: entered promiscuous mode [ 1594.608562][T17100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.618530][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1594.650923][T17100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.806042][T17100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.816730][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1594.849801][T17100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.020611][T17179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.070282][T17179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.278871][T17179] team0: Port device team_slave_0 added [ 1595.366628][T17179] team0: Port device team_slave_1 added [ 1595.500983][T17100] hsr_slave_0: entered promiscuous mode [ 1595.509346][T17100] hsr_slave_1: entered promiscuous mode [ 1595.620970][T17179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.637331][T17179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.670688][T17179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.856562][T17179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.864449][T17179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.890700][T17179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.015948][T17179] hsr_slave_0: entered promiscuous mode [ 1597.113781][T17179] hsr_slave_1: entered promiscuous mode [ 1597.119863][T17179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1597.131125][T17179] Cannot create hsr debugfs directory [ 1597.351580][T17318] overlayfs: failed to resolve './file0': -2 [ 1598.058591][T11227] bridge_slave_1: left allmulticast mode [ 1598.077968][T11227] bridge_slave_1: left promiscuous mode [ 1598.100621][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.130175][T11227] bridge_slave_0: left allmulticast mode [ 1598.145264][T11227] bridge_slave_0: left promiscuous mode [ 1598.151353][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.676170][T11227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1598.699634][T11227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1598.721558][T11227] bond0 (unregistering): Released all slaves [ 1598.980646][ T30] audit: type=1400 audit(1751350674.608:79): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17341 comm="syz.8.2302" [ 1599.221842][ T5954] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1599.293694][T11227] hsr_slave_0: left promiscuous mode [ 1599.458922][T11227] hsr_slave_1: left promiscuous mode [ 1599.466000][T11227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.231110][ T5954] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1600.261328][T11227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.271358][ T5954] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1600.285908][ T5954] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1600.323863][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.410953][T17342] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1600.421805][ T5954] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1600.659673][ T5926] usb 9-1: USB disconnect, device number 17 [ 1600.955383][T17358] fuse: Bad value for 'fd' [ 1601.787100][T11227] team0 (unregistering): Port device team_slave_1 removed [ 1602.799351][T11227] team0 (unregistering): Port device team_slave_0 removed [ 1605.358877][T17390] loop0: detected capacity change from 0 to 64 [ 1606.286246][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 1606.958460][T17100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1607.037102][T17100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1607.546772][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.273909][T17398] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[17398] [ 1608.293817][T17398] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1608.300772][T17398] overlayfs: failed to set xattr on upper [ 1608.306550][T17398] overlayfs: ...falling back to redirect_dir=nofollow. [ 1608.313531][T17398] overlayfs: ...falling back to index=off. [ 1608.319976][T17398] overlayfs: ...falling back to uuid=null. [ 1608.325826][T17398] overlayfs: maximum fs stacking depth exceeded [ 1608.370103][T17100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1608.427032][T17100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1609.340784][T17100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.467386][T17100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1610.775844][T17179] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1610.809146][T17179] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1611.084759][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.092007][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1611.101553][T17179] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1611.147914][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.155170][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1611.448292][T17179] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1614.860765][T17466] fuse: Bad value for 'fd' [ 1616.098630][T17179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.868565][T17179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1616.912994][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.920201][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.624424][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.631659][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.436938][T17100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1618.898352][T17100] veth0_vlan: entered promiscuous mode [ 1618.908658][T17100] veth1_vlan: entered promiscuous mode [ 1620.059763][T17100] veth0_macvtap: entered promiscuous mode [ 1620.149482][T17100] veth1_macvtap: entered promiscuous mode [ 1620.324531][T17100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1620.504520][ T5986] hid_parser_main: 7 callbacks suppressed [ 1620.504537][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1620.528899][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1621.243703][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1621.252916][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1621.260337][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1621.268208][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1621.411790][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1621.430024][T17100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1621.437866][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1621.450036][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1621.468293][ T5986] hid-generic 0002:0004:0009.000C: unknown main item tag 0x0 [ 1622.448747][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.487447][ T5986] hid-generic 0002:0004:0009.000C: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1622.550937][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.576112][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.778780][T17179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1623.628790][T17522] fido_id[17522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1623.630121][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.137012][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.177387][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.361294][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.408919][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.277163][T17179] veth0_vlan: entered promiscuous mode [ 1625.395628][T17179] veth1_vlan: entered promiscuous mode [ 1625.529747][T17179] veth0_macvtap: entered promiscuous mode [ 1625.564667][T17179] veth1_macvtap: entered promiscuous mode [ 1625.671146][ T5954] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1626.295949][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 1626.537647][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 1626.595894][T17179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1626.615273][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 1626.646040][T17179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.681398][ T5954] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1626.884987][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.909865][ T5954] usb 3-1: config 0 descriptor?? [ 1627.031558][T17538] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1627.189940][ T64] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.210988][ T5954] hub 3-1:0.0: USB hub found [ 1627.236920][ T64] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.277786][ T64] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.323840][ T64] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.371685][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.395938][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.439658][ T5954] hub 3-1:0.0: 1 port detected [ 1627.661643][T11227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.670750][T11227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.329012][ T5954] usb 3-1: USB disconnect, device number 12 [ 1632.657851][ T30] audit: type=1400 audit(1751350708.288:80): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17585 comm="syz.2.2351" syzkaller syzkaller login: [ 1638.171635][T17647] loop0: detected capacity change from 0 to 64 [ 1638.341117][ T5926] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1640.131092][ T5926] usb 10-1: Using ep0 maxpacket: 32 [ 1640.174513][ T5926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 1640.186935][ T5926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 1640.198979][ T5926] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1640.208699][ T5926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.286522][ T5926] usb 10-1: config 0 descriptor?? [ 1640.318160][T17645] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1640.356703][ T5926] hub 10-1:0.0: USB hub found [ 1640.650713][ T5926] hub 10-1:0.0: 1 port detected [ 1641.945244][ T3074] usb 10-1: USB disconnect, device number 2 [ 1641.951414][ T5926] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 1646.211431][ T30] audit: type=1400 audit(1751350721.728:81): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17679 comm="syz.0.2370" [ 1646.701095][ T5986] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1647.594225][ T5986] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1647.649886][ T5986] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1647.694499][ T5986] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1648.207690][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.634486][ T5986] usb 1-1: can't set config #27, error -71 [ 1648.657752][ T5986] usb 1-1: USB disconnect, device number 15 [ 1650.491255][T12423] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1650.991211][T12423] usb 10-1: Using ep0 maxpacket: 8 [ 1651.052274][T12423] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1651.089318][T17721] fuse: Bad value for 'fd' [ 1651.141536][T12423] usb 10-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1651.198218][T12423] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.375802][T12423] usb 10-1: config 0 descriptor?? [ 1651.708365][T12423] hso 10-1:0.0: Can't find BULK IN endpoint [ 1651.839571][T17725] fuse: Bad value for 'fd' [ 1651.844472][T12423] usb 10-1: USB disconnect, device number 3 [ 1652.413358][T17735] loop2: detected capacity change from 0 to 64 syzkaller syzkaller login: [ 1653.951168][ T5986] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1654.002197][T17749] loop1: detected capacity change from 0 to 64 [ 1657.681272][T12423] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1657.831111][ T5986] usb 1-1: device descriptor read/64, error -71 [ 1658.492653][ T5986] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1659.159625][T12423] usb 10-1: Using ep0 maxpacket: 8 [ 1659.167898][T12423] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1659.181114][T12423] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.191430][T12423] usb 10-1: config 0 has no interface number 0 [ 1659.197659][T12423] usb 10-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1659.209929][T12423] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1659.225019][T12423] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x9 has an invalid bInterval 70, changing to 7 [ 1659.241087][T12423] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1659.291728][ T5986] usb 1-1: Using ep0 maxpacket: 8 [ 1659.321438][ T5986] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1659.348992][ T5986] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1659.380915][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1659.483640][T12423] usb 10-1: config 0 interface 8 altsetting 0 has a duplicate endpoint with address 0x8C, skipping [ 1659.494475][T12423] usb 10-1: New USB device found, idVendor=0411, idProduct=00e6, bcdDevice=ff.bd [ 1659.503760][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1659.564014][ T5986] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1659.586125][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.604866][ T5986] usb 1-1: Product: syz [ 1659.609241][ T5986] usb 1-1: Manufacturer: syz [ 1659.742302][T12423] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.774527][T12423] usb 10-1: config 0 descriptor?? [ 1659.787161][T17762] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1660.943597][ T5986] usb 1-1: SerialNumber: syz [ 1661.038042][ T5986] usb 1-1: config 0 descriptor?? [ 1661.067425][T12423] usb 10-1: string descriptor 0 read error: -71 [ 1661.097825][ T5986] usb 1-1: can't set config #0, error -71 [ 1661.139245][ T5986] usb 1-1: USB disconnect, device number 17 [ 1661.351544][T12423] usb 10-1: USB disconnect, device number 4 [ 1661.383297][T17790] fuse: Bad value for 'fd' [ 1663.515598][T17806] loop0: detected capacity change from 0 to 4096 [ 1663.597410][T17814] netlink: 'syz.8.2400': attribute type 4 has an invalid length. [ 1664.126165][T17806] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1664.324514][T17806] ntfs3(loop0): ino=19, mi_enum_attr [ 1664.381037][T17806] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1668.136981][T17850] overlayfs: failed to resolve './file0': -2 [ 1668.261712][T17852] fuse: Bad value for 'fd' [ 1669.003760][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.674626][T17861] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1670.223038][T17858] uprobe: syz.0.2410:17858 failed to unregister, leaking uprobe [ 1672.631976][T17858] uprobe: syz.0.2410:17858 failed to unregister, leaking uprobe [ 1676.823476][T17908] loop0: detected capacity change from 0 to 4096 [ 1676.907839][T17908] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1677.042163][T17921] overlayfs: failed to resolve './file0': -2 [ 1677.707223][T17908] ntfs3(loop0): ino=19, mi_enum_attr [ 1677.831590][T17908] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1689.611437][T18016] bond4: entered promiscuous mode [ 1689.647863][T18016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1689.805430][T18018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1689.845521][T18018] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1689.896340][T18018] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 1692.821043][T18053] loop9: detected capacity change from 0 to 64 [ 1693.691266][T17990] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1694.191206][T17990] usb 1-1: Using ep0 maxpacket: 8 [ 1694.294239][T17990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1694.431759][T17990] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1694.600730][T17990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.833772][T17990] usb 1-1: config 0 descriptor?? [ 1695.030389][T17990] hso 1-1:0.0: Can't find BULK IN endpoint [ 1696.192298][ T5824] usb 1-1: USB disconnect, device number 18 [ 1697.015796][T11623] Bluetooth: hci0: command 0x0406 tx timeout [ 1697.514710][T18083] fuse: Bad value for 'fd' [ 1697.851838][T18094] loop8: detected capacity change from 0 to 64 [ 1698.669924][T18089] loop6: detected capacity change from 0 to 524287999 [ 1698.762523][T18097] blktrace: Concurrent blktraces are not allowed on sg0 [ 1700.286686][ T30] audit: type=1400 audit(1751350775.918:82): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18109 comm="syz.9.2456" [ 1700.651103][ T5926] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1700.850843][ T5926] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1701.610284][ T5926] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1701.620686][ T5926] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1701.633071][ T5926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.668525][T18112] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1701.689486][ T5926] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1702.155534][T17990] usb 10-1: USB disconnect, device number 5 [ 1703.183182][T17990] hid_parser_main: 7 callbacks suppressed [ 1703.183202][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1703.280838][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1703.534944][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1704.541216][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1704.549174][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1705.160018][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1705.179605][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1705.190571][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1705.207043][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1705.237487][T17990] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 1705.371485][T17990] hid-generic 0002:0004:0009.000D: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1705.633864][T18158] fuse: Bad value for 'fd' [ 1707.632319][T18076] Bluetooth: hci5: command 0x0406 tx timeout [ 1707.963151][T18170] ptrace attach of "./syz-executor exec"[8649] was attempted by "./syz-executor exec"[18170] [ 1707.993215][T18170] overlayfs: failed to resolve './file1': -2 [ 1708.526578][T18159] fido_id[18159]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1708.982882][T18186] hub 9-0:1.0: USB hub found [ 1708.989216][T18186] hub 9-0:1.0: 1 port detected [ 1709.963620][T18188] bond1: entered promiscuous mode [ 1709.969210][T18188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1710.248491][T18188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1710.259065][T18188] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1711.864612][T18188] bond1: (slave ip6gre1): Error -95 calling set_mac_address syzkaller syzkaller login: [ 1715.758198][T18229] fuse: Bad value for 'fd' [ 1717.500287][T18250] hub 9-0:1.0: USB hub found [ 1717.507292][T18250] hub 9-0:1.0: 1 port detected [ 1718.684067][T18255] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2484'. [ 1718.760559][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2479'. [ 1718.771425][T18244] bridge_slave_1: left allmulticast mode [ 1718.777817][T18244] bridge_slave_1: left promiscuous mode [ 1718.785709][T18244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.041556][T18244] bridge_slave_0: left allmulticast mode [ 1719.047402][T18244] bridge_slave_0: left promiscuous mode [ 1719.054540][T18244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.654646][T18265] syz.8.2486: attempt to access beyond end of device [ 1719.654646][T18265] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1719.668288][T18265] gfs2: error -5 reading superblock [ 1720.570101][T18270] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1720.577394][T18270] overlayfs: failed to set xattr on upper [ 1720.583320][T18270] overlayfs: ...falling back to redirect_dir=nofollow. [ 1720.590214][T18270] overlayfs: ...falling back to index=off. [ 1720.596389][T18270] overlayfs: ...falling back to uuid=null. [ 1720.603487][T18270] overlayfs: maximum fs stacking depth exceeded [ 1721.182135][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2488'. [ 1725.130627][ T5926] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1725.894394][ T5926] usb 9-1: Using ep0 maxpacket: 8 [ 1725.902694][ T5926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1725.922898][ T5926] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1725.992856][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.035661][T12423] hid_parser_main: 7 callbacks suppressed [ 1726.035720][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1726.215636][ T5926] usb 9-1: config 0 descriptor?? [ 1726.224686][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1726.363185][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1726.419655][ T5926] hso 9-1:0.0: Can't find BULK IN endpoint [ 1726.468727][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1726.649953][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1726.818923][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1726.913694][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1726.935364][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1726.967668][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1726.992390][T12423] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 1727.218220][T12423] hid-generic 0002:0004:0009.000E: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1727.732779][T12423] usb 9-1: USB disconnect, device number 18 [ 1728.380337][T18328] fido_id[18328]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1728.619231][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'. [ 1729.352930][ T5824] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1729.691177][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 1729.725566][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 1729.751999][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 1729.810667][ T5824] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1729.846437][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.932044][ T5824] usb 1-1: config 0 descriptor?? [ 1729.937815][T18350] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1730.020850][ T5824] hub 1-1:0.0: USB hub found [ 1730.164607][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2505'. [ 1730.177561][T18368] bridge_slave_1: left allmulticast mode [ 1730.185041][T18368] bridge_slave_1: left promiscuous mode [ 1730.195536][T18368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.240113][ T5824] hub 1-1:0.0: 1 port detected [ 1730.366290][ T5926] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1730.433476][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.442896][T18368] bridge_slave_0: left allmulticast mode [ 1730.450471][T18368] bridge_slave_0: left promiscuous mode [ 1730.456836][T18368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.554630][ T5926] usb 10-1: Using ep0 maxpacket: 8 [ 1730.561921][ T5926] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1730.576288][ T5926] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1730.737073][ T5824] usb 1-1: USB disconnect, device number 19 [ 1731.023202][ T5926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1731.034331][ T5926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1731.150116][ T5926] usb 10-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1731.177157][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.185848][ T5926] usb 10-1: Product: syz [ 1731.190186][ T5926] usb 10-1: Manufacturer: syz [ 1731.197241][ T5926] usb 10-1: SerialNumber: syz [ 1731.210114][ T5926] usb 10-1: config 0 descriptor?? [ 1731.234749][T18361] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1731.461327][ T5926] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1731.544109][ T5926] input: Griffin SoundKnob as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input23 [ 1732.675226][ C1] powermate: config urb returned -71 [ 1732.682852][ C1] powermate: config urb returned -71 [ 1732.688372][ C1] powermate: config urb returned -71 [ 1732.693853][ C1] powermate: config urb returned -71 [ 1732.721399][T12423] usb 10-1: USB disconnect, device number 6 [ 1732.731061][ C1] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1733.052653][T18390] hub 9-0:1.0: USB hub found [ 1733.058923][T18390] hub 9-0:1.0: 1 port detected [ 1734.528446][T18398] loop2: detected capacity change from 0 to 64 [ 1734.583140][T18389] overlayfs: failed to resolve './file0': -2 [ 1738.816544][T18442] netlink: 'syz.9.2519': attribute type 1 has an invalid length. [ 1740.172121][T18449] hub 9-0:1.0: USB hub found [ 1740.177021][T18449] hub 9-0:1.0: 1 port detected [ 1741.553590][T18461] overlayfs: failed to resolve './file0': -2 [ 1741.828744][T18442] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1750.479414][T18527] overlayfs: failed to resolve './file0': -2 [ 1751.061966][T16646] Bluetooth: hci5: command 0x0406 tx timeout [ 1754.099275][ T30] audit: type=1400 audit(1751350829.658:83): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18551 comm="syz.0.2541" [ 1759.841846][T18601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 1761.130375][T18606] overlayfs: failed to resolve './file0': -2 [ 1761.568505][T18610] fuse: Bad value for 'fd' [ 1763.979973][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 1767.911396][T18666] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1767.918837][T18666] overlayfs: failed to set xattr on upper [ 1767.924912][T18666] overlayfs: ...falling back to redirect_dir=nofollow. [ 1768.100916][T18662] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1768.110921][T18662] overlayfs: failed to set xattr on upper [ 1768.117414][T18662] overlayfs: ...falling back to redirect_dir=nofollow. [ 1768.125482][T18662] overlayfs: ...falling back to index=off. [ 1768.135915][T18662] overlayfs: ...falling back to uuid=null. [ 1768.147811][T18662] overlayfs: maximum fs stacking depth exceeded [ 1768.389669][T18666] overlayfs: ...falling back to index=off. [ 1768.707842][T18666] overlayfs: ...falling back to uuid=null. [ 1768.719092][T18666] overlayfs: maximum fs stacking depth exceeded [ 1769.982694][T18685] blktrace: Concurrent blktraces are not allowed on sg0 [ 1769.998104][T18687] overlayfs: failed to resolve './file0': -2 [ 1770.021509][T17990] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1770.321018][T17990] usb 10-1: Using ep0 maxpacket: 8 [ 1770.489583][T17990] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1770.537197][T17990] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1770.639903][T17990] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1771.142128][T17990] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1771.227430][T17990] usb 10-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1771.252159][T17990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.260279][T17990] usb 10-1: Product: syz [ 1771.809799][T17990] usb 10-1: Manufacturer: syz [ 1771.837145][T17990] usb 10-1: SerialNumber: syz [ 1772.133302][T17990] usb 10-1: config 0 descriptor?? [ 1772.143480][T18681] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1772.453757][T17990] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1773.755925][T17990] input: Griffin SoundKnob as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input24 [ 1774.426883][ C0] powermate: config urb returned -71 [ 1774.432415][ C0] powermate: config urb returned -71 [ 1774.438683][ C0] powermate: config urb returned -71 [ 1774.446995][ C0] powermate: config urb returned -71 [ 1774.514211][T17990] usb 10-1: USB disconnect, device number 7 [ 1774.520174][ C0] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1778.229289][T18743] overlayfs: failed to resolve './file0': -2 [ 1779.436171][T18753] ref_ctr_offset mismatch. inode: 0xbaa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 1779.676308][T18769] hub 9-0:1.0: USB hub found [ 1779.682381][T18769] hub 9-0:1.0: 1 port detected [ 1780.424691][T18766] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1784.251204][ T31] INFO: task kworker/0:6:5954 blocked for more than 143 seconds. [ 1784.259011][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 1785.395216][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1785.404144][ T31] task:kworker/0:6 state:D stack:21128 pid:5954 tgid:5954 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 1785.418757][ T31] Workqueue: usb_hub_wq hub_event [ 1785.431941][ T31] Call Trace: [ 1785.435266][ T31] [ 1785.438241][ T31] __schedule+0x16f5/0x4d00 [ 1785.479081][ T31] ? schedule+0x165/0x360 [ 1785.483813][ T31] ? __pfx___schedule+0x10/0x10 [ 1785.488810][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1785.497218][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 1785.617997][ T31] ? schedule+0x91/0x360 [ 1785.708317][ T31] schedule+0x165/0x360 [ 1785.731100][ T31] schedule_timeout+0x9a/0x270 [ 1785.735925][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1785.747536][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1785.753248][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1785.758500][ T31] ? wait_for_completion+0x267/0x5d0 [ 1785.764576][ T31] wait_for_completion+0x2bf/0x5d0 [ 1785.769867][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1785.787425][ T31] ? __flush_work+0xd2/0xbc0 [ 1785.810333][ T31] ? __flush_work+0xd2/0xbc0 [ 1785.841036][ T31] __flush_work+0x9b9/0xbc0 [ 1785.845604][ T31] ? __flush_work+0xd2/0xbc0 [ 1785.850237][ T31] ? __pfx___flush_work+0x10/0x10 [ 1785.878856][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1785.891192][ T31] ? __queue_work+0xc56/0xfb0 [ 1785.895937][ T31] ? flush_delayed_work+0x11d/0x190 [ 1785.911006][ T31] flush_delayed_work+0x13e/0x190 [ 1785.919677][ T31] ? __pfx_flush_delayed_work+0x10/0x10 [ 1785.938440][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1785.947605][ T31] ? usb_hcd_flush_endpoint+0x3e9/0x400 [ 1785.955555][ T31] hub_quiesce+0x1f0/0x330 [ 1785.960035][ T31] hub_disconnect+0xc8/0x470 [ 1785.966534][ T31] usb_unbind_interface+0x26b/0x910 [ 1785.974259][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1785.984585][ T31] device_release_driver_internal+0x4d6/0x7c0 [ 1785.990717][ T31] bus_remove_device+0x34d/0x410 [ 1785.998155][ T31] device_del+0x511/0x8e0 [ 1786.004100][ T31] ? kfree+0x18e/0x440 [ 1786.008308][ T31] ? __pfx_device_del+0x10/0x10 [ 1786.015581][ T31] ? kobject_put+0x446/0x480 [ 1786.020228][ T31] usb_disable_device+0x3e9/0x8a0 [ 1786.027507][ T31] usb_disconnect+0x330/0x950 [ 1786.038286][ T31] hub_event+0x1cdb/0x4a00 [ 1786.047159][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1786.058215][ T31] ? register_lock_class+0x51/0x320 [ 1786.065104][ T31] ? __pfx_hub_event+0x10/0x10 [ 1786.069918][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1786.077960][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1786.087770][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1786.095783][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1786.103686][ T31] process_scheduled_works+0xae1/0x17b0 [ 1786.109314][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1786.117512][ T31] worker_thread+0x8a0/0xda0 [ 1786.123720][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1786.130105][ T31] ? __kthread_parkme+0x7b/0x200 [ 1786.137436][ T31] kthread+0x70e/0x8a0 [ 1786.146709][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1786.156555][ T31] ? __pfx_kthread+0x10/0x10 [ 1786.165034][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1786.170292][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1786.177966][ T31] ? __pfx_kthread+0x10/0x10 [ 1786.187041][ T31] ret_from_fork+0x3fc/0x770 [ 1786.193986][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1786.199150][ T31] ? __switch_to_asm+0x39/0x70 [ 1786.205485][ T31] ? __switch_to_asm+0x33/0x70 [ 1786.210288][ T31] ? __pfx_kthread+0x10/0x10 [ 1786.217313][ T31] ret_from_fork_asm+0x1a/0x30 [ 1786.223727][ T31] [ 1786.226891][ T31] INFO: task kworker/0:2:17551 blocked for more than 145 seconds. [ 1786.269448][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 1786.276739][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1786.285742][ T31] task:kworker/0:2 state:D stack:25704 pid:17551 tgid:17551 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1786.300337][ T31] Workqueue: events_power_efficient hub_init_func2 [ 1786.306995][ T31] Call Trace: [ 1786.310305][ T31] [ 1786.313320][ T31] __schedule+0x16f5/0x4d00 [ 1786.317883][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1786.323398][ T31] ? schedule+0x165/0x360 [ 1786.327775][ T31] ? __pfx___schedule+0x10/0x10 [ 1786.332733][ T31] ? schedule+0x91/0x360 [ 1786.337023][ T31] schedule+0x165/0x360 [ 1786.341543][ T31] schedule_preempt_disabled+0x13/0x30 [ 1786.347046][ T31] __mutex_lock+0x724/0xe80 [ 1786.351862][ T31] ? __mutex_lock+0x51b/0xe80 [ 1786.356576][ T31] ? hub_activate+0xb7/0x1ea0 [ 1786.361837][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1786.366926][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1786.372279][ T31] ? __lock_acquire+0xab9/0xd20 [ 1786.377202][ T31] hub_activate+0xb7/0x1ea0 [ 1786.382023][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1786.387796][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1786.397177][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1786.403993][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1786.410133][ T31] process_scheduled_works+0xae1/0x17b0 [ 1786.416764][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1786.425137][ T31] worker_thread+0x8a0/0xda0 [ 1786.429855][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1786.442770][ T31] ? __kthread_parkme+0x7b/0x200 [ 1786.447850][ T31] kthread+0x70e/0x8a0 [ 1786.452404][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1786.457641][ T31] ? __pfx_kthread+0x10/0x10 [ 1786.462559][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1786.467877][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1786.475717][ T31] ? __pfx_kthread+0x10/0x10 [ 1786.480426][ T31] ret_from_fork+0x3fc/0x770 [ 1786.487288][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1786.495940][ T31] ? __switch_to_asm+0x39/0x70 [ 1786.500815][ T31] ? __switch_to_asm+0x33/0x70 [ 1786.516713][ T31] ? __pfx_kthread+0x10/0x10 [ 1786.526095][ T31] ret_from_fork_asm+0x1a/0x30 [ 1786.531455][ T31] [ 1786.534670][ T31] [ 1786.534670][ T31] Showing all locks held in the system: [ 1786.608121][ T31] 1 lock held by khungtaskd/31: [ 1786.616731][ T31] #0: ffffffff8e13bee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1786.627326][ T31] 2 locks held by kworker/u8:5/196: [ 1786.638370][ T31] #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1786.675254][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 1786.688610][ T31] 5 locks held by kworker/0:3/5824: [ 1786.704054][ T31] #0: ffff888143ef1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1786.719184][ T31] #1: ffffc9000408fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1786.737183][ T31] #2: ffff888144b64198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1786.751814][ T31] #3: ffff88807a64a198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 1786.766108][ T31] #4: ffff88807e5ba160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 1786.776991][ T31] 5 locks held by kworker/0:6/5954: [ 1786.786319][ T31] #0: ffff888143ef1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1786.817576][ T31] #1: ffffc90004a77bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1786.833925][ T31] #2: ffff888027f63198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1786.846472][ T31] #3: ffff88806e52d198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 1786.860383][ T31] #4: ffff888029284160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 1786.876095][ T31] 3 locks held by kworker/0:1/9064: [ 1786.881589][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1786.898068][ T31] #1: ffffc9000b197bc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1786.921342][ T31] #2: ffff88807a64a198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 1786.934211][ T31] 3 locks held by kworker/0:2/17551: [ 1786.939609][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1786.959576][ T31] #1: ffffc900043afbc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1787.015655][ T31] #2: ffff88806e52d198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 1787.025042][ T31] 2 locks held by getty/18205: [ 1787.029902][ T31] #0: ffff88814ce570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1787.040156][ T31] #1: ffffc900077432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1787.050493][ T31] 1 lock held by syz.1.2595/18813: [ 1787.055779][ T31] #0: ffffffff8e1418c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1787.066168][ T31] 1 lock held by dhcpcd-run-hook/18841: [ 1787.071895][ T31] [ 1787.074344][ T31] ============================================= [ 1787.074344][ T31] [ 1787.121437][ T31] NMI backtrace for cpu 0 [ 1787.121466][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 1787.121490][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1787.121503][ T31] Call Trace: [ 1787.121512][ T31] [ 1787.121520][ T31] dump_stack_lvl+0x189/0x250 [ 1787.121555][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1787.121578][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1787.121609][ T31] ? __pfx__printk+0x10/0x10 [ 1787.121645][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1787.121677][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1787.121701][ T31] ? _printk+0xcf/0x120 [ 1787.121728][ T31] ? __pfx__printk+0x10/0x10 [ 1787.121753][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1787.121781][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1787.121812][ T31] watchdog+0xfee/0x1030 [ 1787.121837][ T31] ? watchdog+0x1de/0x1030 [ 1787.121869][ T31] kthread+0x70e/0x8a0 [ 1787.121892][ T31] ? __pfx_watchdog+0x10/0x10 [ 1787.121914][ T31] ? __pfx_kthread+0x10/0x10 [ 1787.121944][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1787.121972][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1787.122001][ T31] ? __pfx_kthread+0x10/0x10 [ 1787.122021][ T31] ret_from_fork+0x3fc/0x770 [ 1787.122051][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1787.122091][ T31] ? __switch_to_asm+0x39/0x70 [ 1787.122110][ T31] ? __switch_to_asm+0x33/0x70 [ 1787.122129][ T31] ? __pfx_kthread+0x10/0x10 [ 1787.122150][ T31] ret_from_fork_asm+0x1a/0x30 [ 1787.122187][ T31] [ 1787.122217][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1787.280714][ C1] NMI backtrace for cpu 1 [ 1787.280731][ C1] CPU: 1 UID: 0 PID: 18835 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 1787.280752][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1787.280773][ C1] RIP: 0010:__slab_free+0x251/0x3c0 [ 1787.280798][ C1] Code: ea 48 8b 4c 24 10 4d 89 f8 e8 1b e1 ff ff 41 89 c7 e9 44 fe ff ff 48 8b 5c 24 10 4c 89 f9 4c 89 e0 4c 89 ea f0 48 0f c7 4e 20 <0f> 85 95 fe ff ff 48 85 ed 75 2c 45 85 ed 79 57 65 48 8b 05 17 9b [ 1787.280813][ C1] RSP: 0018:ffffc90011d3f490 EFLAGS: 00000242 [ 1787.280829][ C1] RAX: ffff888078b7e3c0 RBX: ffff888078b7e8c0 RCX: 00000000000c000a [ 1787.280842][ C1] RDX: 00000000000c000b RSI: ffffea0001e2df80 RDI: 0000000000000000 [ 1787.280853][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1787.280862][ C1] R10: dffffc0000000000 R11: fffffbfff1f42e87 R12: ffff888078b7e3c0 [ 1787.280875][ C1] R13: 00000000000c000b R14: ffff88801e2f98c0 R15: 00000000000c000a [ 1787.280886][ C1] FS: 00007fe90ec7ec80(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 1787.280901][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1787.280913][ C1] CR2: 0000559721962048 CR3: 0000000061d04000 CR4: 00000000003526f0 [ 1787.280932][ C1] Call Trace: [ 1787.280939][ C1] [ 1787.280948][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1787.280977][ C1] ? __phys_addr+0xd3/0x180 [ 1787.280994][ C1] qlist_free_all+0x97/0x140 [ 1787.281019][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1787.281043][ C1] __kasan_slab_alloc+0x22/0x80 [ 1787.281067][ C1] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 1787.281092][ C1] ? __d_alloc+0x36/0x7a0 [ 1787.281112][ C1] __d_alloc+0x36/0x7a0 [ 1787.281133][ C1] d_alloc_parallel+0xe5/0x15e0 [ 1787.281158][ C1] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 1787.281184][ C1] ? step_into+0x658/0xf30 [ 1787.281201][ C1] ? __lock_acquire+0xab9/0xd20 [ 1787.281221][ C1] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1787.281245][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 1787.281261][ C1] ? __init_waitqueue_head+0xa9/0x150 [ 1787.281280][ C1] __lookup_slow+0x116/0x3d0 [ 1787.281301][ C1] ? __pfx___lookup_slow+0x10/0x10 [ 1787.281329][ C1] ? down_read+0x1ad/0x2e0 [ 1787.281346][ C1] lookup_slow+0x53/0x70 [ 1787.281366][ C1] walk_component+0x2d2/0x400 [ 1787.281382][ C1] ? path_lookupat+0x156/0x430 [ 1787.281401][ C1] path_lookupat+0x163/0x430 [ 1787.281423][ C1] filename_lookup+0x212/0x570 [ 1787.281441][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1787.281463][ C1] ? getname_flags+0xb8/0x540 [ 1787.281482][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 1787.281515][ C1] ? __might_fault+0xb0/0x130 [ 1787.281544][ C1] vfs_statx+0xf8/0x550 [ 1787.281564][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1787.281579][ C1] ? strncpy_from_user+0x150/0x290 [ 1787.281600][ C1] ? getname_flags+0x1e5/0x540 [ 1787.281619][ C1] vfs_fstatat+0x118/0x170 [ 1787.281636][ C1] __x64_sys_newfstatat+0x116/0x190 [ 1787.281657][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1787.281688][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 1787.281709][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1787.281727][ C1] do_syscall_64+0xfa/0x3b0 [ 1787.281741][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1787.281765][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.281782][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1787.281801][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.281817][ C1] RIP: 0033:0x7fe90ee38b0a [ 1787.281837][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1787.281851][ C1] RSP: 002b:00007ffd166d1308 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1787.281868][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe90ee38b0a [ 1787.281879][ C1] RDX: 00007ffd166d1318 RSI: 0000559721970f58 RDI: 00000000ffffff9c [ 1787.281891][ C1] RBP: 0000559721962040 R08: 0000000000000001 R09: 3c00000040001201 [ 1787.281902][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe90efc0322 [ 1787.281913][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1787.281932][ C1] [ 1787.687005][ C1] vkms_vblank_simulate: vblank timer overrun [ 1787.803964][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1787.810859][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 1787.822163][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1787.832238][ T31] Call Trace: [ 1787.835533][ T31] [ 1787.838496][ T31] dump_stack_lvl+0x99/0x250 [ 1787.843121][ T31] ? __asan_memcpy+0x40/0x70 [ 1787.847722][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1787.852936][ T31] ? __pfx__printk+0x10/0x10 [ 1787.857544][ T31] panic+0x2db/0x790 [ 1787.861456][ T31] ? __pfx_panic+0x10/0x10 [ 1787.865885][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 1787.870676][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1787.876497][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1787.881895][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1787.888077][ T31] watchdog+0x102d/0x1030 [ 1787.892420][ T31] ? watchdog+0x1de/0x1030 [ 1787.896862][ T31] kthread+0x70e/0x8a0 [ 1787.900950][ T31] ? __pfx_watchdog+0x10/0x10 [ 1787.905643][ T31] ? __pfx_kthread+0x10/0x10 [ 1787.910241][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1787.915449][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1787.920658][ T31] ? __pfx_kthread+0x10/0x10 [ 1787.925257][ T31] ret_from_fork+0x3fc/0x770 [ 1787.929876][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1787.935008][ T31] ? __switch_to_asm+0x39/0x70 [ 1787.939792][ T31] ? __switch_to_asm+0x33/0x70 [ 1787.944562][ T31] ? __pfx_kthread+0x10/0x10 [ 1787.949161][ T31] ret_from_fork_asm+0x1a/0x30 [ 1787.953945][ T31] [ 1787.957301][ T31] Kernel Offset: disabled [ 1787.961627][ T31] Rebooting in 86400 seconds..