last executing test programs: 3m3.486866994s ago: executing program 3 (id=2268): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$FUSE_INIT(r4, 0x0, 0x0) 3m3.361484622s ago: executing program 3 (id=2270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x3, 0x100, 0x10000000, {0x3f, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff80000040, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x1000}}, 0x50) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff, 0x40, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m3.193774974s ago: executing program 3 (id=2271): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 3m2.613158968s ago: executing program 3 (id=2275): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 3m2.54473542s ago: executing program 3 (id=2276): recvmsg$unix(0xffffffffffffffff, 0x0, 0x2042) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 3m2.203543953s ago: executing program 3 (id=2278): syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x8001, 0x8, 0x2, 0x180, 0x4, 0x8, 0xf1, 0x50, 0x8007fffffffffffe, 0x5, 0xfffffffffffffffc, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m1.983137365s ago: executing program 32 (id=2278): syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x8001, 0x8, 0x2, 0x180, 0x4, 0x8, 0xf1, 0x50, 0x8007fffffffffffe, 0x5, 0xfffffffffffffffc, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m52.263531538s ago: executing program 4 (id=2351): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, 0x0, 0x0, 0x40078, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf", @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setrlimit(0x6, &(0x7f0000000180)={0x6, 0x1fffe}) dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x9) ioperm(0x0, 0x83, 0x1f) gettid() r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "ae8726ab5188a0f5067e3bd54759496126c86baf237e45829712ce015304b94835019543b83b67ddd04d71425cd7e91c2002d71e8c58555fea7b2b3e9571a19f", 0x23}, 0x48, 0xfffffffffffffffd) keyctl$clear(0x7, r7) 2m51.535212282s ago: executing program 4 (id=2353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4008090) 2m51.468821512s ago: executing program 4 (id=2354): openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 2m51.392987939s ago: executing program 4 (id=2355): syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa8086dd60"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x5, 0x80000001, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x40}, {0x2, 0x10000, 0xe, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x4000, 0x1000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0xf, 0x7, 0x0, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0xff, 0x8, 0x0, 0x4}, {0x3001, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0xeeee8000, 0x0, 0x0, 0x78, 0x5, 0x4b, 0x2, 0x0, 0x0, 0xff, 0x5}, {0xeeee8000, 0xeeee8000, 0x3, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x0, 0x0, 0x0, 0x7, 0x28, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xfdfcfffb, 0x0, 0x0, 0x100, 0x3, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@arm64={0x6, 0xd, 0x7, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m51.29248523s ago: executing program 4 (id=2358): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m50.402228994s ago: executing program 4 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0x0, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x7, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x8, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x9, 0x8, 0x0, 0xfffffffe, 0x23, 0x62, 0x3, 0x2, 0xfa56, 0xd, 0x0, 0x1, 0x3c42, 0x200, 0x2, 0xffff, 0x7, 0x3, 0x5599, 0x70c, 0x8, 0xa0d, 0x9, 0x9, 0x9, 0x6, 0x1, 0xff, 0xb, 0x1, 0x1, 0x3, 0xc, 0x5, 0x0, 0x0, 0x4, 0x4, 0x80d, 0x9, 0x2, 0xe, 0xc, 0x8000, 0x6, 0xa91, 0x1000, 0x8, 0x7, 0x9, 0x88000000, 0x6, 0x0, 0x8, 0x1ff, 0x101, 0x8, 0x0, 0x3, 0x8, 0x5, 0x1, 0x6, 0xff, 0xff, 0xdf, 0x401, 0xc, 0x3, 0x0, 0x9, 0x0, 0x490, 0x7, 0x7fffffff, 0x1, 0x5, 0x80000001, 0x1, 0x8, 0x95, 0x9b, 0x5, 0x6, 0x8, 0xfffff462, 0x8001, 0x6, 0x2, 0x5, 0x4, 0x0, 0x4, 0x9, 0x8, 0x1, 0x4, 0xfffffff9, 0x8, 0x6, 0x6, 0x0, 0x91b, 0x6, 0x46a1, 0x0, 0x6, 0x7b6, 0x80, 0x80, 0x5, 0x4, 0x10000, 0x7, 0xc, 0x1, 0x72, 0x21783f92, 0x2, 0xce, 0x8, 0x1, 0x2, 0x10000, 0x10001, 0x9, 0xd0, 0x2, 0xaaf, 0x8f, 0x6, 0x7ff, 0x8, 0x5d7, 0x9, 0x7, 0x4, 0xffffffff, 0x1, 0x7ff, 0xdff4, 0x4, 0x4, 0x4, 0x9, 0xd1ce, 0x2, 0x6, 0x9, 0x80, 0x9, 0x2, 0xfffffe00, 0xf, 0x7, 0x1, 0x2, 0xef31, 0x4, 0x5, 0xb0b6, 0x4, 0x3, 0xfffffffb, 0x838, 0x94fb, 0x2, 0x5, 0xfffffffe, 0x8, 0x5, 0x101, 0x80000001, 0xfffffff7, 0xfffffff5, 0x9, 0xfffffff7, 0x4, 0x2, 0x8, 0xb, 0x0, 0x9, 0x0, 0x6, 0xf, 0xfffffff6, 0x7, 0x80000001, 0xe91, 0x5, 0x4, 0x5, 0x2, 0x4, 0x7, 0xd, 0x10000, 0x5, 0x80000001, 0x3, 0x5, 0x9b22, 0x200, 0xfffffff7, 0x2, 0xc, 0x3, 0x4, 0x81, 0xd, 0x2, 0x6, 0x6, 0x1ff, 0x80000000, 0x9, 0x7, 0x81, 0x9, 0x9, 0x3, 0x7ff, 0x3, 0xff, 0x7, 0x3ff, 0x3, 0x5, 0xfffffffe, 0xffd, 0xff000000, 0x6, 0xb, 0x7, 0x6, 0xb342, 0xefd, 0x1000, 0xb089, 0x0, 0x10, 0x0, 0x401, 0x1, 0x6, 0x72, 0x5, 0x1, 0x9, 0x1c, 0x5, 0x5, 0x2]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m35.303753299s ago: executing program 33 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0x0, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x7, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x8, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x9, 0x8, 0x0, 0xfffffffe, 0x23, 0x62, 0x3, 0x2, 0xfa56, 0xd, 0x0, 0x1, 0x3c42, 0x200, 0x2, 0xffff, 0x7, 0x3, 0x5599, 0x70c, 0x8, 0xa0d, 0x9, 0x9, 0x9, 0x6, 0x1, 0xff, 0xb, 0x1, 0x1, 0x3, 0xc, 0x5, 0x0, 0x0, 0x4, 0x4, 0x80d, 0x9, 0x2, 0xe, 0xc, 0x8000, 0x6, 0xa91, 0x1000, 0x8, 0x7, 0x9, 0x88000000, 0x6, 0x0, 0x8, 0x1ff, 0x101, 0x8, 0x0, 0x3, 0x8, 0x5, 0x1, 0x6, 0xff, 0xff, 0xdf, 0x401, 0xc, 0x3, 0x0, 0x9, 0x0, 0x490, 0x7, 0x7fffffff, 0x1, 0x5, 0x80000001, 0x1, 0x8, 0x95, 0x9b, 0x5, 0x6, 0x8, 0xfffff462, 0x8001, 0x6, 0x2, 0x5, 0x4, 0x0, 0x4, 0x9, 0x8, 0x1, 0x4, 0xfffffff9, 0x8, 0x6, 0x6, 0x0, 0x91b, 0x6, 0x46a1, 0x0, 0x6, 0x7b6, 0x80, 0x80, 0x5, 0x4, 0x10000, 0x7, 0xc, 0x1, 0x72, 0x21783f92, 0x2, 0xce, 0x8, 0x1, 0x2, 0x10000, 0x10001, 0x9, 0xd0, 0x2, 0xaaf, 0x8f, 0x6, 0x7ff, 0x8, 0x5d7, 0x9, 0x7, 0x4, 0xffffffff, 0x1, 0x7ff, 0xdff4, 0x4, 0x4, 0x4, 0x9, 0xd1ce, 0x2, 0x6, 0x9, 0x80, 0x9, 0x2, 0xfffffe00, 0xf, 0x7, 0x1, 0x2, 0xef31, 0x4, 0x5, 0xb0b6, 0x4, 0x3, 0xfffffffb, 0x838, 0x94fb, 0x2, 0x5, 0xfffffffe, 0x8, 0x5, 0x101, 0x80000001, 0xfffffff7, 0xfffffff5, 0x9, 0xfffffff7, 0x4, 0x2, 0x8, 0xb, 0x0, 0x9, 0x0, 0x6, 0xf, 0xfffffff6, 0x7, 0x80000001, 0xe91, 0x5, 0x4, 0x5, 0x2, 0x4, 0x7, 0xd, 0x10000, 0x5, 0x80000001, 0x3, 0x5, 0x9b22, 0x200, 0xfffffff7, 0x2, 0xc, 0x3, 0x4, 0x81, 0xd, 0x2, 0x6, 0x6, 0x1ff, 0x80000000, 0x9, 0x7, 0x81, 0x9, 0x9, 0x3, 0x7ff, 0x3, 0xff, 0x7, 0x3ff, 0x3, 0x5, 0xfffffffe, 0xffd, 0xff000000, 0x6, 0xb, 0x7, 0x6, 0xb342, 0xefd, 0x1000, 0xb089, 0x0, 0x10, 0x0, 0x401, 0x1, 0x6, 0x72, 0x5, 0x1, 0x9, 0x1c, 0x5, 0x5, 0x2]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.512704571s ago: executing program 1 (id=2961): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x5, 0x0, 0x5, 0x4}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000000010073797a300000000048000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a31000000000900030073797a3000000000140000001000010000000000000000000000000a"], 0x90}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000400)="8524d5e68c5f73d7b65b2fa844745f0ba3", 0x11}], 0x1, 0x15, 0x0) sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4) lstat64(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000a00)) 11.383712832s ago: executing program 0 (id=2963): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0x8008330e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x5, 0x142, [0x0, 0x80000080, 0x800001e6, 0x800002c8], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0x50, 0x805, 'veth0_to_hsr\x00', 'veth1_vlan\x00', 'ip_vti0\x00', 'pim6reg0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, [0xff, 0xff, 0x80, 0x0, 0xff], 0x6e, 0x6e, 0xb2, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"755d5da2b8f9058f58effc00914f4c85386f28782b8d53fc45bb3a634453"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x192) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000006c0)={{@my=0x1}, @any, 0x0, 0x1, 0xa0c, 0x1, 0x4, 0x4, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7aa, &(0x7f0000000180)={{@my=0x1}}) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000000640)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/218, 0xda}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/115, 0x73}], 0x6}, 0x22) 9.513581642s ago: executing program 0 (id=2965): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0x8008330e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x5, 0x142, [0x0, 0x80000080, 0x800001e6, 0x800002c8], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0x50, 0x805, 'veth0_to_hsr\x00', 'veth1_vlan\x00', 'ip_vti0\x00', 'pim6reg0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, [0xff, 0xff, 0x80, 0x0, 0xff], 0x6e, 0x6e, 0xb2, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"755d5da2b8f9058f58effc00914f4c85386f28782b8d53fc45bb3a634453"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x192) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000006c0)={{@my=0x1}, @any, 0x0, 0x1, 0xa0c, 0x1, 0x4, 0x4, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7aa, &(0x7f0000000180)={{@my=0x1}}) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000000640)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/218, 0xda}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000004c0)=""/115, 0x73}], 0x5, &(0x7f0000000580)=""/174, 0xae}, 0x22) 9.188785537s ago: executing program 5 (id=2966): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900cca32d7361020073797a31000000000900"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000170a0102000000ddff00000000000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x90) r6 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9.176392975s ago: executing program 1 (id=2967): socket(0x40000000015, 0x5, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x800) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ftruncate(r1, 0xc17a) syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x40840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) r5 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x48, 0x40000}], 0x1, 0x6004c801) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x420502, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x2d1300, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) syz_io_uring_setup(0x9c, &(0x7f0000000640)={0x0, 0x8633, 0x800, 0x1, 0x200001be}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f00000006c0)={0x1000, "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"}) 9.165836886s ago: executing program 2 (id=2968): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0x8008330e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x5, 0x142, [0x0, 0x80000080, 0x800001e6, 0x800002c8], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0x50, 0x805, 'veth0_to_hsr\x00', 'veth1_vlan\x00', 'ip_vti0\x00', 'pim6reg0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, [0xff, 0xff, 0x80, 0x0, 0xff], 0x6e, 0x6e, 0xb2, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"755d5da2b8f9058f58effc00914f4c85386f28782b8d53fc45bb3a634453"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x192) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000006c0)={{@my=0x1}, @any, 0x0, 0x1, 0xa0c, 0x1, 0x4, 0x4, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7aa, &(0x7f0000000180)={{@my=0x1}}) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000000640)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/218, 0xda}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f0000000400)=""/179, 0xb3}], 0x4, &(0x7f0000000580)=""/174, 0xae}, 0x22) 8.227111223s ago: executing program 1 (id=2969): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x60, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x6c, @string={0x6c, 0x3, "1da481a24956e55cfd6f9711a68e8a7234e89878b704f6bb9e0ac3b8e68ff593698efd2539d923a400be54b7451ca4f8e0453d1ef962dacf869e09eb66bcc9df41a87a430450cc5dcc1d1f76add480ac97e012b1fc8e547e03ff63a01fb11c2f129109bb16491d7b7b63"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(r9) 7.832776794s ago: executing program 5 (id=2970): socket$alg(0x26, 0x5, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0x24054c40, 0x0, 0x49, 0xfba, 0x0, 0x0, 0x0, 0x10}}, 0x50) r0 = socket$inet6(0xa, 0x6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000280)={0x2, 0x2}, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) mount$cgroup2(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000300), 0x4006, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4814) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='nfs4\x00', 0x208000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) close_range(r4, r4, 0x0) shutdown(r2, 0x0) r5 = syz_io_uring_setup(0x496, 0x0, 0x0, &(0x7f0000000080)) eventfd(0x401) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10000, 0xfffffffd, 0x400002d8, 0x0, r5}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, 0x0, 0x1) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r0, 0x0) 7.811195034s ago: executing program 0 (id=2971): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x60, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x6c, @string={0x6c, 0x3, "1da481a24956e55cfd6f9711a68e8a7234e89878b704f6bb9e0ac3b8e68ff593698efd2539d923a400be54b7451ca4f8e0453d1ef962dacf869e09eb66bcc9df41a87a430450cc5dcc1d1f76add480ac97e012b1fc8e547e03ff63a01fb11c2f129109bb16491d7b7b63"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(r9) 7.403227772s ago: executing program 2 (id=2972): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r1, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @empty, 0x400}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xa90b) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r8, 0x5437, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000019080)) 7.303411604s ago: executing program 5 (id=2973): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0x8008330e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x5, 0x142, [0x0, 0x80000080, 0x800001e6, 0x800002c8], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0x50, 0x805, 'veth0_to_hsr\x00', 'veth1_vlan\x00', 'ip_vti0\x00', 'pim6reg0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, [0xff, 0xff, 0x80, 0x0, 0xff], 0x6e, 0x6e, 0xb2, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"755d5da2b8f9058f58effc00914f4c85386f28782b8d53fc45bb3a634453"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x192) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000006c0)={{@my=0x1}, @any, 0x0, 0x1, 0xa0c, 0x1, 0x4, 0x4, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7aa, &(0x7f0000000180)={{@my=0x1}}) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000000640)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/218, 0xda}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/115, 0x73}], 0x6}, 0x22) 5.900753539s ago: executing program 5 (id=2974): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 5.897812298s ago: executing program 2 (id=2982): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x2, 0x0, 0x7, 0x0, [0x0], [0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9}) 5.138892856s ago: executing program 1 (id=2975): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800201) r9 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000700)={r9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10a233e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a4791300", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020004003b3acc9f02cd3eac8be657b534bfa1142100696b29", "4921095856cdf9fd8199034f3b870104000009e3c7a181fb1c16c99189819ef4", [0x1, 0x9]}}) ioctl$LOOP_SET_DIRECT_IO(r8, 0x4c08, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 4.751566208s ago: executing program 2 (id=2976): r0 = socket$inet(0x2, 0x2, 0xfffc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000002ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @remote}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pwrite64(r4, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6ac81, 0x19d) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e21, 0x1, @local, 0x4}}}, 0x38) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x2) chmod(&(0x7f0000000040)='./file0\x00', 0x46) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5a6}, 0x1c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000040)={0x80a0000, 0x107000, 0x1}) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)={0x9, 0x6}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000d90a294c0000060000000000000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4010) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000280)=0x7, 0x4) 4.661860088s ago: executing program 0 (id=2977): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0x8008330e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x5, 0x142, [0x0, 0x80000080, 0x800001e6, 0x800002c8], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0x50, 0x805, 'veth0_to_hsr\x00', 'veth1_vlan\x00', 'ip_vti0\x00', 'pim6reg0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, [0xff, 0xff, 0x80, 0x0, 0xff], 0x6e, 0x6e, 0xb2, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"755d5da2b8f9058f58effc00914f4c85386f28782b8d53fc45bb3a634453"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x192) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000006c0)={{@my=0x1}, @any, 0x0, 0x1, 0xa0c, 0x1, 0x4, 0x4, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7aa, &(0x7f0000000180)={{@my=0x1}}) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000000640)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/218, 0xda}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000004c0)=""/115, 0x73}], 0x5, &(0x7f0000000580)=""/174, 0xae}, 0x22) 4.439953639s ago: executing program 2 (id=2978): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000000880)=""/4096, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r7, 0x29, 0x18, 0x0, &(0x7f0000000280)) 3.153486038s ago: executing program 0 (id=2979): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900cca32d7361020073797a31000000000900"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000170a0102000000ddff00000000000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x90) r6 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.153108157s ago: executing program 1 (id=2980): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x0, @default, @bpq0, 0x6, 'syz0\x00', @default, 0x0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x6f6) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 3.152846522s ago: executing program 2 (id=2981): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x8, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) syz_clone(0x14002000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff00000000000000000800120000000100000000000000000006000000000000000000000000000000000000000000000000000000009685d02e4ab16a310000000000000000000000030006000000000002000000e00000010000000000000000"], 0x80}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) 3.152533701s ago: executing program 5 (id=2983): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r3) r4 = socket(0xa, 0x5, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0105b08, 0x0) link(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fcntl$getownex(r1, 0x10, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r10, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0xffffffffffffffff}) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0xff, 0x2}, 0xac9d56f5565cd217}, 0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x4, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x38000, 0x6, 0x21}}]}]}}}]}, 0x64}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 638.983331ms ago: executing program 1 (id=2984): gettid() truncate(&(0x7f0000000000)='./file0\x00', 0x96f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x17, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc"}, 0x115) 73.36929ms ago: executing program 5 (id=2985): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80140) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20040001) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r2, r2) setpgid(0x0, r2) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(r2, 0xf, &(0x7f0000000200)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) alarm(0x8) alarm(0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 0s ago: executing program 0 (id=2986): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x60, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x6c, @string={0x6c, 0x3, "1da481a24956e55cfd6f9711a68e8a7234e89878b704f6bb9e0ac3b8e68ff593698efd2539d923a400be54b7451ca4f8e0453d1ef962dacf869e09eb66bcc9df41a87a430450cc5dcc1d1f76add480ac97e012b1fc8e547e03ff63a01fb11c2f129109bb16491d7b7b63"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(r9) kernel console output (not intermixed with test programs): pen report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 787.595660][T14872] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 787.727431][T15077] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 787.731782][T15077] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 787.736496][T15077] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 787.745861][T14872] usb 5-1: Using ep0 maxpacket: 8 [ 787.748727][T14872] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 787.751402][T14872] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 787.755470][T14872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 787.759664][T14872] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 787.763414][T14872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 787.767428][T14872] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.771562][T14872] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 787.774548][T14872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.987067][T14872] usb 5-1: usb_control_msg returned -32 [ 787.988855][T14872] usbtmc 5-1:16.0: can't read capabilities [ 788.385431][ C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 788.389646][T15088] usbtmc 5-1:16.0: Unable to send data, error -71 [ 788.407384][T15088] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 788.516688][ T6010] usb 5-1: USB disconnect, device number 27 [ 788.926497][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'. [ 788.950717][T14872] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 788.967613][T14872] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 789.007084][ T5955] Bluetooth: hci4: sending frame failed (-49) [ 789.013567][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 789.158579][T15104] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 789.161467][T15104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 789.164262][T15104] IPv6: NLM_F_CREATE should be set when creating new route [ 789.166843][T15104] IPv6: NLM_F_CREATE should be set when creating new route [ 789.280875][T15111] ªªªªªª speed is unknown, defaulting to 1000 [ 789.368412][T15108] ceph: No mds server is up or the cluster is laggy [ 789.520404][T15111] wg2 speed is unknown, defaulting to 1000 [ 789.559816][T15126] ªªªªªª speed is unknown, defaulting to 1000 [ 789.972341][T15126] wg2 speed is unknown, defaulting to 1000 [ 790.060213][T15141] ªªªªªª speed is unknown, defaulting to 1000 [ 790.173887][T15141] wg2 speed is unknown, defaulting to 1000 [ 791.183637][T15158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1947'. [ 792.161271][T15167] ceph: No mds server is up or the cluster is laggy [ 792.739905][T15191] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 792.743446][T15191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 792.751479][T15191] vhci_hcd vhci_hcd.0: Device attached [ 792.765749][T15191] random: crng reseeded on system resumption [ 793.012132][T15208] syzkaller1: entered promiscuous mode [ 793.014405][T15208] syzkaller1: entered allmulticast mode [ 793.015686][T11601] usb 42-1: SetAddress Request (37) to port 0 [ 793.019110][T11601] usb 42-1: new SuperSpeed USB device number 37 using vhci_hcd [ 793.772774][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 793.930747][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.934927][ T24] usb 6-1: config 0 has no interfaces? [ 793.937840][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.952330][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.960533][ T24] usb 6-1: config 0 descriptor?? [ 794.159297][T15238] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 794.162218][T15238] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 794.165801][T15238] vhci_hcd vhci_hcd.0: Device attached [ 794.446628][ T24] usb 44-1: SetAddress Request (17) to port 0 [ 794.448689][ T24] usb 44-1: new SuperSpeed USB device number 17 using vhci_hcd [ 794.552646][ T40] audit: type=1800 audit(794.437:374): pid=15246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1978" name="bus" dev="overlay" ino=2679 res=0 errno=0 [ 794.925767][T15193] vhci_hcd: connection reset by peer [ 794.935919][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 794.937716][ T1142] vhci_hcd vhci_hcd.2: release socket [ 794.946546][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 795.735794][T15262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 795.738696][T15262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 795.753664][T15262] vhci_hcd vhci_hcd.0: Device attached [ 795.793494][T15262] random: crng reseeded on system resumption [ 796.212937][T15263] vhci_hcd: connection closed [ 796.225822][T12475] vhci_hcd vhci_hcd.2: stop threads [ 796.229714][T12475] vhci_hcd vhci_hcd.2: release socket [ 796.232780][T12475] vhci_hcd vhci_hcd.2: disconnect device [ 796.443142][T15239] vhci_hcd: connection reset by peer [ 796.446103][T12475] vhci_hcd vhci_hcd.3: stop threads [ 796.448335][T12475] vhci_hcd vhci_hcd.3: release socket [ 796.455678][T12475] vhci_hcd vhci_hcd.3: disconnect device [ 796.546235][ T6162] usb 6-1: USB disconnect, device number 24 [ 797.005707][ T6162] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 797.157941][ T6162] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 797.166136][ T6162] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 797.175159][ T6162] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 797.178897][ T6162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.186308][T15282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 797.193098][ T6162] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 797.568203][ T6162] usb 6-1: USB disconnect, device number 25 [ 798.085908][T11601] usb 42-1: device descriptor read/8, error -110 [ 798.486813][T11601] usb usb42-port1: attempt power cycle [ 798.516858][T15346] ªªªªªª speed is unknown, defaulting to 1000 [ 798.600627][T15346] wg2 speed is unknown, defaulting to 1000 [ 799.046281][T11601] usb usb42-port1: unable to enumerate USB device [ 799.450741][T15361] ntfs3(nullb0): Primary boot signature is not NTFS. [ 799.453888][T15361] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 799.535687][ T24] usb 44-1: device descriptor read/8, error -110 [ 799.537059][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 799.946158][ T24] usb usb44-port1: attempt power cycle [ 800.324849][T15369] ªªªªªª speed is unknown, defaulting to 1000 [ 800.519414][T15369] wg2 speed is unknown, defaulting to 1000 [ 800.536204][ T24] usb usb44-port1: unable to enumerate USB device [ 800.811835][T15373] KVM: debugfs: duplicate directory 15373-4 [ 802.260428][T15419] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 802.263146][T15419] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 802.266500][T15419] vhci_hcd vhci_hcd.0: Device attached [ 802.277080][T15419] random: crng reseeded on system resumption [ 802.557739][T14872] usb 42-1: SetAddress Request (41) to port 0 [ 802.560804][T14872] usb 42-1: new SuperSpeed USB device number 41 using vhci_hcd [ 802.835190][T15422] vhci_hcd: connection reset by peer [ 802.837530][T10770] vhci_hcd vhci_hcd.2: stop threads [ 802.839176][T10770] vhci_hcd vhci_hcd.2: release socket [ 802.841087][T10770] vhci_hcd vhci_hcd.2: disconnect device [ 803.294728][T15434] netlink: 'syz.0.2044': attribute type 6 has an invalid length. [ 803.299099][T15434] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2044'. [ 803.303113][T15434] block nbd0: not configured, cannot reconfigure [ 803.809744][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 804.000740][T15462] ªªªªªª speed is unknown, defaulting to 1000 [ 804.139038][T15462] wg2 speed is unknown, defaulting to 1000 [ 804.533542][T15472] ªªªªªª speed is unknown, defaulting to 1000 [ 804.698494][T15472] wg2 speed is unknown, defaulting to 1000 [ 805.123558][T15483] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 805.126424][T15483] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 805.132087][T15483] vhci_hcd vhci_hcd.0: Device attached [ 805.144164][T15483] random: crng reseeded on system resumption [ 805.405729][ T34] usb 40-1: SetAddress Request (42) to port 0 [ 805.408056][ T34] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 805.735634][T15484] vhci_hcd: connection reset by peer [ 805.737844][T10543] vhci_hcd vhci_hcd.1: stop threads [ 805.739630][T10543] vhci_hcd vhci_hcd.1: release socket [ 805.741669][T10543] vhci_hcd vhci_hcd.1: disconnect device [ 805.771498][T15492] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 805.774141][T15492] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2060'. [ 805.780238][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2060'. [ 806.583003][T15500] syz.3.2063: page allocation failure: order:9, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 806.589844][T15500] CPU: 0 UID: 0 PID: 15500 Comm: syz.3.2063 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.589862][T15500] Tainted: [L]=SOFTLOCKUP [ 806.589866][T15500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 806.589873][T15500] Call Trace: [ 806.589877][T15500] [ 806.589882][T15500] dump_stack_lvl+0x16c/0x1f0 [ 806.589924][T15500] warn_alloc+0x248/0x3a0 [ 806.589939][T15500] ? __pfx_warn_alloc+0x10/0x10 [ 806.589951][T15500] ? psi_memstall_leave+0x1e6/0x2d0 [ 806.589967][T15500] ? __alloc_pages_direct_compact+0x466/0x580 [ 806.589981][T15500] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 806.589995][T15500] ? psi_memstall_leave+0x1e6/0x2d0 [ 806.590012][T15500] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 806.590030][T15500] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 806.590051][T15500] ? netlink_unicast+0x5aa/0x870 [ 806.590067][T15500] ? netlink_sendmsg+0x8c8/0xdd0 [ 806.590082][T15500] ? ____sys_sendmsg+0xa5d/0xc30 [ 806.590092][T15500] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 806.590105][T15500] ? do_fast_syscall_32+0x32/0x80 [ 806.590125][T15500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 806.590142][T15500] ? policy_nodemask+0xea/0x4e0 [ 806.590160][T15500] alloc_pages_mpol+0x1fb/0x550 [ 806.590177][T15500] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 806.590196][T15500] ___kmalloc_large_node+0x10c/0x150 [ 806.590207][T15500] __kmalloc_large_node_noprof+0x1c/0x70 [ 806.590217][T15500] ? tcf_exts_validate_ex+0x30f/0x550 [ 806.590229][T15500] __kmalloc_noprof.cold+0xc/0x62 [ 806.590244][T15500] ? tcf_em_tree_validate+0x1c8/0xd60 [ 806.590260][T15500] ? tcf_em_tree_validate+0x1c8/0xd60 [ 806.590274][T15500] tcf_em_tree_validate+0x1c8/0xd60 [ 806.590289][T15500] ? basic_change+0x303/0x11f0 [ 806.590304][T15500] ? __pfx_tcf_em_tree_validate+0x10/0x10 [ 806.590320][T15500] ? tcf_exts_validate+0x42/0x60 [ 806.590333][T15500] basic_change+0x3a5/0x11f0 [ 806.590350][T15500] ? __pfx_basic_change+0x10/0x10 [ 806.590371][T15500] ? __pfx_basic_change+0x10/0x10 [ 806.590384][T15500] tc_new_tfilter+0xa35/0x2340 [ 806.590408][T15500] ? __pfx_tc_new_tfilter+0x10/0x10 [ 806.590422][T15500] ? kmem_cache_free+0x2d8/0x770 [ 806.590439][T15500] ? __lock_acquire+0x436/0x2890 [ 806.590456][T15500] ? find_held_lock+0x2b/0x80 [ 806.590469][T15500] ? __pfx_tc_new_tfilter+0x10/0x10 [ 806.590483][T15500] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 806.590498][T15500] ? __pfx_tc_new_tfilter+0x10/0x10 [ 806.590531][T15500] rtnetlink_rcv_msg+0x95e/0xe90 [ 806.590550][T15500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 806.590570][T15500] ? ref_tracker_free+0x37c/0x830 [ 806.590586][T15500] netlink_rcv_skb+0x158/0x420 [ 806.590602][T15500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 806.590619][T15500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 806.590646][T15500] ? netlink_deliver_tap+0x1ae/0xd30 [ 806.590665][T15500] netlink_unicast+0x5aa/0x870 [ 806.590684][T15500] ? __pfx_netlink_unicast+0x10/0x10 [ 806.590700][T15500] ? __pfx___might_resched+0x10/0x10 [ 806.590721][T15500] netlink_sendmsg+0x8c8/0xdd0 [ 806.590739][T15500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.590757][T15500] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 806.590779][T15500] ____sys_sendmsg+0xa5d/0xc30 [ 806.590790][T15500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.590799][T15500] ? get_compat_msghdr+0x11a/0x170 [ 806.590816][T15500] ? __pfx_futex_wake_mark+0x10/0x10 [ 806.590832][T15500] ___sys_sendmsg+0x134/0x1d0 [ 806.590847][T15500] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.590860][T15500] ? futex_private_hash_put+0x160/0x1b0 [ 806.590877][T15500] ? find_held_lock+0x2b/0x80 [ 806.590900][T15500] __sys_sendmsg+0x16d/0x220 [ 806.590914][T15500] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.590928][T15500] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 806.590949][T15500] __do_fast_syscall_32+0xe8/0x680 [ 806.590961][T15500] do_fast_syscall_32+0x32/0x80 [ 806.590971][T15500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.590984][T15500] RIP: 0023:0xf7f04579 [ 806.590993][T15500] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 806.591004][T15500] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 806.591013][T15500] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 806.591020][T15500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 806.591026][T15500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 806.591031][T15500] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 806.591037][T15500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 806.591051][T15500] [ 806.591116][T15500] Mem-Info: [ 806.754189][T15500] active_anon:824 inactive_anon:1414 isolated_anon:0 [ 806.754189][T15500] active_file:867 inactive_file:1772 isolated_file:0 [ 806.754189][T15500] unevictable:1768 dirty:41 writeback:0 [ 806.754189][T15500] slab_reclaimable:6385 slab_unreclaimable:70382 [ 806.754189][T15500] mapped:24259 shmem:1768 pagetables:1477 [ 806.754189][T15500] sec_pagetables:350 bounce:0 [ 806.754189][T15500] kernel_misc_reclaimable:0 [ 806.754189][T15500] free:44211 free_pcp:257 free_cma:0 [ 806.768113][T15500] Node 0 active_anon:308kB inactive_anon:348kB active_file:0kB inactive_file:596kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:332kB dirty:24kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8796kB pagetables:1452kB sec_pagetables:1136kB all_unreclaimable? no Balloon:0kB [ 806.777896][T15500] Node 1 active_anon:3488kB inactive_anon:4708kB active_file:3168kB inactive_file:6324kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96604kB dirty:140kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5460kB pagetables:4456kB sec_pagetables:264kB all_unreclaimable? no Balloon:0kB [ 806.787776][T15500] Node 0 DMA free:2096kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:24kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 806.797585][T15500] lowmem_reserve[]: 0 289 289 289 289 [ 806.799368][T15500] Node 0 DMA32 free:20196kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:104KB active_anon:128kB inactive_anon:424kB active_file:0kB inactive_file:232kB unevictable:3536kB writepending:24kB zspages:684kB present:1032196kB managed:296808kB mlocked:0kB bounce:0kB free_pcp:708kB local_pcp:0kB free_cma:0kB [ 806.809547][T15500] lowmem_reserve[]: 0 0 0 0 0 [ 806.811112][T15500] Node 1 DMA32 free:154452kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3488kB inactive_anon:4708kB active_file:3168kB inactive_file:6324kB unevictable:3536kB writepending:40kB zspages:6388kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1120kB local_pcp:0kB free_cma:0kB [ 806.821471][T15500] lowmem_reserve[]: 0 0 0 0 0 [ 806.823127][T15500] Node 0 DMA: 24*4kB (UM) 4*8kB (M) 5*16kB (M) 7*32kB (UM) 6*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2096kB [ 806.827760][T15500] Node 0 DMA32: 451*4kB (UEH) 188*8kB (UMEH) 132*16kB (UMH) 77*32kB (UM) 85*64kB (UMH) 32*128kB (UM) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19980kB [ 806.832869][T15500] Node 1 DMA32: 1850*4kB (UME) 1573*8kB (UME) 1677*16kB (UME) 382*32kB (UME) 251*64kB (UME) 224*128kB (UME) 127*256kB (UME) 30*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 154720kB [ 806.838532][T15500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.841536][T15500] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 806.844506][T15500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.847516][T15500] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 806.850431][T15500] 4962 total pagecache pages [ 806.851942][T15500] 698 pages in swap cache [ 806.853391][T15500] Free swap = 91420kB [ 806.854721][T15500] Total swap = 124996kB [ 806.856144][T15500] 524155 pages RAM [ 806.857386][T15500] 0 pages HighMem/MovableOnly [ 806.858979][T15500] 209060 pages reserved [ 806.860365][T15500] 0 pages cma reserved [ 807.176626][T15518] bond3: option arp_validate: invalid value (2048) [ 807.180029][T15518] bond3 (unregistering): Released all slaves [ 807.413707][T15529] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 807.416421][T15529] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2071'. [ 807.419811][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 807.556233][ T77] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 807.608371][T14872] usb 42-1: device descriptor read/8, error -110 [ 807.705765][ T77] usb 7-1: Using ep0 maxpacket: 32 [ 807.709393][ T77] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 807.712922][ T77] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 807.726027][ T77] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 807.728953][ T77] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 807.732046][ T77] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 807.735202][ T77] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 807.745822][ T77] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 807.748748][ T77] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.756117][ T77] usb 7-1: config 0 descriptor?? [ 807.789111][T15535] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 807.791627][T15535] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 807.796110][T15535] vhci_hcd vhci_hcd.0: Device attached [ 807.805848][T15535] random: crng reseeded on system resumption [ 807.967809][ T77] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 807.981549][ T77] usb 7-1: USB disconnect, device number 31 [ 807.987971][ T77] usblp0: removed [ 808.006229][T14872] usb usb42-port1: attempt power cycle [ 808.011169][T15541] ntfs3(nullb0): Primary boot signature is not NTFS. [ 808.013818][T15541] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 808.085688][T14897] usb 38-1: SetAddress Request (5) to port 0 [ 808.087672][T14897] usb 38-1: new SuperSpeed USB device number 5 using vhci_hcd [ 808.448086][T15536] vhci_hcd: connection reset by peer [ 808.450374][ T9926] vhci_hcd vhci_hcd.0: stop threads [ 808.452132][ T9926] vhci_hcd vhci_hcd.0: release socket [ 808.454032][ T9926] vhci_hcd vhci_hcd.0: disconnect device [ 808.465852][T11601] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 808.495643][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 808.596121][T14872] usb usb42-port1: unable to enumerate USB device [ 808.615630][T11601] usb 7-1: Using ep0 maxpacket: 32 [ 808.619454][T11601] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 808.623221][T11601] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 808.627260][T11601] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 808.631091][T11601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 808.635691][T11601] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 808.639658][T11601] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 808.645063][T11601] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 808.649364][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 808.651660][T11601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.656684][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 808.660728][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 808.664800][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 808.670525][T11601] usb 7-1: config 0 descriptor?? [ 808.680822][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 808.684945][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 808.690753][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.811723][T15547] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 808.886195][T11601] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 808.908623][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 808.910403][ T24] usbtmc 6-1:16.0: can't read capabilities [ 809.115424][ T24] usb 6-1: USB disconnect, device number 27 [ 809.168995][T11601] usb 7-1: USB disconnect, device number 32 [ 809.181927][T11601] usblp0: removed [ 809.227942][T15555] bond4: option arp_validate: invalid value (2048) [ 809.231288][T15555] bond4 (unregistering): Released all slaves [ 809.519892][T15570] ntfs3(nullb0): Primary boot signature is not NTFS. [ 809.522682][T15570] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 809.666499][T15571] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 809.727047][T15571] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2084'. [ 809.798649][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 810.305902][T15591] ªªªªªª speed is unknown, defaulting to 1000 [ 810.442208][T15598] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 810.445091][T15598] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 810.448958][T15598] vhci_hcd vhci_hcd.0: Device attached [ 810.485771][ T34] usb 40-1: device descriptor read/8, error -110 [ 810.503679][T15591] wg2 speed is unknown, defaulting to 1000 [ 811.007441][ T34] usb usb40-port1: attempt power cycle [ 811.040605][T15599] vhci_hcd: connection closed [ 811.040874][T10454] vhci_hcd vhci_hcd.0: stop threads [ 811.044168][T10454] vhci_hcd vhci_hcd.0: release socket [ 811.046165][T10454] vhci_hcd vhci_hcd.0: disconnect device [ 811.586497][ T34] usb usb40-port1: unable to enumerate USB device [ 812.774495][T15654] ªªªªªª speed is unknown, defaulting to 1000 [ 812.928480][T15654] wg2 speed is unknown, defaulting to 1000 [ 813.125731][T14897] usb 38-1: device descriptor read/8, error -110 [ 813.288327][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.317389][T15664] binder: 15662:15664 ioctl c0306201 80000640 returned -22 [ 813.517123][T14897] usb usb38-port1: attempt power cycle [ 813.695075][T15677] overlayfs: invalid redirect (./file0) [ 814.079404][T14897] usb usb38-port1: unable to enumerate USB device [ 814.308614][T15696] loop6: detected capacity change from 0 to 2640 [ 814.311360][T14325] buffer_io_error: 56 callbacks suppressed [ 814.311370][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.316120][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.318731][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.321285][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.323830][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.328190][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.332059][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.334612][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.338623][T14325] ldm_validate_partition_table(): Disk read failed. [ 814.340818][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.343328][T14325] Buffer I/O error on dev loop6, logical block 0, async page read [ 814.346262][T14325] Dev loop6: unable to read RDB block 0 [ 814.348122][T14325] loop6: unable to read partition table [ 814.350656][T15696] ldm_validate_partition_table(): Disk read failed. [ 814.354371][T15696] Dev loop6: unable to read RDB block 0 [ 814.356364][T15696] loop6: unable to read partition table [ 814.358750][T15696] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 814.380536][ T5350] ldm_validate_partition_table(): Disk read failed. [ 814.382972][ T5350] Dev loop6: unable to read RDB block 0 [ 814.385473][ T5350] loop6: unable to read partition table [ 814.813311][T15709] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 814.815320][T15709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 814.819024][T15709] vhci_hcd vhci_hcd.0: Device attached [ 814.826454][T15709] random: crng reseeded on system resumption [ 815.098772][T11601] usb 42-1: SetAddress Request (45) to port 0 [ 815.100805][T11601] usb 42-1: new SuperSpeed USB device number 45 using vhci_hcd [ 815.163321][T15718] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 815.167211][T15718] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 815.446653][T15710] vhci_hcd: connection reset by peer [ 815.448704][T12475] vhci_hcd vhci_hcd.2: stop threads [ 815.450681][T12475] vhci_hcd vhci_hcd.2: release socket [ 815.452576][T12475] vhci_hcd vhci_hcd.2: disconnect device [ 816.124824][T15724] syzkaller0: entered promiscuous mode [ 816.127995][T15724] syzkaller0: entered allmulticast mode [ 816.356665][T15742] syzkaller0: entered promiscuous mode [ 816.359131][T15742] syzkaller0: entered allmulticast mode [ 816.381870][T15747] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 816.384025][T15747] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 816.402818][T15747] vhci_hcd vhci_hcd.0: Device attached [ 816.420118][T15747] random: crng reseeded on system resumption [ 816.705703][T14018] usb 38-1: SetAddress Request (9) to port 0 [ 816.708060][T14018] usb 38-1: new SuperSpeed USB device number 9 using vhci_hcd [ 817.877537][T15748] vhci_hcd: connection reset by peer [ 817.883179][T12475] vhci_hcd vhci_hcd.0: stop threads [ 817.884892][T12475] vhci_hcd vhci_hcd.0: release socket [ 817.886767][T12475] vhci_hcd vhci_hcd.0: disconnect device [ 818.233868][T15754] ntfs3(nullb0): Primary boot signature is not NTFS. [ 818.236835][T15754] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 818.998962][T15766] ªªªªªª speed is unknown, defaulting to 1000 [ 819.073409][T15766] wg2 speed is unknown, defaulting to 1000 [ 819.207295][ T40] audit: type=1326 audit(819.087:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.1.2149" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x0 [ 819.210790][T15777] ªªªªªª speed is unknown, defaulting to 1000 [ 819.300299][T15780] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 819.304124][T15780] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2152'. [ 819.326849][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2152'. [ 819.358844][T15777] wg2 speed is unknown, defaulting to 1000 [ 819.925773][T14897] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 820.075635][T14897] usb 7-1: Using ep0 maxpacket: 32 [ 820.079082][T14897] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 820.082765][T14897] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 820.087962][T14897] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 820.091822][T14897] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 820.101922][T14897] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 820.105138][T14897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.108075][T14897] usb 7-1: Product: syz [ 820.109654][T14897] usb 7-1: Manufacturer: syz [ 820.111330][T14897] usb 7-1: SerialNumber: syz [ 820.118969][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 820.126455][T14897] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input37 [ 820.165797][T11601] usb 42-1: device descriptor read/8, error -110 [ 820.171893][T15798] ntfs3(nullb0): Primary boot signature is not NTFS. [ 820.227545][T15798] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 820.355670][T14897] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 820.359208][T14897] (id 0x00) [ 820.465927][T14897] rc_core: IR keymap rc-imon-pad not found [ 820.468363][T14897] Registered IR keymap rc-empty [ 820.470433][T14897] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 820.474675][T14897] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 820.559717][T14897] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 820.564714][T14897] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input38 [ 820.571318][T11601] usb usb42-port1: attempt power cycle [ 820.578354][T14897] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:33> initialized [ 820.810347][ T24] usb 7-1: USB disconnect, device number 33 [ 821.136445][T11601] usb usb42-port1: unable to enumerate USB device [ 821.219506][T15811] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 821.222306][T15811] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 821.226238][T15811] vhci_hcd vhci_hcd.0: Device attached [ 821.244418][T15811] random: crng reseeded on system resumption [ 821.773301][T15812] vhci_hcd: connection reset by peer [ 821.775473][ T1229] vhci_hcd vhci_hcd.0: stop threads [ 821.777676][ T1229] vhci_hcd vhci_hcd.0: release socket [ 821.779631][T14018] usb 38-1: device descriptor read/8, error -110 [ 821.781820][ T1229] vhci_hcd vhci_hcd.0: disconnect device [ 822.179098][T14018] usb usb38-port1: attempt power cycle [ 822.673035][T15830] netlink: 'syz.2.2165': attribute type 1 has an invalid length. [ 822.676204][T15830] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2165'. [ 822.679342][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'. [ 822.681362][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2165'. [ 822.746356][T14018] usb usb38-port1: unable to enumerate USB device [ 823.452844][T15845] fuse: Bad value for 'fd' [ 823.502073][T15846] overlayfs: orphan index entry (index/00fb210001320e37b8537541eda7688d923921434cc4d3be068a0b000000000000, ftype=2000, nlink=1) [ 823.685402][T15862] ªªªªªª speed is unknown, defaulting to 1000 [ 824.062286][T15862] wg2 speed is unknown, defaulting to 1000 [ 824.068400][T15861] ªªªªªª speed is unknown, defaulting to 1000 [ 824.433313][T15861] wg2 speed is unknown, defaulting to 1000 [ 824.495503][T15877] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 824.497409][T15877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 824.503367][T15877] vhci_hcd vhci_hcd.0: Device attached [ 824.517350][T15877] random: crng reseeded on system resumption [ 824.775713][T11601] usb 42-1: SetAddress Request (49) to port 0 [ 824.778283][T11601] usb 42-1: new SuperSpeed USB device number 49 using vhci_hcd [ 825.056803][T15878] vhci_hcd: connection reset by peer [ 825.059627][ T75] vhci_hcd vhci_hcd.2: stop threads [ 825.061573][ T75] vhci_hcd vhci_hcd.2: release socket [ 825.063870][ T75] vhci_hcd vhci_hcd.2: disconnect device [ 826.266774][T15906] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 826.269477][T15906] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 826.273177][T15906] vhci_hcd vhci_hcd.0: Device attached [ 826.285073][T15906] random: crng reseeded on system resumption [ 826.891122][T15907] vhci_hcd: connection closed [ 826.891319][ T9926] vhci_hcd vhci_hcd.2: stop threads [ 826.895351][ T9926] vhci_hcd vhci_hcd.2: release socket [ 826.907816][ T9926] vhci_hcd vhci_hcd.2: disconnect device [ 826.973206][T15924] ªªªªªª speed is unknown, defaulting to 1000 [ 827.159286][T15924] wg2 speed is unknown, defaulting to 1000 [ 827.638209][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 828.270107][T15951] input: syz0 as /devices/virtual/input/input39 [ 829.161178][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'. [ 829.675178][T15989] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 829.677333][T15989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 829.680289][T15989] vhci_hcd vhci_hcd.0: Device attached [ 829.683597][T15989] random: crng reseeded on system resumption [ 830.023248][T16000] ntfs3(nullb0): Primary boot signature is not NTFS. [ 830.028062][T16000] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 830.205977][T16008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 830.211860][T16008] block device autoloading is deprecated and will be removed. [ 830.646794][T15990] vhci_hcd: connection reset by peer [ 830.663038][ T9926] vhci_hcd vhci_hcd.2: stop threads [ 830.665075][ T9926] vhci_hcd vhci_hcd.2: release socket [ 830.669557][T11601] usb 42-1: device descriptor read/8, error -110 [ 830.671745][ T9926] vhci_hcd vhci_hcd.2: disconnect device [ 831.053633][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2223'. [ 831.056375][T11601] usb usb42-port1: attempt power cycle [ 831.311025][T16032] ªªªªªª speed is unknown, defaulting to 1000 [ 831.575966][T16032] wg2 speed is unknown, defaulting to 1000 [ 831.656594][T11601] usb usb42-port1: unable to enumerate USB device [ 831.865826][T14897] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 832.016965][T14897] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 832.019895][T14897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.023666][T14897] usb 6-1: config 0 has no interfaces? [ 832.025477][T14897] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 832.028638][T14897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.035792][T14897] usb 6-1: config 0 descriptor?? [ 832.438871][T16059] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 832.442330][T16059] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2238'. [ 832.448013][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2238'. [ 833.345241][T14897] kernel read not supported for file /snd/controlC0 (pid: 14897 comm: kworker/3:3) [ 833.645740][T11601] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 833.796842][T11601] usb 7-1: config 0 has no interfaces? [ 833.800088][T11601] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 833.803151][T11601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.805875][T11601] usb 7-1: Product: syz [ 833.807218][T11601] usb 7-1: Manufacturer: syz [ 833.808709][T11601] usb 7-1: SerialNumber: syz [ 833.811535][T11601] usb 7-1: config 0 descriptor?? [ 834.023443][T14897] usb 7-1: USB disconnect, device number 34 [ 834.438603][T16074] ªªªªªª speed is unknown, defaulting to 1000 [ 834.545997][T11601] usb 6-1: USB disconnect, device number 28 [ 834.671844][T16074] wg2 speed is unknown, defaulting to 1000 [ 834.746664][T16085] netlink: 'syz.0.2247': attribute type 10 has an invalid length. [ 834.852472][T16085] syz_tun: entered promiscuous mode [ 835.963882][T16121] ªªªªªª speed is unknown, defaulting to 1000 [ 835.964761][T16122] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 836.155678][T16121] wg2 speed is unknown, defaulting to 1000 [ 836.275684][T16127] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 836.277814][T16127] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 836.365207][T16127] vhci_hcd vhci_hcd.0: Device attached [ 836.369212][T16131] random: crng reseeded on system resumption [ 836.625912][T14897] usb 42-1: SetAddress Request (53) to port 0 [ 836.628108][T14897] usb 42-1: new SuperSpeed USB device number 53 using vhci_hcd [ 836.843813][T16128] vhci_hcd: connection reset by peer [ 836.846610][ T1144] vhci_hcd vhci_hcd.2: stop threads [ 836.848952][ T1144] vhci_hcd vhci_hcd.2: release socket [ 836.850758][ T1144] vhci_hcd vhci_hcd.2: disconnect device [ 837.511801][T16135] loop6: detected capacity change from 0 to 2640 [ 837.518998][T16135] buffer_io_error: 43 callbacks suppressed [ 837.519009][T16135] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.531964][T16135] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.534751][T16135] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.542299][T16135] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.545232][T16135] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.548069][T16135] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.550775][T16135] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.553540][T16135] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.556703][T16135] ldm_validate_partition_table(): Disk read failed. [ 837.556847][T16136] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.561966][T16135] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.566333][T16135] Dev loop6: unable to read RDB block 0 [ 837.582689][T16135] loop6: unable to read partition table [ 837.585967][T16135] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 838.051947][T16150] syzkaller0: entered promiscuous mode [ 838.055677][T16150] syzkaller0: entered allmulticast mode [ 838.393270][ T40] audit: type=1800 audit(838.277:376): pid=16159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2273" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=55925 res=0 errno=0 [ 839.180612][T16169] ªªªªªª speed is unknown, defaulting to 1000 [ 839.427888][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 839.433742][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 839.441330][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 839.451764][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 839.463727][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 839.545740][T11601] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 839.594415][T16169] wg2 speed is unknown, defaulting to 1000 [ 839.597915][T16176] ªªªªªª speed is unknown, defaulting to 1000 [ 839.719488][T11601] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 839.729481][T11601] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.733283][T11601] usb 6-1: config 0 has no interfaces? [ 839.737123][T11601] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 839.742023][T11601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.762307][T11601] usb 6-1: config 0 descriptor?? [ 839.806625][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 839.811601][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 839.815502][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 839.842355][T16176] wg2 speed is unknown, defaulting to 1000 [ 840.204032][T12475] team0: Port device geneve0 removed [ 840.267255][T12475] bond0 (unregistering): Released all slaves [ 840.368747][T12475] bond1 (unregistering): (slave veth3): Releasing active interface [ 840.378160][T12475] bond1 (unregistering): Released all slaves [ 840.508391][T12475] bond2 (unregistering): (slave veth5): Releasing active interface [ 840.513379][T12475] bond2 (unregistering): Released all slaves [ 840.624544][T12475] bond3 (unregistering): (slave veth7): Releasing active interface [ 840.630207][T12475] bond3 (unregistering): Released all slaves [ 840.803372][T16176] chnl_net:caif_netlink_parms(): no params data found [ 840.888500][T16176] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.891153][T16176] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.893750][T16176] bridge_slave_0: entered allmulticast mode [ 840.897277][T16176] bridge_slave_0: entered promiscuous mode [ 840.900525][T16176] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.903113][T16176] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.905659][T16176] bridge_slave_1: entered allmulticast mode [ 840.908650][T16176] bridge_slave_1: entered promiscuous mode [ 840.925382][T16176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.930655][T16176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.949569][T16176] team0: Port device team_slave_0 added [ 840.953465][T16176] team0: Port device team_slave_1 added [ 840.967355][T16176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.969646][T16176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.978407][T16176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.982941][T16176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.985198][T16176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.993602][T16176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.029229][T16176] hsr_slave_0: entered promiscuous mode [ 841.031602][T16176] hsr_slave_1: entered promiscuous mode [ 841.033781][T16176] debugfs: 'hsr0' already exists in 'hsr' [ 841.035859][T16176] Cannot create hsr debugfs directory [ 841.144602][T16176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 841.149724][T16176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 841.154265][T16176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 841.163358][T16176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 841.180466][T16176] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.182969][T16176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.185381][T16176] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.187721][T16176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.222250][T16176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.237906][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.241341][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.267339][T16176] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.277388][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.279786][ T9926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.288299][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.291481][ T9926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.455408][T16176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.525726][ T5955] Bluetooth: hci3: command tx timeout [ 841.639509][T16176] veth0_vlan: entered promiscuous mode [ 841.645486][T16176] veth1_vlan: entered promiscuous mode [ 841.664108][T16176] veth0_macvtap: entered promiscuous mode [ 841.669588][T16176] veth1_macvtap: entered promiscuous mode [ 841.682556][T16176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.685841][T14897] usb 42-1: device descriptor read/8, error -110 [ 841.697062][T16176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.707451][T10454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.711526][T10454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.717246][T10454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.723241][T10454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.921156][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.924548][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.958967][T10454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.962724][T10454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.076934][T14897] usb usb42-port1: attempt power cycle [ 842.226952][ T34] usb 6-1: USB disconnect, device number 29 [ 842.286281][T12475] tipc: Left network mode [ 842.289504][T16270] netlink: 'syz.4.2293': attribute type 39 has an invalid length. [ 842.636451][T14897] usb usb42-port1: unable to enumerate USB device [ 842.653860][T16289] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 842.656188][T16289] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 842.662693][T16289] vhci_hcd vhci_hcd.0: Device attached [ 842.676109][T16289] random: crng reseeded on system resumption [ 842.929779][ T24] usb 40-1: SetAddress Request (46) to port 0 [ 842.937877][ T24] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 843.028630][T12475] hsr_slave_0: left promiscuous mode [ 843.031916][T12475] hsr_slave_1: left promiscuous mode [ 843.168246][T16290] vhci_hcd: connection reset by peer [ 843.171294][ T1144] vhci_hcd vhci_hcd.1: stop threads [ 843.173610][ T1144] vhci_hcd vhci_hcd.1: release socket [ 843.176116][ T1144] vhci_hcd vhci_hcd.1: disconnect device [ 843.605689][ T5955] Bluetooth: hci3: command tx timeout [ 844.063407][T16323] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 844.065706][T16323] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 844.069100][T16323] vhci_hcd vhci_hcd.0: Device attached [ 844.076370][T16323] random: crng reseeded on system resumption [ 844.283584][T10770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.287064][T10770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.474351][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 844.485311][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 844.500798][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 844.508442][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 844.524120][T16342] Set syz1 is full, maxelem 2 reached [ 844.539635][T12475] IPVS: stop unused estimator thread 0... [ 844.747712][T16324] vhci_hcd: connection closed [ 844.747966][ T1144] vhci_hcd vhci_hcd.1: stop threads [ 844.753232][ T1144] vhci_hcd vhci_hcd.1: release socket [ 844.755109][ T1144] vhci_hcd vhci_hcd.1: disconnect device [ 844.896880][T16351] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 844.898987][T16351] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 844.922642][T16351] vhci_hcd vhci_hcd.0: Device attached [ 844.936431][T16351] random: crng reseeded on system resumption [ 845.225763][T14897] usb 46-1: SetAddress Request (2) to port 0 [ 845.226434][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2320'. [ 845.229824][T14897] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 845.508599][T16352] vhci_hcd: connection reset by peer [ 845.510983][T11185] vhci_hcd vhci_hcd.4: stop threads [ 845.513045][T11185] vhci_hcd vhci_hcd.4: release socket [ 845.516640][T11185] vhci_hcd vhci_hcd.4: disconnect device [ 845.685703][ T5955] Bluetooth: hci3: command tx timeout [ 845.750938][T16364] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 845.922722][T16374] ntfs3(nullb0): Primary boot signature is not NTFS. [ 845.925651][T16374] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 846.727096][T16382] kvm: emulating exchange as write [ 846.879133][T16391] Bluetooth: (null): Invalid header checksum [ 846.955169][T16399] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 846.957944][T16399] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 846.978389][T16399] vhci_hcd vhci_hcd.0: Device attached [ 847.039535][T16409] random: crng reseeded on system resumption [ 847.058374][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.061541][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.346676][T16420] ntfs3(nullb0): Primary boot signature is not NTFS. [ 847.349419][T16420] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 847.765663][ T5955] Bluetooth: hci3: command tx timeout [ 847.932734][T16426] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 847.934839][T16426] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 847.969096][T16426] vhci_hcd vhci_hcd.0: Device attached [ 847.986187][T16400] vhci_hcd: connection closed [ 847.992112][ T75] vhci_hcd vhci_hcd.1: stop threads [ 848.006920][ T75] vhci_hcd vhci_hcd.1: release socket [ 848.009279][ T24] usb 40-1: device descriptor read/8, error -110 [ 848.011367][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 848.165948][T16427] vhci_hcd: connection closed [ 848.166614][ T1229] vhci_hcd vhci_hcd.4: stop threads [ 848.169995][ T1229] vhci_hcd vhci_hcd.4: release socket [ 848.175719][ T1229] vhci_hcd vhci_hcd.4: disconnect device [ 848.284386][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 848.396140][ T24] usb usb40-port1: attempt power cycle [ 848.802175][T16459] syzkaller0: entered promiscuous mode [ 848.804593][T16459] syzkaller0: entered allmulticast mode [ 848.956503][ T24] usb usb40-port1: unable to enumerate USB device [ 849.037871][T16464] ntfs3(nullb0): Primary boot signature is not NTFS. [ 849.041051][T16464] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 849.734067][T16469] tipc: Started in network mode [ 849.736298][T16469] tipc: Node identity , cluster identity 4711 [ 849.738285][T16469] tipc: Failed to obtain node identity [ 849.740075][T16469] tipc: Enabling of bearer rejected, failed to enable media [ 849.826913][T16471] binder: 16470:16471 ioctl c0306201 80000640 returned -22 [ 849.903932][T16473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 850.325748][T14897] usb 46-1: device descriptor read/8, error -110 [ 850.716962][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2362'. [ 850.717988][T14897] usb usb46-port1: attempt power cycle [ 851.155976][T16527] overlayfs: failed to clone upperpath [ 851.276344][T14897] usb usb46-port1: unable to enumerate USB device [ 851.353205][T16532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2379'. [ 851.705388][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'. [ 851.974110][T16558] fuse: Bad value for 'fd' [ 853.343973][T16609] binder: 16608:16609 unknown command 0 [ 853.355768][T16609] binder: 16608:16609 ioctl c0306201 80004a40 returned -22 [ 853.879148][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'. [ 853.980535][T16626] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 853.982641][T16626] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 853.991056][T16626] vhci_hcd vhci_hcd.0: Device attached [ 854.010486][T16626] random: crng reseeded on system resumption [ 854.255700][T14897] usb 40-1: SetAddress Request (50) to port 0 [ 854.257730][T14897] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 854.305859][T16630] fuse: Bad value for 'fd' [ 854.423288][T16636] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2404'. [ 854.568160][T16627] vhci_hcd: connection reset by peer [ 854.570833][T10543] vhci_hcd vhci_hcd.1: stop threads [ 854.573090][T10543] vhci_hcd vhci_hcd.1: release socket [ 854.577306][T10543] vhci_hcd vhci_hcd.1: disconnect device [ 855.362512][T16663] ªªªªªª speed is unknown, defaulting to 1000 [ 855.467052][T16663] wg2 speed is unknown, defaulting to 1000 [ 855.643306][T16673] overlayfs: failed to clone upperpath [ 855.791547][T16676] binder_alloc: 16675: pid 16675 spamming oneway? 1 buffers allocated for a total size of 4096 [ 855.873172][T16681] syz_tun: entered allmulticast mode [ 855.882594][T16679] syz_tun: left allmulticast mode [ 856.166735][ T34] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 856.325714][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 856.328807][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 856.333785][ T34] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 856.337123][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.340011][ T34] usb 6-1: Product: syz [ 856.341954][ T34] usb 6-1: Manufacturer: syz [ 856.343593][ T34] usb 6-1: SerialNumber: syz [ 856.347930][ T34] usb 6-1: config 0 descriptor?? [ 856.352314][ T34] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 856.355833][ T34] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 856.964667][ T34] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 857.379868][ T34] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 857.386503][ T34] em28xx 6-1:0.0: board has no eeprom [ 857.573601][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 857.578647][T16712] overlayfs: failed to clone upperpath [ 858.408632][T16686] em28xx 6-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 858.475650][ T34] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 858.478320][ T34] em28xx 6-1:0.0: dvb set to bulk mode. [ 858.480991][ T77] em28xx 6-1:0.0: Binding DVB extension [ 858.496852][ T34] usb 6-1: USB disconnect, device number 30 [ 858.500257][ T34] em28xx 6-1:0.0: Disconnecting em28xx [ 858.557369][ T77] em28xx 6-1:0.0: Registering input extension [ 858.560862][ T34] em28xx 6-1:0.0: Closing input extension [ 858.612276][ T34] em28xx 6-1:0.0: Freeing device [ 858.661011][T16735] fuse: Bad value for 'fd' [ 858.956361][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 859.001923][T16745] overlayfs: failed to clone upperpath [ 859.286350][T14897] usb 40-1: device descriptor read/8, error -110 [ 859.409655][T10454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.412971][T10454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.690105][T14897] usb usb40-port1: attempt power cycle [ 860.042079][T16774] tipc: Enabling of bearer rejected, failed to enable media [ 860.246329][T14897] usb usb40-port1: unable to enumerate USB device [ 860.295725][T11601] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 860.445671][T11601] usb 6-1: Using ep0 maxpacket: 16 [ 860.449848][T11601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 860.455303][T11601] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 860.458529][T11601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.461339][T11601] usb 6-1: Product: syz [ 860.462765][T11601] usb 6-1: Manufacturer: syz [ 860.464456][T11601] usb 6-1: SerialNumber: syz [ 860.468414][T11601] usb 6-1: config 0 descriptor?? [ 860.477802][T11601] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 860.480751][T11601] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 860.845961][T16795] syz_tun: entered allmulticast mode [ 860.852438][T16794] syz_tun: left allmulticast mode [ 860.941632][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'. [ 860.949342][T16799] overlayfs: failed to clone upperpath [ 861.093366][T11601] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 861.561880][T11601] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 861.564476][T11601] em28xx 6-1:0.0: board has no eeprom [ 861.895633][T11601] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 861.898407][T11601] em28xx 6-1:0.0: dvb set to bulk mode. [ 861.900717][ T24] em28xx 6-1:0.0: Binding DVB extension [ 861.928278][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'. [ 862.530060][ T40] audit: type=1326 audit(862.417:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.0.2462" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x0 [ 863.048728][T16778] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 863.056095][T11577] usb 6-1: USB disconnect, device number 31 [ 863.059637][T11577] em28xx 6-1:0.0: Disconnecting em28xx [ 863.091331][ T24] em28xx 6-1:0.0: Registering input extension [ 863.094491][T11577] em28xx 6-1:0.0: Closing input extension [ 863.109943][T11577] em28xx 6-1:0.0: Freeing device [ 863.722951][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2471'. [ 863.977243][T11577] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 864.145603][T11577] usb 6-1: Using ep0 maxpacket: 16 [ 864.150758][T11577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 864.160015][T11577] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 864.162874][T11577] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.165459][T11577] usb 6-1: Product: syz [ 864.173780][T11577] usb 6-1: Manufacturer: syz [ 864.177031][T11577] usb 6-1: SerialNumber: syz [ 864.184414][T11577] usb 6-1: config 0 descriptor?? [ 864.192315][T11577] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 864.199852][T11577] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 864.799393][T11577] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 865.215745][T11577] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 865.219030][T11577] em28xx 6-1:0.0: board has no eeprom [ 865.295764][T11577] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 865.305713][T11577] em28xx 6-1:0.0: dvb set to bulk mode. [ 865.308173][ T6010] em28xx 6-1:0.0: Binding DVB extension [ 865.311898][T11577] usb 6-1: USB disconnect, device number 32 [ 865.314469][T11577] em28xx 6-1:0.0: Disconnecting em28xx [ 865.351432][ T6010] em28xx 6-1:0.0: Registering input extension [ 865.353758][T11577] em28xx 6-1:0.0: Closing input extension [ 865.362757][T11577] em28xx 6-1:0.0: Freeing device [ 865.695029][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'. [ 866.071387][ T5947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 866.088946][ T5947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 866.093817][ T5947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 866.105655][ T5947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 866.113819][ T5947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 866.227256][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.263722][T16906] ªªªªªª speed is unknown, defaulting to 1000 [ 866.359983][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.468063][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.577438][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.652537][T16906] wg2 speed is unknown, defaulting to 1000 [ 866.828673][ T75] bridge_slave_1: left allmulticast mode [ 866.836841][ T75] bridge_slave_1: left promiscuous mode [ 866.843921][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.870463][ T75] bridge_slave_0: left allmulticast mode [ 866.876237][ T75] bridge_slave_0: left promiscuous mode [ 866.884559][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.283187][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.290418][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.294275][ T75] bond0 (unregistering): Released all slaves [ 867.613857][T16906] chnl_net:caif_netlink_parms(): no params data found [ 867.759012][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'. [ 867.861341][T16906] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.866242][T16906] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.875890][T16906] bridge_slave_0: entered allmulticast mode [ 867.881996][T16906] bridge_slave_0: entered promiscuous mode [ 867.898088][T16906] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.905007][T16906] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.924909][T16906] bridge_slave_1: entered allmulticast mode [ 867.987982][T16906] bridge_slave_1: entered promiscuous mode [ 868.138019][T16906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.160465][T16906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.245635][ T5955] Bluetooth: hci4: command tx timeout [ 868.245780][ T75] hsr_slave_0: left promiscuous mode [ 868.260808][ T75] hsr_slave_1: left promiscuous mode [ 868.266021][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.268408][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.283900][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.289381][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.322376][ T75] veth1_macvtap: left promiscuous mode [ 868.324381][ T75] veth0_macvtap: left promiscuous mode [ 868.335190][ T75] veth1_vlan: left promiscuous mode [ 868.346057][ T75] veth0_vlan: left promiscuous mode [ 869.049010][ T75] team0 (unregistering): Port device team_slave_1 removed [ 869.086734][ T75] team0 (unregistering): Port device team_slave_0 removed [ 869.499064][T16906] team0: Port device team_slave_0 added [ 869.511238][T16906] team0: Port device team_slave_1 added [ 869.537912][T16906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.541312][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.549805][T16906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.554202][T16906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.557806][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.566677][T16906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.608068][T16906] hsr_slave_0: entered promiscuous mode [ 869.610847][T16906] hsr_slave_1: entered promiscuous mode [ 869.613079][T16906] debugfs: 'hsr0' already exists in 'hsr' [ 869.614920][T16906] Cannot create hsr debugfs directory [ 869.702144][T17008] syzkaller0: entered promiscuous mode [ 869.704011][T17008] syzkaller0: entered allmulticast mode [ 870.082985][T16906] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 870.122148][T16906] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 870.327277][ T5955] Bluetooth: hci4: command tx timeout [ 870.436589][T16906] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 870.580384][T16906] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 870.589202][T17026] ªªªªªª speed is unknown, defaulting to 1000 [ 871.148250][T17026] wg2 speed is unknown, defaulting to 1000 [ 871.238485][T16906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.263996][T16906] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.283713][T11185] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.286629][T11185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.303861][T11185] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.306864][T11185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.553451][T16906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.740389][T16906] veth0_vlan: entered promiscuous mode [ 871.749659][T16906] veth1_vlan: entered promiscuous mode [ 871.772012][T16906] veth0_macvtap: entered promiscuous mode [ 871.776477][T16906] veth1_macvtap: entered promiscuous mode [ 871.790435][T16906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.798996][T16906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.807507][ T1142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.810834][ T1142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.814534][ T1142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.818018][ T1142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.392029][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.395239][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.473949][T10454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.477653][T10454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.485687][ T5955] Bluetooth: hci4: command tx timeout [ 872.582919][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2511'. [ 872.919158][T17072] syzkaller0: entered promiscuous mode [ 872.921532][T17072] syzkaller0: entered allmulticast mode [ 873.252091][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2516'. [ 873.332944][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.338357][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.341501][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.344625][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.349169][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.352257][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.355078][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.358528][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.361513][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.364342][T17092] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 873.874552][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2526'. [ 874.055952][T17125] ntfs3(nullb0): Primary boot signature is not NTFS. [ 874.060411][T17125] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 874.601313][ T5955] Bluetooth: hci4: command tx timeout [ 874.739077][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.907986][T17129] tipc: Enabling of bearer rejected, failed to enable media [ 875.145023][T17149] tipc: Started in network mode [ 875.146805][T17149] tipc: Node identity 5eaabc48611d, cluster identity 4711 [ 875.149146][T17149] tipc: Enabled bearer , priority 0 [ 875.152132][T17149] syzkaller0: entered promiscuous mode [ 875.154033][T17149] syzkaller0: entered allmulticast mode [ 875.187761][T17149] tipc: Resetting bearer [ 875.194412][T17148] tipc: Resetting bearer [ 875.218366][T17148] tipc: Disabling bearer [ 875.715801][T14897] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 875.867781][ T1142] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.871597][ T1142] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.874800][ T1142] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.877984][ T1142] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.887123][T14897] usb 10-1: Using ep0 maxpacket: 8 [ 875.891116][T14897] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.894852][T14897] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.899981][T14897] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 875.904010][T14897] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 875.909944][T14897] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.913483][T14897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.917192][T14897] usb 10-1: Product: syz [ 875.919104][T14897] usb 10-1: Manufacturer: syz [ 875.921193][T14897] usb 10-1: SerialNumber: syz [ 876.228361][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'. [ 876.974992][T14897] cdc_ncm 10-1:1.0: bind() failure [ 876.985974][T14897] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 876.992209][T14897] cdc_ncm 10-1:1.1: bind() failure [ 877.027653][T14897] usb 10-1: USB disconnect, device number 2 [ 877.158087][T17197] tipc: Enabling of bearer rejected, failed to enable media [ 877.159260][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'. [ 877.312034][T17201] vxcan1: entered promiscuous mode [ 877.981682][T17232] tipc: Enabling of bearer rejected, failed to enable media [ 878.040486][T17236] tipc: Enabling of bearer rejected, failed to enable media [ 878.601313][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'. [ 878.701005][T17267] syzkaller0: entered promiscuous mode [ 878.702885][T17267] syzkaller0: entered allmulticast mode [ 878.819227][T17268] ªªªªªª speed is unknown, defaulting to 1000 [ 879.076155][T17268] wg2 speed is unknown, defaulting to 1000 [ 879.144216][T17275] tipc: Enabling of bearer rejected, failed to enable media [ 879.323988][T17284] tipc: Enabling of bearer rejected, failed to enable media [ 879.425471][T17291] ªªªªªª speed is unknown, defaulting to 1000 [ 879.569992][T17291] wg2 speed is unknown, defaulting to 1000 [ 880.988899][T17313] ªªªªªª speed is unknown, defaulting to 1000 [ 881.202893][T17313] wg2 speed is unknown, defaulting to 1000 [ 883.617443][T17374] ªªªªªª speed is unknown, defaulting to 1000 [ 883.729687][T17374] wg2 speed is unknown, defaulting to 1000 [ 884.021253][T17382] ªªªªªª speed is unknown, defaulting to 1000 [ 884.139709][T17390] syzkaller0: entered promiscuous mode [ 884.143560][T17390] syzkaller0: entered allmulticast mode [ 884.664774][T17382] wg2 speed is unknown, defaulting to 1000 [ 885.170941][T17403] ntfs3(nullb0): Primary boot signature is not NTFS. [ 885.176139][T17403] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 885.978390][T17411] (syz.5.2602,17411,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 885.981346][T17411] (syz.5.2602,17411,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 887.338307][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 887.525683][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 887.552955][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 887.561945][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 887.575642][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 887.580192][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.585507][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 887.599393][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.851504][ T10] usb 10-1: GET_CAPABILITIES returned 0 [ 887.854115][ T10] usbtmc 10-1:16.0: can't read capabilities [ 888.057493][ T10] usb 10-1: USB disconnect, device number 3 [ 890.825751][T17458] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 890.828417][T17458] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 890.835697][T17458] vhci_hcd vhci_hcd.0: Device attached [ 890.847394][T17447] random: crng reseeded on system resumption [ 891.078129][T17459] vhci_hcd: connection closed [ 891.078389][T11185] vhci_hcd vhci_hcd.5: stop threads [ 891.082858][T11185] vhci_hcd vhci_hcd.5: release socket [ 891.085217][T11185] vhci_hcd vhci_hcd.5: disconnect device [ 891.115890][ T34] usb 48-1: enqueue for inactive port 0 [ 891.578993][T17470] nbd: couldn't find a device at index 2147483646 [ 891.626419][ T34] usb usb48-port1: attempt power cycle [ 892.212102][ T34] usb usb48-port1: unable to enumerate USB device [ 892.693284][T17483] netlink: 492 bytes leftover after parsing attributes in process `syz.2.2620'. [ 893.243540][ T40] audit: type=1326 audit(893.127:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.268186][ T40] audit: type=1326 audit(893.127:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.289277][ T40] audit: type=1326 audit(893.127:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.301486][ T40] audit: type=1326 audit(893.137:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.313297][ T40] audit: type=1326 audit(893.177:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.323625][ T40] audit: type=1326 audit(893.177:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.333186][ T40] audit: type=1326 audit(893.177:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.356928][ T40] audit: type=1326 audit(893.177:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.385030][ T40] audit: type=1326 audit(893.177:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.411176][ T40] audit: type=1326 audit(893.177:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.2.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 893.898481][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2625'. [ 894.326767][ T6162] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 910.606338][T17540] ªªªªªª speed is unknown, defaulting to 1000 [ 910.676513][T17543] 0x000000002f70-0x000000020000 : "" [ 910.710083][T17543] ftl_cs: FTL header corrupt! [ 910.829615][T17540] wg2 speed is unknown, defaulting to 1000 [ 911.038504][T17565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2629'. [ 911.068031][T17564] fuse: Bad value for 'fd' [ 911.079238][T17554] ªªªªªª speed is unknown, defaulting to 1000 [ 911.546535][T17554] wg2 speed is unknown, defaulting to 1000 [ 912.072200][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 912.532983][T17588] validate_nla: 37 callbacks suppressed [ 912.532995][T17588] netlink: 'syz.0.2642': attribute type 10 has an invalid length. [ 912.641038][T17592] fuse: Bad value for 'fd' [ 913.386717][T17607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 914.171427][T17626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 914.802462][T17631] ªªªªªª speed is unknown, defaulting to 1000 [ 915.043395][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 915.059903][T17637] overlayfs: failed to clone upperpath [ 915.088034][T17631] wg2 speed is unknown, defaulting to 1000 [ 915.476650][T17642] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 915.478818][T17642] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.481602][T17642] vhci_hcd vhci_hcd.0: Device attached [ 915.498106][T17642] random: crng reseeded on system resumption [ 915.765770][ T24] usb 48-1: SetAddress Request (6) to port 0 [ 915.769502][ T24] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 916.188072][T17643] vhci_hcd: connection reset by peer [ 916.190129][T11185] vhci_hcd vhci_hcd.5: stop threads [ 916.191940][T11185] vhci_hcd vhci_hcd.5: release socket [ 916.193773][T11185] vhci_hcd vhci_hcd.5: disconnect device [ 917.570125][T17658] netlink: 'syz.5.2657': attribute type 1 has an invalid length. [ 917.573181][T17658] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2657'. [ 917.633899][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2657'. [ 918.683834][T17678] netlink: 'syz.5.2663': attribute type 4 has an invalid length. [ 918.691880][T17678] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2663'. [ 918.707670][T17678] .`: renamed from bond0 (while UP) [ 919.124071][T17686] can0: slcan on ttyS3. [ 919.186644][T17686] can0 (unregistered): slcan off ttyS3. [ 920.166272][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 920.166321][ T40] audit: type=1326 audit(920.037:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.287320][ T40] audit: type=1326 audit(920.037:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.378060][ T40] audit: type=1326 audit(920.047:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.478887][ T40] audit: type=1326 audit(920.047:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.582083][ T40] audit: type=1326 audit(920.047:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.596141][ T40] audit: type=1326 audit(920.047:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.608957][ T40] audit: type=1326 audit(920.047:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.623015][ T40] audit: type=1326 audit(920.047:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.635976][ T40] audit: type=1326 audit(920.047:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.649263][ T40] audit: type=1326 audit(920.047:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17701 comm="syz.2.2668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 920.805766][ T24] usb 48-1: device descriptor read/8, error -110 [ 920.828234][T17712] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 920.830447][T17712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 920.833124][T17712] vhci_hcd vhci_hcd.0: Device attached [ 920.940867][T17715] vhci_hcd: connection closed [ 920.956480][ T1229] vhci_hcd vhci_hcd.5: stop threads [ 920.959690][ T1229] vhci_hcd vhci_hcd.5: release socket [ 920.975641][ T1229] vhci_hcd vhci_hcd.5: disconnect device [ 921.206589][ T24] usb usb48-port1: attempt power cycle [ 921.246016][T17728] fuse: Bad value for 'fd' [ 921.384020][T17730] fuse: Bad value for 'fd' [ 921.780814][ T24] usb usb48-port1: unable to enumerate USB device [ 924.020063][T17785] siw: device registration error -23 [ 924.232399][T17786] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2691'. [ 924.612830][T17791] ªªªªªª speed is unknown, defaulting to 1000 [ 925.301156][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 925.301175][ T40] audit: type=1326 audit(925.087:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.313356][ T40] audit: type=1326 audit(925.087:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.321620][ T40] audit: type=1326 audit(925.097:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.328703][ T40] audit: type=1326 audit(925.097:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.335420][ T40] audit: type=1326 audit(925.097:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.346197][ T40] audit: type=1326 audit(925.107:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.354166][ T40] audit: type=1326 audit(925.117:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.362090][ T40] audit: type=1326 audit(925.117:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.369989][ T40] audit: type=1326 audit(925.117:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.377145][ T40] audit: type=1326 audit(925.117:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17800 comm="syz.5.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 925.406220][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 925.477639][T17791] wg2 speed is unknown, defaulting to 1000 [ 925.810109][T17818] capability: warning: `syz.5.2698' uses 32-bit capabilities (legacy support in use) [ 926.121470][T17824] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 926.124345][T17824] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 926.127872][T17824] vhci_hcd vhci_hcd.0: Device attached [ 926.406808][ T6162] usb 48-1: SetAddress Request (10) to port 0 [ 926.412140][ T6162] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 926.835934][T17825] vhci_hcd: connection reset by peer [ 926.838129][T10543] vhci_hcd vhci_hcd.5: stop threads [ 926.839812][T10543] vhci_hcd vhci_hcd.5: release socket [ 926.843253][T10543] vhci_hcd vhci_hcd.5: disconnect device [ 927.810290][T17864] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 927.812432][T17864] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 927.815286][T17864] vhci_hcd vhci_hcd.0: Device attached [ 927.829517][T17864] random: crng reseeded on system resumption [ 928.519785][T17865] vhci_hcd: connection closed [ 928.521383][T12475] vhci_hcd vhci_hcd.5: stop threads [ 928.525045][T12475] vhci_hcd vhci_hcd.5: release socket [ 928.527642][T12475] vhci_hcd vhci_hcd.5: disconnect device [ 929.653131][T17882] af_packet: tpacket_rcv: packet too big, clamped from 4047 to 3956. macoff=92 [ 931.940146][ T6162] usb 48-1: device descriptor read/8, error -110 [ 932.326094][ T6162] usb usb48-port1: attempt power cycle [ 932.926135][ T6162] usb usb48-port1: unable to enumerate USB device [ 933.030446][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 933.030457][ T40] audit: type=1326 audit(932.917:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 933.051261][ T40] audit: type=1326 audit(932.917:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 933.135594][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2718'. [ 933.143402][T17918] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2718'. [ 933.215774][ T40] audit: type=1326 audit(932.927:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 933.222531][ T40] audit: type=1326 audit(932.927:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 933.230510][ T40] audit: type=1326 audit(932.927:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 933.237290][ T40] audit: type=1326 audit(932.927:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 933.243955][ T40] audit: type=1326 audit(932.927:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 933.250775][ T40] audit: type=1326 audit(932.927:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 933.257470][ T40] audit: type=1326 audit(932.927:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 933.263888][ T40] audit: type=1326 audit(932.927:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17909 comm="syz.2.2717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 934.425344][T11577] ªªªªªª speed is unknown, defaulting to 1000 [ 934.425816][T10543] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.427773][T11577] sz1: Port: 1 Link DOWN [ 934.432123][T10543] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.434784][T10543] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.443876][T10543] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.451723][T11577] ªªªªªª speed is unknown, defaulting to 1000 [ 935.367831][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 935.375112][T17955] syz_tun: entered allmulticast mode [ 935.392864][T17955] dvmrp6: entered allmulticast mode [ 935.422239][T17956] netlink: 'syz.5.2730': attribute type 10 has an invalid length. [ 935.427010][T17956] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.430731][T17956] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.473110][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.476475][T17956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.479947][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.483316][T17956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.489747][T17956] .`: (slave bridge0): Enslaving as an active interface with an up link [ 935.626504][T17961] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2732'. [ 936.169794][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.272683][T17967] netlink: 'syz.2.2734': attribute type 25 has an invalid length. [ 936.349940][T17952] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 937.702033][T17984] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2740'. [ 937.955279][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2743'. [ 937.961771][T17996] overlayfs: failed to clone upperpath [ 938.854999][T18005] tipc: Started in network mode [ 938.857456][T18005] tipc: Node identity 84e, cluster identity 4711 [ 938.860220][T18005] tipc: Node number set to 2126 [ 939.933358][T18032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2754'. [ 940.220091][T18038] rdma_rxe: rxe_newlink: failed to add wg2 [ 941.062637][T18058] ªªªªªª speed is unknown, defaulting to 1000 [ 941.295121][T18058] wg2 speed is unknown, defaulting to 1000 [ 942.524447][T18075] fuse: Unknown parameter '0x0000000000000004' [ 942.611441][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 942.611453][ T40] audit: type=1326 audit(942.497:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18076 comm="syz.2.2765" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x0 [ 944.183340][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'. [ 944.243999][T18093] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 944.246162][T18093] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 944.252993][T18093] vhci_hcd vhci_hcd.0: Device attached [ 944.258326][T18093] random: crng reseeded on system resumption [ 944.531037][ T6162] usb 48-1: SetAddress Request (14) to port 0 [ 944.533734][ T6162] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 944.652292][T18104] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 944.714669][T18094] vhci_hcd: connection reset by peer [ 944.719203][T11185] vhci_hcd vhci_hcd.5: stop threads [ 944.721529][T11185] vhci_hcd vhci_hcd.5: release socket [ 944.724169][T11185] vhci_hcd vhci_hcd.5: disconnect device [ 944.928531][T18110] overlayfs: failed to clone upperpath [ 945.418127][T18113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.117340][T18124] ªªªªªª speed is unknown, defaulting to 1000 [ 946.357221][T18124] wg2 speed is unknown, defaulting to 1000 [ 946.795912][ T6016] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 946.965628][ T6016] usb 10-1: Using ep0 maxpacket: 32 [ 946.970200][ T6016] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 946.974041][ T6016] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 946.986158][ T6016] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 946.993070][ T6016] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 947.003699][ T6016] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 947.013228][ T6016] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 947.024481][ T6016] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 947.032806][ T6016] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.044478][ T6016] usb 10-1: config 0 descriptor?? [ 947.268470][ T6016] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 947.307221][ T6016] usb 10-1: USB disconnect, device number 4 [ 947.320033][ T6016] usblp0: removed [ 947.668265][T18146] ªªªªªª speed is unknown, defaulting to 1000 [ 947.855663][ T6016] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 947.973255][T18146] wg2 speed is unknown, defaulting to 1000 [ 948.005683][ T6016] usb 10-1: Using ep0 maxpacket: 32 [ 948.028522][ T6016] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 948.036593][ T6016] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 948.045260][ T6016] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 948.054437][ T6016] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 948.063156][ T6016] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 948.073509][ T6016] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 948.092226][ T6016] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 948.103484][ T6016] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.116427][ T6016] usb 10-1: config 0 descriptor?? [ 948.336820][ T6016] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 948.543125][ T6016] usb 10-1: USB disconnect, device number 5 [ 948.554972][ T6016] usblp0: removed [ 949.751798][T18166] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 949.774133][ T6162] usb 48-1: device descriptor read/8, error -110 [ 950.209613][ T40] audit: type=1326 audit(950.097:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.218665][ T40] audit: type=1326 audit(950.107:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.228354][ T40] audit: type=1326 audit(950.117:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.235259][ T40] audit: type=1326 audit(950.117:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.244728][ T40] audit: type=1326 audit(950.127:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.258139][ T40] audit: type=1326 audit(950.127:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.267303][ T40] audit: type=1326 audit(950.127:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.274454][ T40] audit: type=1326 audit(950.127:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.284505][ T40] audit: type=1326 audit(950.127:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.293196][ T40] audit: type=1326 audit(950.137:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18171 comm="syz.5.2791" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 950.307493][T18175] pim6reg: entered allmulticast mode [ 950.386832][ T6162] usb usb48-port1: attempt power cycle [ 950.956318][ T6162] usb usb48-port1: unable to enumerate USB device [ 950.970085][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2793'. [ 951.201338][T18193] ªªªªªª speed is unknown, defaulting to 1000 [ 951.741704][T18193] wg2 speed is unknown, defaulting to 1000 [ 953.776945][T18208] fuse: Unknown parameter '0x0000000000000004' [ 953.967581][T18212] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2801'. [ 953.971472][T18212] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2801'. [ 953.989449][T18210] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2800'. [ 953.995824][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2800'. [ 954.009401][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2800'. [ 956.822225][T18247] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 956.824702][T18247] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 956.836327][T18247] vhci_hcd vhci_hcd.0: Device attached [ 956.843738][T18247] random: crng reseeded on system resumption [ 957.105643][ T24] usb 48-1: SetAddress Request (18) to port 0 [ 957.107757][ T24] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 957.412115][T18248] vhci_hcd: connection reset by peer [ 957.423613][ T9765] vhci_hcd vhci_hcd.5: stop threads [ 957.425357][ T9765] vhci_hcd vhci_hcd.5: release socket [ 957.427468][ T9765] vhci_hcd vhci_hcd.5: disconnect device [ 958.484808][T18271] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 958.487003][T18271] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 958.490955][T18271] vhci_hcd vhci_hcd.0: Device attached [ 958.505380][T18271] ieee802154 phy1 wpan1: encryption failed: -22 [ 959.022400][T18272] vhci_hcd: connection closed [ 959.022973][ T75] vhci_hcd vhci_hcd.5: stop threads [ 959.026492][ T75] vhci_hcd vhci_hcd.5: release socket [ 959.028629][ T75] vhci_hcd vhci_hcd.5: disconnect device [ 961.025961][T18307] netlink: 'syz.1.2820': attribute type 3 has an invalid length. [ 961.240969][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 961.254774][T18304] bridge_slave_1: left allmulticast mode [ 961.257074][T18304] bridge_slave_1: left promiscuous mode [ 961.260107][T18304] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.594325][T18304] bridge_slave_0: left allmulticast mode [ 961.615681][T18304] bridge_slave_0: left promiscuous mode [ 961.617913][T18304] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.724895][T18304] .`: (slave bridge0): Releasing backup interface [ 961.828592][ T9765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.831328][ T9765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.951184][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2823'. [ 961.995634][T18333] overlayfs: failed to clone upperpath [ 962.178580][ T24] usb 48-1: device descriptor read/8, error -110 [ 962.314513][T18345] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 962.317329][T18345] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 962.321219][T18345] vhci_hcd vhci_hcd.0: Device attached [ 962.328749][T18345] random: crng reseeded on system resumption [ 962.425693][ T24] usb 48-1: SetAddress Request (19) to port 0 [ 962.429615][ T24] usb 48-1: new SuperSpeed USB device number 19 using vhci_hcd [ 962.652000][T18351] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 962.764382][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2828'. [ 962.932492][T18346] vhci_hcd: connection reset by peer [ 962.942769][T12475] vhci_hcd vhci_hcd.5: stop threads [ 962.946467][T12475] vhci_hcd vhci_hcd.5: release socket [ 962.952821][T12475] vhci_hcd vhci_hcd.5: disconnect device [ 964.013655][T18373] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 964.016004][T18373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 964.027412][T18373] vhci_hcd vhci_hcd.0: Device attached [ 964.700589][T18374] vhci_hcd: connection closed [ 964.701255][ T1142] vhci_hcd vhci_hcd.5: stop threads [ 964.704487][ T1142] vhci_hcd vhci_hcd.5: release socket [ 964.707169][ T1142] vhci_hcd vhci_hcd.5: disconnect device [ 965.176408][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'. [ 965.207179][T18390] overlayfs: failed to clone upperpath [ 965.399709][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2837'. [ 965.891210][T18404] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 965.893969][T18404] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 965.906188][T18404] vhci_hcd vhci_hcd.0: Device attached [ 965.918988][T18404] random: crng reseeded on system resumption [ 965.969708][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 965.969726][ T40] audit: type=1800 audit(2000000011.199:582): pid=18408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2839" name="nullb0" dev="tmpfs" ino=4002 res=0 errno=0 [ 966.530371][T18406] vhci_hcd: connection closed [ 966.530637][ T1144] vhci_hcd vhci_hcd.5: stop threads [ 966.534678][ T1144] vhci_hcd vhci_hcd.5: release socket [ 966.536966][ T1144] vhci_hcd vhci_hcd.5: disconnect device [ 966.843548][T18421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.526140][ T24] usb 48-1: device descriptor read/8, error -110 [ 967.596897][T18429] ªªªªªª speed is unknown, defaulting to 1000 [ 967.668503][ T24] usb usb48-port1: attempt power cycle [ 967.915684][T18429] wg2 speed is unknown, defaulting to 1000 [ 968.041404][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2847'. [ 968.048808][T18441] overlayfs: failed to clone upperpath [ 968.227179][ T24] usb usb48-port1: unable to enumerate USB device [ 968.544654][T18451] IPVS: Unknown mcast interface: vcan0 [ 969.129870][T18462] Cannot find del_set index 1 as target [ 969.247461][T18457] ªªªªªª speed is unknown, defaulting to 1000 [ 969.362657][T18457] wg2 speed is unknown, defaulting to 1000 [ 969.844780][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2854'. [ 970.375716][ T40] audit: type=1800 audit(2000000015.599:583): pid=18473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2857" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 970.834471][T18489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2858'. [ 971.078356][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2859'. [ 971.488705][T18499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 973.290423][T18516] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 973.293378][T18516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 973.297240][T18516] vhci_hcd vhci_hcd.0: Device attached [ 973.304030][T18516] random: crng reseeded on system resumption [ 973.565737][ T6162] usb 48-1: SetAddress Request (22) to port 0 [ 973.568191][ T6162] usb 48-1: new SuperSpeed USB device number 22 using vhci_hcd [ 973.873807][T18527] 9p: Bad value for 'rfdno' [ 973.947005][T18517] vhci_hcd: connection reset by peer [ 973.952098][ T1142] vhci_hcd vhci_hcd.5: stop threads [ 973.954340][ T1142] vhci_hcd vhci_hcd.5: release socket [ 973.960348][ T1142] vhci_hcd vhci_hcd.5: disconnect device [ 975.127013][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2870'. [ 975.303933][T18542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.498033][T18549] netlink: 'syz.2.2873': attribute type 3 has an invalid length. [ 976.745166][T18555] fuse: Bad value for 'fd' [ 977.764619][T18567] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2877'. [ 977.832910][T18569] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 977.834822][T18569] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 977.843846][T18569] vhci_hcd vhci_hcd.0: Device attached [ 977.896462][T18567] overlayfs: failed to resolve './file1': -2 [ 977.968694][T18575] ªªªªªª speed is unknown, defaulting to 1000 [ 978.461490][T18571] vhci_hcd: connection closed [ 978.461688][ T63] vhci_hcd vhci_hcd.5: stop threads [ 978.466323][ T63] vhci_hcd vhci_hcd.5: release socket [ 978.471515][ T63] vhci_hcd vhci_hcd.5: disconnect device [ 978.502573][T18575] wg2 speed is unknown, defaulting to 1000 [ 978.645926][ T6162] usb 48-1: device descriptor read/8, error -110 [ 979.037106][ T6162] usb usb48-port1: attempt power cycle [ 979.616545][ T6162] usb usb48-port1: unable to enumerate USB device [ 979.950411][T18600] overlayfs: failed to clone upperpath [ 980.526378][T18609] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 980.528546][T18609] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 980.531520][T18609] vhci_hcd vhci_hcd.0: Device attached [ 980.535939][T18609] random: crng reseeded on system resumption [ 980.805741][ T77] usb 48-1: SetAddress Request (26) to port 0 [ 980.808651][ T77] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 981.195244][T18621] ªªªªªª speed is unknown, defaulting to 1000 [ 981.232134][T18610] vhci_hcd: connection reset by peer [ 981.241772][ T75] vhci_hcd vhci_hcd.5: stop threads [ 981.243544][ T75] vhci_hcd vhci_hcd.5: release socket [ 981.257056][ T75] vhci_hcd vhci_hcd.5: disconnect device [ 981.326990][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 981.356491][T18626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 981.364543][T18621] wg2 speed is unknown, defaulting to 1000 [ 981.531494][T18628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 982.271794][T18634] netlink: 'syz.2.2892': attribute type 3 has an invalid length. [ 982.277186][T18634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.532048][T18638] ubi31: detaching mtd0 [ 982.604304][T18638] ubi31: mtd0 is detached [ 983.101232][T18645] overlay: Unknown parameter '/' [ 983.164726][T18646] overlayfs: failed to clone lowerpath [ 984.204765][T18653] ªªªªªª speed is unknown, defaulting to 1000 [ 984.706203][T18653] wg2 speed is unknown, defaulting to 1000 [ 985.673104][T18678] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2898'. [ 985.845684][ T77] usb 48-1: device descriptor read/8, error -110 [ 986.246636][ T77] usb usb48-port1: attempt power cycle [ 986.437911][T18684] fuse: Unknown parameter 'max_r' [ 986.816648][ T77] usb usb48-port1: unable to enumerate USB device [ 987.726135][T18699] siw: device registration error -23 [ 989.438794][T18701] random: crng reseeded on system resumption [ 989.449678][ T5955] Bluetooth: hci4: command 0x0406 tx timeout [ 989.459619][T18686] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 989.462793][T18686] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 989.481057][T18686] vhci_hcd vhci_hcd.0: Device attached [ 989.525211][T18707] afs: Unknown parameter 'measure' [ 989.615156][T18704] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 989.745999][T18702] vhci_hcd: connection closed [ 989.746202][T10454] vhci_hcd vhci_hcd.5: stop threads [ 989.765665][T10454] vhci_hcd vhci_hcd.5: release socket [ 989.775761][ T6162] usb 48-1: SetAddress Request (30) to port 0 [ 989.778647][ T6162] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 989.785985][T10454] vhci_hcd vhci_hcd.5: disconnect device [ 989.797284][ T6162] usb 48-1: enqueue for inactive port 0 [ 990.196244][ T6162] usb usb48-port1: attempt power cycle [ 990.620966][T18726] ªªªªªª speed is unknown, defaulting to 1000 [ 990.841386][T18729] overlayfs: failed to clone lowerpath [ 990.905714][T18730] overlayfs: failed to clone upperpath [ 991.025696][ T6162] usb usb48-port1: unable to enumerate USB device [ 991.261122][T18726] wg2 speed is unknown, defaulting to 1000 [ 991.817945][T18743] fuse: Unknown parameter 'max_r' [ 992.107860][T18745] netlink: 'syz.1.2912': attribute type 32 has an invalid length. [ 992.111226][T18745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 992.241018][T18745] netlink: 'syz.1.2912': attribute type 32 has an invalid length. [ 992.500115][T18752] trusted_key: encrypted_key: insufficient parameters specified [ 993.089376][T18761] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2916'. [ 993.119219][T18761] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2916'. [ 993.426375][T18765] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 993.428399][T18765] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 993.431077][T18765] vhci_hcd vhci_hcd.0: Device attached [ 993.434270][T18765] random: crng reseeded on system resumption [ 993.695774][T14018] usb 48-1: SetAddress Request (34) to port 0 [ 993.698732][T14018] usb 48-1: new SuperSpeed USB device number 34 using vhci_hcd [ 993.815465][T18774] syz_tun: left promiscuous mode [ 993.960148][T18774] veth0_to_team: left promiscuous mode [ 994.047883][T18766] vhci_hcd: connection reset by peer [ 994.049916][T10543] vhci_hcd vhci_hcd.5: stop threads [ 994.051907][T10543] vhci_hcd vhci_hcd.5: release socket [ 994.054682][T10543] vhci_hcd vhci_hcd.5: disconnect device [ 994.192533][T18774] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 994.200937][T18774] batadv1: left allmulticast mode [ 994.269997][T18774] bridge1: left allmulticast mode [ 994.364345][ T6016] syz0: Port: 1 Link DOWN [ 994.441536][T18775] ªªªªªª speed is unknown, defaulting to 1000 [ 994.637892][T18775] wg2 speed is unknown, defaulting to 1000 [ 996.442120][T18796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.575235][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 996.578815][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 996.581932][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 996.584834][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 997.617909][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.056303][T18819] fuse: Unknown parameter 'user_id00000000000000000000' [ 998.829869][T14018] usb 48-1: device descriptor read/8, error -110 [ 998.877761][ T6135] kernel read not supported for file 326/task/327/auxv (pid: 6135 comm: kworker/1:4) [ 999.125823][ T5955] Bluetooth: hci4: command 0x0406 tx timeout [ 999.256574][T14018] usb usb48-port1: attempt power cycle [ 999.859801][T14018] usb usb48-port1: unable to enumerate USB device [ 999.925736][ T40] audit: type=1326 audit(2000000019.609:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 999.934705][ T40] audit: type=1326 audit(2000000019.609:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1000.184557][ T40] audit: type=1326 audit(2000000019.609:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1000.193438][ T40] audit: type=1326 audit(2000000019.619:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1000.200848][ T40] audit: type=1326 audit(2000000019.619:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1000.209981][ T40] audit: type=1326 audit(2000000019.619:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1000.218993][ T40] audit: type=1326 audit(2000000019.619:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1000.228289][ T40] audit: type=1326 audit(2000000019.619:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1000.237474][ T40] audit: type=1326 audit(2000000019.619:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1000.265816][ T40] audit: type=1326 audit(2000000019.619:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.2.2933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1000.591103][T18848] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1000.593323][T18848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1000.607107][T18848] vhci_hcd vhci_hcd.0: Device attached [ 1000.614670][T18848] random: crng reseeded on system resumption [ 1000.734771][T18851] ªªªªªª speed is unknown, defaulting to 1000 [ 1000.812473][T18851] wg2 speed is unknown, defaulting to 1000 [ 1000.875691][ T6162] usb 48-1: SetAddress Request (38) to port 0 [ 1000.877769][ T6162] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1001.210855][T18849] vhci_hcd: connection reset by peer [ 1001.213006][T10454] vhci_hcd vhci_hcd.5: stop threads [ 1001.215180][T10454] vhci_hcd vhci_hcd.5: release socket [ 1001.217941][T10454] vhci_hcd vhci_hcd.5: disconnect device [ 1001.360059][T18861] ªªªªªª speed is unknown, defaulting to 1000 [ 1001.568262][T18861] wg2 speed is unknown, defaulting to 1000 [ 1001.672195][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2938'. [ 1002.164984][T18873] overlayfs: failed to clone lowerpath [ 1003.113640][T18879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.121482][T18879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.261562][ T1142] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.266901][ T1142] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.273793][ T1142] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.283543][ T1142] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.797087][T18887] overlayfs: failed to resolve './file0': -2 [ 1003.885854][T18888] input: syz0 as /devices/virtual/input/input43 [ 1003.888739][T18888] input: failed to attach handler leds to device input43, error: -6 [ 1004.620263][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2944'. [ 1004.630057][T18894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2944'. [ 1004.632959][T18894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2944'. [ 1005.027299][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2945'. [ 1005.537962][T18906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2947'. [ 1006.110082][ T6162] usb 48-1: device descriptor read/8, error -110 [ 1006.179465][T18930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1006.238403][T18931] overlayfs: failed to clone upperpath [ 1006.506136][ T6162] usb usb48-port1: attempt power cycle [ 1006.740192][T18948] netlink: 'syz.0.2952': attribute type 2 has an invalid length. [ 1006.834049][T18949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.858644][T18949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.939727][T18954] ªªªªªª speed is unknown, defaulting to 1000 [ 1007.096674][ T6162] usb usb48-port1: unable to enumerate USB device [ 1007.220355][T18954] wg2 speed is unknown, defaulting to 1000 [ 1007.521549][T18944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.732144][T18970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1008.737380][T18970] ªªªªª»ƒ–´´QgNÿ: renamed from hsr0 [ 1009.083758][T18977] overlayfs: failed to clone lowerpath [ 1009.262312][T18974] overlayfs: failed to clone upperpath [ 1010.014040][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2961'. [ 1010.033124][T18989] overlayfs: failed to clone upperpath [ 1010.216673][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.223582][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.382321][T18997] siw: device registration error -23 [ 1010.394193][T18997] 9pnet_virtio: no channels available for device syz [ 1012.247979][T19010] netlink: 'syz.1.2967': attribute type 7 has an invalid length. [ 1012.586204][T19014] ubi31: attaching mtd0 [ 1012.613612][T19014] ubi31: scanning is finished [ 1012.806420][T19015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1012.837656][T19014] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1012.845181][T19014] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1012.861454][T19014] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1012.864000][T19014] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1012.880595][T19014] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1012.900339][T19014] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1012.910981][T19014] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4071690287 [ 1012.946687][T19014] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1012.976087][T19016] ubi31: background thread "ubi_bgt31d" started, PID 19016 [ 1013.198787][T19021] ªªªªªª speed is unknown, defaulting to 1000 [ 1013.351419][T19021] wg2 speed is unknown, defaulting to 1000 [ 1013.690203][T19033] ªªªªªª speed is unknown, defaulting to 1000 [ 1013.939719][T19033] wg2 speed is unknown, defaulting to 1000 [ 1013.993489][T19041] xt_bpf: check failed: parse error [ 1014.356154][T19044] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1014.358888][T19044] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1014.362142][T19044] vhci_hcd vhci_hcd.0: Device attached [ 1014.365854][T19044] random: crng reseeded on system resumption [ 1014.380474][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.383353][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.635643][ T6016] usb 48-1: SetAddress Request (42) to port 0 [ 1014.637685][ T6016] usb 48-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1014.792666][T19045] vhci_hcd: connection reset by peer [ 1014.794864][ T75] vhci_hcd vhci_hcd.5: stop threads [ 1014.797193][ T75] vhci_hcd vhci_hcd.5: release socket [ 1014.799599][ T75] vhci_hcd vhci_hcd.5: disconnect device [ 1015.890875][T19054] siw: device registration error -23 [ 1015.957488][T19054] 9pnet_virtio: no channels available for device syz [ 1016.597003][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2975'. [ 1016.601563][T19060] 9pnet_virtio: no channels available for device syz [ 1016.832359][T19067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2978'. [ 1016.836034][T19067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2978'. [ 1016.923640][T19061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.021518][T19061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1017.069961][ T6135] ªªªªªª speed is unknown, defaulting to 1000 [ 1017.074561][ T6135] sz1: Port: 1 Link ACTIVE [ 1017.098625][ T6135] ªªªªªª speed is unknown, defaulting to 1000 [ 1018.407311][ T6162] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1018.576072][ T6162] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1018.586434][ T6162] usb 10-1: config 0 has no interface number 0 [ 1018.588756][ T6162] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1018.592308][ T6162] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 1018.606711][ T6162] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1018.610648][ T6162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.627001][ T6162] usb 10-1: config 0 descriptor?? [ 1018.629610][T19080] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1018.638623][ T6162] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1018.849926][ T77] usb 10-1: USB disconnect, device number 6 [ 1018.850006][ C3] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1019.285714][ T6162] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1019.437506][ T6162] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1019.441117][ T6162] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.446441][ T6162] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1019.449508][ T6162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.644230][T19086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2979'. [ 1019.664528][ T6162] usb 10-1: usb_control_msg returned -32 [ 1019.666457][ T6162] usbtmc 10-1:16.0: can't read capabilities [ 1019.685958][ T6016] usb 48-1: device descriptor read/8, error -110 [ 1020.024259][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1020.046093][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1020.064548][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1020.088793][ T6016] usb usb48-port1: attempt power cycle [ 1020.649851][ T6016] usb usb48-port1: unable to enumerate USB device [ 1021.121328][T19093] block device autoloading is deprecated and will be removed. [ 1021.124726][T19093] SQUASHFS error: Failed to read block 0x0: -5 [ 1021.146099][T14897] usb 10-1: USB disconnect, device number 7 [ 1021.339892][T19100] [ 1021.340982][T19100] ====================================================== [ 1021.343809][T19100] WARNING: possible circular locking dependency detected [ 1021.346608][T19100] syzkaller #0 Tainted: G L [ 1021.349556][T19100] ------------------------------------------------------ [ 1021.352577][T19100] syz.5.2985/19100 is trying to acquire lock: [ 1021.354767][T19101] ªªªªªª speed is unknown, defaulting to 1000 [ 1021.354956][T19100] ffff888029341948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 1021.360509][T19100] [ 1021.360509][T19100] but task is already holding lock: [ 1021.362837][T19100] ffff88805e640888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1021.365714][T19100] [ 1021.365714][T19100] which lock already depends on the new lock. [ 1021.365714][T19100] [ 1021.369056][T19100] [ 1021.369056][T19100] the existing dependency chain (in reverse order) is: [ 1021.372075][T19100] [ 1021.372075][T19100] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1021.375004][T19100] __mutex_lock+0x1aa/0x1ca0 [ 1021.377125][T19100] kernfs_seq_start+0x4f/0x2a0 [ 1021.379177][T19100] traverse.part.0.constprop.0+0xaf/0x650 [ 1021.381721][T19100] seq_read_iter+0x93c/0x12d0 [ 1021.383834][T19100] kernfs_fop_read_iter+0x46c/0x610 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1021.385624][T19100] copy_splice_read+0x618/0xc20 [ 1021.387411][T19100] do_splice_read+0x285/0x370 [ 1021.389472][T19100] splice_direct_to_actor+0x2a1/0xa30 [ 1021.391715][T19100] do_splice_direct+0x174/0x240 [ 1021.393987][T19100] do_sendfile+0xb06/0xe50 [ 1021.396223][T19100] __ia32_compat_sys_sendfile+0x162/0x220 [ 1021.398908][T19100] __do_fast_syscall_32+0xe8/0x680 [ 1021.401219][T19100] do_fast_syscall_32+0x32/0x80 [ 1021.403313][T19100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1021.405396][T19100] [ 1021.405396][T19100] -> #2 (&p->lock){+.+.}-{4:4}: [ 1021.407683][T19100] __mutex_lock+0x1aa/0x1ca0 [ 1021.409385][T19100] seq_read_iter+0xe1/0x12d0 [ 1021.411131][T19100] kernfs_fop_read_iter+0x46c/0x610 [ 1021.412942][T19100] copy_splice_read+0x618/0xc20 [ 1021.414653][T19100] do_splice_read+0x285/0x370 [ 1021.416306][T19100] splice_file_to_pipe+0x109/0x120 [ 1021.418078][T19100] do_sendfile+0x400/0xe50 [ 1021.419764][T19100] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1021.421694][T19100] __do_fast_syscall_32+0xe8/0x680 [ 1021.423421][T19100] do_fast_syscall_32+0x32/0x80 [ 1021.425196][T19100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1021.427352][T19100] [ 1021.427352][T19100] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1021.430018][T19100] __mutex_lock+0x1aa/0x1ca0 [ 1021.432249][T19100] anon_pipe_write+0x15d/0x1bd0 [ 1021.434491][T19100] __kernel_write_iter+0x720/0xb10 [ 1021.436955][T19100] __kernel_write+0xf5/0x140 [ 1021.439087][T19100] autofs_notify_daemon+0x4db/0xd60 [ 1021.441364][T19100] autofs_wait+0x10f3/0x1ac0 [ 1021.443467][T19100] autofs_mount_wait+0x132/0x3c0 [ 1021.445743][T19100] autofs_d_automount+0x4b2/0x960 [ 1021.448186][T19100] __traverse_mounts+0x1b9/0x830 [ 1021.450508][T19100] step_into_slowpath+0x772/0xf50 [ 1021.452848][T19100] path_openat+0x10db/0x3140 [ 1021.454976][T19100] do_filp_open+0x20b/0x470 [ 1021.457126][T19100] do_sys_openat2+0x121/0x290 [ 1021.458850][T19100] __ia32_compat_sys_openat+0x16d/0x210 [ 1021.461171][T19100] __do_fast_syscall_32+0xe8/0x680 [ 1021.463553][T19100] do_fast_syscall_32+0x32/0x80 [ 1021.465776][T19100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1021.468638][T19100] [ 1021.468638][T19100] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1021.471996][T19100] __lock_acquire+0x1669/0x2890 [ 1021.474239][T19100] lock_acquire+0x179/0x330 [ 1021.476344][T19100] __mutex_lock+0x1aa/0x1ca0 [ 1021.478470][T19100] autofs_notify_daemon+0x4a6/0xd60 [ 1021.481027][T19100] autofs_wait+0x10f3/0x1ac0 [ 1021.483512][T19100] autofs_mount_wait+0x132/0x3c0 [ 1021.485857][T19100] autofs_d_automount+0x4b2/0x960 [ 1021.488006][T19100] __traverse_mounts+0x1b9/0x830 [ 1021.490090][T19100] step_into_slowpath+0x772/0xf50 [ 1021.491908][T19100] path_lookupat+0x627/0xc40 [ 1021.493546][T19100] filename_lookup+0x224/0x5f0 [ 1021.495163][T19100] kern_path+0x35/0x50 [ 1021.496654][T19100] lookup_bdev+0xd8/0x280 [ 1021.498221][T19100] resume_store+0x1d6/0x490 [ 1021.500068][T19100] kobj_attr_store+0x58/0x80 [ 1021.501710][T19100] sysfs_kf_write+0xf2/0x150 [ 1021.503319][T19100] kernfs_fop_write_iter+0x3af/0x570 [ 1021.505155][T19100] vfs_write+0x7d3/0x11d0 [ 1021.506731][T19100] ksys_write+0x12a/0x250 [ 1021.508380][T19100] __do_fast_syscall_32+0xe8/0x680 [ 1021.510333][T19100] do_fast_syscall_32+0x32/0x80 [ 1021.512150][T19100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1021.514340][T19100] [ 1021.514340][T19100] other info that might help us debug this: [ 1021.514340][T19100] [ 1021.517483][T19100] Chain exists of: [ 1021.517483][T19100] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 1021.517483][T19100] [ 1021.521649][T19100] Possible unsafe locking scenario: [ 1021.521649][T19100] [ 1021.524022][T19100] CPU0 CPU1 [ 1021.525717][T19100] ---- ---- [ 1021.527411][T19100] lock(&of->mutex); [ 1021.528714][T19100] lock(&p->lock); [ 1021.530740][T19100] lock(&of->mutex); [ 1021.532799][T19100] lock(&sbi->pipe_mutex); [ 1021.534226][T19100] [ 1021.534226][T19100] *** DEADLOCK *** [ 1021.534226][T19100] [ 1021.536762][T19100] 4 locks held by syz.5.2985/19100: [ 1021.538402][T19100] #0: ffff888024d0db38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1021.541563][T19100] #1: ffff888028834420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1021.544398][T19100] #2: ffff88805e640888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1021.547740][T19100] #3: ffff888040ebd0f8 (kn->active#69){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1021.550935][T19100] [ 1021.550935][T19100] stack backtrace: [ 1021.552817][T19100] CPU: 0 UID: 0 PID: 19100 Comm: syz.5.2985 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.552834][T19100] Tainted: [L]=SOFTLOCKUP [ 1021.552837][T19100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1021.552845][T19100] Call Trace: [ 1021.552850][T19100] [ 1021.552856][T19100] dump_stack_lvl+0x116/0x1f0 [ 1021.552875][T19100] print_circular_bug+0x275/0x340 [ 1021.552895][T19100] check_noncircular+0x146/0x160 [ 1021.552914][T19100] __lock_acquire+0x1669/0x2890 [ 1021.552927][T19100] lock_acquire+0x179/0x330 [ 1021.552936][T19100] ? autofs_notify_daemon+0x4a6/0xd60 [ 1021.552950][T19100] ? __pfx___might_resched+0x10/0x10 [ 1021.552965][T19100] ? __lock_acquire+0x12c2/0x2890 [ 1021.552975][T19100] __mutex_lock+0x1aa/0x1ca0 [ 1021.552985][T19100] ? autofs_notify_daemon+0x4a6/0xd60 [ 1021.552996][T19100] ? __kernel_text_address+0xd/0x40 [ 1021.553008][T19100] ? find_held_lock+0x2b/0x80 [ 1021.553020][T19100] ? autofs_notify_daemon+0x4a6/0xd60 [ 1021.553031][T19100] ? autofs_notify_daemon+0x45a/0xd60 [ 1021.553042][T19100] ? __pfx___mutex_lock+0x10/0x10 [ 1021.553051][T19100] ? __mutex_unlock_slowpath+0x161/0x790 [ 1021.553062][T19100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1021.553072][T19100] ? from_kgid_munged+0xab/0x130 [ 1021.553089][T19100] ? autofs_notify_daemon+0x4a6/0xd60 [ 1021.553100][T19100] autofs_notify_daemon+0x4a6/0xd60 [ 1021.553112][T19100] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1021.553123][T19100] ? kernfs_fop_write_iter+0x3af/0x570 [ 1021.553137][T19100] ? vfs_write+0x7d3/0x11d0 [ 1021.553150][T19100] ? ksys_write+0x12a/0x250 [ 1021.553169][T19100] ? lockdep_init_map_type+0x5c/0x270 [ 1021.553180][T19100] ? lockdep_init_map_type+0x5c/0x270 [ 1021.553191][T19100] autofs_wait+0x10f3/0x1ac0 [ 1021.553203][T19100] ? __pfx_autofs_wait+0x10/0x10 [ 1021.553213][T19100] ? __pfx_path_check_mount+0x10/0x10 [ 1021.553224][T19100] ? find_held_lock+0x2b/0x80 [ 1021.553236][T19100] ? path_has_submounts+0xcf/0x120 [ 1021.553248][T19100] ? do_raw_spin_unlock+0x172/0x230 [ 1021.553259][T19100] ? find_held_lock+0x2b/0x80 [ 1021.553272][T19100] autofs_mount_wait+0x132/0x3c0 [ 1021.553283][T19100] autofs_d_automount+0x4b2/0x960 [ 1021.553294][T19100] __traverse_mounts+0x1b9/0x830 [ 1021.553306][T19100] step_into_slowpath+0x772/0xf50 [ 1021.553319][T19100] ? __up_read+0x2d1/0x700 [ 1021.553330][T19100] ? __pfx_step_into_slowpath+0x10/0x10 [ 1021.553343][T19100] ? lookup_slow+0x30/0x70 [ 1021.553355][T19100] path_lookupat+0x627/0xc40 [ 1021.553369][T19100] filename_lookup+0x224/0x5f0 [ 1021.553382][T19100] ? __pfx_filename_lookup+0x10/0x10 [ 1021.553401][T19100] ? getname_kernel+0x52/0x370 [ 1021.553411][T19100] ? __asan_memcpy+0x3c/0x60 [ 1021.553424][T19100] kern_path+0x35/0x50 [ 1021.553436][T19100] lookup_bdev+0xd8/0x280 [ 1021.553447][T19100] ? __pfx_lookup_bdev+0x10/0x10 [ 1021.553457][T19100] ? __asan_memcpy+0x3c/0x60 [ 1021.553469][T19100] resume_store+0x1d6/0x490 [ 1021.553481][T19100] ? __pfx_resume_store+0x10/0x10 [ 1021.553494][T19100] ? find_held_lock+0x2b/0x80 [ 1021.553507][T19100] ? __pfx_resume_store+0x10/0x10 [ 1021.553519][T19100] kobj_attr_store+0x58/0x80 [ 1021.553529][T19100] ? __pfx_kobj_attr_store+0x10/0x10 [ 1021.553539][T19100] sysfs_kf_write+0xf2/0x150 [ 1021.553549][T19100] kernfs_fop_write_iter+0x3af/0x570 [ 1021.553564][T19100] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1021.553574][T19100] vfs_write+0x7d3/0x11d0 [ 1021.553588][T19100] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1021.553604][T19100] ? __pfx_vfs_write+0x10/0x10 [ 1021.553617][T19100] ? find_held_lock+0x2b/0x80 [ 1021.553634][T19100] ksys_write+0x12a/0x250 [ 1021.553648][T19100] ? __pfx_ksys_write+0x10/0x10 [ 1021.553671][T19100] __do_fast_syscall_32+0xe8/0x680 [ 1021.553682][T19100] do_fast_syscall_32+0x32/0x80 [ 1021.553691][T19100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1021.553705][T19100] RIP: 0023:0xf7f86579 [ 1021.553714][T19100] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1021.553725][T19100] RSP: 002b:00000000f545555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1021.553735][T19100] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040 [ 1021.553741][T19100] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1021.553747][T19100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1021.553753][T19100] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1021.553759][T19100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1021.553769][T19100] [ 1021.649079][T19101] wg2 speed is unknown, defaulting to 1000 [ 1021.695228][T19100] PM: Image not found (code -22) [ 1022.176903][T13909] syz_tun (unregistering): left allmulticast mode [ 1023.519905][T10454] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.523284][T10454] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.526421][T10454] .` (unregistering): Released all slaves [ 1023.691608][T10454] dvmrp6 (unregistering): left allmulticast mode [ 1023.983126][T10454] bond0 (unregistering): Released all slaves [ 1024.081619][T10454] bond1 (unregistering): (slave veth5): Releasing active interface [ 1024.084459][T10454] bond1 (unregistering): Released all slaves [ 1024.179018][T10454] bond2 (unregistering): (slave veth7): Releasing active interface [ 1024.181821][T10454] bond2 (unregistering): Released all slaves [ 1024.285565][T10454] dvmrp6 (unregistering): left allmulticast mode [ 1024.472615][T10454] bond0 (unregistering): Released all slaves [ 1024.583114][T10454] bond1 (unregistering): (slave veth3): Releasing active interface [ 1024.586034][T10454] bond1 (unregistering): Released all slaves [ 1024.715832][T10454] bond2 (unregistering): (slave veth5): Releasing active interface [ 1024.719646][T10454] bond2 (unregistering): Released all slaves [ 1025.032373][T10454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.036027][T10454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.039020][T10454] bond0 (unregistering): Released all slaves [ 1025.182711][T10454] bond1 (unregistering): (slave veth5): Releasing active interface [ 1025.187038][T10454] bond1 (unregistering): Released all slaves [ 1025.314426][T10454] bond2 (unregistering): (slave veth7): Releasing active interface [ 1025.318748][T10454] bond2 (unregistering): Released all slaves [ 1025.425348][T10454] : left promiscuous mode [ 1025.525877][T10454] tipc: Left network mode [ 1025.536737][T10454] tipc: Left network mode [ 1025.562361][T10454] tipc: Left network mode [ 1025.572694][T10454] IPVS: stopping master sync thread 11603 ... [ 1026.449022][T10454] hsr_slave_0: left promiscuous mode [ 1026.451793][T10454] hsr_slave_1: left promiscuous mode [ 1026.454320][T10454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.459461][T10454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.494886][T10454] hsr_slave_0: left promiscuous mode [ 1026.499595][T10454] hsr_slave_1: left promiscuous mode [ 1026.504063][T10454] hsr_slave_0: left promiscuous mode [ 1026.506191][T10454] hsr_slave_1: left promiscuous mode [ 1026.509686][T10454] hsr_slave_0: left promiscuous mode [ 1026.511888][T10454] hsr_slave_1: left promiscuous mode [ 1026.513853][T10454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.517419][T10454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.530369][T10454] pim6reg (unregistering): left allmulticast mode [ 1026.834024][T10454] team0 (unregistering): Port device team_slave_1 removed [ 1026.862586][T10454] team0 (unregistering): Port device team_slave_0 removed [ 1027.246641][T10454] pim6reg (unregistering): left allmulticast mode [ 1028.384170][T12475] smc: removing ib device sz1 [ 1028.959308][ T1144] smc: removing ib device syz2 [ 1029.109168][T19190] ªªªªªª speed is unknown, defaulting to 1000 [ 1029.111906][T19190] sz1: Port: 1 Link DOWN [ 1030.359524][T10454] IPVS: stop unused estimator thread 0... [ 1030.362332][T10454] IPVS: stop unused estimator thread 0... [ 1030.364545][T10454] IPVS: stop unused estimator thread 0...