last executing test programs: 18m52.429602948s ago: executing program 32 (id=28): inotify_init() r0 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, r0, 0x0) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x3, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) unshare(0xa020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 17m43.622795187s ago: executing program 33 (id=144): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3ff, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r4, 0x407, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x80}}, 0x1c, &(0x7f0000000580)}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x6}, 0x1c, 0x0}}], 0x2, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r5, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @eth={@random="11c8e0ad5c91", @empty, @val={@val={0x88a8, 0x0, 0x0, 0xff}, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "01", "2f943e", 0x22eb, "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"}}}}}}, 0xf1a) 14m54.726491635s ago: executing program 34 (id=444): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x6}, 0x8) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) fallocate(0xffffffffffffffff, 0x4, 0x0, 0xa11) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) msgsnd(0x0, &(0x7f0000000480)={0x1, "d4998204c8be3a1ea0fc7b3a06d189298d951a4bdc79cd5d691ed71674ecf277e3b72f2b7cca204485352181d4f09ff887dad08fab2ad6a2"}, 0x40, 0x0) io_setup(0x9, &(0x7f0000000100)) 12m46.313581254s ago: executing program 4 (id=671): r0 = syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf4, &(0x7f0000000e00)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) lseek(r0, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './bus/file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) close(r5) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 12m44.916057662s ago: executing program 4 (id=673): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff0000000000010902240001"], 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x4d5, &(0x7f0000000480)={0x0, 0x404525, 0x80, 0x2, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) 12m41.701343431s ago: executing program 4 (id=680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x42400) 12m37.950897853s ago: executing program 4 (id=686): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nocompress}, {@map_normal}]}, 0x3, 0x54c, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r0, &(0x7f0000000040)=""/225, 0xe1) 12m37.318719833s ago: executing program 4 (id=688): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) 12m36.708850677s ago: executing program 4 (id=689): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff0000000000010902240001"], 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x4d5, &(0x7f0000000480)={0x0, 0x404525, 0x80, 0x2, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) 12m35.722339572s ago: executing program 35 (id=689): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff0000000000010902240001"], 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x4d5, &(0x7f0000000480)={0x0, 0x404525, 0x80, 0x2, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) 11m21.176022418s ago: executing program 9 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 11m19.329323919s ago: executing program 9 (id=828): r0 = syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf4, &(0x7f0000000e00)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) lseek(r0, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './bus/file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) close(r5) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x100) 11m13.868501932s ago: executing program 9 (id=836): creat(&(0x7f0000000b80)='./bus\x00', 0x155) 11m11.360751942s ago: executing program 9 (id=839): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 11m7.194845672s ago: executing program 9 (id=847): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@delalloc}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@block_validity}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001d00eeff2cbd7000fcdbdf2530bffe40aad52f2687c6aa1a235a5d2fc1157de3dbc5faabce429d2e7dab937b3fdbfb8e66a7870ffb30646e"], 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file1\x00', 0x42, 0x0) write(r1, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r1, r0, 0x0, 0x40001) 11m3.785175485s ago: executing program 9 (id=851): prctl$PR_SET_NAME(0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0x4008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 10m48.476083216s ago: executing program 36 (id=851): prctl$PR_SET_NAME(0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0x4008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 6m56.163003021s ago: executing program 6 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m54.539734709s ago: executing program 6 (id=1394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 6m52.525348088s ago: executing program 6 (id=1396): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sync() write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xffff, 0x2, [0x4, 0x5]}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2410}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x6fc2, 0x0, {0x6000, 0x1}, {0x50, 0x2}, @period={0x5c, 0x1, 0x0, 0x7f9e, 0x800, {0xfffe, 0x8001, 0x2, 0x200}, 0x0, 0x0}}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009", @ANYRES32, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6m50.443414542s ago: executing program 6 (id=1404): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x81) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000055000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000002ac1414bb00"/237], 0x190) syz_open_procfs(0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r6 = dup(r5) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3) 6m48.717571715s ago: executing program 6 (id=1407): syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x8, 0x2000}, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 6m47.143623615s ago: executing program 6 (id=1410): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 6m31.537469058s ago: executing program 37 (id=1410): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 4m41.482802049s ago: executing program 1 (id=1649): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0xfff2, 0x12}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x40, 0x8d, 0x80, 0xb7eb}, {0x9, 0x83, 0x8a, 0x8}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 4m39.696255195s ago: executing program 1 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m39.188356922s ago: executing program 1 (id=1656): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000000)=0xffffffff, 0x4) 4m36.063152971s ago: executing program 1 (id=1665): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x0) 4m28.562977464s ago: executing program 1 (id=1687): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3c0a0b030c0d185464d4ba8418d407ef29fc1e4761bcb5a68fcd2317bbfb4eb98caa0d3e2e006a251e095ed496a5552fbf256eb2f643df539bad7e9d72146c7ac03fdba4ce87cb39600feede00000000000000000000000000000616e811ea5c31696a5bc384e7", 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)='%', 0x1}], 0x1}}], 0x3, 0x400c0) 4m26.328941474s ago: executing program 1 (id=1692): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x449, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x1f0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1bc, 0x2, [@TCA_MATCHALL_ACT={0x1b8, 0x2, [@m_ctinfo={0x10c, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x0, 0x5, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0xb6, 0x6, "3fb2f726c07f43c6ac07e035bf6ecf4a37a5d061ca73cb037022caaf37444ad3da10f55e9b41e0ac52627f7fd8958cde17d55869d8261015b753554977b03a4fcc865261301ddf92dc3702a61c5763efb636a349291edaa7d1833796921653932a0b804022704da41c77237528959e9200cdf6a430409b4b794e3f4090d9d69693e9beb1d29ad2af595fa948989807275acd011c5cdf16b93390076baf78b6a09e1c7ba243652a2dd4a47a316130a87cd509"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xa8, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x83350}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x44, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000880)={0xfffffffd, 0x1, 0x8, 0x8000, 0x10, "c588c203364d75c74c9b84836eae88a902fdf6"}) close(r4) 4m11.138836894s ago: executing program 38 (id=1692): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x449, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x1f0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1bc, 0x2, [@TCA_MATCHALL_ACT={0x1b8, 0x2, [@m_ctinfo={0x10c, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x0, 0x5, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0xb6, 0x6, "3fb2f726c07f43c6ac07e035bf6ecf4a37a5d061ca73cb037022caaf37444ad3da10f55e9b41e0ac52627f7fd8958cde17d55869d8261015b753554977b03a4fcc865261301ddf92dc3702a61c5763efb636a349291edaa7d1833796921653932a0b804022704da41c77237528959e9200cdf6a430409b4b794e3f4090d9d69693e9beb1d29ad2af595fa948989807275acd011c5cdf16b93390076baf78b6a09e1c7ba243652a2dd4a47a316130a87cd509"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xa8, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x83350}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x44, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000880)={0xfffffffd, 0x1, 0x8, 0x8000, 0x10, "c588c203364d75c74c9b84836eae88a902fdf6"}) close(r4) 23.543259401s ago: executing program 0 (id=2263): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 20.15634744s ago: executing program 0 (id=2271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r6, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0xb, 0x2, 0x3}, 0x0, &(0x7f0000000400)={0x7fc, 0x12, 0x800000, 0x0, 0x0, 0xc3ad, 0x4}, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r5, &(0x7f0000000040)=""/117, 0x75) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4a20, 0x7, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r7, r1}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x4008004) 18.903125212s ago: executing program 3 (id=2276): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x929402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x4, 0x6, &(0x7f0000000180)={0xa, "a530df2d8b94c3c25219756901800000492d050600a4c3c4adec475c6f000700"}}) 17.766704169s ago: executing program 0 (id=2278): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000083000000bf0900000000000055090100000000009500000000000000bf980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0000fe0f000000000000000000000000800000006ab2662c"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) 17.71512221s ago: executing program 7 (id=2279): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5410, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x900, 0xfffd, 0x0, 0xf}}) 17.439959089s ago: executing program 8 (id=2280): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() iopl(0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) syz_emit_ethernet(0x0, 0x0, 0x0) close(r0) 17.089740491s ago: executing program 2 (id=2281): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='s']) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x40000003, 0x6c, 0x4b4, 0xa, 0xfffffffd, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), 0x0, 0x0, 0x1) 17.088608795s ago: executing program 7 (id=2282): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x154, 0x0, &(0x7f0000001a80)=[@request_death={0x400c630e, 0x1}, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001600)={@flat=@binder={0x73622a85, 0x10b}, @fda={0x66646185, 0x3, 0x2, 0x29}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x5, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001740)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000015c0)={0x0, 0x18, 0x30}}, 0x40}, @acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000019c0)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f00000017c0)=""/250, 0xfa, 0x0, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f00000018c0)=""/228, 0xe4, 0x2, 0x2}}, &(0x7f0000001a40)={0x0, 0x18, 0x40}}}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x0, 0x78, 0x6d, 0x3d, 0x40}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="3237bef8"]}, {0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="024c86c8e20b920300000000000000"]}]}) 14.170363721s ago: executing program 8 (id=2284): syz_open_dev$dri(0x0, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 13.885994653s ago: executing program 3 (id=2285): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@delalloc}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@block_validity}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001d00eeff2cbd7000fcdbdf2530bffe40aad52f2687c6aa1a235a5d2fc1157de3dbc5faabce429d2e7dab937b3fdbfb8e66a7870ffb30646e"], 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file1\x00', 0x42, 0x0) write(r1, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r1, r0, 0x0, 0x40001) 12.685826528s ago: executing program 2 (id=2286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c35, 0x80, 0x0, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11.049433961s ago: executing program 3 (id=2287): r0 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) close_range(r0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) 10.766973553s ago: executing program 2 (id=2288): syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5456, 0x10000, 0x4, 0x312}, &(0x7f00000029c0), &(0x7f0000000300)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x1ff, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000700)=""/231, 0xe7}], 0x1, 0x200c, 0x22f) 8.221045745s ago: executing program 5 (id=2291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r6, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0xb, 0x2, 0x3}, 0x0, &(0x7f0000000400)={0x7fc, 0x12, 0x800000, 0x0, 0x0, 0xc3ad, 0x4}, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r5, &(0x7f0000000040)=""/117, 0x75) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4a20, 0x7, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r7, r1}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x4008004) 8.063329401s ago: executing program 0 (id=2292): syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5456, 0x10000, 0x4, 0x312}, &(0x7f00000029c0), &(0x7f0000000300)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x1ff, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.354213759s ago: executing program 5 (id=2293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000280)={{0x9, 0x5}, 'port1\x00', 0x20, 0x34, 0xe1d, 0xa1, 0x7, 0x6, 0x4, 0x0, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}}, 0x40080) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 7.275066065s ago: executing program 7 (id=2294): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x5410, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x900, 0xfffd, 0x0, 0xf}}) 6.916494638s ago: executing program 3 (id=2295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.849506923s ago: executing program 7 (id=2296): socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(r1, 0x2285, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.503158921s ago: executing program 3 (id=2297): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x929402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x4, 0x6, &(0x7f0000000180)={0xa, "a530df2d8b94c3c25219756901800000492d050600a4c3c4adec475c6f000700"}}) 5.63115494s ago: executing program 2 (id=2298): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002840)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x1e8, 0xffffffff, 0xf4, 0x1e8, 0x3ac, 0x3ac, 0xffffffff, 0x3ac, 0x3ac, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @empty, @multicast2, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @multicast2, @icmp_id=0x64, @gre_key=0x5}}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffffff, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x6, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @remote, @icmp_id=0x67, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) 5.630747055s ago: executing program 7 (id=2299): socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0xb, 0x2, 0x3}, 0x0, &(0x7f0000000400)={0x7fc, 0x12, 0x800000, 0x0, 0x0, 0xc3ad, 0x4}, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 5.459873078s ago: executing program 5 (id=2300): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x20008040) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80042, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x7}) 5.083549712s ago: executing program 5 (id=2301): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0xc, 0x4) 5.019606177s ago: executing program 8 (id=2302): mkdir(&(0x7f0000000080)='./file0\x00', 0x115) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x40000) sendmmsg(r4, 0x0, 0x0, 0xfc) 4.855992931s ago: executing program 2 (id=2303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x5c}}, 0x0) 4.750915646s ago: executing program 5 (id=2304): bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockname$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @private}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) link(&(0x7f0000000200)='./file1\x00', 0x0) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x9, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x83f00}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000a00)={0xf, {"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", 0xfffffffffffffd6a}}, 0x1006) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000340)) 4.689122237s ago: executing program 0 (id=2305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r5, 0x0, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0xb, 0x2, 0x3}, 0x0, &(0x7f0000000400)={0x7fc, 0x12, 0x800000, 0x0, 0x0, 0xc3ad, 0x4}, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4a20, 0x7, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r6, r1}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x4008004) 4.488540043s ago: executing program 7 (id=2306): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x148, 0x0, &(0x7f0000001a80)=[@enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001600)={@flat=@binder={0x73622a85, 0x10b}, @fda={0x66646185, 0x3, 0x2, 0x29}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x5, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001740)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000015c0)={0x0, 0x18, 0x30}}, 0x40}, @acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000019c0)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f00000017c0)=""/250, 0xfa, 0x0, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f00000018c0)=""/228, 0xe4, 0x2, 0x2}}, &(0x7f0000001a40)={0x0, 0x18, 0x40}}}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x0, 0x78, 0x6d, 0x3d, 0x40}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="3237bef8"]}, {0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="024c86c8e20b920300000000000000"]}]}) 4.145108849s ago: executing program 2 (id=2307): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000033666a"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.962434527s ago: executing program 8 (id=2308): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x5410, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x900, 0xfffd, 0x0, 0xf}}) 2.978631893s ago: executing program 0 (id=2309): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x4081) 2.937376723s ago: executing program 8 (id=2310): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xe01}], 0x3) 1.597545236s ago: executing program 8 (id=2311): syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5456, 0x10000, 0x4, 0x312}, &(0x7f00000029c0), &(0x7f0000000300)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x1ff, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000700)=""/231, 0xe7}], 0x1, 0x200c, 0x22f) 1.527086822s ago: executing program 3 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000280)={{0x9, 0x5}, 'port1\x00', 0x20, 0x34, 0xe1d, 0xa1, 0x7, 0x6, 0x4, 0x0, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}}, 0x40080) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=2313): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8814) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): d_slave_1): Releasing backup interface [ 932.118309][ T5979] bond0 (unregistering): Released all slaves [ 932.426757][T12856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.722686][T13154] overlayfs: missing 'lowerdir' [ 932.743744][T12856] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.785366][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.792625][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.917350][T13157] loop1: detected capacity change from 0 to 128 [ 933.209744][T13157] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 933.330532][T13157] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 933.710421][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.717615][ T6915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.806582][ T30] audit: type=1800 audit(1760897179.724:517): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1506" name="file2" dev="loop1" ino=1048733 res=0 errno=0 [ 934.570965][ T5979] hsr_slave_0: left promiscuous mode [ 934.662762][ T5979] hsr_slave_1: left promiscuous mode [ 934.722287][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.751924][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.802343][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.809745][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.963524][ T5979] veth1_macvtap: left promiscuous mode [ 935.003383][ T5979] veth0_macvtap: left promiscuous mode [ 935.009078][ T5979] veth1_vlan: left promiscuous mode [ 935.047000][ T5979] veth0_vlan: left promiscuous mode [ 935.406704][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1503'. [ 935.416683][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1503'. [ 936.132740][ T30] audit: type=1326 audit(1760897181.994:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.1.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca98efc9 code=0x7ffc0000 [ 936.221479][ T30] audit: type=1326 audit(1760897181.994:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.1.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca98efc9 code=0x7ffc0000 [ 936.305089][ T30] audit: type=1326 audit(1760897181.994:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.1.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcbca98efc9 code=0x7ffc0000 [ 936.387991][ T30] audit: type=1326 audit(1760897181.994:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.1.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca98efc9 code=0x7ffc0000 [ 936.570484][ T30] audit: type=1326 audit(1760897181.994:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.1.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca98efc9 code=0x7ffc0000 [ 936.714251][ T30] audit: type=1326 audit(1760897181.994:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.1.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcbca98efc9 code=0x7ffc0000 [ 936.872604][ T30] audit: type=1326 audit(1760897181.994:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.1.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca98efc9 code=0x7ffc0000 [ 937.041557][ T30] audit: type=1326 audit(1760897181.994:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.1.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca98efc9 code=0x7ffc0000 [ 937.174820][ T30] audit: type=1326 audit(1760897181.994:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.1.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcbca98efc9 code=0x7ffc0000 [ 940.067391][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 940.067443][ T30] audit: type=1326 audit(1760897185.954:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.170706][ T30] audit: type=1326 audit(1760897185.954:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.199097][ T30] audit: type=1326 audit(1760897185.954:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.223436][ T30] audit: type=1326 audit(1760897185.954:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.289350][ T30] audit: type=1326 audit(1760897185.954:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.356991][ T30] audit: type=1326 audit(1760897185.954:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.379413][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.401069][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1517'. [ 940.410351][ T30] audit: type=1326 audit(1760897185.954:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.432796][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.548267][ T30] audit: type=1326 audit(1760897185.954:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.617310][ T30] audit: type=1326 audit(1760897185.954:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.655110][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 940.677825][ T30] audit: type=1326 audit(1760897185.954:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.7.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb58efc9 code=0x7ffc0000 [ 940.818984][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 942.720812][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'. [ 943.812517][T13260] ptrace attach of "./syz-executor exec"[5820] was attempted by ""[13260] [ 944.566512][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 944.583647][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 944.843328][T13253] syz.8.1520 uses obsolete (PF_INET,SOCK_PACKET) [ 947.721217][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1528'. [ 947.750675][T13286] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1528'. [ 948.981880][T13296] input: syz1 as /devices/virtual/input/input45 [ 950.095438][T12856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.812782][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 952.016711][T13330] bridge0: entered promiscuous mode [ 952.016842][T13330] macsec1: entered promiscuous mode [ 952.018248][T13330] bridge0: port 3(macsec1) entered blocking state [ 952.023574][T13330] bridge0: port 3(macsec1) entered disabled state [ 952.023715][T13330] macsec1: entered allmulticast mode [ 952.023735][T13330] bridge0: entered allmulticast mode [ 952.529441][T13330] macsec1: left allmulticast mode [ 952.529472][T13330] bridge0: left allmulticast mode [ 952.531515][T13330] bridge0: left promiscuous mode [ 952.868545][T12856] veth0_vlan: entered promiscuous mode [ 952.935236][T12856] veth1_vlan: entered promiscuous mode [ 953.111148][T12856] veth0_macvtap: entered promiscuous mode [ 953.171702][T12856] veth1_macvtap: entered promiscuous mode [ 955.063078][T13367] input: syz1 as /devices/virtual/input/input46 [ 956.384408][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 956.393839][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 956.401699][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 956.409897][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 956.420323][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 956.486219][T13384] lo speed is unknown, defaulting to 1000 [ 956.791440][ T5981] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 957.203650][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.235783][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.255838][ T5981] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 957.283160][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.453726][ T5981] usb 2-1: config 0 descriptor?? [ 957.890263][ T5981] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 957.924951][ T5981] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 957.955651][ T5981] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 957.978208][ T5981] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.006240][ T5981] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.028786][ T5981] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.053145][ T5981] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 958.117442][ T5981] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 958.231356][ T5981] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 958.520911][ T5826] Bluetooth: hci6: command tx timeout [ 958.849620][ T5981] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 958.938618][ T5981] usb 2-1: USB disconnect, device number 11 [ 959.520905][ T3517] bridge_slave_1: left allmulticast mode [ 959.568591][ T3517] bridge_slave_1: left promiscuous mode [ 959.833518][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.591454][ T5826] Bluetooth: hci6: command tx timeout [ 960.880462][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 960.880486][ T30] audit: type=1326 audit(1760897206.754:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 960.941945][ T3517] bridge_slave_0: left allmulticast mode [ 960.994557][ T3517] bridge_slave_0: left promiscuous mode [ 961.008169][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.199598][T13432] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 961.209809][ T5924] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 961.302418][ T30] audit: type=1326 audit(1760897206.754:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 961.356384][ T30] audit: type=1326 audit(1760897206.764:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 961.501059][ T5924] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 961.543572][ T30] audit: type=1326 audit(1760897206.764:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 961.576584][ T5924] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 961.756551][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 961.778606][ T30] audit: type=1326 audit(1760897206.764:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 961.904517][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 961.977591][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 962.011729][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 962.066113][ T30] audit: type=1326 audit(1760897206.764:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 962.152093][ T5924] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 962.216166][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 962.234543][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 962.268238][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 962.286737][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 962.340535][ T5924] usb 2-1: Product: syz [ 962.349526][ T5924] usb 2-1: Manufacturer: syz [ 962.366145][ T30] audit: type=1326 audit(1760897206.764:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 962.462045][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 962.496869][ T5924] cdc_wdm 2-1:1.0: skipping garbage [ 962.520857][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 962.541251][ T5924] cdc_wdm 2-1:1.0: skipping garbage [ 962.565403][ T30] audit: type=1326 audit(1760897206.764:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 962.619949][ T5924] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 962.628418][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 962.647421][ T5924] cdc_wdm 2-1:1.0: Unknown control protocol [ 962.682107][ T5826] Bluetooth: hci6: command tx timeout [ 962.713973][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 962.730135][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.782519][ T9] usb 1-1: Product: syz [ 962.786717][ T9] usb 1-1: Manufacturer: syz [ 962.796108][ T30] audit: type=1326 audit(1760897206.764:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 962.984641][ T9] usb 1-1: SerialNumber: syz [ 963.043063][ T5924] usb 2-1: USB disconnect, device number 12 [ 963.077742][ T30] audit: type=1326 audit(1760897206.764:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 963.151827][ T9] usb 1-1: config 0 descriptor?? [ 963.215396][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input48 [ 964.177993][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1556'. [ 964.187288][T13452] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1556'. [ 964.355949][ T3517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.388295][ T3517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.409446][ T3517] bond0 (unregistering): Released all slaves [ 964.476450][T13384] chnl_net:caif_netlink_parms(): no params data found [ 964.758540][ T5826] Bluetooth: hci6: command tx timeout [ 964.947444][ T3517] hsr_slave_0: left promiscuous mode [ 964.964738][ T3517] hsr_slave_1: left promiscuous mode [ 964.994056][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.081306][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.183443][ T3517] veth1_macvtap: left promiscuous mode [ 965.209690][ T3517] veth0_macvtap: left promiscuous mode [ 965.228406][ T3517] veth1_vlan: left promiscuous mode [ 965.245992][ T3517] veth0_vlan: left promiscuous mode [ 966.582282][ T3517] team0 (unregistering): Port device team_slave_1 removed [ 967.052058][ T3517] team0 (unregistering): Port device team_slave_0 removed [ 968.291409][T13411] usb 1-1: USB disconnect, device number 3 [ 969.155881][T13384] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.170661][T13384] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.180666][T13487] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 969.214920][T13384] bridge_slave_0: entered allmulticast mode [ 969.235695][T13384] bridge_slave_0: entered promiscuous mode [ 969.251434][T13384] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.262247][T13384] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.269557][T13384] bridge_slave_1: entered allmulticast mode [ 969.296649][T13384] bridge_slave_1: entered promiscuous mode [ 969.374890][T13487] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.410157][T13487] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.457452][T13487] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 969.491203][T13487] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.572459][T13487] usb 8-1: config 0 descriptor?? [ 969.605711][T13384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.668564][T13384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.095415][T13487] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 970.881525][T13487] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 970.891948][T13487] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 970.898915][T13487] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 970.922234][T13487] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 970.929221][T13487] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 970.960251][T13384] team0: Port device team_slave_0 added [ 970.978319][T13487] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 971.039129][T13384] team0: Port device team_slave_1 added [ 971.039534][T13487] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 971.144788][T13487] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 971.439804][T13384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.487825][T13384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.533697][T13487] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 971.609466][T13384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.660979][T13487] usb 8-1: USB disconnect, device number 5 [ 971.685796][T13384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.743465][T13384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.856988][T13384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.538015][T13384] hsr_slave_0: entered promiscuous mode [ 972.594897][T13384] hsr_slave_1: entered promiscuous mode [ 972.618024][T13384] debugfs: 'hsr0' already exists in 'hsr' [ 972.639329][T13384] Cannot create hsr debugfs directory [ 976.906198][ T5924] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 976.919076][T13384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 976.944490][T13384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 976.981560][T13384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 977.057091][T13384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 977.085883][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.199805][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.233662][ T5924] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 977.278127][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.434025][ T5924] usb 8-1: config 0 descriptor?? [ 977.820602][T13384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.942521][ T5924] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 977.977479][T13384] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.987698][ T5924] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 978.026871][ T5924] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 978.056196][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.063409][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.081070][ T5924] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 978.098687][ T5924] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 978.130311][ T5924] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 978.139550][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.146680][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.158501][ T5924] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 978.529030][ T5924] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 978.630089][ T5924] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 978.875438][ T5924] cp2112 0003:10C4:EA90.0004: error setting SMBus config [ 978.921716][ T5924] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -71 [ 978.989100][ T5924] usb 8-1: USB disconnect, device number 6 [ 979.260271][T13616] fido_id[13616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 980.854605][T13384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.015831][T13621] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[13621] [ 982.145573][T13642] loop7: detected capacity change from 0 to 4096 [ 982.598099][T13642] EXT4-fs (loop7): Test dummy encryption mode enabled [ 982.655089][T13642] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 982.744531][T13642] System zones: 0-5 [ 983.024696][T13642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.902532][T13659] overlayfs: failed to resolve './bus': -2 [ 984.991920][T13642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.937910][T13384] veth0_vlan: entered promiscuous mode [ 986.183276][T13384] veth1_vlan: entered promiscuous mode [ 986.420681][T13384] veth0_macvtap: entered promiscuous mode [ 986.499051][T13384] veth1_macvtap: entered promiscuous mode [ 986.621023][T13384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.667355][T13384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.292119][ T1313] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.343021][ T1313] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.409092][ T1313] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.477568][ T1313] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.843382][ T6915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.910464][ T6915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.080102][ T6915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.134929][ T6915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.824661][ T5826] Bluetooth: unknown link type 128 [ 988.945429][T13726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 988.954498][T13726] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 989.052766][T13726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 989.172649][T13726] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 989.178917][T13726] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 989.212543][T13726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 989.230698][T13726] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 989.445452][T13726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 989.456542][T13726] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 989.574852][T13726] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 989.584512][T13726] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 989.811237][T13726] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 990.991377][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 991.070584][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 991.231349][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 991.231436][T10393] Bluetooth: hci5: command 0x0406 tx timeout [ 991.491424][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 991.675460][ T5826] Bluetooth: hci6: command 0x0c1a tx timeout [ 992.926004][T13771] syz_tun: entered allmulticast mode [ 993.070591][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 993.107739][T13769] syz_tun: left allmulticast mode [ 993.220812][T13411] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 993.310563][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 993.313724][T10393] Bluetooth: hci2: command 0x0406 tx timeout [ 993.462689][T13411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.495086][T13778] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1620'. [ 993.504188][T13411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.551949][T10393] Bluetooth: hci1: command 0x0406 tx timeout [ 993.568199][T13411] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 993.577522][T13411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.621777][T13411] usb 1-1: config 0 descriptor?? [ 993.710917][T10393] Bluetooth: hci6: command 0x0c1a tx timeout [ 994.069946][T13411] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 994.096337][T13411] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 994.119252][T13411] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 994.140740][T13792] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1625'. [ 994.155372][T13411] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 994.285446][T13411] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 994.369136][T13411] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 994.377696][T13411] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 994.395342][T13795] loop1: detected capacity change from 0 to 2048 [ 994.406074][T13411] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 994.764926][T13803] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 994.771842][T13411] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 995.048460][T13411] cp2112 0003:10C4:EA90.0005: error setting SMBus config [ 995.212881][T13806] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 995.336072][T13806] Remounting filesystem read-only [ 995.346637][T13807] NILFS (loop1): mounting fs with errors [ 995.795178][T10393] Bluetooth: hci6: command 0x0c1a tx timeout [ 995.807404][T13411] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 995.829773][T13411] usb 1-1: USB disconnect, device number 4 [ 995.852835][T13803] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 996.000026][T13803] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 996.063794][T13803] Remounting filesystem read-only [ 996.107273][T13802] fido_id[13802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 996.140233][ T5820] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 997.043376][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 999.497530][T13866] loop8: detected capacity change from 0 to 2048 [ 999.692279][T13872] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1000.093721][T13879] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1000.125940][T13879] Remounting filesystem read-only [ 1000.141133][T13879] NILFS (loop8): mounting fs with errors [ 1000.664782][T13872] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1000.691531][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1000.748165][T13872] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1000.783332][T13872] Remounting filesystem read-only [ 1000.800855][ T9358] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1000.842503][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.906116][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.945335][ T9] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1000.982893][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.052511][ T9] usb 8-1: config 0 descriptor?? [ 1001.532765][ T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1001.552885][ T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1001.559855][ T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1001.638578][ T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1001.668487][ T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1001.814806][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1645'. [ 1001.823943][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1645'. [ 1001.832981][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1645'. [ 1002.356741][ T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1002.379392][ T9] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1002.394612][ T9] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1002.503183][ T9] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 1002.601961][ T9] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 1002.684483][ T9] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -32 [ 1002.759760][ T9] usb 8-1: USB disconnect, device number 7 [ 1002.816243][T13902] fido_id[13902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1002.868504][T13875] lo speed is unknown, defaulting to 1000 [ 1004.566413][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1651'. [ 1005.189542][T13932] syzkaller0: entered promiscuous mode [ 1005.221390][T13932] syzkaller0: entered allmulticast mode [ 1005.399112][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1005.405691][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1006.084542][T13959] netlink: 'syz.0.1659': attribute type 33 has an invalid length. [ 1006.125354][T13959] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1659'. [ 1006.480764][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1660'. [ 1006.489898][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1660'. [ 1006.500331][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1660'. [ 1008.130508][ T9357] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1008.531325][ T9357] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.159016][ T9357] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.210709][ T9357] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1009.219784][ T9357] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.252114][ T9357] usb 8-1: config 0 descriptor?? [ 1009.756271][ T9357] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1009.865500][ T9357] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1009.933952][ T9357] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1009.965823][ T9357] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1009.980444][ T9357] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1010.010439][ T9357] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1010.029543][ T9357] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1010.224916][ T9357] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1010.432179][ T9357] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 1010.464810][ T9357] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 1010.531808][ T9357] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -32 [ 1010.536712][T14001] input: syz1 as /devices/virtual/input/input53 [ 1010.639997][T13607] usb 8-1: USB disconnect, device number 8 [ 1010.741572][T13997] fido_id[13997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1011.125338][T14007] loop5: detected capacity change from 0 to 2048 [ 1011.168122][T14007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1012.333866][T14022] syzkaller1: entered promiscuous mode [ 1012.339436][T14022] syzkaller1: entered allmulticast mode [ 1013.263938][T10393] Bluetooth: unknown link type 128 [ 1013.692144][T14035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1013.698771][T14035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1013.749747][T14035] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1013.770767][T14035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1013.798095][T14035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1013.808336][T14035] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1013.824303][T14049] vlan2: entered promiscuous mode [ 1013.853147][T14049] vlan2: entered allmulticast mode [ 1013.879467][T14049] hsr_slave_1: entered allmulticast mode [ 1013.983012][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1679'. [ 1015.710691][T10393] Bluetooth: hci3: command 0x0406 tx timeout [ 1015.716823][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 1015.778746][T14073] input: syz1 as /devices/virtual/input/input55 [ 1015.791838][T10393] Bluetooth: hci2: command 0x0406 tx timeout [ 1015.798269][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 1015.804935][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 1015.870762][T10393] Bluetooth: hci6: command 0x0c1a tx timeout [ 1015.877984][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 1018.807766][T14093] loop7: detected capacity change from 0 to 2048 [ 1018.923753][T14103] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1019.384503][T14111] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1019.530594][T14111] Remounting filesystem read-only [ 1019.542836][T14112] NILFS (loop7): mounting fs with errors [ 1020.322957][T14103] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1020.374437][T14103] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1020.411328][T14103] Remounting filesystem read-only [ 1020.480785][ T9495] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 1023.288981][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 1025.324165][T14181] loop8: detected capacity change from 0 to 2048 [ 1025.546423][T14188] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1025.955350][T14191] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1027.549602][T14191] Remounting filesystem read-only [ 1027.571012][T14194] NILFS (loop8): mounting fs with errors [ 1027.795697][T14188] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1027.849805][T14188] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1027.870552][T14188] Remounting filesystem read-only [ 1027.888171][ T9358] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1028.058246][T10393] Bluetooth: unknown link type 128 [ 1028.324532][T14200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1028.351594][T14200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1028.373375][T14200] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1028.416923][T14200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1028.428658][T14200] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1028.472045][T14200] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1029.462789][T14220] delete_channel: no stack [ 1029.518805][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1029.518830][ T30] audit: type=1326 audit(1760897275.414:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1029.960511][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1029.968161][ T30] audit: type=1326 audit(1760897275.414:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1030.171915][ T30] audit: type=1326 audit(1760897275.414:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1030.340536][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1030.360846][T10393] Bluetooth: hci0: command 0x0406 tx timeout [ 1030.409315][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1030.440458][T10393] Bluetooth: hci1: command 0x0406 tx timeout [ 1030.446478][T10393] Bluetooth: hci2: command 0x0406 tx timeout [ 1030.453164][T10393] Bluetooth: hci5: command 0x0406 tx timeout [ 1030.459159][T10393] Bluetooth: hci3: command 0x0406 tx timeout [ 1030.500992][ T30] audit: type=1326 audit(1760897275.414:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1030.535518][ T5826] Bluetooth: hci6: command 0x0c1a tx timeout [ 1030.560560][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.570518][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.582264][ T30] audit: type=1326 audit(1760897275.414:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1030.605309][ T30] audit: type=1326 audit(1760897275.414:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1030.641943][ T30] audit: type=1326 audit(1760897275.414:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1030.669094][T14220] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1030.700563][ T30] audit: type=1326 audit(1760897275.414:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1030.738269][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1030.858117][ T30] audit: type=1326 audit(1760897275.414:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1031.001364][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1031.042123][ T30] audit: type=1326 audit(1760897275.414:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1034.438496][ T9] usb 6-1: USB disconnect, device number 4 [ 1034.602205][T14253] input: syz1 as /devices/virtual/input/input56 [ 1036.594863][T10393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.604960][T10393] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.613251][T10393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.624341][T10393] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.633654][T10393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.943869][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 1037.264789][T14273] lo speed is unknown, defaulting to 1000 [ 1037.966925][ T6915] bridge_slave_1: left promiscuous mode [ 1037.991670][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.070024][ T6915] bridge_slave_0: left promiscuous mode [ 1038.133328][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.271909][ T8165] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1038.541950][ T8165] usb 6-1: Using ep0 maxpacket: 32 [ 1038.601003][ T8165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.671260][T10393] Bluetooth: hci0: command tx timeout [ 1038.810476][ T8165] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.820286][ T8165] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1039.820460][ T8165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.021599][ T8165] usb 6-1: config 0 descriptor?? [ 1040.750797][T10393] Bluetooth: hci0: command tx timeout [ 1041.862555][ T8165] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1042.830962][T10393] Bluetooth: hci0: command tx timeout [ 1042.868542][T14326] loop7: detected capacity change from 0 to 4096 [ 1042.924211][T14326] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1042.931746][T13607] usb 6-1: USB disconnect, device number 5 [ 1042.962265][T14326] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1042.986930][T14326] System zones: 0-5 [ 1043.098972][T14326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.877235][ T6915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.116771][ T6915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.126600][T14326] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.146987][ T6915] bond0 (unregistering): Released all slaves [ 1044.208623][T14341] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1742'. [ 1044.828920][T14349] netlink: 'syz.8.1744': attribute type 1 has an invalid length. [ 1044.914174][T10393] Bluetooth: hci0: command tx timeout [ 1046.091899][ T5924] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1046.264254][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.296453][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.349832][ T5924] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1046.456142][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.579170][ T5924] usb 1-1: config 0 descriptor?? [ 1047.096837][ T5924] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1047.115076][ T5924] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1047.147167][ T5924] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1047.178596][ T5924] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1047.217898][ T5924] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1047.235089][ T5924] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1047.251390][ T5924] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1047.281002][ T5924] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1047.425271][ T5924] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 1047.631676][ T5924] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 1047.788162][ T5924] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 1049.018571][ T5924] usb 1-1: USB disconnect, device number 5 [ 1049.469276][T14400] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.1753'. [ 1049.511697][T14400] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1050.665207][T14406] loop5: detected capacity change from 0 to 2048 [ 1050.752685][T14411] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1051.200641][T14417] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1051.336728][T14417] Remounting filesystem read-only [ 1051.344845][T14418] NILFS (loop5): mounting fs with errors [ 1051.850747][T14411] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1051.890605][T14411] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1051.915524][T14411] Remounting filesystem read-only [ 1051.935975][T13384] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1052.644037][T14426] ptrace attach of "./syz-executor exec"[10954] was attempted by ""[14426] [ 1054.524857][T14349] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1054.852115][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1054.852141][ T30] audit: type=1326 audit(1760897300.784:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1054.991283][ T30] audit: type=1326 audit(1760897300.824:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1055.090445][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1761'. [ 1055.186004][T14273] chnl_net:caif_netlink_parms(): no params data found [ 1055.240638][ T30] audit: type=1326 audit(1760897300.824:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1055.321765][ T30] audit: type=1326 audit(1760897300.834:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1055.370547][ T30] audit: type=1326 audit(1760897300.834:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1055.394941][ T30] audit: type=1326 audit(1760897300.854:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1055.472788][T14460] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1763'. [ 1055.641232][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1761'. [ 1055.652087][ T30] audit: type=1326 audit(1760897300.854:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1055.765283][ T30] audit: type=1326 audit(1760897300.854:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1056.070234][ T30] audit: type=1326 audit(1760897300.944:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1056.166130][ T30] audit: type=1326 audit(1760897300.944:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14437 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1056.477883][ T6915] hsr_slave_0: left promiscuous mode [ 1056.484254][ T6915] hsr_slave_1: left promiscuous mode [ 1056.521373][ T6915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.914229][ T6915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.324419][T13411] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1058.843676][T13411] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1058.863357][T13411] usb 4-1: not running at top speed; connect to a high speed hub [ 1058.877788][T13411] usb 4-1: config 2 has an invalid interface number: 212 but max is 0 [ 1058.888923][T13411] usb 4-1: config 2 has no interface number 0 [ 1058.897670][T13411] usb 4-1: config 2 interface 212 has no altsetting 0 [ 1058.908692][T13411] usb 4-1: language id specifier not provided by device, defaulting to English [ 1058.930747][T13411] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1058.940288][T13411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.974606][T13411] usb 4-1: Product: syz [ 1059.014488][T13411] usb 4-1: SerialNumber: syz [ 1059.376212][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 1060.665325][ T6915] team0 (unregistering): Port device team_slave_1 removed [ 1060.910902][ T6915] team0 (unregistering): Port device team_slave_0 removed [ 1061.593608][T13411] usb 4-1: USB disconnect, device number 13 [ 1062.191561][T14515] loop3: detected capacity change from 0 to 4096 [ 1062.212921][T14515] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1062.229659][T14515] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1062.271728][T14515] System zones: 0-5 [ 1062.429903][T14515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.844774][T14515] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.961625][ T8165] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1064.160565][ T8165] usb 1-1: Using ep0 maxpacket: 32 [ 1064.169722][ T8165] usb 1-1: config 2 has an invalid interface number: 157 but max is 0 [ 1064.178381][ T8165] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.200813][ T8165] usb 1-1: config 2 has no interface number 0 [ 1064.213403][ T8165] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 1064.227000][ T8165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.250488][ T8165] usb 1-1: Product: syz [ 1064.256262][ T8165] usb 1-1: Manufacturer: syz [ 1064.312941][ T8165] usb 1-1: SerialNumber: syz [ 1064.434067][ T8165] imon 1-1:2.157: unable to register, err -19 [ 1064.610662][T14273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.617841][T14273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.636705][T14273] bridge_slave_0: entered allmulticast mode [ 1064.649976][T14273] bridge_slave_0: entered promiscuous mode [ 1064.673911][T14273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.711945][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.719177][T14273] bridge_slave_1: entered allmulticast mode [ 1064.756696][T14273] bridge_slave_1: entered promiscuous mode [ 1065.398502][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1790'. [ 1065.439205][T14273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.653271][T14273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.917320][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1793'. [ 1066.024886][ T6915] IPVS: stop unused estimator thread 0... [ 1066.145981][ T5924] usb 1-1: USB disconnect, device number 6 [ 1066.185886][ T8165] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1066.244933][T14273] team0: Port device team_slave_0 added [ 1066.306459][T14273] team0: Port device team_slave_1 added [ 1066.495206][ T8165] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1066.514355][ T8165] usb 6-1: not running at top speed; connect to a high speed hub [ 1066.532676][T10393] Bluetooth: unknown link type 128 [ 1066.566602][ T8165] usb 6-1: config 2 has an invalid interface number: 212 but max is 0 [ 1066.584887][ T8165] usb 6-1: config 2 has no interface number 0 [ 1066.602541][ T8165] usb 6-1: config 2 interface 212 has no altsetting 0 [ 1066.625767][T14273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.626759][ T8165] usb 6-1: language id specifier not provided by device, defaulting to English [ 1066.653176][ T8165] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1066.662392][ T8165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.671869][ T8165] usb 6-1: Product: syz [ 1066.676080][ T8165] usb 6-1: SerialNumber: syz [ 1066.744500][T14584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1066.778068][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.778124][T14584] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1066.837632][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1066.843984][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.856305][T14273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.862785][T14584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1066.961295][T14273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.968266][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.063589][T14273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.143897][T14584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1067.150202][T14584] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1067.169959][T14584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1067.274404][T14584] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1067.362683][T14584] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1068.542444][T14273] hsr_slave_0: entered promiscuous mode [ 1068.585606][T14273] hsr_slave_1: entered promiscuous mode [ 1068.751870][T10393] Bluetooth: hci3: command 0x0406 tx timeout [ 1068.842144][T10393] Bluetooth: hci5: command 0x0406 tx timeout [ 1068.940542][T10393] Bluetooth: hci2: command 0x0406 tx timeout [ 1069.152108][T10393] Bluetooth: hci1: command 0x0406 tx timeout [ 1069.292433][T10393] Bluetooth: hci0: command 0x0c1a tx timeout [ 1069.298863][T10393] Bluetooth: hci6: command 0x0c1a tx timeout [ 1071.312034][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1071.375669][ T8165] usb 6-1: USB disconnect, device number 6 [ 1071.508998][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1806'. [ 1072.090090][T14641] ptrace attach of "./syz-executor exec"[9358] was attempted by ""[14641] [ 1072.217181][T13411] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1073.340608][T13411] usb 8-1: Using ep0 maxpacket: 8 [ 1073.392205][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1073.500907][T13411] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1073.601669][T13411] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1073.612259][ T5826] Bluetooth: unknown link type 128 [ 1073.696212][T13411] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.711173][T14649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1073.776681][T14649] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1073.885027][T13411] usb 8-1: Product: syz [ 1073.889239][T13411] usb 8-1: Manufacturer: syz [ 1073.895551][T14649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1073.925296][T14649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1073.930566][T13411] usb 8-1: SerialNumber: syz [ 1073.956817][T13411] usb 8-1: config 0 descriptor?? [ 1074.046643][T14649] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1074.080745][T14649] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1074.468942][T14273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1074.530037][T14273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1075.641755][T14273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1075.688128][T14273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1075.710891][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 1075.790869][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 1076.094269][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 1076.100353][T10393] Bluetooth: hci2: command 0x0406 tx timeout [ 1076.110721][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1076.116759][T10393] Bluetooth: hci6: command 0x0c1a tx timeout [ 1076.701449][T14273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.721589][ T5924] usb 8-1: USB disconnect, device number 9 [ 1076.821931][T14273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.884677][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.891894][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.004940][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.012157][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.161265][T14273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.994127][T14273] veth0_vlan: entered promiscuous mode [ 1081.059147][T14273] veth1_vlan: entered promiscuous mode [ 1081.330669][T14729] loop8: detected capacity change from 0 to 1024 [ 1081.343436][T14729] EXT4-fs: Ignoring removed oldalloc option [ 1081.349382][T14729] EXT4-fs: Ignoring removed bh option [ 1081.372434][T14273] veth0_macvtap: entered promiscuous mode [ 1081.451244][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 1081.516309][T14273] veth1_macvtap: entered promiscuous mode [ 1081.604974][T14273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.617930][T14273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.776189][T14729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.869844][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1081.869860][ T30] audit: type=1804 audit(1760897327.794:737): pid=14729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1830" name="/newroot/178/file1/bus" dev="loop8" ino=18 res=1 errno=0 [ 1082.856693][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.866148][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.924529][ T9358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.005807][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.190846][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1832'. [ 1083.206596][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.424400][ T9799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.492905][ T9799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.555845][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.574491][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.950507][T13411] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1085.130848][T13411] usb 6-1: Using ep0 maxpacket: 8 [ 1085.637501][T13411] usb 6-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 1085.697205][T13411] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64320, setting to 1024 [ 1085.727926][T13411] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1085.789109][T13411] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1085.850359][T13411] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1085.883261][T13411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.912611][T13411] usb 6-1: Product: syz [ 1085.927188][T10393] Bluetooth: unknown link type 128 [ 1085.932698][T13411] usb 6-1: Manufacturer: syz [ 1085.932729][T13411] usb 6-1: SerialNumber: syz [ 1085.985139][T14760] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1086.026358][T13411] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1086.062663][T14768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1086.092795][T13411] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1086.121772][T14768] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1086.144270][T14768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1086.230868][T14768] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1086.241335][T13411] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1086.272996][T14768] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1086.364442][T14768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1086.757372][T14777] netlink: 'syz.8.1840': attribute type 1 has an invalid length. [ 1086.878634][T14777] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1087.135957][T14779] ptrace attach of "./syz-executor exec"[9495] was attempted by ""[14779] [ 1088.111244][T10393] Bluetooth: hci3: command 0x0406 tx timeout [ 1088.192021][T10393] Bluetooth: hci2: command 0x0406 tx timeout [ 1088.198195][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 1088.280549][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 1088.351295][ T5826] Bluetooth: hci6: command 0x0c1a tx timeout [ 1088.432288][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1089.651067][ T5826] Bluetooth: unknown link type 128 [ 1089.884865][T14827] netlink: 'syz.3.1856': attribute type 1 has an invalid length. [ 1090.168817][ T9357] usb 6-1: USB disconnect, device number 7 [ 1090.851658][T14816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1090.888419][T14816] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1090.901782][T14816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1090.908104][T14816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1090.951089][T14816] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1090.969429][T14816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1092.082120][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 1092.875000][ T30] audit: type=1326 audit(1760897338.804:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1092.965820][ T30] audit: type=1326 audit(1760897338.834:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1092.980547][T10393] Bluetooth: hci1: command 0x0406 tx timeout [ 1092.988879][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1093.003653][T10393] Bluetooth: hci5: command 0x0406 tx timeout [ 1093.003820][T14677] Bluetooth: hci0: command 0x0c1a tx timeout [ 1093.009698][T10393] Bluetooth: hci6: command 0x0c1a tx timeout [ 1093.043631][ T30] audit: type=1326 audit(1760897338.834:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1093.068231][ T30] audit: type=1326 audit(1760897338.834:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1093.166649][ T30] audit: type=1326 audit(1760897338.834:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1093.243021][ T30] audit: type=1326 audit(1760897338.834:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1093.266476][ T30] audit: type=1326 audit(1760897338.834:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1093.534205][ T30] audit: type=1326 audit(1760897338.844:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1093.801918][ T30] audit: type=1326 audit(1760897338.844:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1093.889706][ T30] audit: type=1326 audit(1760897338.844:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe953f8efc9 code=0x7ffc0000 [ 1093.961582][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1868'. [ 1094.275559][T14876] loop3: detected capacity change from 0 to 4096 [ 1094.322154][T14876] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1094.400007][T14876] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1094.431445][T14876] System zones: 0-5 [ 1094.467552][T14889] netlink: 'syz.5.1873': attribute type 1 has an invalid length. [ 1094.506458][T14876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.572510][T14891] ptrace attach of "./syz-executor exec"[9495] was attempted by ""[14891] [ 1095.331131][T14893] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1095.877133][T14906] usb usb8: usbfs: process 14906 (syz.8.1876) did not claim interface 0 before use [ 1096.067814][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.084722][T14911] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1877'. [ 1096.313153][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1877'. [ 1096.313164][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1877'. [ 1096.495306][T14917] loop8: detected capacity change from 0 to 2048 [ 1096.787335][T14917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1100.385183][T14954] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 1102.120769][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1102.728700][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1103.147496][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.222377][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.259557][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1103.397215][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.629399][ T9] usb 9-1: config 0 descriptor?? [ 1104.009725][T14996] loop7: detected capacity change from 0 to 4096 [ 1104.018855][T14996] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1104.029545][T14996] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1104.045854][T14996] System zones: 0-5 [ 1104.054884][T14996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.177929][ T9] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 1104.385001][T15006] overlayfs: failed to resolve './bus': -2 [ 1105.590974][ T5924] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 1106.468833][T15033] netlink: 'syz.2.1906': attribute type 1 has an invalid length. [ 1109.618421][T15059] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1911'. [ 1109.627579][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1109.627596][ T30] audit: type=1800 audit(1760897355.534:764): pid=15059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1911" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1109.978497][ T9] usb 9-1: USB disconnect, device number 2 [ 1110.203559][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1912'. [ 1110.582582][T14996] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.875484][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1913'. [ 1111.840571][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'. [ 1112.142567][ T36] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 1112.210499][ T5924] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1112.451170][ T5924] usb 8-1: Using ep0 maxpacket: 8 [ 1112.459219][ T5924] usb 8-1: config 0 has an invalid interface number: 56 but max is 0 [ 1112.567881][ T5924] usb 8-1: config 0 has no interface number 0 [ 1112.594677][ T5924] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1112.606351][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.634877][ T5924] usb 8-1: Product: syz [ 1112.666243][ T5924] usb 8-1: Manufacturer: syz [ 1112.683918][ T5924] usb 8-1: SerialNumber: syz [ 1112.805653][ T5924] usb 8-1: config 0 descriptor?? [ 1112.835811][ T5924] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1113.993028][ T5924] pctv452e: pctv452e_power_ctrl: 1 [ 1113.993028][ T5924] [ 1114.011227][ T5924] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1114.011227][ T5924] [ 1114.029893][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 1114.125200][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1114.180875][T15099] loop2: detected capacity change from 0 to 2048 [ 1114.205846][ T5924] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1114.249054][ T5924] usb 8-1: media controller created [ 1114.295684][ T5924] dvb-usb: bulk message failed: -22 (8/0) [ 1114.331067][ T5924] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1114.375071][ T5924] dvb-usb: MAC address reading failed. [ 1114.420623][T15105] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1114.821256][T15109] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1115.643598][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1115.730697][T15109] Remounting filesystem read-only [ 1115.736124][T15111] NILFS (loop2): mounting fs with errors [ 1116.052537][T15105] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1116.122468][T15105] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1116.171763][T15105] Remounting filesystem read-only [ 1116.212223][ T5924] DVB: Unable to find symbol stb0899_attach() [ 1116.218317][ T5924] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1116.236798][T14273] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1116.479287][ T5924] rc_core: IR keymap rc-tt-1500 not found [ 1116.519718][ T5924] Registered IR keymap rc-empty [ 1116.553561][ T5924] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1116.606314][ T5924] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input63 [ 1116.624947][T15131] lo speed is unknown, defaulting to 1000 [ 1116.721327][T15132] sctp: [Deprecated]: syz.7.1929 (pid 15132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1116.721327][T15132] Use struct sctp_sack_info instead [ 1116.772355][ T5924] dvb-usb: schedule remote query interval to 100 msecs. [ 1116.916456][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'. [ 1117.044377][ T5924] pctv452e: pctv452e_power_ctrl: 0 [ 1117.044377][ T5924] [ 1117.312589][T13607] dvb-usb: bulk message failed: -22 (4/0) [ 1117.318910][T13607] dvb-usb: error -22 while querying for an remote control event. [ 1117.327998][ T5924] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1117.582132][T13607] dvb-usb: bulk message failed: -22 (4/0) [ 1117.599222][T13607] dvb-usb: error -22 while querying for an remote control event. [ 1117.692784][ T5924] usb 8-1: USB disconnect, device number 10 [ 1118.317625][ T5924] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1118.612293][T15162] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1926'. [ 1118.756185][T13388] Bluetooth: hci0: command 0x0c1a tx timeout [ 1126.711075][T15257] loop5: detected capacity change from 0 to 1024 [ 1126.719562][T15256] loop3: detected capacity change from 0 to 2048 [ 1126.728607][T15257] EXT4-fs: Ignoring removed oldalloc option [ 1126.780130][T15257] EXT4-fs: Ignoring removed bh option [ 1126.861346][T15262] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1126.894369][T15257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.181204][ T30] audit: type=1804 audit(1760897372.884:765): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1957" name="/newroot/69/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 1128.085535][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.172543][T15270] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1128.981109][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1128.987477][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1129.001002][T15270] Remounting filesystem read-only [ 1129.006383][T15271] NILFS (loop3): mounting fs with errors [ 1129.336774][T15262] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1129.410438][T15262] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1129.455847][T15262] Remounting filesystem read-only [ 1129.492141][ T5831] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1129.973080][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1960'. [ 1129.982060][T15275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1960'. [ 1130.670505][T15289] loop3: detected capacity change from 0 to 2048 [ 1130.692113][T15289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1132.013498][T15300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1968'. [ 1132.996648][T15316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1972'. [ 1133.260662][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1972'. [ 1134.575971][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1979'. [ 1134.585166][T15341] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1979'. [ 1137.025938][T15356] loop8: detected capacity change from 0 to 2048 [ 1137.070766][T15356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1138.451011][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'. [ 1139.057021][ T5924] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1139.258903][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1139.348352][ T5924] usb 4-1: not running at top speed; connect to a high speed hub [ 1139.444546][ T5924] usb 4-1: config 2 has an invalid interface number: 212 but max is 0 [ 1139.497537][ T5924] usb 4-1: config 2 has no interface number 0 [ 1139.549158][ T5924] usb 4-1: config 2 interface 212 has no altsetting 0 [ 1139.824988][ T5924] usb 4-1: language id specifier not provided by device, defaulting to English [ 1140.043187][ T5924] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1140.085480][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.117896][ T5924] usb 4-1: Product: syz [ 1140.130584][ T5924] usb 4-1: SerialNumber: syz [ 1143.084128][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 1143.093170][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1996'. [ 1144.596693][T15431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2001'. [ 1144.872911][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 1145.318295][ T5924] usb 4-1: USB disconnect, device number 14 [ 1145.880844][T13411] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 1146.626178][T13411] usb 9-1: config 0 has no interfaces? [ 1146.652458][T13411] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1146.731328][T13411] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.917075][T13411] usb 9-1: config 0 descriptor?? [ 1146.999468][T15459] loop3: detected capacity change from 0 to 1024 [ 1147.023260][T15459] EXT4-fs: Ignoring removed oldalloc option [ 1147.103259][T15459] EXT4-fs: Ignoring removed bh option [ 1147.181980][T13411] usb 9-1: USB disconnect, device number 3 [ 1147.313734][T15459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.494721][ T30] audit: type=1804 audit(1760897393.424:766): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2006" name="/newroot/421/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 1148.623378][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.875789][T15497] input: syz1 as /devices/virtual/input/input69 [ 1154.943864][T15518] netlink: 'syz.3.2016': attribute type 21 has an invalid length. [ 1155.142869][T15518] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2016'. [ 1155.704081][T15519] netlink: 'syz.3.2016': attribute type 21 has an invalid length. [ 1155.850826][T15519] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2016'. [ 1157.440618][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 1157.792112][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1157.940340][T15555] netlink: 'syz.8.2027': attribute type 1 has an invalid length. [ 1158.214163][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.931377][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.952544][T15561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1158.990147][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1159.052802][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.131518][ T9] usb 3-1: config 0 descriptor?? [ 1159.577110][ T9] usbhid 3-1:0.0: can't add hid device: -32 [ 1159.639968][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1159.683817][ T9] usb 3-1: USB disconnect, device number 3 [ 1159.717594][T15573] loop7: detected capacity change from 0 to 2048 [ 1159.826623][T15581] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1159.890349][T15583] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2031'. [ 1160.201996][T15580] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 1160.315560][T15586] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1161.222006][T15586] Remounting filesystem read-only [ 1161.227522][T15587] NILFS (loop7): mounting fs with errors [ 1161.315495][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2031'. [ 1161.722131][T15581] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1162.140454][T15581] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1162.245607][T15581] Remounting filesystem read-only [ 1162.338874][ T9495] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 1162.956290][T15622] binder: 15602:15622 ioctl c018620c 200000000100 returned -1 [ 1165.972899][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 1168.090540][T15670] input: syz1 as /devices/virtual/input/input72 [ 1169.071916][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'. [ 1169.402612][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2046'. [ 1170.301855][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2052'. [ 1170.352317][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2052'. [ 1170.417118][T15705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.425521][T15705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.450709][T15705] bridge0: entered promiscuous mode [ 1171.094719][T15715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2054'. [ 1171.182777][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2055'. [ 1171.357363][T15719] loop2: detected capacity change from 0 to 2048 [ 1171.512177][T15726] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1171.999466][T15731] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1172.886164][T15731] Remounting filesystem read-only [ 1172.897717][T15732] NILFS (loop2): mounting fs with errors [ 1173.261573][T15726] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1173.585545][T15726] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1173.630444][T15726] Remounting filesystem read-only [ 1173.645852][T14273] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1174.722077][ T30] audit: type=1326 audit(1760897420.654:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed67b8efc9 code=0x7ffc0000 [ 1174.880532][ T30] audit: type=1326 audit(1760897420.674:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed67b8efc9 code=0x7ffc0000 [ 1174.999489][ T30] audit: type=1326 audit(1760897420.674:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed67b8efc9 code=0x7ffc0000 [ 1175.321941][ T30] audit: type=1326 audit(1760897420.674:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fed67b8efc9 code=0x7ffc0000 [ 1175.352764][ T30] audit: type=1326 audit(1760897420.674:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed67b8efc9 code=0x7ffc0000 [ 1175.494089][ T30] audit: type=1326 audit(1760897420.674:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed67b8efc9 code=0x7ffc0000 [ 1180.308430][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'. [ 1185.146660][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2096'. [ 1185.484476][T15892] loop2: detected capacity change from 0 to 2048 [ 1185.583343][T15896] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1185.966258][T15899] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1186.001535][T15899] Remounting filesystem read-only [ 1186.021971][T15899] NILFS (loop2): mounting fs with errors [ 1187.130669][T15896] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1187.219860][T15896] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1187.291753][T15896] Remounting filesystem read-only [ 1187.330382][T14273] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1188.032249][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2100'. [ 1189.021603][T15930] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2103'. [ 1189.717058][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1189.723681][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.084141][T15956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2108'. [ 1191.094457][T15956] openvswitch: netlink: Flow key attr not present in new flow. [ 1191.496379][T15960] netlink: 'syz.3.2109': attribute type 1 has an invalid length. [ 1191.782240][T15960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1192.581912][T13607] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1192.853401][T13607] usb 6-1: config 0 has no interfaces? [ 1193.018913][T13607] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1193.069392][T13607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.197198][T13607] usb 6-1: Product: syz [ 1193.287106][T13607] usb 6-1: Manufacturer: syz [ 1193.400951][T13607] usb 6-1: SerialNumber: syz [ 1193.473033][T13607] usb 6-1: config 0 descriptor?? [ 1193.777918][T15974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.790048][T15974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.260489][ T5981] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1195.789648][ T5981] usb 9-1: config 0 has no interfaces? [ 1196.810556][ T5981] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1196.819666][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.062455][ T5981] usb 9-1: Product: syz [ 1197.066670][ T5981] usb 9-1: Manufacturer: syz [ 1197.220494][ T5981] usb 9-1: SerialNumber: syz [ 1197.220531][ T8165] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1197.380476][ T8165] usb 3-1: Using ep0 maxpacket: 32 [ 1197.406024][ T8165] usb 3-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 1197.438503][ T8165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.481627][ T5981] usb 9-1: config 0 descriptor?? [ 1197.485556][ T8165] usb 3-1: Product: syz [ 1197.515927][ T8165] usb 3-1: Manufacturer: syz [ 1197.530724][ T8165] usb 3-1: SerialNumber: syz [ 1197.611389][ T8165] usb 3-1: config 0 descriptor?? [ 1197.835367][ T30] audit: type=1326 audit(1760897443.704:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15994 comm="syz.8.2116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9f098efc9 code=0x0 [ 1198.070899][ T8165] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1198.139606][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 1198.173887][ T5924] usb 6-1: USB disconnect, device number 8 [ 1198.276690][T16013] batadv0: entered promiscuous mode [ 1198.325119][T16013] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1198.435016][ T8165] usb 1-1: Using ep0 maxpacket: 8 [ 1198.462283][T16013] batadv0: left promiscuous mode [ 1198.597851][ T8165] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.638776][ T8165] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1198.725473][ T8165] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1198.734774][ T8165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.743134][ T8165] usb 1-1: Product: syz [ 1198.747470][ T8165] usb 1-1: Manufacturer: syz [ 1198.753517][ T8165] usb 1-1: SerialNumber: syz [ 1198.763583][ T8165] usb 1-1: bad CDC descriptors [ 1198.812442][ T8165] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1198.830795][ T8165] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1199.121851][ T8165] usb 3-1: USB disconnect, device number 4 [ 1200.093849][T16042] loop5: detected capacity change from 0 to 1024 [ 1200.189956][T16042] hfsplus: failed to load root directory [ 1201.344285][ T5897] usb 9-1: USB disconnect, device number 4 [ 1202.105123][T16068] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2128'. [ 1203.043842][T16074] loop8: detected capacity change from 0 to 2048 [ 1203.191924][T16078] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1203.649666][T16080] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1204.490995][T16080] Remounting filesystem read-only [ 1204.498675][T16081] NILFS (loop8): mounting fs with errors [ 1204.556394][T13607] usb 1-1: USB disconnect, device number 7 [ 1204.839644][T16078] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1204.900386][T16078] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1204.909607][T16078] Remounting filesystem read-only [ 1204.959921][ T9358] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1206.615802][T16104] loop3: detected capacity change from 0 to 1024 [ 1206.683165][T16104] hfsplus: failed to load root directory [ 1208.440982][T13607] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1208.732026][T13607] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1208.772910][T13607] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.794945][T13607] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 20, changing to 7 [ 1208.825059][T13607] usb 8-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1208.881413][T13607] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1208.894230][T13607] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.923921][T13607] usb 8-1: Product: syz [ 1208.934596][T13607] usb 8-1: Manufacturer: syz [ 1209.063603][T13607] usb 8-1: SerialNumber: syz [ 1209.169012][T16139] loop2: detected capacity change from 0 to 2048 [ 1209.297650][T16144] netlink: 'syz.8.2151': attribute type 10 has an invalid length. [ 1209.336191][T16145] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1209.339230][T13607] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1209.662980][T13607] usb 8-1: USB disconnect, device number 11 [ 1209.665586][T16144] team0: Device veth1_macvtap failed to register rx_handler [ 1209.748435][T16147] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1210.579029][T16147] Remounting filesystem read-only [ 1210.603832][T16148] NILFS (loop2): mounting fs with errors [ 1210.643462][T13810] udevd[13810]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1210.927331][T16145] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1210.975099][T16145] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1211.021581][T16145] Remounting filesystem read-only [ 1211.282735][T14273] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1212.296867][T16162] netlink: 'syz.2.2154': attribute type 1 has an invalid length. [ 1212.404808][T16164] fuse: Bad value for 'fd' [ 1213.813703][T16185] loop2: detected capacity change from 0 to 4096 [ 1213.873859][T16185] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1213.911161][T16185] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1213.951085][T16185] System zones: 0-5 [ 1213.957053][T16192] loop8: detected capacity change from 0 to 2048 [ 1214.010356][T16185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.100044][T16185] overlayfs: failed to resolve './bus': -2 [ 1214.116400][T16195] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1214.571870][T16199] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1215.798501][T16199] Remounting filesystem read-only [ 1215.807357][T16200] NILFS (loop8): mounting fs with errors [ 1216.256427][T16195] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1216.332956][T16195] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1216.354985][T16185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.401002][T16195] Remounting filesystem read-only [ 1216.422251][ T9358] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1219.374675][T10393] Bluetooth: hci3: connection err: -111 [ 1219.386717][T16237] netlink: 'syz.0.2172': attribute type 1 has an invalid length. [ 1220.231565][ T5904] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1220.485133][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.496318][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.506371][ T5904] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1220.518852][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.537451][ T5904] usb 1-1: config 0 descriptor?? [ 1221.368838][ T5904] usbhid 1-1:0.0: can't add hid device: -32 [ 1221.374917][ T5904] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1221.389072][ T5904] usb 1-1: USB disconnect, device number 8 [ 1223.516217][T10393] Bluetooth: hci6: connection err: -111 [ 1228.960491][ T5897] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1229.165217][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.186178][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.263911][ T5897] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1229.295998][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.339360][ T5897] usb 4-1: config 0 descriptor?? [ 1229.750578][ T5904] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1229.995911][ T5897] usbhid 4-1:0.0: can't add hid device: -32 [ 1230.003804][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1230.048119][ T5904] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1230.128607][ T5897] usb 4-1: USB disconnect, device number 15 [ 1230.149234][ T5904] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1230.194258][ T5904] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1230.262279][ T5904] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1230.372016][ T5904] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1230.448660][ T5904] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1230.477079][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1230.699604][ T5904] usb 8-1: Product: syz [ 1230.720061][ T5904] usb 8-1: Manufacturer: syz [ 1231.101543][ T5904] cdc_wdm 8-1:1.0: skipping garbage [ 1231.130535][ T5904] cdc_wdm 8-1:1.0: skipping garbage [ 1231.140216][ T5904] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1231.159498][ T5904] cdc_wdm 8-1:1.0: Unknown control protocol [ 1231.631283][T10393] Bluetooth: hci0: connection err: -111 [ 1231.962074][ T8165] usb 8-1: USB disconnect, device number 12 [ 1235.480604][T13607] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1235.686361][T13607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.867613][T13607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.983411][T13607] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1236.035048][T13607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.144927][T16414] lo speed is unknown, defaulting to 1000 [ 1236.444383][T13607] usb 6-1: config 0 descriptor?? [ 1237.977763][T13607] usbhid 6-1:0.0: can't add hid device: -32 [ 1237.997296][T13607] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1238.068219][T13607] usb 6-1: USB disconnect, device number 9 [ 1241.375820][ T30] audit: type=1326 audit(1760897487.284:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1241.580533][ T30] audit: type=1326 audit(1760897487.284:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1241.706087][ T30] audit: type=1326 audit(1760897487.284:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1241.772470][T16458] loop2: detected capacity change from 0 to 4096 [ 1241.774372][ T30] audit: type=1326 audit(1760897487.284:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1242.013421][T16458] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1242.076288][T16458] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1242.091093][T16458] System zones: 0-5 [ 1242.092213][ T30] audit: type=1326 audit(1760897487.284:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1242.125748][ T30] audit: type=1326 audit(1760897487.284:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1242.162623][ T30] audit: type=1326 audit(1760897487.284:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1242.187324][T16458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1242.210507][ T30] audit: type=1326 audit(1760897487.294:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1242.337934][ T30] audit: type=1326 audit(1760897487.294:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1242.445003][ T30] audit: type=1326 audit(1760897487.294:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16452 comm="syz.3.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef1318efc9 code=0x7ffc0000 [ 1242.516779][T16468] input: syz1 as /devices/virtual/input/input73 [ 1244.004507][T16485] loop5: detected capacity change from 0 to 2048 [ 1244.078570][T14273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.129828][T16491] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1244.541633][T16496] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1244.558168][T13411] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1244.646704][T16496] Remounting filesystem read-only [ 1244.654517][T16497] NILFS (loop5): mounting fs with errors [ 1245.260856][T16491] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1245.260900][T16491] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1245.260930][T16491] Remounting filesystem read-only [ 1245.267492][T13384] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1245.447043][T13411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.447106][T13411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.447164][T13411] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1245.447203][T13411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.449858][T13411] usb 1-1: config 0 descriptor?? [ 1246.212656][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2233'. [ 1246.306517][T13411] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1246.439246][T13411] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1246.439325][T13411] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1246.439463][T13411] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1246.439597][T13411] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1246.439733][T13411] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1246.439873][T13411] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1246.462032][T13411] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1246.922151][ T8165] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1247.347237][T16516] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2234'. [ 1247.572149][T13411] cp2112 0003:10C4:EA90.000B: error requesting version [ 1247.608460][T13411] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -32 [ 1247.720809][ T8165] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1247.796750][ T5925] usb 1-1: USB disconnect, device number 9 [ 1247.806317][ T8165] usb 6-1: not running at top speed; connect to a high speed hub [ 1247.925561][ T8165] usb 6-1: config 2 has an invalid interface number: 212 but max is 0 [ 1248.007524][ T8165] usb 6-1: config 2 has no interface number 0 [ 1248.040839][ T8165] usb 6-1: config 2 interface 212 has no altsetting 0 [ 1248.378364][T16517] fido_id[16517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1248.444519][ T8165] usb 6-1: language id specifier not provided by device, defaulting to English [ 1248.568297][ T8165] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1248.616856][ T8165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.640555][ T8165] usb 6-1: Product: syz [ 1248.696268][ T8165] usb 6-1: SerialNumber: syz [ 1249.229803][T16539] input: syz1 as /devices/virtual/input/input74 [ 1250.783031][T16551] loop2: detected capacity change from 0 to 4096 [ 1250.835014][T16551] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1250.930510][T16551] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1250.991991][T16551] System zones: 0-5 [ 1251.062191][T16551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1251.171107][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1251.177448][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1252.099998][T16564] loop7: detected capacity change from 0 to 2048 [ 1252.327825][T16568] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1252.935222][T16573] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1253.043629][T16573] Remounting filesystem read-only [ 1253.052387][T16574] NILFS (loop7): mounting fs with errors [ 1253.623977][T16570] loop8: detected capacity change from 0 to 1024 [ 1253.678627][T16570] EXT4-fs: Ignoring removed oldalloc option [ 1253.690946][T16568] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1253.717048][T16570] EXT4-fs: Ignoring removed bh option [ 1253.760551][T16568] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1253.823558][T16568] Remounting filesystem read-only [ 1253.849795][ T9495] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 1253.858046][T13411] usb 6-1: USB disconnect, device number 10 [ 1253.959677][T16570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1254.062694][T14273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.103116][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1254.103139][ T30] audit: type=1804 audit(1760897500.034:790): pid=16570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2246" name="/newroot/250/file1/bus" dev="loop8" ino=18 res=1 errno=0 [ 1254.913427][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2249'. [ 1255.407028][T16591] netlink: 'syz.7.2248': attribute type 21 has an invalid length. [ 1255.452169][T16591] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2248'. [ 1255.466436][T16591] netlink: 'syz.7.2248': attribute type 21 has an invalid length. [ 1255.474988][T16591] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2248'. [ 1256.778274][ T9358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.640595][ T5897] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1258.126543][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.162569][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.215137][ T5897] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1258.257613][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.396748][ T5897] usb 4-1: config 0 descriptor?? [ 1258.846015][ T5897] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1258.873348][ T5897] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1258.936442][ T5897] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1258.960518][ T5897] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1259.000481][ T5897] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1259.060510][ T5897] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1259.067492][ T5897] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1259.647621][ T5897] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1259.965879][ T5897] cp2112 0003:10C4:EA90.000C: error requesting version [ 1259.999120][ T5897] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -32 [ 1260.426751][T16642] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2260'. [ 1261.087816][ T5924] usb 4-1: USB disconnect, device number 16 [ 1261.212344][T16649] netlink: 'syz.2.2261': attribute type 1 has an invalid length. [ 1261.407732][T16648] lo speed is unknown, defaulting to 1000 [ 1261.704253][T16651] lo speed is unknown, defaulting to 1000 [ 1261.869700][T16661] loop5: detected capacity change from 0 to 1024 [ 1261.905741][T16661] EXT4-fs: Ignoring removed oldalloc option [ 1262.008783][T16661] EXT4-fs: Ignoring removed bh option [ 1262.271570][T16661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1262.390224][T16674] loop2: detected capacity change from 0 to 128 [ 1262.516504][ T30] audit: type=1804 audit(1760897508.434:791): pid=16661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2265" name="/newroot/125/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 1264.592568][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.886958][T16694] netlink: 'syz.3.2274': attribute type 3 has an invalid length. [ 1265.436763][ T30] audit: type=1326 audit(1760897511.364:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1265.568183][ T30] audit: type=1326 audit(1760897511.364:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1265.826846][T16703] loop8: detected capacity change from 0 to 256 [ 1266.579472][ T30] audit: type=1326 audit(1760897511.414:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1266.611917][ T30] audit: type=1326 audit(1760897511.414:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1266.636687][ T30] audit: type=1326 audit(1760897511.414:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1266.659250][ T30] audit: type=1326 audit(1760897511.414:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1266.726869][ T30] audit: type=1326 audit(1760897511.414:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1266.863327][ T30] audit: type=1326 audit(1760897511.414:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1267.020516][ T5904] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1267.265777][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2278'. [ 1267.280697][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.301264][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.442191][ T5904] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1267.451331][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.513322][ T5904] usb 4-1: config 0 descriptor?? [ 1270.467673][T16729] fuse: Bad value for 'fd' [ 1270.574725][ T5904] usbhid 4-1:0.0: can't add hid device: -71 [ 1270.600804][ T5904] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1270.626715][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2282'. [ 1270.851438][T16737] lo speed is unknown, defaulting to 1000 [ 1271.622004][ T5904] usb 4-1: USB disconnect, device number 17 [ 1271.929048][T16743] loop3: detected capacity change from 0 to 1024 [ 1272.062064][T16743] EXT4-fs: Ignoring removed oldalloc option [ 1272.078232][T16743] EXT4-fs: Ignoring removed bh option [ 1272.325842][T16743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.351748][ T8165] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1272.412621][ T30] audit: type=1804 audit(1760897518.334:800): pid=16743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2285" name="/newroot/466/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 1273.514713][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.120721][ T30] audit: type=1326 audit(1760897520.044:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.5.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1274.252198][ T30] audit: type=1326 audit(1760897520.054:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.5.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1274.293961][ T5904] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1274.419416][ T30] audit: type=1326 audit(1760897520.134:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.5.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1274.542506][ T5904] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1274.575758][ T5904] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1274.650504][ T30] audit: type=1326 audit(1760897520.134:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.5.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1274.690529][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1274.747085][ T5904] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1274.770727][ T30] audit: type=1326 audit(1760897520.134:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.5.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1274.811168][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1274.834483][ T5897] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1274.871518][ T5904] usb 4-1: Product: syz [ 1274.890595][ T5904] usb 4-1: Manufacturer: syz [ 1275.796132][ T5904] usb 4-1: SerialNumber: syz [ 1275.825292][ T30] audit: type=1326 audit(1760897520.174:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.5.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1275.849582][ T30] audit: type=1326 audit(1760897520.174:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.5.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a49f8efc9 code=0x7ffc0000 [ 1275.993396][ T5904] usb 4-1: config 0 descriptor?? [ 1276.001752][ T5904] hub 4-1:0.0: bad descriptor, ignoring hub [ 1276.007698][ T5904] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1276.032778][ T5904] usb 4-1: selecting invalid altsetting 0 [ 1276.044051][ T5897] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1276.055324][ T5897] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1276.070528][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1276.079512][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1276.097384][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1276.133223][ T5897] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1276.143235][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1276.154063][ T5897] usb 3-1: Product: syz [ 1276.220454][ T5897] usb 3-1: Manufacturer: syz [ 1276.467857][ T5924] usb 4-1: USB disconnect, device number 18 [ 1276.477491][ T5897] cdc_wdm 3-1:1.0: skipping garbage [ 1276.543506][ T5897] cdc_wdm 3-1:1.0: skipping garbage [ 1276.594601][ T5897] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1276.642522][ T5897] cdc_wdm 3-1:1.0: Unknown control protocol [ 1276.960593][ T5897] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1277.044617][ T5924] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1277.106081][ T8165] usb 8-1: device descriptor read/all, error -71 [ 1277.153562][ T5897] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1277.181531][ T5897] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1277.212896][ T5924] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1277.232583][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1277.260912][ T5924] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1277.273907][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1277.304742][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1277.316461][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1277.342828][ T5924] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1277.360481][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1277.369514][ T5897] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1277.388317][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1277.399853][ T5924] usb 4-1: Product: syz [ 1277.399883][ T5924] usb 4-1: Manufacturer: syz [ 1277.399911][ T5924] usb 4-1: SerialNumber: syz [ 1277.411947][ T5897] usb 1-1: Product: syz [ 1277.413851][ T5924] usb 4-1: config 0 descriptor?? [ 1277.436214][ T5897] usb 1-1: Manufacturer: syz [ 1277.477224][ T5924] hub 4-1:0.0: bad descriptor, ignoring hub [ 1277.482358][ T5897] cdc_wdm 1-1:1.0: skipping garbage [ 1277.499366][ T5924] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1277.525099][ T5897] cdc_wdm 1-1:1.0: skipping garbage [ 1277.544559][ T5924] usb 4-1: selecting invalid altsetting 0 [ 1277.624604][ T5897] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1277.640144][ T5897] cdc_wdm 1-1:1.0: Unknown control protocol [ 1277.927374][ T5924] usb 4-1: USB disconnect, device number 19 [ 1278.816708][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.823601][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.829970][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.836670][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.842944][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.849548][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.855897][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.862493][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.868778][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.875391][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.881710][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.888315][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.894586][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.901191][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.908309][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.914917][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.921540][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.928144][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.934644][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1278.941242][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1278.968950][ T8165] usb 3-1: USB disconnect, device number 5 [ 1278.969020][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1279.390835][ T5924] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1279.564301][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.582390][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.606871][ T5924] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1279.633482][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.685541][ T5924] usb 4-1: config 0 descriptor?? [ 1279.765800][ T5897] usb 1-1: USB disconnect, device number 10 [ 1280.123611][ T5924] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1280.123656][ T5924] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1280.123690][ T5924] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1280.123725][ T5924] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1280.123759][ T5924] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1280.123793][ T5924] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1280.123828][ T5924] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1280.139996][ T5924] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1280.476306][ T5924] cp2112 0003:10C4:EA90.000D: error requesting version [ 1280.544085][ T5924] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -32 [ 1280.625202][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2306'. [ 1282.889726][ T5904] usb 4-1: USB disconnect, device number 20 [ 1282.953906][T13411] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1283.216240][T13411] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1283.267522][T13411] usb 8-1: not running at top speed; connect to a high speed hub [ 1283.278570][T13411] usb 8-1: config 2 has an invalid interface number: 212 but max is 0 [ 1283.334325][T13411] usb 8-1: config 2 has no interface number 0 [ 1283.475678][T13411] usb 8-1: config 2 interface 212 has no altsetting 0 [ 1283.490548][ T8165] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1283.664574][ T8165] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1283.675473][ T8165] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1283.751689][ T8165] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1283.843886][ T8165] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1283.912343][ T8165] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1284.001754][ T8165] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1284.011245][ T8165] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1284.034692][ T8165] usb 9-1: Product: syz [ 1284.064304][ T8165] usb 9-1: Manufacturer: syz [ 1284.157252][ T8165] cdc_wdm 9-1:1.0: skipping garbage [ 1284.193791][ T8165] cdc_wdm 9-1:1.0: skipping garbage [ 1284.278220][ T8165] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1284.311571][ T8165] cdc_wdm 9-1:1.0: Unknown control protocol [ 1285.144794][T16891] ================================================================== [ 1285.152905][T16891] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1285.160134][T16891] Read of size 8 at addr ffff888027f21af8 by task syz.5.2313/16891 [ 1285.168034][T16891] [ 1285.170361][T16891] CPU: 0 UID: 0 PID: 16891 Comm: syz.5.2313 Not tainted syzkaller #0 PREEMPT(full) [ 1285.170405][T16891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1285.170430][T16891] Call Trace: [ 1285.170513][T16891] [ 1285.170527][T16891] dump_stack_lvl+0x116/0x1f0 [ 1285.170624][T16891] print_report+0xcd/0x630 [ 1285.170735][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.170805][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.170849][T16891] ? __phys_addr+0xe8/0x180 [ 1285.170891][T16891] ? __cpa_addr+0x1d3/0x220 [ 1285.170937][T16891] kasan_report+0xe0/0x110 [ 1285.170985][T16891] ? __cpa_addr+0x1d3/0x220 [ 1285.171038][T16891] __cpa_addr+0x1d3/0x220 [ 1285.171094][T16891] cpa_flush+0x28b/0x8a0 [ 1285.171146][T16891] ? __pfx_cpa_flush+0x10/0x10 [ 1285.171198][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.171241][T16891] ? pgprot2cachemode+0x9a/0x130 [ 1285.171279][T16891] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1285.171317][T16891] ? drm_gem_get_pages+0x6a0/0xa10 [ 1285.171416][T16891] change_page_attr_set_clr+0x34e/0x4a0 [ 1285.171476][T16891] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1285.171534][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.171595][T16891] _set_pages_array+0x1ab/0x2c0 [ 1285.171653][T16891] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1285.171713][T16891] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1285.171753][T16891] ? __pfx___might_resched+0x10/0x10 [ 1285.171814][T16891] drm_gem_shmem_mmap+0xc9/0x550 [ 1285.171850][T16891] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1285.171892][T16891] drm_gem_mmap_obj+0x1b5/0x560 [ 1285.171938][T16891] drm_gem_mmap+0x40b/0x620 [ 1285.171983][T16891] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1285.172026][T16891] ? vm_area_alloc+0x1f/0x160 [ 1285.172109][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.172154][T16891] ? lockdep_init_map_type+0x5c/0x280 [ 1285.172207][T16891] __mmap_region+0x1309/0x27a0 [ 1285.172264][T16891] ? __pfx___mmap_region+0x10/0x10 [ 1285.172303][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.172348][T16891] ? __lock_acquire+0xb8a/0x1c90 [ 1285.172403][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.172447][T16891] ? lock_acquire+0x179/0x350 [ 1285.172493][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.172537][T16891] ? find_held_lock+0x2b/0x80 [ 1285.172614][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.172658][T16891] ? __lock_acquire+0xb8a/0x1c90 [ 1285.172704][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.172753][T16891] mmap_region+0x1ab/0x3f0 [ 1285.172788][T16891] ? __get_unmapped_area+0x267/0x440 [ 1285.172834][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.172882][T16891] do_mmap+0xa3e/0x1210 [ 1285.172931][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.172976][T16891] ? __pfx_do_mmap+0x10/0x10 [ 1285.173019][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.173064][T16891] ? __pfx_down_write_killable+0x10/0x10 [ 1285.173120][T16891] vm_mmap_pgoff+0x29e/0x470 [ 1285.173184][T16891] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1285.173240][T16891] ? __fget_files+0x20e/0x3c0 [ 1285.173312][T16891] ? __entry_text_end+0x1020b5/0x1020b9 [ 1285.173361][T16891] ksys_mmap_pgoff+0x32c/0x5c0 [ 1285.173407][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.173455][T16891] __x64_sys_mmap+0x125/0x190 [ 1285.173521][T16891] do_syscall_64+0xcd/0xfa0 [ 1285.173555][T16891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.173593][T16891] RIP: 0033:0x7f6a49f8efc9 [ 1285.173621][T16891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1285.173658][T16891] RSP: 002b:00007f6a4adc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1285.173714][T16891] RAX: ffffffffffffffda RBX: 00007f6a4a1e6180 RCX: 00007f6a49f8efc9 [ 1285.173740][T16891] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 1285.173763][T16891] RBP: 00007f6a4a011f91 R08: 0000000000000006 R09: 0000000100000000 [ 1285.173788][T16891] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1285.173811][T16891] R13: 00007f6a4a1e6218 R14: 00007f6a4a1e6180 R15: 00007fff418ac778 [ 1285.173849][T16891] [ 1285.173861][T16891] [ 1285.572979][T16891] Allocated by task 16891: [ 1285.577382][T16891] kasan_save_stack+0x33/0x60 [ 1285.582069][T16891] kasan_save_track+0x14/0x30 [ 1285.586758][T16891] __kasan_kmalloc+0xaa/0xb0 [ 1285.591364][T16891] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1285.596746][T16891] drm_gem_get_pages+0x144/0xa10 [ 1285.601693][T16891] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1285.607765][T16891] drm_gem_shmem_mmap+0xc9/0x550 [ 1285.612706][T16891] drm_gem_mmap_obj+0x1b5/0x560 [ 1285.617563][T16891] drm_gem_mmap+0x40b/0x620 [ 1285.622076][T16891] __mmap_region+0x1309/0x27a0 [ 1285.626840][T16891] mmap_region+0x1ab/0x3f0 [ 1285.631254][T16891] do_mmap+0xa3e/0x1210 [ 1285.635420][T16891] vm_mmap_pgoff+0x29e/0x470 [ 1285.640017][T16891] ksys_mmap_pgoff+0x32c/0x5c0 [ 1285.644789][T16891] __x64_sys_mmap+0x125/0x190 [ 1285.649496][T16891] do_syscall_64+0xcd/0xfa0 [ 1285.653996][T16891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.659891][T16891] [ 1285.662206][T16891] The buggy address belongs to the object at ffff888027f21a00 [ 1285.662206][T16891] which belongs to the cache kmalloc-256 of size 256 [ 1285.676261][T16891] The buggy address is located 0 bytes to the right of [ 1285.676261][T16891] allocated 248-byte region [ffff888027f21a00, ffff888027f21af8) [ 1285.690751][T16891] [ 1285.693067][T16891] The buggy address belongs to the physical page: [ 1285.699461][T16891] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27f20 [ 1285.708306][T16891] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1285.716975][T16891] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1285.724514][T16891] page_type: f5(slab) [ 1285.728499][T16891] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1285.737095][T16891] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1285.745681][T16891] head: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1285.754352][T16891] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1285.763023][T16891] head: 00fff00000000001 ffffea00009fc801 00000000ffffffff 00000000ffffffff [ 1285.771698][T16891] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1285.780355][T16891] page dumped because: kasan: bad access detected [ 1285.786752][T16891] page_owner tracks the page as allocated [ 1285.792450][T16891] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21669257516, free_ts 0 [ 1285.812175][T16891] post_alloc_hook+0x1c0/0x230 [ 1285.816961][T16891] get_page_from_freelist+0x10a3/0x3a30 [ 1285.822506][T16891] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1285.828396][T16891] alloc_pages_mpol+0x1fb/0x550 [ 1285.833268][T16891] new_slab+0x24a/0x360 [ 1285.837440][T16891] ___slab_alloc+0xdc4/0x1ae0 [ 1285.842135][T16891] __slab_alloc.constprop.0+0x63/0x110 [ 1285.847614][T16891] __kmalloc_cache_noprof+0x477/0x780 [ 1285.853004][T16891] bus_add_driver+0x92/0x690 [ 1285.857680][T16891] driver_register+0x15c/0x4b0 [ 1285.862457][T16891] __usb_serial_register_drivers+0x5cd/0xe70 [ 1285.868471][T16891] do_one_initcall+0x123/0x6e0 [ 1285.873273][T16891] kernel_init_freeable+0x5c8/0x920 [ 1285.878536][T16891] kernel_init+0x1c/0x2b0 [ 1285.882873][T16891] ret_from_fork+0x675/0x7d0 [ 1285.887475][T16891] ret_from_fork_asm+0x1a/0x30 [ 1285.892238][T16891] page_owner free stack trace missing [ 1285.897588][T16891] [ 1285.899900][T16891] Memory state around the buggy address: [ 1285.905519][T16891] ffff888027f21980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1285.913580][T16891] ffff888027f21a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1285.921639][T16891] >ffff888027f21a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1285.929689][T16891] ^ [ 1285.937657][T16891] ffff888027f21b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1285.945717][T16891] ffff888027f21b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1285.953766][T16891] ================================================================== [ 1286.026340][T16891] Disabling lock debugging due to kernel taint [ 1286.042091][T16891] ================================================================== [ 1286.050207][T16891] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1286.057430][T16891] Read of size 8 at addr ffff888027f21af8 by task syz.5.2313/16891 [ 1286.065324][T16891] [ 1286.067658][T16891] CPU: 1 UID: 0 PID: 16891 Comm: syz.5.2313 Tainted: G B syzkaller #0 PREEMPT(full) [ 1286.067707][T16891] Tainted: [B]=BAD_PAGE [ 1286.067719][T16891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1286.067741][T16891] Call Trace: [ 1286.067753][T16891] [ 1286.067766][T16891] dump_stack_lvl+0x116/0x1f0 [ 1286.067813][T16891] print_report+0xcd/0x630 [ 1286.067862][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.067905][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.067940][T16891] ? __phys_addr+0xe8/0x180 [ 1286.067970][T16891] ? __cpa_addr+0x1d3/0x220 [ 1286.068014][T16891] kasan_report+0xe0/0x110 [ 1286.068058][T16891] ? __cpa_addr+0x1d3/0x220 [ 1286.068099][T16891] __cpa_addr+0x1d3/0x220 [ 1286.068140][T16891] cpa_flush+0x28b/0x8a0 [ 1286.068189][T16891] ? __pfx_cpa_flush+0x10/0x10 [ 1286.068231][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.068264][T16891] ? pgprot2cachemode+0x9a/0x130 [ 1286.068300][T16891] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1286.068334][T16891] ? drm_gem_get_pages+0x6a0/0xa10 [ 1286.068376][T16891] change_page_attr_set_clr+0x34e/0x4a0 [ 1286.068423][T16891] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1286.068483][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.068543][T16891] _set_pages_array+0x20a/0x2c0 [ 1286.068599][T16891] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1286.068637][T16891] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1286.068671][T16891] ? __pfx___might_resched+0x10/0x10 [ 1286.068702][T16891] drm_gem_shmem_mmap+0xc9/0x550 [ 1286.068735][T16891] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1286.068774][T16891] drm_gem_mmap_obj+0x1b5/0x560 [ 1286.068814][T16891] drm_gem_mmap+0x40b/0x620 [ 1286.068852][T16891] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1286.068892][T16891] ? vm_area_alloc+0x1f/0x160 [ 1286.068946][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.068979][T16891] ? lockdep_init_map_type+0x5c/0x280 [ 1286.069023][T16891] __mmap_region+0x1309/0x27a0 [ 1286.069060][T16891] ? __pfx___mmap_region+0x10/0x10 [ 1286.069095][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.069129][T16891] ? __lock_acquire+0xb8a/0x1c90 [ 1286.069174][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.069216][T16891] ? lock_acquire+0x179/0x350 [ 1286.069255][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.069287][T16891] ? find_held_lock+0x2b/0x80 [ 1286.069355][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.069395][T16891] ? __lock_acquire+0xb8a/0x1c90 [ 1286.069430][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.069473][T16891] mmap_region+0x1ab/0x3f0 [ 1286.069506][T16891] ? __get_unmapped_area+0x267/0x440 [ 1286.069552][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.069600][T16891] do_mmap+0xa3e/0x1210 [ 1286.069650][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.069693][T16891] ? __pfx_do_mmap+0x10/0x10 [ 1286.069731][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.069772][T16891] ? __pfx_down_write_killable+0x10/0x10 [ 1286.069818][T16891] vm_mmap_pgoff+0x29e/0x470 [ 1286.069864][T16891] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1286.069904][T16891] ? __fget_files+0x20e/0x3c0 [ 1286.069944][T16891] ? __entry_text_end+0x1020b5/0x1020b9 [ 1286.069987][T16891] ksys_mmap_pgoff+0x32c/0x5c0 [ 1286.070021][T16891] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.070062][T16891] __x64_sys_mmap+0x125/0x190 [ 1286.070109][T16891] do_syscall_64+0xcd/0xfa0 [ 1286.070139][T16891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.070166][T16891] RIP: 0033:0x7f6a49f8efc9 [ 1286.070190][T16891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.070226][T16891] RSP: 002b:00007f6a4adc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1286.070259][T16891] RAX: ffffffffffffffda RBX: 00007f6a4a1e6180 RCX: 00007f6a49f8efc9 [ 1286.070280][T16891] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 1286.070298][T16891] RBP: 00007f6a4a011f91 R08: 0000000000000006 R09: 0000000100000000 [ 1286.070316][T16891] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1286.070333][T16891] R13: 00007f6a4a1e6218 R14: 00007f6a4a1e6180 R15: 00007fff418ac778 [ 1286.070372][T16891] [ 1286.070383][T16891] [ 1286.474788][T16891] Allocated by task 16891: [ 1286.479195][T16891] kasan_save_stack+0x33/0x60 [ 1286.483889][T16891] kasan_save_track+0x14/0x30 [ 1286.488580][T16891] __kasan_kmalloc+0xaa/0xb0 [ 1286.493173][T16891] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1286.498557][T16891] drm_gem_get_pages+0x144/0xa10 [ 1286.503597][T16891] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1286.509670][T16891] drm_gem_shmem_mmap+0xc9/0x550 [ 1286.514798][T16891] drm_gem_mmap_obj+0x1b5/0x560 [ 1286.519661][T16891] drm_gem_mmap+0x40b/0x620 [ 1286.524170][T16891] __mmap_region+0x1309/0x27a0 [ 1286.528938][T16891] mmap_region+0x1ab/0x3f0 [ 1286.533357][T16891] do_mmap+0xa3e/0x1210 [ 1286.537525][T16891] vm_mmap_pgoff+0x29e/0x470 [ 1286.542125][T16891] ksys_mmap_pgoff+0x32c/0x5c0 [ 1286.546901][T16891] __x64_sys_mmap+0x125/0x190 [ 1286.551590][T16891] do_syscall_64+0xcd/0xfa0 [ 1286.556091][T16891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.561993][T16891] [ 1286.565260][T16891] The buggy address belongs to the object at ffff888027f21a00 [ 1286.565260][T16891] which belongs to the cache kmalloc-256 of size 256 [ 1286.579315][T16891] The buggy address is located 0 bytes to the right of [ 1286.579315][T16891] allocated 248-byte region [ffff888027f21a00, ffff888027f21af8) [ 1286.593815][T16891] [ 1286.596138][T16891] The buggy address belongs to the physical page: [ 1286.602541][T16891] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27f20 [ 1286.611314][T16891] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1286.619814][T16891] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1286.627359][T16891] page_type: f5(slab) [ 1286.631364][T16891] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1286.639957][T16891] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1286.648544][T16891] head: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1286.657220][T16891] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1286.665909][T16891] head: 00fff00000000001 ffffea00009fc801 00000000ffffffff 00000000ffffffff [ 1286.674586][T16891] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1286.683254][T16891] page dumped because: kasan: bad access detected [ 1286.689685][T16891] page_owner tracks the page as allocated [ 1286.695390][T16891] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21669257516, free_ts 0 [ 1286.715119][T16891] post_alloc_hook+0x1c0/0x230 [ 1286.719915][T16891] get_page_from_freelist+0x10a3/0x3a30 [ 1286.725464][T16891] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1286.731451][T16891] alloc_pages_mpol+0x1fb/0x550 [ 1286.736327][T16891] new_slab+0x24a/0x360 [ 1286.740502][T16891] ___slab_alloc+0xdc4/0x1ae0 [ 1286.745200][T16891] __slab_alloc.constprop.0+0x63/0x110 [ 1286.750685][T16891] __kmalloc_cache_noprof+0x477/0x780 [ 1286.756088][T16891] bus_add_driver+0x92/0x690 [ 1286.760694][T16891] driver_register+0x15c/0x4b0 [ 1286.765483][T16891] __usb_serial_register_drivers+0x5cd/0xe70 [ 1286.771471][T16891] do_one_initcall+0x123/0x6e0 [ 1286.776236][T16891] kernel_init_freeable+0x5c8/0x920 [ 1286.781449][T16891] kernel_init+0x1c/0x2b0 [ 1286.785794][T16891] ret_from_fork+0x675/0x7d0 [ 1286.790394][T16891] ret_from_fork_asm+0x1a/0x30 [ 1286.795171][T16891] page_owner free stack trace missing [ 1286.800524][T16891] [ 1286.802840][T16891] Memory state around the buggy address: [ 1286.808463][T16891] ffff888027f21980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1286.816522][T16891] ffff888027f21a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1286.824580][T16891] >ffff888027f21a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1286.832634][T16891] ^ [ 1286.840608][T16891] ffff888027f21b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1286.848668][T16891] ffff888027f21b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1286.856722][T16891] ================================================================== [ 1286.906314][T16890] ================================================================== [ 1286.914402][T16890] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1286.921615][T16890] Read of size 8 at addr ffff888027f21af8 by task syz.5.2313/16890 [ 1286.929502][T16890] [ 1286.931843][T16890] CPU: 1 UID: 0 PID: 16890 Comm: syz.5.2313 Tainted: G B syzkaller #0 PREEMPT(full) [ 1286.931886][T16890] Tainted: [B]=BAD_PAGE [ 1286.931896][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1286.931915][T16890] Call Trace: [ 1286.931927][T16890] [ 1286.931942][T16890] dump_stack_lvl+0x116/0x1f0 [ 1286.932000][T16890] print_report+0xcd/0x630 [ 1286.932037][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.932074][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.932116][T16890] ? __phys_addr+0xe8/0x180 [ 1286.932154][T16890] ? __cpa_addr+0x1d3/0x220 [ 1286.932187][T16890] kasan_report+0xe0/0x110 [ 1286.932228][T16890] ? __cpa_addr+0x1d3/0x220 [ 1286.932277][T16890] __cpa_addr+0x1d3/0x220 [ 1286.932317][T16890] cpa_flush+0xec/0x8a0 [ 1286.932356][T16890] ? __pfx_cpa_flush+0x10/0x10 [ 1286.932406][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.932446][T16890] ? pgprot2cachemode+0x9a/0x130 [ 1286.932474][T16890] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1286.932508][T16890] set_pages_array_wb+0x238/0x280 [ 1286.932561][T16890] ? __pfx_set_pages_array_wb+0x10/0x10 [ 1286.932608][T16890] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1286.932666][T16890] ? __pfx___might_resched+0x10/0x10 [ 1286.932703][T16890] ? __pfx_drm_gem_shmem_vm_close+0x10/0x10 [ 1286.932738][T16890] drm_gem_shmem_put_pages_locked+0x27e/0x300 [ 1286.932766][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.932811][T16890] drm_gem_shmem_vm_close+0x63/0xc0 [ 1286.932852][T16890] __mmap_region+0x6bf/0x27a0 [ 1286.932888][T16890] ? rcu_is_watching+0x12/0xc0 [ 1286.932997][T16890] ? __pfx___mmap_region+0x10/0x10 [ 1286.933031][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933076][T16890] ? lock_release+0x201/0x2f0 [ 1286.933122][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933168][T16890] ? rcu_is_watching+0x12/0xc0 [ 1286.933202][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933247][T16890] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1286.933311][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933357][T16890] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 1286.933418][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933463][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933517][T16890] ? __pfx___schedule+0x10/0x10 [ 1286.933600][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933635][T16890] ? mm_get_unmapped_area+0x95/0xe0 [ 1286.933671][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933718][T16890] mmap_region+0x1ab/0x3f0 [ 1286.933751][T16890] ? __get_unmapped_area+0x267/0x440 [ 1286.933786][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933829][T16890] do_mmap+0xa3e/0x1210 [ 1286.933876][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933916][T16890] ? __pfx_do_mmap+0x10/0x10 [ 1286.933950][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.933990][T16890] ? __pfx_down_write_killable+0x10/0x10 [ 1286.934035][T16890] vm_mmap_pgoff+0x29e/0x470 [ 1286.934079][T16890] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1286.934113][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.934156][T16890] ? rcu_is_watching+0x12/0xc0 [ 1286.934190][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.934226][T16890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1286.934258][T16890] ? __x64_sys_futex+0x1e9/0x4c0 [ 1286.934310][T16890] ksys_mmap_pgoff+0x7d/0x5c0 [ 1286.934350][T16890] ? __pfx___do_sys_close_range+0x10/0x10 [ 1286.934389][T16890] __x64_sys_mmap+0x125/0x190 [ 1286.934432][T16890] do_syscall_64+0xcd/0xfa0 [ 1286.934468][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.934502][T16890] RIP: 0033:0x7f6a49f8efc9 [ 1286.934528][T16890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.934556][T16890] RSP: 002b:00007f6a4ade8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1286.934590][T16890] RAX: ffffffffffffffda RBX: 00007f6a4a1e6090 RCX: 00007f6a49f8efc9 [ 1286.934614][T16890] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1286.934636][T16890] RBP: 00007f6a4a011f91 R08: ffffffffffffffff R09: 0000000000000000 [ 1286.934657][T16890] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1286.934675][T16890] R13: 00007f6a4a1e6128 R14: 00007f6a4a1e6090 R15: 00007fff418ac778 [ 1286.934703][T16890] [ 1286.934713][T16890] [ 1287.347378][T16890] Allocated by task 16891: [ 1287.351790][T16890] kasan_save_stack+0x33/0x60 [ 1287.356485][T16890] kasan_save_track+0x14/0x30 [ 1287.361174][T16890] __kasan_kmalloc+0xaa/0xb0 [ 1287.365952][T16890] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1287.371329][T16890] drm_gem_get_pages+0x144/0xa10 [ 1287.376276][T16890] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1287.382346][T16890] drm_gem_shmem_mmap+0xc9/0x550 [ 1287.387287][T16890] drm_gem_mmap_obj+0x1b5/0x560 [ 1287.392133][T16890] drm_gem_mmap+0x40b/0x620 [ 1287.396639][T16890] __mmap_region+0x1309/0x27a0 [ 1287.401393][T16890] mmap_region+0x1ab/0x3f0 [ 1287.405805][T16890] do_mmap+0xa3e/0x1210 [ 1287.409967][T16890] vm_mmap_pgoff+0x29e/0x470 [ 1287.414570][T16890] ksys_mmap_pgoff+0x32c/0x5c0 [ 1287.419364][T16890] __x64_sys_mmap+0x125/0x190 [ 1287.424054][T16890] do_syscall_64+0xcd/0xfa0 [ 1287.428561][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.434543][T16890] [ 1287.436857][T16890] The buggy address belongs to the object at ffff888027f21a00 [ 1287.436857][T16890] which belongs to the cache kmalloc-256 of size 256 [ 1287.450911][T16890] The buggy address is located 0 bytes to the right of [ 1287.450911][T16890] allocated 248-byte region [ffff888027f21a00, ffff888027f21af8) [ 1287.465400][T16890] [ 1287.467714][T16890] The buggy address belongs to the physical page: [ 1287.474114][T16890] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27f20 [ 1287.483136][T16890] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1287.491629][T16890] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1287.499173][T16890] page_type: f5(slab) [ 1287.503150][T16890] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1287.511731][T16890] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1287.520310][T16890] head: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1287.529012][T16890] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1287.537704][T16890] head: 00fff00000000001 ffffea00009fc801 00000000ffffffff 00000000ffffffff [ 1287.546376][T16890] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1287.555029][T16890] page dumped because: kasan: bad access detected [ 1287.561424][T16890] page_owner tracks the page as allocated [ 1287.567125][T16890] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21669257516, free_ts 0 [ 1287.586860][T16890] post_alloc_hook+0x1c0/0x230 [ 1287.591640][T16890] get_page_from_freelist+0x10a3/0x3a30 [ 1287.597192][T16890] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1287.603118][T16890] alloc_pages_mpol+0x1fb/0x550 [ 1287.607986][T16890] new_slab+0x24a/0x360 [ 1287.612172][T16890] ___slab_alloc+0xdc4/0x1ae0 [ 1287.616871][T16890] __slab_alloc.constprop.0+0x63/0x110 [ 1287.622352][T16890] __kmalloc_cache_noprof+0x477/0x780 [ 1287.627747][T16890] bus_add_driver+0x92/0x690 [ 1287.632344][T16890] driver_register+0x15c/0x4b0 [ 1287.637124][T16890] __usb_serial_register_drivers+0x5cd/0xe70 [ 1287.643111][T16890] do_one_initcall+0x123/0x6e0 [ 1287.647881][T16890] kernel_init_freeable+0x5c8/0x920 [ 1287.653092][T16890] kernel_init+0x1c/0x2b0 [ 1287.657459][T16890] ret_from_fork+0x675/0x7d0 [ 1287.662064][T16890] ret_from_fork_asm+0x1a/0x30 [ 1287.666832][T16890] page_owner free stack trace missing [ 1287.672184][T16890] [ 1287.674497][T16890] Memory state around the buggy address: [ 1287.680124][T16890] ffff888027f21980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1287.688172][T16890] ffff888027f21a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1287.696228][T16890] >ffff888027f21a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1287.704277][T16890] ^ [ 1287.712244][T16890] ffff888027f21b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1287.720296][T16890] ffff888027f21b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1287.728343][T16890] ================================================================== [ 1288.034159][ T9357] usb 9-1: USB disconnect, device number 5 [ 1288.655622][T13411] usb 8-1: string descriptor 0 read error: -71 [ 1288.668205][T13411] usb 8-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1288.710501][T13411] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.724223][T13411] usb 8-1: can't set config #2, error -71 [ 1288.767115][T13411] usb 8-1: USB disconnect, device number 15