last executing test programs: 6m20.723335084s ago: executing program 2 (id=3): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, 0x0, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f640094000500", 0x41}], 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) pipe(&(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000024002ca887b9888e514e914f010125a07000fcffffff0500000034b17a889613a92c87caa27b8e49ba27595225de916a5e0b4a1313620d9ead46240582b139108dd863de23970bc0d2dc95ec926bbb25d89e89"], 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) 6m20.573383079s ago: executing program 0 (id=1): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setrlimit(0x1, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfffff, 0xfffffffffffffffe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x40c}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000140)=0xc) r5 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r5, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x61) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x2c400, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0xfffffffffffffd81, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) chmod(&(0x7f0000000000)='./file1\x00', 0x1258bab1c8332eec) creat(&(0x7f00000000c0)='./file1\x00', 0x81) 6m16.501856612s ago: executing program 2 (id=6): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) openat$sw_sync(0xffffff9c, &(0x7f0000000100), 0x40840, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000240)={0x20000000}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000280)="ee", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) getsockopt(r4, 0x1, 0x2f, 0x0, &(0x7f0000000040)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xe, 0x8, 0x84, 0x2, 0x3, 0x10007f, 0x20000006, 0x4b, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff04, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x9, 0x7, 0x200, 0x1, 0x1, 0x200, 0x3e, 0x2, 0xff, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x106, 0x1, 0xff, 0x5, 0x1000005, 0x5f3c, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x5, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0xff, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x3, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x9, 0xfffffffd, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000006, 0x2, 0x6d03, 0x2, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xfffffffc, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x8, 0x1000000a, 0x0, 0x5, 0x1c, 0x11fffc, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x6, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x81, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x5, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x5, 0x345}) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) write$P9_RUNLINKAT(r6, &(0x7f0000000200)={0x7, 0x4d, 0x7}, 0x7) write$binfmt_aout(r5, 0x0, 0x920) syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0) 6m10.075496817s ago: executing program 2 (id=9): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0xfff3, 0xfff1}}, [@filter_kind_options=@f_flower={{0x9}, {0xc, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x49090}, 0xd0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6m5.118508673s ago: executing program 32 (id=1): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setrlimit(0x1, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfffff, 0xfffffffffffffffe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x40c}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000140)=0xc) r5 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r5, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x61) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x2c400, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0xfffffffffffffd81, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) chmod(&(0x7f0000000000)='./file1\x00', 0x1258bab1c8332eec) creat(&(0x7f00000000c0)='./file1\x00', 0x81) 5m54.885960819s ago: executing program 33 (id=9): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0xfff3, 0xfff1}}, [@filter_kind_options=@f_flower={{0x9}, {0xc, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x49090}, 0xd0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.963426597s ago: executing program 3 (id=679): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x240440c8) 6.58313899s ago: executing program 3 (id=682): r0 = io_uring_setup(0x74f8, &(0x7f00000005c0)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000001680)=[{&(0x7f0000000040)="cb", 0x1}, {&(0x7f0000000240)="12", 0x1}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 5.393296157s ago: executing program 4 (id=688): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.291985118s ago: executing program 4 (id=689): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 5.053731107s ago: executing program 1 (id=692): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400000011"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000e3ff000000000000000a84000000060a0b040000000000000000020000092400048020000180080001006c6f67001400028006000140de23a102dd4fbc680003000008000540000000064c0007409d88380d9faee6e0b552b023e1263b78dc929a7c14bc86d57bad7c199e927a9a1fe7e9681783f3bb5c148e754491d4799eda29102f72d6972e35f9348d8619e60701abe5503932de140000001100010000000000000000000200000a"], 0xac}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x5, 0x40000009, 0x10040007}) 3.523568897s ago: executing program 3 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x7fffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) readv(r2, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) setfsuid(0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67728606f35a21f6febff081", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r3, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) 3.203342396s ago: executing program 1 (id=695): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 3.106589955s ago: executing program 4 (id=696): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000002340)=@IORING_OP_RECVMSG={0xa, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000002300)={&(0x7f00000009c0)=@tipc=@name, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/211, 0xd3}], 0x2, &(0x7f0000001300)=""/4096, 0x1000}, 0x0, 0x40002100, 0x0, {0x2}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000140)=0x5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, 0x0) munlockall() mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x400080, &(0x7f00000001c0)='disrArd') 2.50382301s ago: executing program 3 (id=697): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ec000000f585c38f94a33dbad67f3f79a6d16d63bb55c5715d9ff86dba99ce09916ae4c7af1ac819f4451d5daae7e32127256c362c1a5b6d1d41d4922a3b71a2f8c342f3ddaed139", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf250800000014000280080006000f00000008000800fcffffff4000038014000600fc01000000000000000000000000000108000500ac1e010108000300010000000800030002000000050008000100000008000500e00000025800018014000300e0000001000000000000000000000000080008000900000008000800ff01000008000b0073697000060001000a00000008000b00736970000600010002000000080008000700000008000900260000001c000280080008000300000006000e004e200000080006008100000008000400ff7f00000800050009000000"], 0xec}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x2000fb) write$uinput_user_dev(r0, &(0x7f0000000e80)={'syz0\x00', {0x6, 0x9, 0x2, 0x7fff}, 0x3b, [0xea48, 0x6, 0x0, 0x6, 0x0, 0xd57, 0x4, 0x4, 0x96e9, 0x4, 0xa0c5, 0x1, 0x9, 0x1, 0x10000, 0x8000, 0x8fe2, 0x401, 0x9, 0x4, 0x8, 0xf, 0x9, 0x300, 0x9, 0x801, 0x4, 0x5, 0x100, 0x2, 0x0, 0x4, 0xc9, 0x80, 0x1, 0xff800000, 0x3, 0x1, 0x57d, 0x3, 0x5, 0x3, 0x80, 0x5, 0x0, 0xffffffa5, 0x2, 0x3, 0x0, 0x7, 0x7718, 0xff, 0x6, 0x7, 0x0, 0x9, 0x0, 0x8b2, 0x0, 0x1000, 0x4f, 0x1, 0x7ff, 0x6], [0x9, 0x7, 0x5a36, 0x75, 0x9, 0x3, 0x4, 0x8, 0x7, 0x0, 0x1000, 0x519, 0x10000, 0x80, 0x3, 0x0, 0x10, 0x2, 0x100, 0x8001, 0x2, 0x4, 0xfffffffa, 0x81, 0x4581b4e7, 0x800, 0x0, 0x30000000, 0x3, 0x40000000, 0x7fffffff, 0x5, 0x9d7, 0x6, 0x5, 0x10001, 0x9, 0x0, 0x5, 0x7, 0x2, 0x8, 0xffffff9d, 0xd6, 0x2f, 0x0, 0x5, 0x8, 0x9, 0x6, 0x400, 0x401, 0x4800, 0x2, 0x1, 0x1, 0x5, 0x1000, 0x10001, 0x400, 0x8d7, 0x4, 0x400, 0x7], [0xbe3, 0x0, 0xfa1a, 0x10000, 0x7, 0x6, 0x9, 0x5, 0xd, 0x1, 0x7, 0xb3, 0x0, 0x7ff, 0x8, 0x9, 0x81, 0x0, 0x6, 0x90, 0x0, 0x1, 0xd, 0x400, 0xffff605e, 0xe, 0x2, 0x1, 0x0, 0xb2, 0x9, 0xffffff60, 0x1, 0xfffffe01, 0x79, 0x1b27, 0x0, 0x1, 0xb, 0xc0, 0x5, 0xe557, 0xd, 0x9, 0x6, 0x5, 0x5, 0xf255, 0x6, 0x7, 0x3, 0x8, 0xa, 0x8000, 0x2, 0xd25, 0x12f, 0x5, 0x0, 0x271, 0x8, 0x5, 0x4, 0x8244], [0x7ff, 0x1, 0x1ff, 0xffffffff, 0x3, 0x3, 0x7, 0x6, 0x10, 0x8, 0x3323, 0x3, 0xfff, 0x1, 0x400, 0x5, 0x2, 0xfffffffd, 0x2, 0x8, 0xfff, 0x4, 0x2, 0x7a, 0x800, 0x2, 0x8000, 0x8, 0x6, 0xa6c, 0x0, 0xd, 0x7fffffff, 0x3760, 0x0, 0x101, 0x0, 0x14000000, 0x3, 0x89, 0x9, 0x401, 0xbdb1, 0x40, 0x7, 0x0, 0x6, 0x1, 0x7, 0x4, 0x5, 0x3, 0x3, 0xff, 0x6, 0x7, 0x4, 0x3ff, 0x463, 0x9, 0x7, 0x20000000, 0x7, 0x51]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0xfffffc98}]) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r7, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff004) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.341586645s ago: executing program 5 (id=698): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) 2.293267117s ago: executing program 5 (id=699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.221845125s ago: executing program 1 (id=700): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="842a0a65bd8c3a2b", 0x8) 2.163983092s ago: executing program 1 (id=701): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) setrlimit(0x7, &(0x7f0000000000)={0x0, 0x9}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000540)=0x1) 2.163747324s ago: executing program 5 (id=702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0xc008aec1, 0x0) 2.140043703s ago: executing program 1 (id=703): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400000011"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000e3ff000000000000000a84000000060a0b040000000000000000020000092400048020000180080001006c6f67001400028006000140de23a102dd4fbc680003000008000540000000064c0007409d88380d9faee6e0b552b023e1263b78dc929a7c14bc86d57bad7c199e927a9a1fe7e9681783f3bb5c148e754491d4799eda29102f72d6972e35f9348d8619e60701abe5503932de140000001100010000000000000000000200000a"], 0xac}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x5, 0x40000009, 0x10040007}) 2.115605283s ago: executing program 4 (id=711): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) 1.996938769s ago: executing program 5 (id=704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) 1.993873512s ago: executing program 4 (id=713): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000002340)=@IORING_OP_RECVMSG={0xa, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000002300)={&(0x7f00000009c0)=@tipc=@name, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/211, 0xd3}], 0x2, &(0x7f0000001300)=""/4096, 0x1000}, 0x0, 0x40002100, 0x0, {0x2}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000140)=0x5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, 0x0) munlockall() mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x400080, &(0x7f00000001c0)='disrArd') 1.841688787s ago: executing program 5 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x7fffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) readv(r2, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) setfsuid(0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67728606f35a21f6febff081", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r3, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) 805.141594ms ago: executing program 3 (id=706): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000006c0)=@get={0x1, &(0x7f0000000900)=""/211, 0xb}) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz0\x00', {0xf, 0x7, 0x6, 0x8}, 0x46, [0x6, 0x3, 0x8, 0x7, 0x3, 0x8, 0xffff, 0x2, 0x1ff, 0x704e, 0x6, 0x2, 0x1, 0x4, 0x7fffffff, 0xc, 0x280, 0x7, 0x4, 0xbf6, 0x6, 0xfff, 0x0, 0x80000005, 0x2, 0x4ebe, 0x3, 0x2, 0x3, 0x0, 0x9, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1, 0x400, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x3, 0x80, 0x4, 0x40, 0xe, 0xffff, 0x3ca5, 0x81, 0xfffff68e, 0x6, 0x2, 0x10, 0x8001, 0x3, 0x9, 0x4, 0x6, 0xfffffffe, 0xe, 0x3ff], [0x103, 0x3817a07c, 0xfffffffd, 0x2d, 0xd7, 0x2, 0x435f78e4, 0x4, 0x1b9e, 0x0, 0x1, 0x1, 0x4, 0x7, 0x4, 0x80, 0x0, 0x8, 0x4, 0x3, 0x10, 0x1, 0x77, 0x100, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x7f, 0x49, 0x4, 0x9, 0x80000000, 0xd, 0x64, 0x2, 0xe2, 0x0, 0x3, 0x9, 0x6, 0xeebe, 0x5, 0x0, 0x1b, 0xaea0, 0xb, 0x9d, 0xefcc, 0x2, 0x81, 0x6, 0x4, 0x2, 0x2, 0x0, 0x7f, 0x10, 0xff, 0x2, 0x31d, 0xe, 0x7], [0x8000, 0x1, 0x0, 0xb, 0x10001, 0x5, 0x6c5e, 0x401, 0x7, 0xb44, 0x1000, 0xc5d3dd53, 0x9, 0x4, 0x3a, 0x3, 0x80000000, 0x5, 0xa5ff, 0x3, 0x9, 0x0, 0x1, 0x80, 0x0, 0x1, 0xfffff564, 0x4, 0x9, 0x5, 0x5, 0x2, 0x3, 0x8, 0x5, 0xd, 0x6, 0x3ff, 0x3, 0x2, 0x1a, 0x5a, 0x7, 0x400, 0x380000, 0x1, 0x7, 0x3, 0x4, 0xa, 0xfffffffd, 0x5, 0xfffffff7, 0x4, 0x0, 0x1, 0xffffff00, 0x6, 0x2, 0xde2, 0x6, 0x7, 0xb7a, 0x4], [0x3ff, 0x4, 0x1, 0x5, 0x7ff, 0xfffffffa, 0x3, 0x6, 0x2, 0x0, 0x7, 0x8, 0x7, 0x8, 0xf, 0x6, 0x5, 0x329d, 0x49, 0x78079c2a, 0x0, 0x3, 0x5, 0x600, 0x7, 0xbfd2, 0x3, 0x4, 0xffffff7f, 0x0, 0xe, 0x9, 0x6, 0xfffffff2, 0xf, 0x10001, 0xb, 0x2, 0x9, 0x5, 0x8, 0xd195, 0x5, 0xba, 0x10000, 0x8, 0x609a, 0xffff, 0x9, 0x6, 0x51, 0x4, 0xa, 0x9, 0xd9, 0x5, 0x9, 0x2, 0xd, 0x5, 0x7, 0x2, 0xff, 0x4]}, 0x45c) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "1ec01ad997f87f473edd403fef01ead40093692207dfbc3c4fe37c7779522a625e40dde68d325367364e5f39e68744c126aecfc74b9904aa274aa17612b33b4c73468979e433829e91329e5c580229c668bbf4922dd6e26498d21cff2a23e71684e7e4e9f983aae6656f1e936cf46da5b7c36ec046da658c17b4e9d8e0289c54f4a1b68809ae484eae8d2c7fee7b380d1e8f805c241cdc6c0a56a3819af497e718e43748e6075951b40ae5beeb6536ba82d3"}}, &(0x7f0000000080)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x1, [@generic={0x33, 0x10, 0x2, "31603018ca3d11ed94adc7da4529e6796b378da707997ef684e4b5023a5c34cbc063400f4dde270dc527a811fcab28f6"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x4, 0x0, "d4fd42d5", "6e57bfde"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x80, 0xfc, 0x4, 0xf2, 0x8001, 0x1bd6}}}, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x40, 0xc}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000540)=ANY=[@ANYBLOB="f922400b8d550f"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xe4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "08d4"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8b}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "41ad"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) 751.641013ms ago: executing program 5 (id=707): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2, 0x6200, 0x1, &(0x7f0000000240)='/'}], 0x1}) 439.758864ms ago: executing program 1 (id=708): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 81.217006ms ago: executing program 4 (id=709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="2b0268660fce2501c6d96ff2541b1853a7c34bdc309a4aaaa024a68b56aeb6ea0cf36ddcce3c5b1c03ffec031e929dc221453201d9dd169ea4239984838c5287f48c8eaa56b7a49bad97c3ca007d76e4ed3f11316166a3f416401b", 0x5b}], 0x1}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000b40)="e8f2362d79058b", 0x7}], 0x1, &(0x7f0000002580)}}], 0x3, 0x4009015) 0s ago: executing program 3 (id=710): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) kernel console output (not intermixed with test programs): 50:50:50:50:50:50 [ 198.815841][ T6045] IPVS: starting estimator thread 0... [ 199.002603][ T6369] IPVS: using max 32 ests per chain, 76800 per kthread [ 199.067357][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.072787][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.428213][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.432102][ T6356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.450362][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.454286][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.520559][ T6356] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 199.688800][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.694646][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.151043][ T13] bridge_slave_1: left allmulticast mode [ 200.156265][ T13] bridge_slave_1: left promiscuous mode [ 200.160889][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.186644][ T13] bridge_slave_0: left allmulticast mode [ 200.189852][ T13] bridge_slave_0: left promiscuous mode [ 200.194046][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.568289][ T6381] Device name cannot be null; rc = [-22] [ 201.343271][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.460767][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.481706][ T13] bond0 (unregistering): Released all slaves [ 201.531603][ T6216] veth0_vlan: entered promiscuous mode [ 201.539410][ T5669] 8021q: adding VLAN 0 to HW filter on device eth6 [ 201.627238][ T6216] veth1_vlan: entered promiscuous mode [ 201.691050][ T6216] veth0_macvtap: entered promiscuous mode [ 201.720707][ T6216] veth1_macvtap: entered promiscuous mode [ 201.771398][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.916640][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.023098][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.053683][ T1269] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.409107][ T1269] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.577501][ T6395] overlayfs: failed to resolve './file0': -2 [ 202.586011][ T371] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.759172][ T5669] 8021q: adding VLAN 0 to HW filter on device eth7 [ 203.151826][ T6401] syz.4.11 uses obsolete (PF_INET,SOCK_PACKET) [ 203.262471][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 203.719736][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.732478][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.875426][ T13] hsr_slave_0: left promiscuous mode [ 203.927606][ T13] hsr_slave_1: left promiscuous mode [ 203.944713][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.984910][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.162950][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.167096][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.293444][ T13] veth1_macvtap: left promiscuous mode [ 204.295972][ T13] veth0_macvtap: left promiscuous mode [ 204.307764][ T13] veth1_vlan: left promiscuous mode [ 204.312655][ T13] veth0_vlan: left promiscuous mode [ 204.960319][ T6417] netlink: 68 bytes leftover after parsing attributes in process `syz.3.34'. [ 205.071201][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34'. [ 206.390395][ T13] team0 (unregistering): Port device team_slave_1 removed [ 206.517290][ T13] team0 (unregistering): Port device team_slave_0 removed [ 206.808919][ T5669] 8021q: adding VLAN 0 to HW filter on device eth9 [ 207.272066][ T61] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 207.448792][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.476204][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.527599][ T61] usb 6-1: config 0 has no interfaces? [ 207.530602][ T61] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 207.567310][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.727861][ T61] usb 6-1: config 0 descriptor?? [ 208.243198][ T5669] 8021q: adding VLAN 0 to HW filter on device eth8 [ 208.972858][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.37'. [ 209.035292][ T845] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 209.375856][ T845] usb 10-1: Using ep0 maxpacket: 32 [ 209.387802][ T845] usb 10-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.402956][ T845] usb 10-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 0 [ 209.423366][ T845] usb 10-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 64 [ 209.486706][ T845] usb 10-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.585143][ T845] usb 10-1: config 1 interface 0 has no altsetting 0 [ 209.667806][ T845] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.693209][ T845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.766156][ T845] usb 10-1: Product: syz [ 209.783990][ T845] usb 10-1: Manufacturer: syz [ 209.789039][ T845] usb 10-1: SerialNumber: syz [ 209.868311][ T6438] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 210.305090][ T42] usb 6-1: USB disconnect, device number 2 [ 212.002722][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 212.468389][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 212.477200][ T25] usb 6-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.484535][ T25] usb 6-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 0 [ 212.556117][ T845] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 212.595786][ T845] usb 10-1: USB disconnect, device number 2 [ 212.625052][ T25] usb 6-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 64 [ 212.732555][ T25] usb 6-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.790787][ T25] usb 6-1: config 1 interface 0 has no altsetting 0 [ 212.848454][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.854562][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.932563][ T25] usb 6-1: Product: syz [ 213.111515][ T25] usb 6-1: Manufacturer: syz [ 213.189655][ T25] usb 6-1: SerialNumber: syz [ 213.215165][ T6455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 215.285503][ T6462] input: syz1 as /devices/virtual/input/input6 [ 216.735074][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.754195][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.563597][ T25] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 218.774916][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 219.402347][ T6510] netlink: 104 bytes leftover after parsing attributes in process `syz.3.45'. [ 219.533408][ T6510] netlink: 104 bytes leftover after parsing attributes in process `syz.3.45'. [ 219.899337][ T4232] usb 6-1: USB disconnect, device number 3 [ 221.584825][ T6521] mkiss: ax0: crc mode is auto. [ 221.957960][ T6504] x_tables: duplicate underflow at hook 1 [ 228.821533][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 228.835444][ T6575] vxlan0: entered promiscuous mode [ 228.855020][ T1269] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.859428][ T1269] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.865015][ T1269] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.868985][ T1269] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.958391][ T6577] capability: warning: `syz.5.53' uses deprecated v2 capabilities in a way that may be insecure [ 229.173150][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'. [ 229.521780][ T6579] fuse: Unknown parameter 'grZ!00000000000000000000' [ 230.864809][ T6584] Bluetooth: MGMT ver 1.23 [ 231.920221][ T6590] F2FS-fs: Conflicting test_dummy_encryption options [ 234.797816][ T5982] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 235.799821][ T6617] netlink: 'syz.3.60': attribute type 39 has an invalid length. [ 236.176939][ T6626] input: syz1 as /devices/virtual/input/input7 [ 236.228455][ T6623] loop5: detected capacity change from 0 to 7 [ 236.284945][ T6623] Dev loop5: unable to read RDB block 7 [ 236.308355][ T6623] loop5: unable to read partition table [ 236.323637][ T6623] loop5: partition table beyond EOD, truncated [ 236.359246][ T6623] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 236.405210][ T6628] binder: 6615:6628 ioctl c0285840 80000000 returned -22 [ 237.312126][ T6619] warning: `syz.3.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.828690][ T6639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 238.872600][ T6639] fuse: Unknown parameter 'rootode' [ 239.609386][ T6647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.64'. [ 239.615977][ T6647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.64'. [ 239.850157][ T6647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.64'. [ 239.871020][ T6647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.64'. [ 240.902379][ T5982] Bluetooth: hci1: command 0x0406 tx timeout [ 241.099067][ T41] audit: type=1326 audit(1776873800.328:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.174430][ T41] audit: type=1326 audit(1776873800.328:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.211591][ T41] audit: type=1326 audit(1776873800.328:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.239646][ T41] audit: type=1326 audit(1776873800.328:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.266771][ T41] audit: type=1326 audit(1776873800.328:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.299493][ T41] audit: type=1326 audit(1776873800.328:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.322897][ T41] audit: type=1326 audit(1776873800.328:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.348783][ T41] audit: type=1326 audit(1776873800.328:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.358926][ T41] audit: type=1326 audit(1776873800.338:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.369958][ T41] audit: type=1326 audit(1776873800.338:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 242.209711][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 242.272819][ T6672] vxlan0: entered promiscuous mode [ 242.285544][ T80] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.369305][ T80] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.458577][ T80] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.925140][ T80] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.492668][ T6678] F2FS-fs: Conflicting test_dummy_encryption options [ 248.920404][ T6688] /dev/sr0: Can't open blockdev [ 250.746736][ T6708] Device name cannot be null; rc = [-22] [ 252.964350][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 253.440086][ T6715] fuse: Unknown parameter 'grZ!00000000000000000000' [ 253.507878][ T41] kauditd_printk_skb: 3 callbacks suppressed [ 253.507900][ T41] audit: type=1326 audit(1776873812.748:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 253.661812][ T41] audit: type=1326 audit(1776873812.748:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 253.728575][ T41] audit: type=1326 audit(1776873812.748:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 253.756445][ T41] audit: type=1326 audit(1776873812.748:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 253.788817][ T41] audit: type=1326 audit(1776873812.748:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 253.832198][ T41] audit: type=1326 audit(1776873812.748:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 253.859283][ T41] audit: type=1326 audit(1776873812.828:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 253.919401][ T41] audit: type=1326 audit(1776873812.828:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 253.976990][ T41] audit: type=1326 audit(1776873812.998:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 253.989678][ T41] audit: type=1326 audit(1776873812.998:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.5.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 254.346018][ T6732] overlayfs: failed to resolve './file0': -2 [ 254.601647][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 254.976373][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.82'. [ 255.481779][ T6740] fuse: Unknown parameter 'grZ!00000000000000000000' [ 255.542180][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.556300][ T5314] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.770529][ T6746] tipc: Started in network mode [ 255.812041][ T6746] tipc: Node identity baaf44dfa959, cluster identity 4711 [ 255.877191][ T6746] tipc: Enabled bearer , priority 0 [ 255.910240][ T6749] syzkaller0: entered promiscuous mode [ 256.004963][ T6749] syzkaller0: entered allmulticast mode [ 256.203873][ T6749] tipc: Resetting bearer [ 256.359582][ T6744] tipc: Resetting bearer [ 256.497407][ T6744] tipc: Disabling bearer [ 256.765638][ T6728] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 257.183713][ T6759] Device name cannot be null; rc = [-22] [ 258.548169][ T6779] 9p: Bad value for 'rfdno' [ 260.314177][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 260.314198][ T41] audit: type=1326 audit(1776873819.548:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 260.357403][ T41] audit: type=1326 audit(1776873819.548:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 260.469501][ T41] audit: type=1326 audit(1776873819.548:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 260.469572][ T41] audit: type=1326 audit(1776873819.578:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 260.469617][ T41] audit: type=1326 audit(1776873819.578:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 260.470288][ T41] audit: type=1326 audit(1776873819.578:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 260.470347][ T41] audit: type=1326 audit(1776873819.578:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 260.470390][ T41] audit: type=1326 audit(1776873819.578:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 260.470430][ T41] audit: type=1326 audit(1776873819.578:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 260.470475][ T41] audit: type=1326 audit(1776873819.578:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.5.88" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 261.647815][ T6799] smc: net device bond0 applied user defined pnetid SYZ2 [ 261.723159][ T6800] netlink: 14 bytes leftover after parsing attributes in process `syz.3.91'. [ 261.854166][ T6801] process 'syz.3.91' launched '/dev/fd/5' with NULL argv: empty string added [ 262.284156][ T5314] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 262.775220][ T6800] smc: removing net device bond0 with user defined pnetid SYZ2 [ 263.077494][ T6800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.165066][ T6800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.197971][ T6800] bond0 (unregistering): Released all slaves [ 263.771401][ T6813] tipc: Started in network mode [ 263.777961][ T6813] tipc: Node identity 66ecb3c15f0c, cluster identity 4711 [ 263.785012][ T6813] tipc: Enabled bearer , priority 0 [ 263.800409][ T6813] syzkaller0: entered promiscuous mode [ 263.804441][ T6813] syzkaller0: entered allmulticast mode [ 263.838798][ T6813] tipc: Resetting bearer [ 263.847965][ T6812] tipc: Resetting bearer [ 263.906062][ T6812] tipc: Disabling bearer [ 264.200322][ T6363] IPVS: starting estimator thread 0... [ 264.363817][ T6816] IPVS: using max 27 ests per chain, 64800 per kthread [ 264.902326][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 266.745797][ T6819] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 268.157066][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.99'. [ 268.425059][ T6847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 268.428711][ T6847] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 268.442020][ T5314] Bluetooth: hci2: command 0x0406 tx timeout [ 268.473187][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.99'. [ 268.739036][ T6850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 268.778111][ T6850] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 268.921676][ T6857] tipc: Enabling of bearer rejected, failed to enable media [ 269.140687][ T6847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.153737][ T6850] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.187327][ T6847] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 269.233584][ T6850] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 269.536816][ T6850] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 269.586779][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 269.609653][ T6872] overlay: ./file1 is not a directory [ 269.787972][ T6873] smc: adding net device bond0 with user defined pnetid SYZ2 [ 269.836720][ T6847] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.978982][ T6850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.988848][ T6850] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 269.993330][ T6847] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 270.126988][ T6847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.162979][ T6847] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 271.179704][ T6889] overlayfs: failed to resolve './file0': -2 [ 271.615517][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'. [ 272.244014][ T6049] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 272.266150][ T5314] block nbd0: Receive control failed (result -32) [ 272.317906][ T5982] block nbd0: Receive control failed (result -32) [ 272.348013][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.369055][ T6882] bridge_slave_1: left allmulticast mode [ 272.372077][ T6882] bridge_slave_1: left promiscuous mode [ 272.374434][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.402226][ T6886] nbd0: detected capacity change from 0 to 128 [ 272.414710][ T6686] block nbd0: Dead connection, failed to find a fallback [ 272.420999][ T6686] block nbd0: shutting down sockets [ 272.543584][ T6894] ntfs3(nullb0): Primary boot signature is not NTFS. [ 272.561768][ T6894] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 272.751065][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 272.767957][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 272.796951][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 272.822633][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 272.838411][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 272.857381][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 272.868116][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 272.899507][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'. [ 272.916784][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 272.920537][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 272.925646][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 272.944116][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 272.985863][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 272.989306][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 272.993832][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.476452][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.505882][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.557164][ T6686] ldm_validate_partition_table(): Disk read failed. [ 273.585541][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.567413][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 274.614147][ T6902] 9pnet_virtio: no channels available for device syz [ 275.064498][ T6686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.086863][ T6686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 275.140623][ T6686] Dev nbd0: unable to read RDB block 0 [ 275.162740][ T6686] nbd0: unable to read partition table [ 275.555634][ T6686] ldm_validate_partition_table(): Disk read failed. [ 275.574937][ T6686] Dev nbd0: unable to read RDB block 0 [ 275.587633][ T6686] nbd0: unable to read partition table [ 275.612700][ T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 275.882617][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 275.917167][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.923447][ T42] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.930305][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.946845][ T42] usb 9-1: config 0 descriptor?? [ 276.225574][ T42] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 276.418529][ T42] usb 9-1: USB disconnect, device number 2 [ 277.455249][ T6919] tipc: Started in network mode [ 277.504491][ T6919] tipc: Node identity 4ad09f583b83, cluster identity 4711 [ 277.538263][ T6919] tipc: Enabled bearer , priority 0 [ 277.610551][ T6922] syzkaller0: entered promiscuous mode [ 277.660617][ T6922] syzkaller0: entered allmulticast mode [ 277.856869][ T6922] tipc: Resetting bearer [ 277.929572][ T6918] tipc: Resetting bearer [ 278.174495][ T6918] tipc: Disabling bearer [ 278.196242][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.201432][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.287458][ T6911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.512816][ T6910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.766249][ T6958] raw_sendmsg: syz.5.119 forgot to set AF_INET. Fix it! [ 284.065554][ T6958] ceph: No mds server is up or the cluster is laggy [ 284.174068][ T30] libceph: connect (1)[c::]:6789 error -101 [ 284.197438][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 284.333287][ T6956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.360430][ T6964] input: syz1 as /devices/virtual/input/input10 [ 285.571408][ T6971] syzkaller0: entered promiscuous mode [ 285.575539][ T6971] syzkaller0: entered allmulticast mode [ 287.380507][ T6977] tipc: Enabled bearer , priority 0 [ 287.408140][ T6978] syzkaller0: entered promiscuous mode [ 287.417665][ T6978] syzkaller0: entered allmulticast mode [ 287.570054][ T6978] tipc: Resetting bearer [ 287.883620][ T6997] netlink: 'syz.4.125': attribute type 1 has an invalid length. [ 287.911962][ T6998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 288.279786][ T6996] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 288.452903][ T6978] tipc: Disabling bearer [ 288.804417][ T6997] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 288.814307][ T4232] tipc: Node number set to 334906591 [ 288.947589][ T41] kauditd_printk_skb: 130 callbacks suppressed [ 288.947719][ T41] audit: type=1326 audit(1776873848.188:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.022951][ T41] audit: type=1326 audit(1776873848.188:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.043719][ T41] audit: type=1326 audit(1776873848.228:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.108572][ T41] audit: type=1326 audit(1776873848.228:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.164662][ T41] audit: type=1326 audit(1776873848.228:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.220859][ T41] audit: type=1326 audit(1776873848.228:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.267306][ T41] audit: type=1326 audit(1776873848.228:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.358243][ T41] audit: type=1326 audit(1776873848.228:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.373265][ T41] audit: type=1326 audit(1776873848.228:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.456631][ T41] audit: type=1326 audit(1776873848.228:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 289.530402][ T7011] ubi31: detaching mtd0 [ 289.720014][ T7011] ubi31: mtd0 is detached [ 289.727176][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.128'. [ 293.718825][ T7031] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 293.881946][ T7034] syzkaller0: entered promiscuous mode [ 293.914028][ T7034] syzkaller0: entered allmulticast mode [ 295.222684][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 295.428758][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.457820][ T7047] tipc: Started in network mode [ 295.460169][ T7047] tipc: Node identity 42fd6196ab78, cluster identity 4711 [ 295.464344][ T7047] tipc: Enabled bearer , priority 0 [ 295.464426][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.469056][ T7047] syzkaller0: entered promiscuous mode [ 295.469079][ T7047] syzkaller0: entered allmulticast mode [ 295.492946][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.493858][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 295.495668][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.516682][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.520319][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.524547][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.529405][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.560702][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.563499][ T7041] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 295.596478][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 295.601397][ T7045] netlink: 348 bytes leftover after parsing attributes in process `syz.4.135'. [ 295.634856][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 295.644749][ T7045] netlink: 348 bytes leftover after parsing attributes in process `syz.4.135'. [ 295.660904][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 296.154041][ T7048] tipc: Resetting bearer [ 296.258095][ T7046] tipc: Resetting bearer [ 296.317697][ T7046] tipc: Disabling bearer [ 296.661479][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.137'. [ 296.830197][ T7068] overlayfs: failed to resolve './file0': -2 [ 298.134188][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 298.507006][ T7079] overlayfs: failed to resolve './file0': -2 [ 299.255863][ T7091] Device name cannot be null; rc = [-22] [ 300.009084][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 300.609451][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 301.323285][ T7105] fuse: Unknown parameter 'grZ!00000000000000000000' [ 302.946781][ T7115] netlink: 68 bytes leftover after parsing attributes in process `syz.4.145'. [ 303.004566][ T7116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'. [ 303.126609][ T7118] syzkaller0: entered promiscuous mode [ 303.172113][ T7118] syzkaller0: entered allmulticast mode [ 306.032759][ T7143] netlink: 68 bytes leftover after parsing attributes in process `syz.1.147'. [ 306.462853][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 309.565248][ T7161] overlayfs: failed to resolve './file0': -2 [ 309.884290][ T6049] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 310.381118][ T41] kauditd_printk_skb: 47 callbacks suppressed [ 310.381135][ T41] audit: type=1326 audit(1776873869.608:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.1.152" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66fcc code=0x0 [ 312.321154][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.663564][ T7190] Device name cannot be null; rc = [-22] [ 319.299229][ T7169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.311408][ T7169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.627191][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.156'. [ 320.174687][ T7195] fuse: Unknown parameter 'grZ!00000000000000000000' [ 320.336203][ T174] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.378989][ T174] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.385831][ T174] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.426190][ T174] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.430894][ T174] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.480414][ T174] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.488512][ T174] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.499632][ T174] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.628705][ T7206] tipc: Enabled bearer , priority 0 [ 320.636246][ T7206] syzkaller0: entered promiscuous mode [ 320.656097][ T7206] syzkaller0: entered allmulticast mode [ 320.719658][ T7206] tipc: Resetting bearer [ 320.742566][ T7205] tipc: Resetting bearer [ 320.790711][ T7205] tipc: Disabling bearer [ 321.257666][ T7215] ubi16: attaching mtd0 [ 321.275794][ T7215] ubi16: scanning is finished [ 321.424504][ T7218] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 321.443669][ T7218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.473817][ T7218] vhci_hcd vhci_hcd.0: Device attached [ 321.652153][ T6467] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 321.744551][ T6049] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 321.933045][ T6467] usb 9-1: config 0 has no interfaces? [ 321.953347][ T6467] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.008650][ T6467] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.023760][ T6467] usb 9-1: config 0 descriptor?? [ 322.170329][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.5.161'. [ 322.277276][ T7226] netlink: 68 bytes leftover after parsing attributes in process `syz.5.161'. [ 322.399820][ T7219] usb 45-1: recv xbuf, 0 [ 322.407450][ T48] vhci_hcd vhci_hcd.4: stop threads [ 322.530292][ T48] vhci_hcd vhci_hcd.4: release socket [ 322.562615][ T6049] usb 45-1: device descriptor read/64, error -71 [ 322.654566][ T48] vhci_hcd vhci_hcd.4: disconnect device [ 322.746706][ T6049] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 323.261597][ T7215] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 323.273831][ T7215] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 323.280889][ T7215] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 323.320538][ T7215] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 323.341829][ T7215] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 323.395942][ T7215] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 323.471165][ T7215] ubi16: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3133369082 [ 323.496524][ T7215] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 323.655099][ T7233] ubi16: background thread "ubi_bgt16d" started, PID 7233 [ 324.057987][ T6049] usb 9-1: USB disconnect, device number 3 [ 326.239418][ T7251] overlayfs: failed to resolve './file0': -2 [ 326.503355][ T4232] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 326.676629][ T4232] usb 10-1: Using ep0 maxpacket: 8 [ 326.688505][ T4232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.699831][ T4232] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 326.721469][ T4232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.789159][ T4232] usb 10-1: config 0 descriptor?? [ 327.052594][ T4232] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 327.213486][ T4232] usb 10-1: USB disconnect, device number 3 [ 327.388764][ T6049] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 328.299371][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.5.170'. [ 328.596330][ T7292] Device name cannot be null; rc = [-22] [ 329.756932][ T7297] option changes via remount are deprecated (pid=7295 comm=syz.3.171) [ 332.148738][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.173'. [ 332.159104][ T7321] netlink: 68 bytes leftover after parsing attributes in process `syz.4.173'. [ 337.356504][ T7350] overlayfs: failed to resolve './file0': -2 [ 337.603027][ T6049] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 337.611129][ T7354] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 337.648955][ T7354] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 337.661815][ T7354] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 337.701138][ T7354] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 337.718876][ T7354] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 339.671403][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.675241][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.272292][ T40] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 340.512697][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.535987][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.543662][ T40] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.661531][ T40] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.730063][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.752453][ T40] usb 10-1: config 0 descriptor?? [ 341.268217][ T7393] Device name cannot be null; rc = [-22] [ 343.063907][ T40] usbhid 10-1:0.0: can't add hid device: -71 [ 343.103801][ T40] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 343.293705][ T40] usb 10-1: USB disconnect, device number 4 [ 343.925954][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.185'. [ 344.608978][ T7408] netlink: 20 bytes leftover after parsing attributes in process `syz.5.186'. [ 344.973213][ T7401] fuse: Bad value for 'fd' [ 356.621758][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 356.833372][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 360.980238][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 361.012457][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 361.949535][ T7468] Cannot find set identified by id 0 to match [ 362.303783][ T7469] bridge_slave_0: left allmulticast mode [ 362.325493][ T7451] udevd[7451]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 362.365484][ T7469] bridge_slave_0: left promiscuous mode [ 362.525893][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.868774][ T7495] overlayfs: failed to resolve './file0': -2 [ 362.896283][ T7469] bridge_slave_1: left allmulticast mode [ 362.913925][ T7469] bridge_slave_1: left promiscuous mode [ 363.317675][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.455504][ T7469] team0: Port device team_slave_0 removed [ 364.113815][ T7469] team0: Port device team_slave_1 removed [ 364.118170][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.132125][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.141689][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.147080][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.173297][ T7469] net_ratelimit: 1975 callbacks suppressed [ 364.173318][ T7469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.863810][ T6049] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 366.742429][ T7509] netlink: 68 bytes leftover after parsing attributes in process `syz.5.203'. [ 367.013890][ T7521] binder: 7518:7521 ioctl 40789440 80000740 returned -22 [ 367.128862][ T7523] netlink: 'syz.3.207': attribute type 13 has an invalid length. [ 367.141439][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 369.791976][ T41] audit: type=1326 audit(1776873928.698:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.209" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66fcc code=0x0 [ 372.745894][ T7556] input: syz1 as /devices/virtual/input/input16 [ 374.443271][ T7454] udevd[7454]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 375.010306][ T7580] netlink: 68 bytes leftover after parsing attributes in process `syz.1.216'. [ 375.017516][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.216'. [ 378.174070][ T35] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 378.362040][ T35] usb 10-1: Using ep0 maxpacket: 16 [ 378.368198][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.403097][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.427113][ T35] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 378.444245][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.052906][ T35] usb 10-1: config 0 descriptor?? [ 380.966401][ T7624] smbdirect: ib_dev[syz0] removed [ 381.140289][ T7617] lo speed is unknown, defaulting to 1000 [ 381.288101][ T7617] lo speed is unknown, defaulting to 1000 [ 381.298315][ T7617] lo speed is unknown, defaulting to 1000 [ 381.301559][ T7617] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 381.535754][ T7617] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 381.548964][ T7617] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 382.125911][ T7617] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 382.510508][ T7617] lo speed is unknown, defaulting to 1000 [ 382.519861][ T7617] lo speed is unknown, defaulting to 1000 [ 382.540155][ T7617] lo speed is unknown, defaulting to 1000 [ 382.548331][ T7617] lo speed is unknown, defaulting to 1000 [ 382.616715][ T7633] siw: device registration error -23 [ 383.258467][ T7646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.236'. [ 385.009536][ T35] usbhid 10-1:0.0: can't add hid device: -71 [ 385.012364][ T35] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 385.182562][ T35] usb 10-1: USB disconnect, device number 5 [ 385.302773][ T7653] comedi comedi0: c6xdigio: I/O port conflict (0x9,3) [ 386.127972][ T7666] netlink: 68 bytes leftover after parsing attributes in process `syz.5.243'. [ 386.166737][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.243'. [ 387.773534][ T7695] netlink: 68 bytes leftover after parsing attributes in process `syz.1.254'. [ 387.871228][ T7695] lo speed is unknown, defaulting to 1000 [ 388.707497][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.256'. [ 388.859797][ T7706] lo speed is unknown, defaulting to 1000 [ 389.792100][ T42] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 390.019639][ T42] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.032894][ T42] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.041441][ T42] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.048734][ T42] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.058528][ T42] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.065760][ T42] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.071723][ T42] usb 10-1: Product: syz [ 390.075439][ T42] usb 10-1: Manufacturer: syz [ 390.116624][ T42] cdc_wdm 10-1:1.0: skipping garbage [ 390.121753][ T42] cdc_wdm 10-1:1.0: skipping garbage [ 390.127657][ T42] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 390.329380][ T42] usb 10-1: USB disconnect, device number 6 [ 391.876940][ T7737] comedi comedi1: pcmda12: I/O port conflict (0x6,16) [ 392.261832][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 392.578537][ T7748] comedi comedi2: s526: I/O port conflict (0x5e,64) [ 392.596162][ T7747] netlink: 'syz.4.272': attribute type 1 has an invalid length. [ 392.602316][ T7747] netlink: 224 bytes leftover after parsing attributes in process `syz.4.272'. [ 392.698394][ T7752] comedi comedi2: aio_iiro_16: I/O port conflict (0xfffffffffffffffd,8) [ 395.176717][ T7825] overlayfs: failed to resolve './file0': -2 [ 395.582609][ T40] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 396.257082][ T7842] Device name cannot be null; rc = [-22] [ 397.643003][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.309'. [ 397.956581][ T7867] Device name cannot be null; rc = [-22] [ 398.668287][ T7871] comedi comedi2: dt2801: I/O port conflict (0x5,2) [ 400.555044][ T7887] comedi comedi1: comedi_parport: I/O port conflict (0x1,3) [ 400.914899][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.319'. [ 400.954596][ T7893] comedi comedi1: adq12b: I/O port conflict (0x8,16) [ 401.076937][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.085412][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.278249][ T7901] comedi comedi1: pcl730: a I/O base address must be specified [ 401.710881][ T7905] Device name cannot be null; rc = [-22] [ 403.464781][ T7934] netlink: 68 bytes leftover after parsing attributes in process `syz.3.333'. [ 403.491650][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.333'. [ 403.597509][ T7934] lo speed is unknown, defaulting to 1000 [ 405.595618][ T7945] random: crng reseeded on system resumption [ 405.604249][ T7929] overlayfs: failed to resolve './file0': -2 [ 405.624730][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 406.654544][ T7961] comedi comedi1: dt2817: I/O port conflict (0xff,5) [ 406.732626][ T40] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 407.096217][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 407.335095][ T7984] netlink: 104 bytes leftover after parsing attributes in process `syz.1.348'. [ 407.377283][ T7984] netlink: 104 bytes leftover after parsing attributes in process `syz.1.348'. [ 420.548619][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 420.804891][ T8026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.355'. [ 421.457066][ T8043] hid-generic 0003:0627:0001.0001: pid 8043 passed too large report [ 421.567278][ T8045] netlink: 80 bytes leftover after parsing attributes in process `syz.1.366'. [ 421.893348][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 422.558538][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 424.292041][ T6343] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 424.565437][ T6343] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 424.569521][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.5.386'. [ 424.571279][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.581471][ T6343] usb 6-1: Product: syz [ 424.584550][ T6343] usb 6-1: Manufacturer: syz [ 424.587739][ T6343] usb 6-1: SerialNumber: syz [ 424.595836][ T6343] usb 6-1: config 0 descriptor?? [ 425.130346][ T6343] usb 6-1: USB disconnect, device number 4 [ 425.824074][ T8114] input: syz1 as /devices/virtual/input/input20 [ 426.832031][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 427.049913][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 427.088230][ T9] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 427.193600][ T9] usb 9-1: config 0 has no interface number 0 [ 427.207623][ T9] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 427.264654][ T9] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 427.285978][ T9] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 427.323509][ T9] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 427.339107][ T9] usb 9-1: Product: syz [ 427.340949][ T9] usb 9-1: SerialNumber: syz [ 427.384083][ T9] usb 9-1: config 0 descriptor?? [ 427.460772][ T9] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 427.522929][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input21 [ 427.805411][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.815059][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.821767][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.827507][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.833032][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.838082][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.842740][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.847961][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.852976][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.858614][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.910684][ T42] usb 9-1: USB disconnect, device number 4 [ 427.910702][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 428.089131][ T42] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 428.204919][ T8140] netlink: 11 bytes leftover after parsing attributes in process `syz.3.393'. [ 428.385462][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.395'. [ 428.749094][ T8146] netlink: 20 bytes leftover after parsing attributes in process `syz.5.394'. [ 428.856331][ T8146] lo speed is unknown, defaulting to 1000 [ 429.611481][ T8154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.396'. [ 430.257478][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.403'. [ 431.539304][ T8182] netlink: 68 bytes leftover after parsing attributes in process `syz.1.407'. [ 431.754937][ T8182] lo speed is unknown, defaulting to 1000 [ 432.906854][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.5.412'. [ 434.050118][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.421'. [ 434.122037][ T61] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 434.150010][ T8226] fuse: Unknown parameter 'grZ!00000000000000000000' [ 434.289484][ T61] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 434.296041][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 434.299732][ T61] usb 9-1: Product: syz [ 434.301547][ T61] usb 9-1: Manufacturer: syz [ 434.304632][ T61] usb 9-1: SerialNumber: syz [ 434.315624][ T61] usb 9-1: config 0 descriptor?? [ 434.327326][ T61] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 434.332668][ T61] dvb-usb: bulk message failed: -22 (2/0) [ 434.364699][ T61] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 434.370009][ T61] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 434.375864][ T61] usb 9-1: media controller created [ 434.407497][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.500071][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.5.426'. [ 434.538669][ T8214] dvb-usb: bulk message failed: -22 (5/0) [ 434.549702][ T8238] lo speed is unknown, defaulting to 1000 [ 435.393141][ T61] cxusb: set interface failed [ 435.394986][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 435.457472][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.429'. [ 435.477846][ T61] DVB: Unable to find symbol mt352_attach() [ 435.486247][ T61] dvb-usb: bulk message failed: -22 (5/0) [ 435.505858][ T61] zl10353_read_register: readreg error (reg=127, ret==-121) [ 435.506025][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.521653][ T8247] bridge_slave_1: left allmulticast mode [ 435.529275][ T8247] bridge_slave_1: left promiscuous mode [ 435.533053][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.566685][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.435'. [ 435.677986][ T8263] fuse: Unknown parameter 'grZ!00000000000000000000' [ 436.029079][ T61] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 436.091981][ T61] rc_core: IR keymap rc-dvico-mce not found [ 436.094536][ T61] Registered IR keymap rc-empty [ 436.101323][ T61] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 436.108150][ T61] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input22 [ 436.113851][ T61] dvb-usb: schedule remote query interval to 100 msecs. [ 436.116858][ T61] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 436.122547][ T61] usb 9-1: USB disconnect, device number 5 [ 436.171332][ T61] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 436.485817][ T8282] netlink: 204 bytes leftover after parsing attributes in process `syz.3.441'. [ 436.877049][ T41] audit: type=1326 audit(1776874764.113:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 436.887705][ T41] audit: type=1326 audit(1776874764.123:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 436.899289][ T41] audit: type=1326 audit(1776874764.123:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 436.908150][ T41] audit: type=1326 audit(1776874764.143:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 437.038720][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'. [ 437.082079][ T8275] comedi comedi2: reset error (fatal) [ 437.145326][ T8302] lo speed is unknown, defaulting to 1000 [ 437.422057][ T41] audit: type=1326 audit(1776874764.543:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 437.429483][ T41] audit: type=1326 audit(1776874764.543:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 438.132946][ T41] audit: type=1326 audit(1776874765.373:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 438.141951][ T41] audit: type=1326 audit(1776874765.373:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 438.306834][ T8312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.449'. [ 438.313328][ T41] audit: type=1326 audit(1776874765.553:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 438.321194][ T41] audit: type=1326 audit(1776874765.553:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 438.332088][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 438.432170][ T8314] fuse: Unknown parameter 'grZ!00000000000000000000' [ 438.491953][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 438.496941][ T35] usb 6-1: unable to get BOS descriptor or descriptor too short [ 438.498307][ T35] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 438.498341][ T35] usb 6-1: config 8 has no interface number 0 [ 438.498367][ T35] usb 6-1: config 8 interface 188 has no altsetting 0 [ 438.501986][ T35] usb 6-1: string descriptor 0 read error: -22 [ 438.502107][ T35] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 438.502130][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.509781][ T35] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 438.510147][ T35] dw2102: su3000_power_ctrl: 1, initialized 0 [ 438.510167][ T35] dvb-usb: bulk message failed: -22 (2/0) [ 438.559278][ T35] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 438.560823][ T35] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 438.581263][ T35] usb 6-1: media controller created [ 438.581297][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 438.581345][ T35] dw2102: i2c transfer failed. [ 438.581404][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 438.581417][ T35] dw2102: i2c transfer failed. [ 438.581429][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 438.581442][ T35] dw2102: i2c transfer failed. [ 438.581452][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 438.581465][ T35] dw2102: i2c transfer failed. [ 438.581476][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 438.581490][ T35] dw2102: i2c transfer failed. [ 438.581500][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 438.581512][ T35] dw2102: i2c transfer failed. [ 438.581519][ T35] dvb-usb: MAC address: 02:02:02:02:02:02 [ 438.608336][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.678707][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 438.682295][ T35] dw2102: command 0x0e transfer failed. [ 438.688005][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 438.690623][ T35] dw2102: command 0x0e transfer failed. [ 439.011332][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 439.017517][ T35] dw2102: command 0x0e transfer failed. [ 439.019481][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 439.021582][ T35] dw2102: command 0x0e transfer failed. [ 439.023834][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 439.025931][ T35] dw2102: command 0x51 transfer failed. [ 439.028686][ T8296] dvb-usb: bulk message failed: -22 (3/0) [ 439.030562][ T8296] dw2102: i2c transfer failed. [ 439.033116][ T8296] dvb-usb: bulk message failed: -22 (3/0) [ 439.037036][ T8296] dw2102: i2c transfer failed. [ 439.048214][ T35] DVB: Unable to find symbol ds3000_attach() [ 439.050328][ T35] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 439.052086][ T30] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 439.102480][ T35] rc_core: IR keymap rc-su3000 not found [ 439.108193][ T35] Registered IR keymap rc-empty [ 439.121055][ T35] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 439.132022][ T35] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input23 [ 439.139335][ T35] dvb-usb: schedule remote query interval to 150 msecs. [ 439.142443][ T35] dw2102: su3000_power_ctrl: 0, initialized 1 [ 439.144520][ T35] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 439.154484][ T35] usb 6-1: USB disconnect, device number 5 [ 439.226092][ T35] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 439.232836][ T30] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 439.236408][ T30] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.239414][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.243518][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 439.246752][ T30] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.249759][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.253951][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 439.257597][ T30] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.261517][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.266636][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 439.271083][ T30] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.275457][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.280123][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 439.285366][ T30] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.289485][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.295106][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 439.302610][ T30] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.306193][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.311994][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 439.317569][ T30] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.321160][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.325155][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 439.329162][ T30] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.333100][ T30] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.337573][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 439.349135][ T30] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 439.352913][ T30] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 439.355999][ T30] usb 10-1: Product: syz [ 439.357612][ T30] usb 10-1: Manufacturer: syz [ 439.359494][ T30] usb 10-1: SerialNumber: syz [ 439.363302][ T30] usb 10-1: config 0 descriptor?? [ 439.382681][ T30] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 439.579938][ T8331] netlink: 76 bytes leftover after parsing attributes in process `syz.3.464'. [ 439.582246][ T9] usb 10-1: USB disconnect, device number 7 [ 439.583522][ T8331] netlink: 220 bytes leftover after parsing attributes in process `syz.3.464'. [ 439.588269][ T8331] netlink: 220 bytes leftover after parsing attributes in process `syz.3.464'. [ 439.590434][ T9] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 439.836557][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 440.032034][ T61] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 440.183829][ T61] usb 9-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 440.186865][ T61] usb 9-1: config 0 interface 0 has no altsetting 0 [ 440.190902][ T61] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 440.194280][ T61] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 440.196841][ T61] usb 9-1: Product: syz [ 440.198063][ T61] usb 9-1: Manufacturer: syz [ 440.199571][ T61] usb 9-1: SerialNumber: syz [ 440.202672][ T61] usb 9-1: config 0 descriptor?? [ 440.207169][ T8337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 440.216160][ T61] usb 9-1: selecting invalid altsetting 0 [ 440.420574][ T8337] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 440.423923][ T8337] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 440.429839][ T8336] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 440.433300][ T30] usb 9-1: USB disconnect, device number 6 [ 441.189161][ T8361] netlink: 68 bytes leftover after parsing attributes in process `syz.3.469'. [ 441.301570][ T8362] lo speed is unknown, defaulting to 1000 [ 442.066928][ T41] kauditd_printk_skb: 167 callbacks suppressed [ 442.066942][ T41] audit: type=1326 audit(1776874769.303:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 442.067276][ T41] audit: type=1326 audit(1776874769.303:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 442.072213][ T41] audit: type=1326 audit(1776874769.303:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 442.072937][ T41] audit: type=1326 audit(1776874769.313:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 442.073425][ T41] audit: type=1326 audit(1776874769.313:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 442.073731][ T41] audit: type=1326 audit(1776874769.313:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 442.073898][ T41] audit: type=1326 audit(1776874769.313:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7199010 code=0x7ffc0000 [ 442.074341][ T41] audit: type=1326 audit(1776874769.313:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 442.074622][ T41] audit: type=1326 audit(1776874769.313:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 442.074720][ T41] audit: type=1326 audit(1776874769.313:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 442.671698][ T8375] fuse: Bad value for 'fd' [ 444.997628][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 445.152208][ T35] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 445.313996][ T35] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 445.317389][ T35] usb 10-1: config 0 has no interface number 0 [ 445.319745][ T35] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 445.324499][ T35] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 445.328482][ T35] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 445.331474][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.346455][ T35] usb 10-1: config 0 descriptor?? [ 445.348938][ T8395] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 445.361003][ T35] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 445.572171][ T35] usb 10-1: USB disconnect, device number 8 [ 445.572224][ C3] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 445.975631][ T8400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.081827][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.475'. [ 446.216327][ T8399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.235247][ T8413] lo speed is unknown, defaulting to 1000 [ 446.889402][ T8421] netlink: 68 bytes leftover after parsing attributes in process `syz.1.477'. [ 447.268538][ T8424] lo speed is unknown, defaulting to 1000 [ 449.142263][ T8447] lo speed is unknown, defaulting to 1000 [ 450.662480][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 450.777725][ T8454] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 450.793541][ T41] kauditd_printk_skb: 104 callbacks suppressed [ 450.793625][ T41] audit: type=1326 audit(1776874778.033:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.5.483" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x0 [ 450.812170][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 450.818602][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.825853][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.829789][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.858356][ T25] usb 6-1: config 0 descriptor?? [ 450.865922][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 451.078836][ T25] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 451.275186][ T25] usb 6-1: USB disconnect, device number 6 [ 451.554068][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 451.653081][ T8467] fuse: Unknown parameter 'grZ!00000000000000000000' [ 451.660825][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.484'. [ 452.477592][ T8478] input: syz1 as /devices/virtual/input/input24 [ 454.682910][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 454.787102][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.488'. [ 454.847842][ T8492] lo speed is unknown, defaulting to 1000 [ 455.202692][ T8506] netlink: 68 bytes leftover after parsing attributes in process `syz.1.491'. [ 455.344031][ T8500] lo speed is unknown, defaulting to 1000 [ 455.865415][ T41] audit: type=1326 audit(1776874783.093:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 455.884268][ T41] audit: type=1326 audit(1776874783.123:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 455.908541][ T41] audit: type=1326 audit(1776874783.143:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 455.931245][ T41] audit: type=1326 audit(1776874783.163:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 455.947208][ T41] audit: type=1326 audit(1776874783.183:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 455.956798][ T41] audit: type=1326 audit(1776874783.193:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 455.966244][ T41] audit: type=1326 audit(1776874783.203:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 455.978168][ T41] audit: type=1326 audit(1776874783.213:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 455.990809][ T41] audit: type=1326 audit(1776874783.223:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 455.999144][ T41] audit: type=1326 audit(1776874783.233:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.5.494" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 456.292380][ T8530] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 456.419362][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.498'. [ 456.533896][ T8535] fuse: Unknown parameter 'grZ!00000000000000000000' [ 458.104338][ T8567] overlayfs: failed to resolve './file0': -2 [ 459.302759][ T8571] fuse: Bad value for 'fd' [ 459.542619][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 460.191815][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 460.195984][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.508'. [ 460.951641][ T41] kauditd_printk_skb: 5 callbacks suppressed [ 460.951659][ T41] audit: type=1326 audit(1776874788.183:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 460.965981][ T41] audit: type=1326 audit(1776874788.193:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 460.976395][ T41] audit: type=1326 audit(1776874788.203:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 460.986416][ T41] audit: type=1326 audit(1776874788.203:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 461.003550][ T41] audit: type=1326 audit(1776874788.203:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 461.014629][ T41] audit: type=1326 audit(1776874788.223:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 461.025781][ T41] audit: type=1326 audit(1776874788.243:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 461.036458][ T41] audit: type=1326 audit(1776874788.243:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 461.072390][ T41] audit: type=1326 audit(1776874788.243:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 461.089725][ T41] audit: type=1326 audit(1776874788.263:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefcc code=0x7ffc0000 [ 461.125712][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 461.135222][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 462.556197][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.558570][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.669983][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.514'. [ 462.710185][ T8632] netlink: 68 bytes leftover after parsing attributes in process `syz.1.514'. [ 462.790995][ T8631] lo speed is unknown, defaulting to 1000 [ 463.174805][ T8636] overlayfs: failed to resolve './file0': -2 [ 478.203416][ T35] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 478.277462][ T8662] fuse: Bad value for 'fd' [ 478.346143][ T8666] netlink: 68 bytes leftover after parsing attributes in process `syz.5.523'. [ 478.350927][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.5.523'. [ 478.374233][ T35] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 478.375857][ T8666] lo speed is unknown, defaulting to 1000 [ 478.378633][ T35] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 479.336855][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 479.343362][ T35] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 479.346960][ T35] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 479.349549][ T35] usb 9-1: Product: syz [ 479.350887][ T35] usb 9-1: Manufacturer: syz [ 479.352598][ T35] usb 9-1: SerialNumber: syz [ 479.360390][ T35] usb 9-1: config 0 descriptor?? [ 479.363339][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 479.365817][ T35] hub 9-1:0.0: bad descriptor, ignoring hub [ 479.366252][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 479.368724][ T35] hub 9-1:0.0: probe with driver hub failed with error -5 [ 479.376706][ T35] usb 9-1: selecting invalid altsetting 0 [ 480.036017][ T35] usb 9-1: USB disconnect, device number 7 [ 480.074567][ T41] kauditd_printk_skb: 155 callbacks suppressed [ 480.074589][ T41] audit: type=1326 audit(1776874807.313:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.3.524" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefcc code=0x0 [ 480.175210][ T8672] udevd[8672]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.532072][ T35] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 480.686373][ T35] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 480.690014][ T35] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 480.694774][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 480.702246][ T35] usb 9-1: string descriptor 0 read error: -22 [ 480.705469][ T35] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.709761][ T35] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 480.718200][ T35] usb 9-1: config 0 descriptor?? [ 480.724987][ T35] hub 9-1:0.0: bad descriptor, ignoring hub [ 480.728301][ T35] hub 9-1:0.0: probe with driver hub failed with error -5 [ 480.736899][ T35] usb 9-1: selecting invalid altsetting 0 [ 481.052236][ T30] usb 9-1: USB disconnect, device number 8 [ 481.185037][ T304] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.188759][ T304] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.192554][ T304] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.196254][ T304] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.202006][ T304] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.222427][ T304] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.226300][ T304] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.233766][ T304] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.869298][ T8718] netlink: 68 bytes leftover after parsing attributes in process `syz.4.530'. [ 483.932782][ T8719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.530'. [ 484.125239][ T8718] lo speed is unknown, defaulting to 1000 [ 485.431322][ T41] audit: type=1326 audit(1776874812.663:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.4.534" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb3fcc code=0x0 [ 485.515924][ T8732] option changes via remount are deprecated (pid=8730 comm=syz.5.535) [ 486.420963][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.684409][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.689859][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.900593][ T8745] Device name cannot be null; rc = [-22] [ 486.928562][ T304] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.983223][ T304] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.005003][ T304] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.009440][ T304] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.026796][ T304] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.032129][ T304] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.036727][ T304] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.087553][ T304] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.167275][ T8751] input: syz1 as /devices/virtual/input/input26 [ 487.636843][ T8759] loop4: detected capacity change from 0 to 7 [ 487.811100][ T8654] buffer_io_error: 27 callbacks suppressed [ 487.811227][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.866355][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.884516][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.895424][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.910539][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 488.476994][ T8767] netlink: 68 bytes leftover after parsing attributes in process `syz.4.543'. [ 488.487253][ T8765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.543'. [ 488.595881][ T8766] lo speed is unknown, defaulting to 1000 [ 489.763825][ T8783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.547'. [ 489.832144][ T8787] option changes via remount are deprecated (pid=8778 comm=syz.4.545) [ 489.986226][ T41] audit: type=1326 audit(1776874817.223:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.5.549" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fcc code=0x0 [ 490.067516][ T8795] fuse: Unknown parameter 'grZ!00000000000000000000' [ 490.840467][ T8804] binder: 8802:8804 ioctl 40789440 80000740 returned -22 [ 490.905679][ T8805] netlink: 'syz.1.551': attribute type 13 has an invalid length. [ 490.908858][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 491.143258][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.145932][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.253990][ T8798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.260177][ T8798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.336098][ T61] lo speed is unknown, defaulting to 1000 [ 491.343234][ T61] syz2: Port: 1 Link DOWN [ 491.428130][ T371] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.437758][ T371] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.445383][ T371] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.451589][ T371] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.373392][ T8823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.553'. [ 492.583483][ T8825] lo speed is unknown, defaulting to 1000 [ 493.396983][ T8827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.405367][ T8827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.807528][ T8831] netlink: 68 bytes leftover after parsing attributes in process `syz.5.554'. [ 493.811739][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.554'. [ 493.918254][ T8832] lo speed is unknown, defaulting to 1000 [ 496.037654][ T8850] loop4: detected capacity change from 0 to 7 [ 496.096706][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 496.100054][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 496.103485][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 496.106919][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 496.110797][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 497.015962][ T8862] o2cb: This node has not been configured. [ 497.021709][ T8862] o2cb: Cluster check failed. Fix errors before retrying. [ 497.035604][ T8862] (syz.1.558,8862,1):user_dlm_register:674 ERROR: status = -22 [ 497.049075][ T8862] (syz.1.558,8862,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 497.180026][ T8859] bond0: (slave bridge0): Releasing backup interface [ 497.228432][ T8859] bridge_slave_0: left allmulticast mode [ 497.230443][ T8859] bridge_slave_0: left promiscuous mode [ 497.234616][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.319853][ T8859] bond0: (slave bond_slave_0): Releasing backup interface [ 497.329316][ T8859] bond0: (slave bond_slave_1): Releasing backup interface [ 497.343808][ T8859] team0: Port device team_slave_0 removed [ 497.356046][ T8859] team0: Port device team_slave_1 removed [ 497.359929][ T8859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.370599][ T8859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.375305][ T8859] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 497.836019][ T41] audit: type=1326 audit(1776874825.073:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.5.561" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fcc code=0x0 [ 497.888928][ T41] audit: type=1326 audit(1776874825.123:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.1.560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 497.899926][ T41] audit: type=1326 audit(1776874825.123:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.1.560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 497.909510][ T41] audit: type=1326 audit(1776874825.123:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.1.560" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 497.919591][ T41] audit: type=1326 audit(1776874825.123:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.1.560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 497.927225][ T41] audit: type=1326 audit(1776874825.123:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.1.560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 497.934595][ T41] audit: type=1326 audit(1776874825.123:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.1.560" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 497.941659][ T41] audit: type=1326 audit(1776874825.123:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.1.560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 497.949748][ T41] audit: type=1326 audit(1776874825.123:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.1.560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 497.956810][ T41] audit: type=1326 audit(1776874825.123:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.1.560" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 498.064782][ T42] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 498.222011][ T42] usb 9-1: Using ep0 maxpacket: 32 [ 498.467060][ T42] usb 9-1: unable to get BOS descriptor or descriptor too short [ 498.479055][ T42] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 498.488052][ T42] usb 9-1: config 8 has no interface number 0 [ 498.490967][ T42] usb 9-1: config 8 interface 188 has no altsetting 0 [ 498.508739][ T42] usb 9-1: string descriptor 0 read error: -22 [ 498.512750][ T42] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 498.522234][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.647261][ T42] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 498.650203][ T42] dw2102: su3000_power_ctrl: 1, initialized 0 [ 498.652472][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 498.665624][ T8877] : renamed from vlan0 [ 498.708194][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.716683][ T42] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 498.720177][ T42] usb 9-1: media controller created [ 498.722191][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 498.724368][ T42] dw2102: i2c transfer failed. [ 498.727025][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 498.730168][ T42] dw2102: i2c transfer failed. [ 498.743251][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 498.752779][ T42] dw2102: i2c transfer failed. [ 498.754868][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 498.757446][ T42] dw2102: i2c transfer failed. [ 498.759684][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 498.762293][ T42] dw2102: i2c transfer failed. [ 498.764129][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 498.766175][ T42] dw2102: i2c transfer failed. [ 498.767860][ T42] dvb-usb: MAC address: 02:02:02:02:02:02 [ 498.786723][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.805122][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 498.807401][ T42] dw2102: command 0x0e transfer failed. [ 498.809390][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 498.811790][ T42] dw2102: command 0x0e transfer failed. [ 499.121986][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 499.124793][ T42] dw2102: command 0x0e transfer failed. [ 499.127043][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 499.129582][ T42] dw2102: command 0x0e transfer failed. [ 499.143268][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 499.182042][ T42] dw2102: command 0x51 transfer failed. [ 499.185616][ T8870] dvb-usb: bulk message failed: -22 (20/0) [ 499.194190][ T8870] dw2102: i2c transfer failed. [ 499.230471][ T42] DVB: Unable to find symbol ds3000_attach() [ 499.233315][ T42] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 499.331668][ T42] rc_core: IR keymap rc-su3000 not found [ 499.346768][ T42] Registered IR keymap rc-empty [ 499.377356][ T42] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 499.390818][ T42] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input27 [ 499.409186][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 499.422406][ T42] dw2102: su3000_power_ctrl: 0, initialized 1 [ 499.424855][ T42] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 499.437876][ T42] usb 9-1: USB disconnect, device number 9 [ 499.558287][ T42] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 499.949246][ T8901] netlink: 168 bytes leftover after parsing attributes in process `syz.5.570'. [ 499.962989][ T8899] loop4: detected capacity change from 0 to 7 [ 500.228796][ T8657] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.239997][ T8657] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.250702][ T8657] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.261079][ T8657] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.264121][ T8906] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 500.271166][ T8906] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 500.278450][ T8906] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 500.279847][ T8657] Buffer I/O error on dev loop4, logical block 0, async page read [ 500.316310][ T8906] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 501.047806][ T8898] fuse: Bad value for 'fd' [ 501.212118][ T25] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 501.361996][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 501.366480][ T25] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.370919][ T25] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 501.374940][ T25] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 501.379106][ T25] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.385010][ T25] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 501.389015][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.604570][ T25] usb 9-1: GET_CAPABILITIES returned 0 [ 501.606587][ T25] usbtmc 9-1:16.0: can't read capabilities [ 501.819698][ T35] usb 9-1: USB disconnect, device number 10 [ 503.179860][ T8932] binder: 8930:8932 ioctl 40789440 80000740 returned -22 [ 503.390490][ T8936] netlink: 'syz.5.583': attribute type 13 has an invalid length. [ 503.394205][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.583'. [ 503.699600][ T8941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.584'. [ 504.038999][ T8939] netlink: 68 bytes leftover after parsing attributes in process `syz.4.584'. [ 504.106194][ T8942] lo speed is unknown, defaulting to 1000 [ 504.624121][ T8955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.585'. [ 505.140385][ T41] kauditd_printk_skb: 111 callbacks suppressed [ 505.140826][ T41] audit: type=1326 audit(1776874832.373:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 505.140882][ T41] audit: type=1326 audit(1776874832.373:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 505.140920][ T41] audit: type=1326 audit(1776874832.373:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 505.140955][ T41] audit: type=1326 audit(1776874832.373:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 505.140987][ T41] audit: type=1326 audit(1776874832.373:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 505.141023][ T41] audit: type=1326 audit(1776874832.373:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 505.153122][ T41] audit: type=1326 audit(1776874832.373:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 505.153168][ T41] audit: type=1326 audit(1776874832.373:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 505.153191][ T41] audit: type=1326 audit(1776874832.383:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 505.153212][ T41] audit: type=1326 audit(1776874832.383:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 505.347170][ T8956] lo speed is unknown, defaulting to 1000 [ 505.370313][ T8954] netlink: 68 bytes leftover after parsing attributes in process `syz.3.585'. [ 505.939475][ T8963] fuse: Bad value for 'fd' [ 506.142137][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 506.292049][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 506.298118][ T42] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 506.301202][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.341808][ T42] pvrusb2: Hardware description: Terratec Grabster AV400 [ 506.346372][ T42] pvrusb2: ********** [ 506.348555][ T42] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 506.353786][ T42] pvrusb2: Important functionality might not be entirely working. [ 506.357395][ T42] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 506.363426][ T42] pvrusb2: ********** [ 506.569688][ T2505] pvrusb2: Invalid write control endpoint [ 506.750008][ T42] usb 6-1: USB disconnect, device number 7 [ 506.830538][ T8972] jfs: Unknown parameter 'disrArd' [ 507.159495][ T2505] pvrusb2: Invalid write control endpoint [ 507.173493][ T2505] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 507.185958][ T2505] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 507.188825][ T2505] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 507.192558][ T2505] pvrusb2: Device being rendered inoperable [ 507.197873][ T2505] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 507.202388][ T2505] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 507.217773][ T2505] pvrusb2: Attached sub-driver cx25840 [ 507.227875][ T2505] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 507.232636][ T2505] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 507.356711][ T35] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 507.364804][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.593'. [ 507.460858][ T8984] loop4: detected capacity change from 0 to 7 [ 507.507513][ T8985] fuse: Unknown parameter 'grZ!00000000000000000000' [ 507.524569][ T35] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 507.529510][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 507.534784][ T35] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 507.542497][ T35] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 507.546596][ T35] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.549864][ T35] usb 10-1: Product: syz [ 507.551450][ T35] usb 10-1: Manufacturer: syz [ 507.553568][ T35] usb 10-1: SerialNumber: syz [ 507.559008][ T35] usb 10-1: config 0 descriptor?? [ 507.562744][ T8978] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 507.589684][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 507.594892][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 507.599428][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 507.606983][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 507.612991][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 507.780588][ T8978] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 507.989756][ T35] usb 10-1: USB disconnect, device number 9 [ 508.066408][ T8672] udevd[8672]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.347592][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.603'. [ 508.502656][ T8996] fuse: Unknown parameter 'grZ!00000000000000000000' [ 509.354351][ T9004] option changes via remount are deprecated (pid=9000 comm=syz.1.596) [ 509.543744][ T9007] binder: 9005:9007 ioctl 40789440 80000740 returned -22 [ 509.576153][ T9007] netlink: 'syz.4.597': attribute type 13 has an invalid length. [ 509.579205][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 510.599945][ T9017] fuse: Bad value for 'fd' [ 511.434953][ T9026] loop4: detected capacity change from 0 to 7 [ 511.498384][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 511.509684][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 511.521598][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 511.535541][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 511.536151][ T41] kauditd_printk_skb: 560 callbacks suppressed [ 511.536218][ T41] audit: type=1326 audit(1776874838.763:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.5.604" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fcc code=0x0 [ 511.544993][ T8654] Buffer I/O error on dev loop4, logical block 0, async page read [ 512.260793][ T9015] siw: device registration error -23 [ 512.276546][ T9013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.599'. [ 512.281456][ T9013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 512.379760][ T9030] lo speed is unknown, defaulting to 1000 [ 512.653837][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'. [ 512.759389][ T9040] fuse: Unknown parameter 'grZ!00000000000000000000' [ 513.470275][ T9050] Device name cannot be null; rc = [-22] [ 514.198611][ T9054] fuse: Bad value for 'fd' [ 515.057645][ T41] audit: type=1326 audit(1776874842.273:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 515.060287][ T41] audit: type=1326 audit(1776874842.273:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 515.097597][ T41] audit: type=1326 audit(1776874842.273:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 515.097677][ T41] audit: type=1326 audit(1776874842.273:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 515.143977][ T41] audit: type=1326 audit(1776874842.283:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 515.154383][ T41] audit: type=1326 audit(1776874842.283:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 515.161613][ T41] audit: type=1326 audit(1776874842.283:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 515.170432][ T41] audit: type=1326 audit(1776874842.283:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 515.179971][ T41] audit: type=1326 audit(1776874842.283:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 515.499705][ T9078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.617'. [ 515.519860][ T9077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.617'. [ 515.648317][ T9079] lo speed is unknown, defaulting to 1000 [ 516.398320][ T9071] jfs: Unknown parameter 'disrArd' [ 516.785647][ T41] kauditd_printk_skb: 106 callbacks suppressed [ 516.785668][ T41] audit: type=1326 audit(1776874844.023:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 516.806184][ T41] audit: type=1326 audit(1776874844.033:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.4.623" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fb3fcc code=0x7ffc0000 [ 517.011822][ T9089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 517.129760][ T9091] fuse: Unknown parameter 'grZ!00000000000000000000' [ 517.235277][ T9094] can0: slcan on ttyS3. [ 517.313154][ T9094] can0 (unregistered): slcan off ttyS3. [ 517.611964][ T30] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 517.781949][ T9108] o2cb: This node has not been configured. [ 517.785175][ T9108] o2cb: Cluster check failed. Fix errors before retrying. [ 517.788502][ T9108] (syz.5.627,9108,1):user_dlm_register:674 ERROR: status = -22 [ 517.793578][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 517.796397][ T9108] (syz.5.627,9108,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 517.833503][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 517.843694][ T30] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 517.848837][ T30] usb 6-1: config 8 has no interface number 0 [ 517.866235][ T30] usb 6-1: config 8 interface 188 has no altsetting 0 [ 517.881314][ T30] usb 6-1: string descriptor 0 read error: -22 [ 517.883586][ T30] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 517.886725][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.910059][ T30] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 517.915224][ T30] dw2102: su3000_power_ctrl: 1, initialized 0 [ 517.919498][ T30] dvb-usb: bulk message failed: -22 (2/0) [ 517.939278][ T9107] bridge_slave_0: left allmulticast mode [ 517.941461][ T9107] bridge_slave_0: left promiscuous mode [ 517.942992][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.947176][ T30] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 517.950207][ T30] usb 6-1: media controller created [ 517.952143][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 517.954135][ T30] dw2102: i2c transfer failed. [ 517.955723][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 517.956487][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.957529][ T30] dw2102: i2c transfer failed. [ 517.957540][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 517.957547][ T30] dw2102: i2c transfer failed. [ 517.957553][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 517.957559][ T30] dw2102: i2c transfer failed. [ 517.957565][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 517.974245][ T30] dw2102: i2c transfer failed. [ 517.975994][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 517.978189][ T30] dw2102: i2c transfer failed. [ 517.980055][ T30] dvb-usb: MAC address: 02:02:02:02:02:02 [ 517.983669][ T9107] bridge_slave_1: left allmulticast mode [ 517.988800][ T9107] bridge_slave_1: left promiscuous mode [ 517.992334][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.007413][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.018449][ T9107] bond0: (slave bond_slave_0): Releasing backup interface [ 518.032779][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 518.032794][ T30] dw2102: command 0x0e transfer failed. [ 518.032830][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 518.032837][ T30] dw2102: command 0x0e transfer failed. [ 518.046348][ T9107] bond0: (slave bond_slave_1): Releasing backup interface [ 518.060555][ T9107] team0: Port device team_slave_0 removed [ 518.063399][ T9107] team0: Port device team_slave_1 removed [ 518.083294][ T9107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.089296][ T9107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.095552][ T9107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 518.240524][ T9120] Device name cannot be null; rc = [-22] [ 518.342457][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 518.347594][ T30] dw2102: command 0x0e transfer failed. [ 518.349443][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 518.355841][ T30] dw2102: command 0x0e transfer failed. [ 518.357735][ T30] dvb-usb: bulk message failed: -22 (1/0) [ 518.364443][ T30] dw2102: command 0x51 transfer failed. [ 518.366578][ T9099] dvb-usb: bulk message failed: -22 (20/0) [ 518.369053][ T9099] dw2102: i2c transfer failed. [ 518.416844][ T30] DVB: Unable to find symbol ds3000_attach() [ 518.419649][ T30] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 518.472473][ T30] rc_core: IR keymap rc-su3000 not found [ 518.475419][ T30] Registered IR keymap rc-empty [ 518.479956][ T30] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 518.488937][ T30] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input30 [ 518.516140][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 518.519284][ T30] dw2102: su3000_power_ctrl: 0, initialized 1 [ 518.521321][ T30] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 518.566107][ T30] usb 6-1: USB disconnect, device number 8 [ 518.912238][ T30] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 519.065874][ T9127] jfs: Unknown parameter 'disrArd' [ 519.293228][ T9139] netlink: 68 bytes leftover after parsing attributes in process `syz.4.636'. [ 519.300393][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.636'. [ 519.404248][ T9140] lo speed is unknown, defaulting to 1000 [ 519.529803][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.637'. [ 519.541972][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 519.620824][ T9146] fuse: Unknown parameter 'grZ!00000000000000000000' [ 519.740903][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 519.744545][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 519.748027][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.758681][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 519.762018][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 519.764820][ T30] usb 6-1: Product: syz [ 519.766442][ T30] usb 6-1: Manufacturer: syz [ 519.768214][ T30] usb 6-1: SerialNumber: syz [ 519.990718][ T30] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 520.205055][ T9] usb 6-1: USB disconnect, device number 9 [ 520.217992][ T9] usblp0: removed [ 520.684013][ T9158] Device name cannot be null; rc = [-22] [ 520.972400][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 521.134667][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.138213][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.142029][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.147827][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.150790][ T9167] Illegal XDP return value 4294967294 on prog (id 70) dev N/A, expect packet loss! [ 521.151401][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.160834][ T9] usb 6-1: config 0 descriptor?? [ 521.578983][ T9183] netlink: 68 bytes leftover after parsing attributes in process `syz.5.652'. [ 521.585237][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.652'. [ 521.689590][ T9186] lo speed is unknown, defaulting to 1000 [ 521.816776][ T9190] support for the xor transformation has been removed. [ 522.229456][ T9] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 6/15 [ 522.242670][ T9] plantronics 0003:047F:FFFF.0002: parse failed [ 522.256426][ T9] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 522.395422][ T6343] usb 6-1: USB disconnect, device number 10 [ 522.433468][ T9198] Device name cannot be null; rc = [-22] [ 523.047931][ T9206] input: syz0 as /devices/virtual/input/input34 [ 523.264798][ C2] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 523.367055][ T9217] overlayfs: failed to resolve './file0': -2 [ 523.482751][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 523.623930][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 523.657417][ T9] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 523.661771][ T9] usb 6-1: config 0 has no interface number 0 [ 523.665623][ T9] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.680716][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 523.684835][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.688140][ T9] usb 6-1: Product: syz [ 523.689694][ T9] usb 6-1: Manufacturer: syz [ 523.691578][ T9] usb 6-1: SerialNumber: syz [ 523.817691][ T9] usb 6-1: config 0 descriptor?? [ 523.952390][ T9] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 523.993196][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.996309][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 524.093552][ T25] usb 6-1: USB disconnect, device number 11 [ 524.173044][ T25] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 524.388904][ T9225] input: syz1 as /devices/virtual/input/input35 [ 524.502010][ T40] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 524.652478][ T40] usb 10-1: Using ep0 maxpacket: 8 [ 524.656676][ T40] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 524.660136][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.675402][ T40] pvrusb2: Hardware description: Terratec Grabster AV400 [ 524.678364][ T40] pvrusb2: ********** [ 524.680333][ T40] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 524.685576][ T40] pvrusb2: Important functionality might not be entirely working. [ 524.689508][ T40] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 524.694651][ T40] pvrusb2: ********** [ 524.903825][ T2505] pvrusb2: Invalid write control endpoint [ 524.959879][ T9231] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.672'. [ 525.007914][ T2505] pvrusb2: Invalid write control endpoint [ 525.009945][ T2505] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 525.013183][ T2505] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 525.015728][ T2505] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 525.019081][ T2505] pvrusb2: Device being rendered inoperable [ 525.021698][ T2505] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 525.025974][ T2505] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 525.032716][ T2505] pvrusb2: Attached sub-driver cx25840 [ 525.034745][ T2505] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 525.038355][ T2505] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 525.105434][ T9] usb 10-1: USB disconnect, device number 10 [ 525.534953][ T9251] input: syz1 as /devices/virtual/input/input36 [ 526.194799][ T9233] Device name cannot be null; rc = [-22] [ 526.340758][ T9261] netlink: 16 bytes leftover after parsing attributes in process `syz.5.684'. [ 526.495336][ T9261] fuse: Unknown parameter 'grZ!00000000000000000000' [ 526.938462][ T9272] tmpfs: Too few inodes for current use [ 527.294132][ T30] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 528.269959][ T30] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 528.275467][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 528.279646][ T30] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 528.284954][ T30] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 528.288747][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.292775][ T30] usb 9-1: Product: syz [ 528.294722][ T30] usb 9-1: Manufacturer: syz [ 528.296701][ T30] usb 9-1: SerialNumber: syz [ 528.304081][ T30] usb 9-1: config 0 descriptor?? [ 528.307085][ T9276] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.518948][ T9276] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.800593][ T9284] Device name cannot be null; rc = [-22] [ 528.812583][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.694'. [ 528.816434][ T9285] netlink: 68 bytes leftover after parsing attributes in process `syz.1.692'. [ 528.820740][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.692'. [ 528.829567][ T30] usb 9-1: USB disconnect, device number 11 [ 528.857990][ T8688] udevd[8688]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 528.899204][ T9290] lo speed is unknown, defaulting to 1000 [ 528.928116][ T9291] fuse: Unknown parameter 'grZ!00000000000000000000' [ 529.913072][ T9304] input: syz1 as /devices/virtual/input/input39 [ 530.007180][ T9300] jfs: Unknown parameter 'disrArd' [ 530.457495][ T9325] netlink: 68 bytes leftover after parsing attributes in process `syz.1.703'. [ 530.464671][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.703'. [ 530.536266][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.5.705'. [ 530.558225][ T9326] lo speed is unknown, defaulting to 1000 [ 530.689476][ T9333] fuse: Bad value for 'fd' [ 531.799068][ T9334] Device name cannot be null; rc = [-22] [ 531.851997][ T40] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 531.964022][ T9339] jfs: Unknown parameter 'disrArd' [ 532.022382][ T40] usb 10-1: Using ep0 maxpacket: 8 [ 532.041342][ T40] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 532.061586][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.180767][ T40] pvrusb2: Hardware description: Terratec Grabster AV400 [ 532.185925][ T40] pvrusb2: ********** [ 532.187374][ T40] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 532.237087][ T40] pvrusb2: Important functionality might not be entirely working. [ 532.265056][ T40] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 532.289490][ T40] pvrusb2: ********** [ 532.392058][ T2505] pvrusb2: Invalid write control endpoint [ 532.436992][ T2505] pvrusb2: Invalid write control endpoint [ 532.439911][ T2505] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 532.443626][ T2505] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 532.446671][ T2505] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 532.450111][ T2505] pvrusb2: Device being rendered inoperable [ 532.454223][ T2505] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 532.456601][ T2505] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 532.459485][ T2505] pvrusb2: Attached sub-driver cx25840 [ 532.461325][ T2505] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 532.468248][ T2505] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 532.473131][ T5982] block nbd3: Receive control failed (result -107) [ 532.489278][ T5982] [ 532.490125][ T5982] ====================================================== [ 532.492518][ T5982] WARNING: possible circular locking dependency detected [ 532.494902][ T5982] syzkaller #0 Tainted: G L [ 532.497429][ T5982] ------------------------------------------------------ [ 532.500847][ T5982] kworker/u33:2/5982 is trying to acquire lock: [ 532.503467][ T5982] ffff888023f53660 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 532.507477][ T5982] [ 532.507477][ T5982] but task is already holding lock: [ 532.510615][ T5982] ffff888024714c68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 532.514568][ T5982] [ 532.514568][ T5982] which lock already depends on the new lock. [ 532.514568][ T5982] [ 532.519693][ T5982] [ 532.519693][ T5982] the existing dependency chain (in reverse order) is: [ 532.523454][ T5982] [ 532.523454][ T5982] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 532.526761][ T5982] __mutex_lock+0x1a4/0x1b10 [ 532.529005][ T5982] nbd_queue_rq+0x428/0x1080 [ 532.531276][ T5982] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 532.534468][ T5982] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 532.537857][ T5982] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 532.540863][ T5982] blk_mq_run_hw_queue+0x23c/0x670 [ 532.543252][ T5982] blk_mq_dispatch_list+0x51d/0x1360 [ 532.545457][ T5982] blk_mq_flush_plug_list+0x130/0x600 [ 532.548086][ T5982] __blk_flush_plug+0x2c4/0x4b0 [ 532.551268][ T5982] __submit_bio+0x584/0x6c0 [ 532.553477][ T5982] submit_bio_noacct_nocheck+0x543/0xbf0 [ 532.555940][ T5982] submit_bio_noacct+0xd18/0x2000 [ 532.558016][ T5982] submit_bh_wbc+0x681/0x890 [ 532.560115][ T5982] block_read_full_folio+0x4c8/0x8e0 [ 532.561995][ T5982] filemap_read_folio+0xfc/0x3b0 [ 532.563896][ T5982] do_read_cache_folio+0x2d7/0x6b0 [ 532.565749][ T5982] read_part_sector+0xd1/0x370 [ 532.567482][ T5982] adfspart_check_ICS+0x91/0x7d0 [ 532.569373][ T5982] bdev_disk_changed+0x7a3/0x1250 [ 532.571407][ T5982] blkdev_get_whole+0x187/0x290 [ 532.573604][ T5982] bdev_open+0x2c7/0xe40 [ 532.575357][ T5982] blkdev_open+0x34e/0x4f0 [ 532.577027][ T5982] do_dentry_open+0x6d8/0x1660 [ 532.578726][ T5982] vfs_open+0x82/0x3f0 [ 532.580260][ T5982] path_openat+0x208c/0x31a0 [ 532.581924][ T5982] do_file_open+0x20e/0x430 [ 532.583661][ T5982] do_sys_openat2+0x10d/0x1e0 [ 532.585478][ T5982] __x64_sys_openat+0x12d/0x210 [ 532.587238][ T5982] do_syscall_64+0x10b/0xf80 [ 532.589104][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.591738][ T5982] [ 532.591738][ T5982] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 532.594262][ T5982] __mutex_lock+0x1a4/0x1b10 [ 532.596043][ T5982] nbd_queue_rq+0xba/0x1080 [ 532.597650][ T5982] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 532.599606][ T5982] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 532.601762][ T5982] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 532.603841][ T5982] blk_mq_run_hw_queue+0x23c/0x670 [ 532.606048][ T5982] blk_mq_dispatch_list+0x51d/0x1360 [ 532.608259][ T5982] blk_mq_flush_plug_list+0x130/0x600 [ 532.610332][ T5982] __blk_flush_plug+0x2c4/0x4b0 [ 532.612183][ T5982] __submit_bio+0x584/0x6c0 [ 532.613791][ T5982] submit_bio_noacct_nocheck+0x543/0xbf0 [ 532.615794][ T5982] submit_bio_noacct+0xd18/0x2000 [ 532.617564][ T5982] submit_bh_wbc+0x681/0x890 [ 532.619222][ T5982] block_read_full_folio+0x4c8/0x8e0 [ 532.621078][ T5982] filemap_read_folio+0xfc/0x3b0 [ 532.622830][ T5982] do_read_cache_folio+0x2d7/0x6b0 [ 532.624731][ T5982] read_part_sector+0xd1/0x370 [ 532.626686][ T5982] adfspart_check_ICS+0x91/0x7d0 [ 532.628725][ T5982] bdev_disk_changed+0x7a3/0x1250 [ 532.630751][ T5982] blkdev_get_whole+0x187/0x290 [ 532.633084][ T5982] bdev_open+0x2c7/0xe40 [ 532.634810][ T5982] blkdev_open+0x34e/0x4f0 [ 532.636620][ T5982] do_dentry_open+0x6d8/0x1660 [ 532.638632][ T5982] vfs_open+0x82/0x3f0 [ 532.640559][ T5982] path_openat+0x208c/0x31a0 [ 532.642365][ T5982] do_file_open+0x20e/0x430 [ 532.644245][ T5982] do_sys_openat2+0x10d/0x1e0 [ 532.646485][ T5982] __x64_sys_openat+0x12d/0x210 [ 532.648495][ T5982] do_syscall_64+0x10b/0xf80 [ 532.650156][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.652357][ T5982] [ 532.652357][ T5982] -> #4 (set->srcu){.+.+}-{0:0}: [ 532.666857][ T5982] __synchronize_srcu+0xa2/0x300 [ 532.668989][ T5982] blk_mq_quiesce_queue+0x149/0x1c0 [ 532.670873][ T5982] elevator_switch+0x17b/0x7e0 [ 532.672813][ T5982] elevator_change+0x352/0x530 [ 532.675362][ T5982] elevator_set_default+0x29e/0x360 [ 532.677416][ T5982] blk_register_queue+0x48e/0x630 [ 532.679319][ T5982] __add_disk+0x73f/0xe40 [ 532.681119][ T5982] add_disk_fwnode+0x118/0x5c0 [ 532.682998][ T5982] nbd_dev_add+0x77a/0xb10 [ 532.684642][ T5982] nbd_init+0x291/0x2b0 [ 532.686511][ T5982] do_one_initcall+0x121/0x750 [ 532.688554][ T5982] kernel_init_freeable+0x6ea/0x7b0 [ 532.690759][ T5982] kernel_init+0x1f/0x1e0 [ 532.692542][ T5982] ret_from_fork+0x72b/0xd50 [ 532.694692][ T5982] ret_from_fork_asm+0x1a/0x30 [ 532.697055][ T5982] [ 532.697055][ T5982] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 532.700435][ T5982] __mutex_lock+0x1a4/0x1b10 [ 532.702581][ T5982] elevator_change+0x1bc/0x530 [ 532.704538][ T5982] elevator_set_none+0x92/0xf0 [ 532.706631][ T5982] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 532.708800][ T5982] nbd_start_device+0x1a6/0xbd0 [ 532.710517][ T5982] nbd_genl_connect+0xff2/0x1a40 [ 532.712260][ T5982] genl_family_rcv_msg_doit+0x214/0x300 [ 532.714477][ T5982] genl_rcv_msg+0x560/0x800 [ 532.716533][ T5982] netlink_rcv_skb+0x159/0x420 [ 532.718309][ T5982] genl_rcv+0x28/0x40 [ 532.720035][ T5982] netlink_unicast+0x585/0x850 [ 532.722128][ T5982] netlink_sendmsg+0x8b0/0xda0 [ 532.724411][ T5982] ____sys_sendmsg+0x9e1/0xb70 [ 532.726506][ T5982] ___sys_sendmsg+0x190/0x1e0 [ 532.728398][ T5982] __sys_sendmsg+0x170/0x220 [ 532.730420][ T5982] __do_fast_syscall_32+0xe7/0x950 [ 532.732700][ T5982] do_fast_syscall_32+0x32/0x70 [ 532.734816][ T5982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.737291][ T5982] [ 532.737291][ T5982] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 532.740760][ T5982] blk_alloc_queue+0x610/0x790 [ 532.742862][ T5982] blk_mq_alloc_queue+0x174/0x290 [ 532.744684][ T5982] __blk_mq_alloc_disk+0x29/0x120 [ 532.746523][ T5982] nbd_dev_add+0x492/0xb10 [ 532.748128][ T5982] nbd_init+0x291/0x2b0 [ 532.749688][ T5982] do_one_initcall+0x121/0x750 [ 532.751433][ T5982] kernel_init_freeable+0x6ea/0x7b0 [ 532.753262][ T5982] kernel_init+0x1f/0x1e0 [ 532.754873][ T5982] ret_from_fork+0x72b/0xd50 [ 532.756659][ T5982] ret_from_fork_asm+0x1a/0x30 [ 532.758479][ T5982] [ 532.758479][ T5982] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 532.761827][ T5982] fs_reclaim_acquire+0xc4/0x100 [ 532.763800][ T5982] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 532.766081][ T5982] __alloc_skb+0x140/0x710 [ 532.768125][ T5982] tcp_stream_alloc_skb+0x34/0x660 [ 532.770282][ T5982] tcp_sendmsg_locked+0x13cd/0x4500 [ 532.772132][ T5982] tcp_sendmsg+0x2e/0x50 [ 532.773689][ T5982] inet_sendmsg+0xb9/0x140 [ 532.775359][ T5982] sock_write_iter+0x4ea/0x5a0 [ 532.777276][ T5982] vfs_write+0x6ac/0x1070 [ 532.779129][ T5982] ksys_write+0x1f8/0x250 [ 532.780993][ T5982] do_syscall_64+0x10b/0xf80 [ 532.782852][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.784881][ T5982] [ 532.784881][ T5982] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 532.787300][ T5982] __lock_acquire+0x14b8/0x2630 [ 532.789023][ T5982] lock_acquire+0x1b1/0x370 [ 532.790639][ T5982] lock_sock_nested+0x41/0xf0 [ 532.792350][ T5982] inet_shutdown+0x67/0x410 [ 532.793877][ T5982] nbd_mark_nsock_dead+0xae/0x5c0 [ 532.795816][ T5982] recv_work+0x5fb/0x8c0 [ 532.797371][ T5982] process_one_work+0xa0e/0x1980 [ 532.799209][ T5982] worker_thread+0x5ef/0xe50 [ 532.801020][ T5982] kthread+0x370/0x450 [ 532.802656][ T5982] ret_from_fork+0x72b/0xd50 [ 532.804450][ T5982] ret_from_fork_asm+0x1a/0x30 [ 532.806223][ T5982] [ 532.806223][ T5982] other info that might help us debug this: [ 532.806223][ T5982] [ 532.809473][ T5982] Chain exists of: [ 532.809473][ T5982] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 532.809473][ T5982] [ 532.813427][ T5982] Possible unsafe locking scenario: [ 532.813427][ T5982] [ 532.815952][ T5982] CPU0 CPU1 [ 532.817921][ T5982] ---- ---- [ 532.819914][ T5982] lock(&nsock->tx_lock); [ 532.821520][ T5982] lock(&cmd->lock); [ 532.823578][ T5982] lock(&nsock->tx_lock); [ 532.825831][ T5982] lock(sk_lock-AF_INET); [ 532.827280][ T5982] [ 532.827280][ T5982] *** DEADLOCK *** [ 532.827280][ T5982] [ 532.829830][ T5982] 3 locks held by kworker/u33:2/5982: [ 532.831579][ T5982] #0: ffff8880275a3940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 532.835405][ T5982] #1: ffffc9000490fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 532.839216][ T5982] #2: ffff888024714c68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 532.842301][ T5982] [ 532.842301][ T5982] stack backtrace: [ 532.844833][ T5982] CPU: 2 UID: 0 PID: 5982 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.844852][ T5982] Tainted: [L]=SOFTLOCKUP [ 532.844856][ T5982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.844866][ T5982] Workqueue: nbd3-recv recv_work [ 532.845023][ T5982] Call Trace: [ 532.845028][ T5982] [ 532.845034][ T5982] dump_stack_lvl+0x100/0x190 [ 532.845049][ T5982] print_circular_bug.cold+0x178/0x1c7 [ 532.845070][ T5982] check_noncircular+0x146/0x160 [ 532.845090][ T5982] __lock_acquire+0x14b8/0x2630 [ 532.845104][ T5982] lock_acquire+0x1b1/0x370 [ 532.845113][ T5982] ? inet_shutdown+0x67/0x410 [ 532.845130][ T5982] lock_sock_nested+0x41/0xf0 [ 532.845147][ T5982] ? inet_shutdown+0x67/0x410 [ 532.845160][ T5982] inet_shutdown+0x67/0x410 [ 532.845175][ T5982] nbd_mark_nsock_dead+0xae/0x5c0 [ 532.845194][ T5982] recv_work+0x5fb/0x8c0 [ 532.845205][ T5982] ? __lock_acquire+0xd73/0x2630 [ 532.845216][ T5982] ? __pfx_recv_work+0x10/0x10 [ 532.845229][ T5982] ? rcu_is_watching+0x12/0xc0 [ 532.845244][ T5982] process_one_work+0xa0e/0x1980 [ 532.845259][ T5982] ? __pfx_process_one_work+0x10/0x10 [ 532.845271][ T5982] ? __pfx_recv_work+0x10/0x10 [ 532.845282][ T5982] worker_thread+0x5ef/0xe50 [ 532.845296][ T5982] ? kthread+0x13a/0x450 [ 532.845312][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 532.845322][ T5982] kthread+0x370/0x450 [ 532.845339][ T5982] ? __pfx_kthread+0x10/0x10 [ 532.845360][ T5982] ret_from_fork+0x72b/0xd50 [ 532.845374][ T5982] ? __pfx_ret_from_fork+0x10/0x10 [ 532.845388][ T5982] ? __switch_to+0x800/0x1100 [ 532.845410][ T5982] ? __pfx_kthread+0x10/0x10 [ 532.845437][ T5982] ret_from_fork_asm+0x1a/0x30 [ 532.845464][ T5982] [ 532.917622][ T9338] pvrusb2: Attempted to execute control transfer when device not ok SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 532.927055][ T9] usb 10-1: USB disconnect, device number 11 [ 532.937273][ T9351] block nbd3: shutting down sockets [ 533.103820][ T42] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 533.587328][ T13] bridge_slave_0: left allmulticast mode [ 533.589229][ T13] bridge_slave_0: left promiscuous mode [ 533.591528][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.711625][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.717651][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.721643][ T13] bond0 (unregistering): Released all slaves [ 533.726203][ T13] bond1 (unregistering): Released all slaves [ 533.842907][ T13] tipc: Left network mode [ 533.869449][ T5669] 8021q: adding VLAN 0 to HW filter on device eth10 [ 533.983681][ T5669] 8021q: adding VLAN 0 to HW filter on device eth11 [ 534.062476][ T13] hsr_slave_0: left promiscuous mode [ 534.064710][ T13] hsr_slave_1: left promiscuous mode [ 534.066883][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.070277][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.176852][ T13] team0 (unregistering): Port device team_slave_1 removed [ 534.188399][ T13] team0 (unregistering): Port device team_slave_0 removed [ 534.238684][ T5669] 8021q: adding VLAN 0 to HW filter on device eth12 [ 534.370348][ T5669] 8021q: adding VLAN 0 to HW filter on device eth13