last executing test programs: 1m58.793715455s ago: executing program 1 (id=1098): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x457) ioperm(0x3, 0x9, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x4, 0x2, {0xa, 0x4e21, 0xcad, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}}, 0x32) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) r6 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r11, 0x7) wait4(r11, 0x0, 0x0, 0x0) tkill(r11, 0x3) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f0000000200)={r10, 0xffff, 0x0, 0x0, r11}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) fchdir(r4) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000018000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="3cddbc6800000000000000000000008500"/26], 0x50) 1m55.273117924s ago: executing program 1 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r0, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000100), 0x4) sendmmsg$inet6(r2, &(0x7f0000003840)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000880)=[@dontfrag={{0x10, 0x29, 0x3e, 0x7fffffff}}, @flowinfo={{0x10, 0x29, 0xb, 0x2}}, @tclass={{0x10, 0x29, 0x43, 0x5}}, @rthdr_2292={{0x24, 0x29, 0x39, {0x3b, 0x2, 0x0, 0xe, 0x0, [@empty]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x7f}}, @pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @hoplimit={{0x10, 0x29, 0x34, 0x6}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x4}}}], 0xa8}}, {{&(0x7f00000009c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000003800)}}], 0x3, 0x4004800) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) 1m47.645595198s ago: executing program 1 (id=1106): r0 = syz_open_dev$cec(0x0, 0x0, 0x103000) r1 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x200f}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r4}) syz_clone3(&(0x7f00000005c0)={0x1a000200, 0x0, 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r9, 0xc0386105, 0x0) 1m44.436386777s ago: executing program 1 (id=1111): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a00)="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", 0x14c) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) bind$inet(r3, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r5, &(0x7f0000000400)='PASV\r\n', 0x6) r6 = accept4(r3, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000700)={0x2, 0x1388, @loopback}, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) unshare(0x26020480) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0) 1m42.955477666s ago: executing program 1 (id=1113): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x58, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91705564e6f77c25"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, 0x0) write(r0, &(0x7f0000000cc0), 0x0) r4 = syz_io_uring_setup(0x1ef8, &(0x7f0000000300)={0x0, 0x72b, 0x0, 0x1, 0xfbffffff}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000000)) r5 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xe000200f}) 1m37.764465819s ago: executing program 1 (id=1118): syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = memfd_secret(0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r5, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) 1m22.656028372s ago: executing program 32 (id=1118): syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = memfd_secret(0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r5, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) 37.660917474s ago: executing program 3 (id=1170): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x26020480) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000058000000680000000900c43e8964145c992b00000000000006000000"]) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000090a0300000000000000000000000008f0000000140a000000000000000000000300000a0900020073797a31000000000900020073797a310000000008000340000000090800034000000005b1000800536fc8e833bf420d4ed5bd24d93067c5c6d83d4313cdd086cb519050a27ed7fc17817ad9be84e3c9f5d8e6791308c14a598410ac0b90ef0a68e0d5bf2e4544ff110351610b13ccf00f097e22e775a67db0462026f2b382feaaa5246668f860e06b1a85844b24fe091ee53c1df48219f0ff02a334afb2cc02e472018e970f7b"], 0x410}, 0x1, 0x0, 0x0, 0x20000000}, 0x8890) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x40000002, 0x3da}, &(0x7f0000000600), &(0x7f00000005c0), &(0x7f0000000180)) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) 34.402872071s ago: executing program 3 (id=1175): r0 = syz_open_dev$cec(0x0, 0x0, 0x103000) r1 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x200f}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000240)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r4}) syz_clone3(&(0x7f00000005c0)={0x1a000200, 0x0, 0x0, 0x0, {0x34}, &(0x7f0000000400)=""/27, 0x1b, 0x0, &(0x7f0000000580)}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r8, 0xc0386105, 0x0) 28.58925888s ago: executing program 3 (id=1182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x99, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1, 0x8b, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x3, 0x74}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 25.111402158s ago: executing program 0 (id=1185): syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = memfd_secret(0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) 24.883927551s ago: executing program 4 (id=1188): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x11, 0x1, {0x6, 0x7, 0x0, 0x9, 0x0, 0x8, 0xff}}, {0x4d}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) 24.151614246s ago: executing program 3 (id=1189): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendto$inet6(r3, &(0x7f00000005c0)="05", 0x1, 0x40000, &(0x7f00000015c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x1c) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0xfffffffffffffcc1, &(0x7f0000000480)=0xb413) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,measure,permit_directio,f', @ANYRESOCT=r1, @ANYBLOB='\x00']) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) recvfrom(r7, &(0x7f00000003c0)=""/109, 0x6d, 0x2001, &(0x7f0000000540)=@llc={0x1a, 0x323, 0x2, 0x3, 0x1, 0xc, @broadcast}, 0x80) 22.202329652s ago: executing program 0 (id=1191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r1, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r5 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000540)='tC_n\x1d\xb3}\x13\x00\xa2\xb0\xbb\xc3W\x16\xf6D;\xfe\x8a\x181V\xf0\xf4zA\xf0\xabx\x05\b\xfd\xa4\xb5\xfa\x87 \xed\xb4\x17\x92*\xa4\xe6\x7f\xdf\xf3<\xddt0\x99\xd5\x00\x00\x004d\xadt\x95W\xf7\x14\xea\xc2\x88Hu9\xd9\x00\x00\x00\x00\x02\xa4\xf9\xc4\x1b\r\xc2\x1e\x1c\x00\x00\x00\x00\x00\x00\x00\x84\xe8\x9d\\8/]\x0egC\xfd1\x830.\x1cJF\x8b=C\x0e\x06\xc3\'\'\x91\xce\xe6w\x92)\x9f\xa3\xf7\xe4\x04\xe4\xdfNp&\x8f+\x11\x9fw\x17r\x85\xf8S\x95.\xc3\x1a\xc7\xdfL\x85\xabC\x86\xb3\xef\x89\xa8\xf7\xc5\'\xc8\x05\xde\xb2\xf4\x9a\x05\xbc\xaf\x8d=\xa5`9h\xc1\xc9m\x12\xa4\x96d\x1b\xfc\x01vG<*{0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) fcntl$setpipe(r7, 0x407, 0x100004) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x0) fchdir(r8) 18.236737881s ago: executing program 3 (id=1194): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000000)=0xe4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa0002014}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) 18.23568427s ago: executing program 4 (id=1195): syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = memfd_secret(0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) 13.620145641s ago: executing program 4 (id=1196): syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = memfd_secret(0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) 11.913186788s ago: executing program 2 (id=1197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r9, 0x9) recvfrom$inet(r9, 0x0, 0x0, 0x2, 0x0, 0x0) r10 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800000, 0x10010, r10, 0xa6cca000) 11.881198982s ago: executing program 0 (id=1205): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x11, 0x1, {0x6, 0x7, 0x0, 0x9, 0x0, 0x8, 0xff}}, {0x4d}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 7.975784738s ago: executing program 4 (id=1198): syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = memfd_secret(0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r5, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) 7.766038432s ago: executing program 0 (id=1199): syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = memfd_secret(0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) 7.315600263s ago: executing program 2 (id=1200): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]}) close_range(r3, r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x20, 0x400) fanotify_mark(r5, 0x51, 0x10000010, r4, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x61, 0x4]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c06, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x80000) sendmsg$xdp(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000003880), 0x0, 0x0, 0x0, 0x80}, 0x4) recvmsg$can_j1939(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001600)=""/4097, 0x1001}], 0x1}, 0x10021) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x8528, 0x7, 0x3, 0x6}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) r11 = getpid() ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r12 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/reserved_size', 0x161002, 0x43) socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)="cf99c5727c0e6af44ce028c7f8c4cb61eb6eb0be9324f72b384882eda76b9ed19823503416aa82666de4a2d2371eb022f9245f69dd5056737d78b92ea059a066e39e6a87b1c669eaf0424d0a218a903d46662ce36f82d912f97c69238be732a04c8b30d9456477e8864c4ddb655e3e03c887846429438a1a7929cfa1f5825410e079ea8f26a8cd5c49e7e80c796788854dfd4372107e4d37f375479f92fc0064716f55a807722af3cac2074817a59232b66fcd995e6297cd0d1be0404ed020b1e7c11cf0cda6f4a8094b8b37d9a3e11f36954be3dcdb70f7833059a4fc5bd50a67c75947fc32fe4a212ee93a1f40", 0xee, 0x1) kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r0, &(0x7f0000000300)={r12, 0xffffffffffffffff, 0x3}) syz_ublk_setup_io_uring(0x26, &(0x7f0000000440)={0x0, 0x10, 0x0, 0x0, 0x268}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000140)) 7.180471717s ago: executing program 3 (id=1201): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x11, 0x1, {0x6, 0x7, 0x0, 0x9, 0x0, 0x8, 0xff}}, {0x4d}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 6.893484986s ago: executing program 2 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2711, @local}, 0x10) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000300)={0x58, 0x0, 0x68}) tkill(r3, 0x7) eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 6.520669764s ago: executing program 4 (id=1203): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000380)=@newchain={0x1500, 0x64, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x1, 0x9}, {0xc, 0x2}}, [@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x700000, 0xd5ff, 0x7f}, {0x7fb, 0x7ff}, 0x84, 0x5, 0xb7}}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_SRC={0x8, 0x3, @empty}]}}, @f_rsvp6={{0xa}, {0xf2c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x10, 0x3d3c, 0x2, 0x401, 0x7, 0x0, 0xdcfe, 0x5d1f, 0x9, 0xd81, 0x0, 0xffff1557, 0xef72, 0x8, 0x372a, 0x2, 0xa, 0x323e, 0x5, 0x10, 0x9, 0x47, 0x3, 0x9, 0x5, 0x40fd17, 0x9, 0x3, 0xdcc7, 0x80, 0x1, 0xffff0001, 0x7, 0xa2cd, 0xfff, 0x7ff, 0xb4b, 0x1, 0x9, 0x5, 0x0, 0x7ff, 0x0, 0xe, 0x8, 0x9, 0x101, 0x3744, 0xffffffff, 0x5, 0xd3, 0x7, 0x5, 0x0, 0xe000000, 0x9, 0xb32c, 0x1, 0xffff, 0x9, 0x8, 0x401, 0x1, 0x80000001, 0xcb9, 0x3, 0xfffffff7, 0x3, 0x80000001, 0x8, 0x5, 0x2, 0x7ff, 0xfc0, 0x5, 0x5, 0x3, 0x7, 0x7ff, 0x8, 0xd, 0x20, 0x4, 0x6, 0x800, 0x7, 0x3ff, 0xfffffffb, 0x8, 0xfffffffa, 0x200, 0x3ff, 0xffffff81, 0x7, 0x3ff, 0x1, 0xffff61a9, 0x1000, 0x2, 0x3, 0x0, 0x1000, 0x808, 0x10001, 0x7fffffff, 0x0, 0x8, 0x7, 0x0, 0x6, 0x7, 0x0, 0x400, 0x4, 0x3, 0x5, 0x4, 0x0, 0x9, 0xa, 0x6, 0x8, 0x1000, 0x4, 0x0, 0xc058, 0x8001, 0xffff, 0x83, 0x3, 0x2, 0xffffff60, 0x6, 0x2, 0x0, 0x0, 0x10, 0x1, 0xffffffff, 0x2, 0x9, 0x224871c5, 0x7, 0x4, 0xfff, 0x67, 0x2, 0x3, 0x146, 0x2, 0x101, 0x4, 0x4a, 0x6, 0xd, 0x2, 0xfad8, 0x6, 0x1, 0xe09e, 0x7, 0x5, 0x61cf, 0x8, 0x4, 0x8, 0xfffffffe, 0x80000000, 0xa, 0x100, 0x1, 0x101, 0x7b18, 0x1, 0x10, 0x5, 0xffffff1f, 0x0, 0x9, 0x7fff, 0x8001, 0x0, 0x2, 0x800, 0xdc4, 0x9, 0x6b8, 0x7, 0x7, 0x2, 0x4, 0x0, 0x0, 0x88, 0x1, 0x7f, 0x3, 0x9, 0x2, 0x8ac, 0x3, 0xc8da7d2, 0x800, 0x6, 0x6, 0xffff, 0x5, 0x7, 0x1ffc00, 0xffffffff, 0xed6, 0xc, 0xaf, 0xc000, 0x4, 0x6a3973c8, 0x3, 0x9, 0x5, 0x7, 0x6, 0x2, 0x1, 0x7, 0x6, 0xfff, 0x0, 0xbc1d2524, 0xfffffffe, 0x400, 0x80, 0x40, 0x6, 0x5, 0x7, 0x1, 0x370, 0x2, 0x4, 0x3ff, 0x5, 0xd, 0xffffffff, 0xb425, 0xa80, 0xf9, 0xfffffff9, 0x7, 0x4008, 0x0, 0x7f, 0x6, 0xffffff81, 0x3929, 0x8001]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x4, 0x1}, {0x200, 0x37, 0x459}, 0x0, 0x1}}, @TCA_RSVP_POLICE={0x8b4, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x40, 0x4, 0xffffffff, 0x32f, 0x9, 0xbcb9, 0x2, 0x1, 0x9, 0x800, 0x7856, 0x2, 0x2e2, 0x2, 0x7, 0x1, 0xffff, 0x30f, 0x5, 0x1, 0x5, 0x9, 0x1, 0x3, 0x4523, 0x1, 0xa, 0x9, 0xa, 0x0, 0x4, 0x4, 0x1, 0x37, 0x7fffffff, 0x9, 0x6, 0x45, 0xda, 0x7900, 0x3, 0x9, 0x1, 0x401, 0x4, 0xf, 0x400, 0x8, 0x80, 0xb5f, 0x6, 0x8, 0xa87f, 0x1, 0x9, 0x8001, 0x10, 0x1f, 0x9, 0xffffffff, 0x3, 0x4, 0x10001, 0x7fff, 0x401, 0xd03c, 0x3, 0x80000001, 0xfffffffc, 0x3, 0x68c4, 0x326, 0xde6, 0xc, 0x80000001, 0x4, 0xd, 0x2, 0xeb4, 0x8, 0xe3, 0x40, 0x0, 0x9, 0x5, 0x7, 0x5, 0x81, 0xa56, 0x7, 0x6, 0x2, 0x8, 0x7, 0x5, 0x8c9, 0xfffffff2, 0xd, 0xe, 0x2, 0x8, 0x6, 0x2c, 0x0, 0x1000, 0x5d5, 0xfffff30f, 0x6, 0x8, 0x1, 0x3, 0x6, 0x8001, 0x7, 0x9, 0x7, 0x4, 0xa4, 0x80, 0x7, 0x2, 0x0, 0x6000000, 0x6, 0xfffff11c, 0xe63c, 0xb, 0x4, 0x1, 0x80000000, 0x8, 0x1, 0x24, 0x10000, 0xffffffc0, 0xf0, 0x1ffd, 0x3, 0x6, 0x4, 0x2, 0x1cb3, 0x8000, 0x1ff, 0xb8e, 0x5, 0xfffffffd, 0x1, 0x1333, 0x4, 0x80000001, 0x5008, 0x400, 0x0, 0x4, 0x3, 0xce98, 0x0, 0x3, 0xfff, 0x5, 0x3, 0x7, 0x6, 0x2, 0x200, 0xfffffff8, 0x0, 0x8, 0x9, 0x8, 0x400, 0x7ff, 0xb, 0x49, 0x8, 0x3, 0xfff, 0xd6d, 0xc92e, 0x7fff, 0x93, 0x10, 0x8, 0xfffffffd, 0x2, 0x7, 0x8, 0xe3, 0x4, 0x4, 0x5, 0x885c, 0x1, 0x7fffffff, 0x6, 0x325f, 0xffff8001, 0xe, 0x4, 0xe, 0x8, 0x3, 0x5, 0x6, 0x4, 0x80000001, 0x7, 0x2, 0x8001, 0x7, 0x3, 0xfffffff8, 0x33ef00, 0x7, 0x8, 0xe, 0x3, 0x80000000, 0xffff, 0x7, 0x2, 0x6, 0x6, 0x5, 0x9, 0x6, 0x1, 0x10000, 0x8000, 0xac4, 0xf, 0x2, 0xfffffffe, 0x8, 0x7, 0x1, 0x40, 0x8001, 0x7, 0x6, 0x200, 0x1, 0x401, 0x71, 0x2, 0x7, 0xb, 0x6, 0x0, 0x5e3d, 0x9, 0x3791, 0x0, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf9, 0xf, 0x6181, 0x80000000, 0xffffffff, 0x6, 0x0, 0x2, 0x1, 0x6, 0x1, 0xffff518d, 0x9, 0x0, 0x19, 0xfffffff9, 0xe365, 0x6, 0x7, 0x0, 0x0, 0xf9, 0xf, 0x9, 0x0, 0x8, 0x4, 0x8b, 0x1, 0x101, 0x80000001, 0x8, 0x0, 0x581b4d4d, 0x72, 0x6, 0x2, 0x8f2, 0x9, 0x1, 0xc, 0x4, 0x8001, 0x1ff, 0x40, 0x7, 0xfff, 0xe23e, 0x7, 0x7, 0x1, 0x6, 0x7, 0x1, 0xe86, 0x6, 0x8, 0xf, 0xc57, 0x8, 0x7000000, 0xf, 0x100, 0x5, 0x9, 0x7, 0xe2, 0x101, 0xfff, 0x5, 0x3, 0x7, 0x8, 0x1, 0xfff, 0xc8bd, 0x9, 0x0, 0x401, 0x7, 0x0, 0x9, 0x6, 0x81, 0xd, 0x2, 0xe, 0xfff, 0xb8aa, 0x3, 0xfffffffb, 0x4, 0x9, 0x8000, 0x4, 0x0, 0x2, 0x6, 0x5, 0x7ff, 0x6000, 0xffff, 0x3, 0x6, 0x4, 0x1, 0x40, 0xa3d, 0x80, 0x6, 0x10, 0x10000, 0x8000, 0x8, 0x7, 0xf, 0x6, 0x0, 0x1, 0xc, 0x1, 0x10001, 0xffffff81, 0x9, 0x6, 0x9, 0x9, 0x6, 0x81, 0xffff8000, 0x7900, 0x8001, 0xfffffffb, 0x5, 0x9, 0x8, 0x5, 0x401, 0x8000, 0xd, 0x3, 0x972, 0x6, 0x0, 0x6, 0x1, 0x397, 0x9, 0x8, 0x1, 0x2, 0x1, 0x0, 0x7, 0xfffffffc, 0x72, 0x10000, 0x5, 0x4, 0x4, 0x2, 0x2, 0x4, 0x4, 0x9b, 0x3, 0x5, 0x800, 0x763e, 0x6, 0x7, 0xfff, 0x4b, 0x100, 0x10000, 0x6, 0xca4, 0xfffffc00, 0x9, 0x0, 0x3, 0x4, 0xd, 0x4, 0xffff0000, 0x9, 0x7, 0x7, 0x0, 0xbe, 0x2, 0x1, 0x2, 0x5, 0x0, 0x0, 0x7, 0xeede, 0xfda, 0x4, 0x97, 0xfffffffe, 0x3a3fa87f, 0x8, 0x5, 0x1, 0x7426, 0x948, 0x0, 0x8, 0x800000, 0x5, 0x9, 0x9e8, 0x3, 0x94, 0x1, 0x1, 0x6be, 0x9, 0x8, 0x4, 0x4, 0x8a, 0x100, 0x3, 0x0, 0xe, 0x3, 0x8, 0x2, 0x5, 0x0, 0x10, 0x8001, 0x7, 0x5, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x3f6, 0x0, 0x3, 0x5, 0x1, 0x0, 0x8001, 0x1000, 0x1000, 0x8, 0x6, 0x1, 0x2, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x30000005, 0x5c8, 0x1, 0xe, {0x2, 0x0, 0x5f2, 0x6a56, 0x9, 0xec3}, {0x5, 0x2, 0x8, 0xac00, 0xffc0, 0x3}, 0x0, 0x7, 0xfff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x0, 0x5, {0x5, 0x0, 0xfffe, 0xfff, 0x4, 0x4}, {0xe, 0x2, 0xd, 0xfff, 0x2, 0x5}, 0x2, 0x5, 0x10001}}]}, @TCA_RSVP_ACT={0x210, 0x6, [@m_gact={0x108, 0x11, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd87, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x5, 0x4e5, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x28, 0x0, 0x4, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x400, 0xffffffffffffffff, 0xffff8000, 0x7611}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x6, 0x0, 0x4, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3ee, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x5, 0x9, 0x3}}]}, {0x49, 0x6, "a5cf17be334baedc1816c41fe8aa9c28e4b2af4f9a3e63ab201fb95c0af045b54ca968da879932902f7e978913a3629ea329b3bbc967e19c2543f464e348e6e8761441b846"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x104, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7f, 0x5, 0x1, 0x8}, 0x4d}}]}, {0xb9, 0x6, "526c9cc953f5d88e7022726172b20ae90963a2414a8e3299027d14483f1efb55b25123baa500eff15a83a400fe82138a37475983ba13e4bbba5e1628c9536836d4788eea6b39e3e4e2d9d8a16bdb669a2278777061485a7437b340908e62557a62dc8d10081a6d4e621921f0a33d70f4d0da51590811d2112e8782185c92e8bd89e16ec09522eda270844a9573bc67346c21c76da70cf35db58584cd7c407b34410af2f6ad11551bc1a8c98eece49c57de037d2277"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8001, 0x9, 0x9}, {0xfffffc00, 0x1, 0x9}, 0x79, 0x31, 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}]}}, @f_rsvp={{0x9}, {0x540, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xfff1}}, @TCA_RSVP_ACT={0x124, 0x6, [@m_simple={0x120, 0x1e, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '*(74}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x4, 0x8, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xc5, 0x6, "f531b7c8c4fa1686caac90fd5431b8cefc1e77e85bc99f9c412472d93c00b86f012125f625b546f3362ecbe473cb7efe29b2382f038333c99a1e27373a156054129c1f3182593887cac1dd9d54978fb4bc6e01c2895281423c7d31a00f4ed2bf5a4d7be4316d8a788583ccfdaada73c09f73dfeb947aa5b11078c9de9971583c05918fb8b6868a323e400bdd85ecea9c175e8e93b4a9d0971e812279b391e5c13cadfce6103f61ca782eca4d207ed1a86f0960f5eea29dad333b27f60969a025fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbd, 0x4, 0x3, 0xd178, 0x80000001, 0x1, 0x5c0, 0x0, 0x5, 0x6, 0x7, 0x0, 0xfffffffa, 0x7, 0x3, 0x7, 0x9, 0x1, 0x7fff, 0x4, 0x8001, 0xfff, 0x5, 0xe, 0xd4, 0x903, 0x4, 0x6, 0x10, 0x6, 0x0, 0x151, 0x3, 0x5, 0xffffffcc, 0x689, 0x2, 0x1, 0x0, 0xfffffff9, 0x6, 0x8, 0x606, 0x80000000, 0x97, 0x2, 0xb6, 0x7660, 0x6, 0x4, 0x4, 0x9, 0x30, 0x80000001, 0xfd09, 0x6, 0x1, 0x5, 0x4, 0x6, 0x3ff, 0xd, 0x7, 0x100, 0x67, 0x6, 0x8000, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x3, 0x5, 0x9, 0x8, 0x6, 0x400, 0x0, 0xffff8001, 0x9, 0xbd92, 0x5468, 0x9, 0xffffffc4, 0x8, 0x33d, 0xfff, 0x6, 0x10001, 0x3, 0x6, 0x756, 0x80000001, 0x938, 0x1000, 0x76, 0x3, 0x4bc6, 0x5, 0x7fb, 0x100, 0x9, 0x8, 0x9, 0x9d2, 0xd, 0x7, 0x10, 0x258d, 0x81, 0x4, 0x7, 0x2f6a, 0x8, 0xe00, 0x0, 0x7, 0x7f, 0x3, 0x388e, 0x2, 0x80, 0xdf5, 0x3, 0xf, 0x0, 0x6, 0x1, 0x1, 0x75d7, 0x8, 0xa4c, 0x9, 0x36619a9e, 0x1, 0x6f61, 0x6, 0x80000000, 0x0, 0x5, 0x4, 0x2, 0x0, 0xd4b, 0x7fff, 0x9, 0xffff1395, 0xfffffffe, 0x3, 0x0, 0x9, 0x70a5000, 0x4, 0x4, 0x8b1, 0x3, 0x7, 0xb0f, 0x2, 0x0, 0x2, 0x5, 0x0, 0x1000, 0x6, 0x81, 0x7fff, 0x7ff, 0x7, 0x0, 0x2b4, 0x0, 0x3ff, 0x8, 0x5, 0x9, 0x7, 0x7, 0x8, 0x9, 0x0, 0x800, 0x9, 0x0, 0x9, 0x2, 0x8, 0x8, 0x8, 0x1, 0xc6, 0x5, 0x6, 0x7ee, 0x1, 0x8, 0x5, 0x9, 0x8001, 0x7, 0xf5, 0xb90, 0x5, 0x0, 0x3635, 0x1, 0x8, 0x5, 0x0, 0x80000001, 0xe, 0x8, 0x1, 0x2, 0x8001, 0x55, 0x3a48, 0x4, 0x7, 0x1, 0x2, 0x5, 0x5, 0x6, 0x5, 0x4, 0xfffffffc, 0x10, 0x1, 0xb, 0x4, 0xe0, 0x400, 0x616c, 0x3, 0x2d, 0x5, 0xfffffff8, 0x9, 0x80000000, 0x3e, 0x3, 0x0, 0x8, 0x9, 0x1, 0x3, 0xadf, 0x3, 0x6, 0xfc, 0x9]}]}]}}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000004) r0 = socket(0x10, 0x3, 0x0) r1 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x80000) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xe, 0xd}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r13, &(0x7f0000000100)='measure #', 0x9) r14 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, r5, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r14) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="cc1100001900010000000000000000001d0109005000108049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000681106"], 0x11cc}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4.98599995s ago: executing program 4 (id=1204): socket(0x18, 0x5, 0x1046) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) r2 = openat$vcs(0xffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e1f, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x0, &(0x7f00000001c0)={0x71, 0x462}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 3.601683933s ago: executing program 0 (id=1206): socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0xa40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@echo=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='bfq', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='1\n', 0x2) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000007060500000000e1ffffff000100000505000100070000022884"], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x48810) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r7, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000002c0)=""/7, 0x7, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r8, 0x0, 0x0, 0x100, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 2.416965249s ago: executing program 2 (id=1207): syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x5400032e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = memfd_secret(0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) 1.356033197s ago: executing program 2 (id=1208): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x11, 0x1, {0x6, 0x7, 0x0, 0x9, 0x0, 0x8, 0xff}}, {0x4d}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 0s ago: executing program 0 (id=1209): accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/ftrace_dump_on_oops\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) write$binfmt_script(r6, &(0x7f0000000540)={'#! ', './proc/sys/kernel/ftrace_dump_on_oops', [{}, {0x20, '\x00'}, {0x20, 'GPL\x00'}, {0x20, '}:!['}, {0x20, 'syz1\x00'}, {}, {0x20, '\x00'}, {0x20, 'syz1\x00'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "cf411a4c8a7452d0b5d4c3a8b56a0a7126680151c1b350850c1a97e3feac8c57b96fad7f087c8532549d4483ee515246d0a228139817391e4de3fa6881e358d42c66b3dbcd670ae09037060c4539775a64bfbfc333d0b083f563ed0aeea9814dc071e2066a4a5e9440bbeacb32018daa822d"}, 0xbb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x45, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) kernel console output (not intermixed with test programs): tsockopt+0x10/0x10 [ 348.671495][ T9968] ? find_held_lock+0x2b/0x80 [ 348.671510][ T9968] ? aa_sock_opt_perm+0x114/0x1e0 [ 348.671525][ T9968] ? __pfx_xsk_setsockopt+0x10/0x10 [ 348.671540][ T9968] do_sock_setsockopt+0xf3/0x1d0 [ 348.671560][ T9968] __sys_setsockopt+0x119/0x190 [ 348.671578][ T9968] __ia32_sys_setsockopt+0xbc/0x160 [ 348.671593][ T9968] ? __do_fast_syscall_32+0xb3/0x8b0 [ 348.671611][ T9968] ? lockdep_hardirqs_on+0x7d/0x110 [ 348.671629][ T9968] __do_fast_syscall_32+0x13a/0x8b0 [ 348.671651][ T9968] do_fast_syscall_32+0x32/0x70 [ 348.671669][ T9968] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.671685][ T9968] RIP: 0023:0xf7f94fec [ 348.671701][ T9968] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 348.671707][ T9968] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 348.671719][ T9968] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 348.671727][ T9968] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 348.671735][ T9968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.671742][ T9968] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.671749][ T9968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.671765][ T9968] [ 348.671786][ T9968] Mem-Info: [ 348.671808][ T9968] active_anon:2796 inactive_anon:1078 isolated_anon:0 [ 348.671808][ T9968] active_file:9791 inactive_file:6846 isolated_file:0 [ 348.671808][ T9968] unevictable:0 dirty:683 writeback:0 [ 348.671808][ T9968] slab_reclaimable:6224 slab_unreclaimable:58700 [ 348.671808][ T9968] mapped:24678 shmem:2092 pagetables:1307 [ 348.671808][ T9968] sec_pagetables:313 bounce:0 [ 348.671808][ T9968] kernel_misc_reclaimable:0 [ 348.671808][ T9968] free:36663 free_pcp:11520 free_cma:0 [ 348.671856][ T9968] Node 0 active_anon:2108kB inactive_anon:164kB active_file:140kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2084kB dirty:12kB writeback:0kB shmem:2048kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:9632kB pagetables:1308kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 348.671906][ T9968] Node 1 active_anon:9076kB inactive_anon:4148kB active_file:39024kB inactive_file:27380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96628kB dirty:2720kB writeback:0kB shmem:6320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5024kB pagetables:3920kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 348.671984][ T9968] Node 0 DMA free:1728kB boost:0kB min:744kB low:928kB high:1112kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:396kB local_pcp:160kB free_cma:0kB [ 348.672051][ T9968] lowmem_reserve[]: 0 277 277 277 277 [ 348.672179][ T9968] Node 0 DMA32 free:16524kB boost:2048kB min:15848kB low:19296kB high:22744kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2108kB inactive_anon:164kB active_file:140kB inactive_file:4kB unevictable:0kB writepending:12kB zspages:1052kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:6544kB local_pcp:2284kB free_cma:0kB [ 348.672247][ T9968] lowmem_reserve[]: 0 0 0 0 0 [ 348.674153][ T9968] Node 1 DMA32 free:128400kB boost:0kB min:45984kB low:57480kB high:68976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9676kB inactive_anon:4148kB active_file:39024kB inactive_file:27380kB unevictable:0kB writepending:2720kB zspages:6096kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:38756kB local_pcp:11476kB free_cma:0kB [ 348.674246][ T9968] lowmem_reserve[]: 0 0 0 0 0 [ 348.674390][ T9968] Node 0 DMA: 6*4kB (UM) 3*8kB (UM) 5*16kB (UM) 4*32kB (UM) 3*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1728kB [ 348.674858][ T9968] Node 0 DMA32: 391*4kB (UM) 158*8kB (UME) 34*16kB (UME) 125*32kB (UME) 43*64kB (UME) 24*128kB (UME) 7*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 16524kB [ 348.675358][ T9968] Node 1 DMA32: 300*4kB (UE) 1105*8kB (UME) 599*16kB (UME) 406*32kB (UME) 165*64kB (ME) 87*128kB (UME) 49*256kB (UME) 32*512kB (UME) 18*1024kB (UME) 7*2048kB (M) 3*4096kB (M) = 128296kB [ 348.676047][ T9968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.676079][ T9968] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 348.676109][ T9968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.676141][ T9968] Node 1 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 348.676172][ T9968] 20011 total pagecache pages [ 348.676195][ T9968] 1107 pages in swap cache [ 348.676419][ T9968] Free swap = 95924kB [ 348.676438][ T9968] Total swap = 124996kB [ 348.676487][ T9968] 524155 pages RAM [ 348.676504][ T9968] 0 pages HighMem/MovableOnly [ 348.676521][ T9968] 212108 pages reserved [ 348.676538][ T9968] 0 pages cma reserved [ 348.692270][ T9968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.779'. [ 349.885975][ T35] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 350.587681][ T35] usb 8-1: unable to get BOS descriptor or descriptor too short [ 350.587900][ T35] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 350.589728][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.589754][ T35] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 350.589806][ T35] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.598874][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.598899][ T35] usb 8-1: Product: syz [ 350.598911][ T35] usb 8-1: Manufacturer: syz [ 350.598925][ T35] usb 8-1: SerialNumber: syz [ 351.244920][ T35] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 351.252131][ T35] usb 8-1: USB disconnect, device number 38 [ 351.270295][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.317539][ T50] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 351.386077][ T5886] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 351.467201][T10008] Invalid ELF header magic: != ELF [ 351.468057][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 351.468099][ T50] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 351.469538][ T50] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.469566][ T50] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 351.469605][ T50] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.471858][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.471885][ T50] usb 6-1: Product: syz [ 351.471980][ T50] usb 6-1: Manufacturer: syz [ 351.472005][ T50] usb 6-1: SerialNumber: syz [ 351.568430][ T5886] usb 7-1: unable to get BOS descriptor or descriptor too short [ 351.568525][ T5886] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 351.569707][ T5886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.569723][ T5886] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 351.569746][ T5886] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.571845][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.571867][ T5886] usb 7-1: Product: syz [ 351.571881][ T5886] usb 7-1: Manufacturer: syz [ 351.571894][ T5886] usb 7-1: SerialNumber: syz [ 351.843691][T10012] netlink: 'syz.3.789': attribute type 21 has an invalid length. [ 351.846953][T10012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.789'. [ 351.883131][T10012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 351.905106][ T43] audit: type=1800 audit(1788667918.514:284): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.789" name="file0" dev="overlay" ino=74470831 res=0 errno=0 [ 351.917741][T10012] evm: overlay not supported [ 352.081496][ T50] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 352.087742][ T50] usb 6-1: USB disconnect, device number 39 [ 352.108182][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.259872][ T5886] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 352.280607][ T5886] usb 7-1: USB disconnect, device number 33 [ 352.328421][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.571646][ T43] audit: type=1804 audit(1788667920.184:285): pid=10045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.795" name="/newroot/208/file1/file0" dev="9p" ino=74470831 res=1 errno=0 [ 353.887894][ T35] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 354.060848][ T35] usb 7-1: unable to get BOS descriptor or descriptor too short [ 354.060974][ T35] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 354.066997][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.067017][ T35] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 354.067055][ T35] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.080405][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.080427][ T35] usb 7-1: Product: syz [ 354.080438][ T35] usb 7-1: Manufacturer: syz [ 354.080450][ T35] usb 7-1: SerialNumber: syz [ 354.375802][ T5829] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 354.548499][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 354.565842][ T5829] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 354.585617][ T5829] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 354.585788][ T5829] usb 6-1: config 0 has no interface number 0 [ 354.585892][ T5829] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.585913][ T5829] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 354.585933][ T5829] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.585954][ T5829] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.585989][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.588801][ T5829] usb 6-1: config 0 descriptor?? [ 354.613198][ T5829] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 354.656264][ T35] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 354.662357][ T35] usb 7-1: USB disconnect, device number 34 [ 354.684280][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.479392][ T5813] usb 6-1: USB disconnect, device number 40 [ 355.494539][ T5813] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 356.537820][ T5813] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 356.687857][ T5813] usb 6-1: unable to get BOS descriptor or descriptor too short [ 356.688844][ T5813] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 356.690255][ T5813] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.690288][ T5813] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 356.690344][ T5813] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.692716][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.692748][ T5813] usb 6-1: Product: syz [ 356.692951][ T5813] usb 6-1: Manufacturer: syz [ 356.692974][ T5813] usb 6-1: SerialNumber: syz [ 357.199024][ T5829] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 357.375926][T10096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.805'. [ 357.426736][ T5813] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 357.468868][ T5813] usb 6-1: USB disconnect, device number 41 [ 357.677074][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.677467][ T5829] usb 7-1: unable to get BOS descriptor or descriptor too short [ 357.677496][ T5829] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 357.678630][ T5829] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.678645][ T5829] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 357.678670][ T5829] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.680867][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.680882][ T5829] usb 7-1: Product: syz [ 357.680890][ T5829] usb 7-1: Manufacturer: syz [ 357.680897][ T5829] usb 7-1: SerialNumber: syz [ 358.163573][ T5829] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 358.166315][ T5829] usb 7-1: USB disconnect, device number 35 [ 358.176236][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.285771][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 358.581871][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 358.581939][ T10] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 358.583500][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.583513][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 358.583536][ T10] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.587872][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.587908][ T10] usb 6-1: Product: syz [ 358.587918][ T10] usb 6-1: Manufacturer: syz [ 358.587925][ T10] usb 6-1: SerialNumber: syz [ 358.948198][ T5813] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 359.062630][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 359.075277][ T10] usb 6-1: USB disconnect, device number 42 [ 359.096218][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.118150][ T5813] usb 7-1: unable to get BOS descriptor or descriptor too short [ 359.118557][ T5813] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 359.123188][ T5813] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.123275][ T5813] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 359.123585][ T5813] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.138646][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.139174][ T5813] usb 7-1: Product: syz [ 359.139325][ T5813] usb 7-1: Manufacturer: syz [ 359.145260][ T5813] usb 7-1: SerialNumber: syz [ 359.695483][ T5813] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 359.697910][ T5813] usb 7-1: USB disconnect, device number 36 [ 359.714205][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.295208][ T35] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 360.447589][ T35] usb 5-1: unable to get BOS descriptor or descriptor too short [ 360.450198][ T35] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 360.454444][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.458628][ T35] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 360.462039][ T35] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.468396][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.471444][ T35] usb 5-1: Product: syz [ 360.473088][ T35] usb 5-1: Manufacturer: syz [ 360.474973][ T35] usb 5-1: SerialNumber: syz [ 360.511560][ T50] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 360.667763][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 360.670559][ T50] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 360.677567][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.677627][ T50] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 360.677972][ T50] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.696706][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.696808][ T50] usb 7-1: Product: syz [ 360.696817][ T50] usb 7-1: Manufacturer: syz [ 360.696824][ T50] usb 7-1: SerialNumber: syz [ 360.819566][T10151] random: crng reseeded on system resumption [ 360.855511][T10151] input: syz1 as /devices/virtual/input/input13 [ 360.905568][T10152] netlink: 56 bytes leftover after parsing attributes in process `syz.3.817'. [ 361.007006][ T35] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 361.017793][ T35] usb 5-1: USB disconnect, device number 32 [ 361.040964][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.345464][ T50] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 361.353218][ T50] usb 7-1: USB disconnect, device number 37 [ 361.391607][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.769956][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 361.919219][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 361.919311][ T10] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 361.921076][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.921099][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 361.921148][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.926519][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.926541][ T10] usb 5-1: Product: syz [ 361.926554][ T10] usb 5-1: Manufacturer: syz [ 361.926566][ T10] usb 5-1: SerialNumber: syz [ 362.477470][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 362.490819][ T10] usb 5-1: USB disconnect, device number 33 [ 362.499562][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.532492][T10181] ptrace attach of "/syz-executor exec"[10183] was attempted by "/syz-executor exec"[10181] [ 362.804842][T10188] netlink: 36 bytes leftover after parsing attributes in process `syz.3.824'. [ 362.805064][T10188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.824'. [ 362.805153][T10188] netlink: 36 bytes leftover after parsing attributes in process `syz.3.824'. [ 362.835181][ T5829] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 362.999227][ T5829] usb 7-1: not running at top speed; connect to a high speed hub [ 362.999321][ T5829] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 363.001641][ T5829] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 363.008014][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.008036][ T5829] usb 7-1: Product: syz [ 363.008048][ T5829] usb 7-1: Manufacturer: syz [ 363.008648][ T5829] usb 7-1: SerialNumber: syz [ 363.073270][ T5829] oti6858 7-1:1.0: oti6858 converter detected [ 363.123924][ T5829] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 363.571931][ T5829] usb 7-1: USB disconnect, device number 38 [ 363.688881][T10200] Invalid ELF header magic: != ELF [ 363.822207][ T5829] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 363.826748][ T5829] oti6858 7-1:1.0: device disconnected [ 364.017707][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.833'. [ 364.139062][ T5813] wlan0 speed is unknown, defaulting to 1000 [ 364.139130][ T5813] syz0: Port: 1 Link DOWN [ 364.783224][ T5829] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 364.887683][ T50] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 365.008394][ T5829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 365.009104][ T5829] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 365.016739][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.016963][ T5829] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 365.017007][ T5829] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.036074][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.036389][ T5829] usb 6-1: Product: syz [ 365.036402][ T5829] usb 6-1: Manufacturer: syz [ 365.036414][ T5829] usb 6-1: SerialNumber: syz [ 365.048925][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 365.049026][ T50] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 365.051656][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.051682][ T50] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 365.051735][ T50] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.054354][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.054376][ T50] usb 8-1: Product: syz [ 365.054390][ T50] usb 8-1: Manufacturer: syz [ 365.054403][ T50] usb 8-1: SerialNumber: syz [ 365.652824][ T50] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 365.658742][ T50] usb 8-1: USB disconnect, device number 39 [ 365.671464][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.327116][ T5829] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 366.333961][ T5829] usb 6-1: USB disconnect, device number 43 [ 366.363109][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.425236][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 366.425525][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 366.804818][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 367.428280][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 367.432025][ T10] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 367.437756][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.442412][ T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 367.446462][ T10] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.455833][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.459706][ T10] usb 7-1: Product: syz [ 367.461784][ T10] usb 7-1: Manufacturer: syz [ 367.464076][ T10] usb 7-1: SerialNumber: syz [ 367.995533][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 368.004209][ T10] usb 7-1: USB disconnect, device number 39 [ 368.027308][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.625768][T10242] SET target dimension over the limit! [ 368.770916][T10257] netfs: Duplicate cookie detected [ 368.771010][T10257] netfs: O-cookie c=00000007 [fl=4000 na=0 nA=0 s=-] [ 368.771133][T10257] netfs: O-cookie V=00000007 [9p,syz,] [ 368.771147][T10257] netfs: O-key=[8] 'ad55700400000000' [ 368.771159][T10257] netfs: N-cookie c=00000008 [fl=0 na=0 nA=0 s=-] [ 368.771174][T10257] netfs: N-cookie V=00000007 [9p,syz,] [ 368.771185][T10257] netfs: N-key=[8] 'ad55700400000000' [ 368.853089][T10264] 9pnet_virtio: no channels available for device syz [ 369.117301][T10264] gadgetfs: bound to dummy_udc driver [ 369.211508][ T43] audit: type=1800 audit(1788667935.825:286): pid=10267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.838" name="ep1in-bulk" dev="gadgetfs" ino=40384 res=0 errno=0 [ 369.408568][ T5813] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 369.409369][ C1] gadgetfs: connected [ 369.411715][ T5813] gadgetfs: disconnected [ 369.491891][T10259] gadgetfs: suspended from state 2 [ 369.586162][T10271] ªªªªªª: renamed from vlan0 [ 369.744795][ T5813] usb 5-1: device not accepting address 34, error -71 [ 369.976460][T10275] syzkaller1: entered promiscuous mode [ 369.976517][T10275] syzkaller1: entered allmulticast mode [ 369.989038][T10275] AppArmor: change_hat: Invalid input '' [ 370.010220][T10277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 370.010327][T10277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 370.015515][T10277] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 370.084680][ T5813] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 370.225232][ T6277] usb 8-1: new low-speed USB device number 40 using dummy_hcd [ 370.237861][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 370.237976][ T5813] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 370.239895][ T5813] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.239915][ T5813] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 370.239960][ T5813] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.243182][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.243202][ T5813] usb 5-1: Product: syz [ 370.243215][ T5813] usb 5-1: Manufacturer: syz [ 370.243228][ T5813] usb 5-1: SerialNumber: syz [ 370.398331][ T6277] usb 8-1: unable to get BOS descriptor or descriptor too short [ 370.398432][ T6277] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 370.401129][ T6277] usb 8-1: config 8 has an invalid interface number: 109 but max is 0 [ 370.401151][ T6277] usb 8-1: config 8 has no interface number 0 [ 370.401183][ T6277] usb 8-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 370.401206][ T6277] usb 8-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 370.401287][ T6277] usb 8-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 370.407752][ T6277] usb 8-1: string descriptor 0 read error: -22 [ 370.407929][ T6277] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.412908][T10275] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 370.413499][T10280] ptrace attach of "/syz-executor exec"[10281] was attempted by "/syz-executor exec"[10280] [ 370.418972][ T6277] metro_usb 8-1:8.109: Metrologic USB to Serial converter detected [ 370.430916][ T6277] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 370.640115][T10275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.642328][T10275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.646072][ T5886] usb 8-1: USB disconnect, device number 40 [ 370.662587][ T5886] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 370.663088][ T5886] metro_usb 8-1:8.109: device disconnected [ 370.664880][ T10] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 370.738309][ T5813] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 370.749639][ T5813] usb 5-1: USB disconnect, device number 35 [ 370.769040][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.817332][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 370.817418][ T10] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 370.819342][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 370.822888][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.822906][ T10] usb 6-1: Product: syz [ 370.822918][ T10] usb 6-1: Manufacturer: syz [ 370.822930][ T10] usb 6-1: SerialNumber: syz [ 370.828953][ T10] oti6858 6-1:1.0: oti6858 converter detected [ 370.833938][ T10] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 371.263004][ T5813] usb 6-1: USB disconnect, device number 44 [ 371.273271][ T5813] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 371.279212][ T5813] oti6858 6-1:1.0: device disconnected [ 371.642007][T10292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.797214][T10297] input: syz0 as /devices/virtual/input/input14 [ 371.835144][ T10] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 371.960953][T10298] netlink: 'syz.2.845': attribute type 3 has an invalid length. [ 372.004663][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 372.005187][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 372.007057][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 372.007085][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.007096][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 372.007108][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 372.007119][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.007138][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.235256][T10306] devpts: Invalid uid '0x00000000ffffffff' [ 372.246240][T10306] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 372.273395][T10306] i2c i2c-0: delete_device: Can't find device in list [ 372.322558][ T10] usb 8-1: usb_control_msg returned -32 [ 372.322633][ T10] usbtmc 8-1:16.0: can't read capabilities [ 372.906446][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 373.067532][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 373.071799][ T10] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 373.080226][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.085210][ T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 373.085259][ T10] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.097878][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.097956][ T10] usb 7-1: Product: syz [ 373.098025][ T10] usb 7-1: Manufacturer: syz [ 373.098057][ T10] usb 7-1: SerialNumber: syz [ 373.113154][T10313] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 373.776134][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 373.786325][ T10] usb 7-1: USB disconnect, device number 40 [ 373.798051][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.478967][ T50] usb 8-1: USB disconnect, device number 41 [ 374.730484][ T5886] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 375.323415][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 375.323570][ T5886] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 375.331605][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.335065][ T5886] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 375.338898][ T5886] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.348389][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.348453][ T5886] usb 5-1: Product: syz [ 375.348510][ T5886] usb 5-1: Manufacturer: syz [ 375.348518][ T5886] usb 5-1: SerialNumber: syz [ 375.851954][T10362] devpts: Invalid uid '0x00000000ffffffff' [ 375.858545][T10362] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 375.863320][T10362] i2c i2c-0: delete_device: Can't find device in list [ 376.094946][ T5886] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 376.104520][ T5886] usb 5-1: USB disconnect, device number 36 [ 376.135468][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.237052][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 378.245518][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.511084][T10417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.825939][T10420] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 381.149682][ T43] audit: type=1800 audit(1788667947.766:287): pid=10409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.865" name="bus" dev="ramfs" ino=40840 res=0 errno=0 [ 381.421484][T10424] Bluetooth: MGMT ver 1.23 [ 381.987236][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 382.154446][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 382.155612][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 382.157054][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 382.157075][ T10] usb 5-1: config 0 has no interface number 0 [ 382.157107][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.157129][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 382.157150][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.157172][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 382.157206][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.163226][ T10] usb 5-1: config 0 descriptor?? [ 382.176911][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 382.368470][T10441] Invalid ELF header magic: != ELF [ 383.646338][T10454] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 383.652117][ T5886] usb 5-1: USB disconnect, device number 37 [ 383.668038][T10454] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 383.671871][T10454] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 383.675573][T10454] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 383.680571][T10454] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 383.775139][ T5886] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 383.959546][T10454] pci 0000:00:01.0: Adding to iommu group 1 [ 384.014516][T10454] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 384.014551][T10454] pci 0000:00:01.0: vgaarb: bridge control possible [ 384.014562][T10454] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 384.052205][T10454] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 384.057184][T10454] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 384.073466][T10454] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 384.205775][ T10] libceph: connect (1)[c::]:6789 error -101 [ 384.207854][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 384.249468][T10461] ceph: No mds server is up or the cluster is laggy [ 384.251150][ T10] libceph: connect (1)[c::]:6789 error -101 [ 384.252274][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 384.528073][ T10] libceph: connect (1)[c::]:6789 error -101 [ 384.544501][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 384.725713][T10454] [drm] Found bochs VGA, ID 0xb0c5. [ 384.731121][T10454] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 385.093069][T10454] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 385.567996][T10454] Console: switching to colour frame buffer device 160x50 [ 385.631727][T10454] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 386.615624][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 387.631359][T10500] batadv_slave_1: entered promiscuous mode [ 388.804835][T10514] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 388.836381][T10514] retu-mfd 0-0002: could not read Tahvo revision: -6 [ 388.848471][T10514] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 388.849915][T10499] batadv_slave_1: left promiscuous mode [ 389.227112][T10528] devpts: Invalid uid '0x00000000ffffffff' [ 389.236398][T10528] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 389.246051][T10528] i2c i2c-0: delete_device: Can't find device in list [ 390.213721][ T5886] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 390.463631][ T5886] usb 8-1: Using ep0 maxpacket: 8 [ 390.464716][ T5886] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 390.466023][ T5886] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 390.466040][ T5886] usb 8-1: config 0 has no interface number 0 [ 390.466068][ T5886] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 390.466087][ T5886] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 390.466102][ T5886] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.466121][ T5886] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 390.466148][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.534666][T10545] netlink: 'syz.1.894': attribute type 11 has an invalid length. [ 390.689423][T10545] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 390.799586][ T5886] usb 8-1: config 0 descriptor?? [ 391.216931][ T5886] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 391.690351][T10560] 9pnet_fd: Insufficient options for proto=fd [ 391.752665][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.752929][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.951204][T10557] overlayfs: failed to resolve './file0': -2 [ 391.988987][ T35] usb 8-1: USB disconnect, device number 42 [ 392.005379][ T35] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 392.777497][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 392.885130][T10574] vlan2: entered allmulticast mode [ 392.885257][T10574] dummy0: entered allmulticast mode [ 392.885902][T10574] bridge0: port 3(vlan2) entered blocking state [ 392.886007][T10574] bridge0: port 3(vlan2) entered disabled state [ 392.887523][T10574] vlan2: entered promiscuous mode [ 392.887539][T10574] dummy0: entered promiscuous mode [ 393.077681][T10583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.763411][T10585] gadgetfs: bound to dummy_udc driver [ 393.802176][ T43] audit: type=1800 audit(1788667960.407:288): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.911" name="ep1in-bulk" dev="gadgetfs" ino=44204 res=0 errno=0 [ 394.013652][ T6277] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 394.017272][ C1] gadgetfs: connected [ 394.023538][ T6277] gadgetfs: disconnected [ 394.193528][ C1] gadgetfs: connected [ 394.196581][ T6277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 394.200361][ T6277] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 394.203846][ T6277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.208419][ C1] gadgetfs: configuration #1 [ 394.761122][T10577] gadgetfs: suspended from state 3 [ 394.762027][ T6277] usb 5-1: USB disconnect, device number 38 [ 394.764037][T10577] gadgetfs: disconnected [ 394.923694][ T43] audit: type=1800 audit(1788667961.547:289): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.902" name="bus" dev="ramfs" ino=44203 res=0 errno=0 [ 395.228590][T10608] netlink: 'syz.3.909': attribute type 10 has an invalid length. [ 395.395217][T10611] devpts: Invalid uid '0x00000000ffffffff' [ 395.427263][T10611] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 395.445190][T10611] i2c i2c-0: delete_device: Can't find device in list [ 395.794123][T10599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.909'. [ 396.060292][T10594] input: syz1 as /devices/virtual/input/input17 [ 396.124773][T10618] bond1: entered promiscuous mode [ 396.757543][T10647] devpts: Invalid uid '0x00000000ffffffff' [ 396.772068][T10647] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 396.775262][T10639] ipvlan0: entered promiscuous mode [ 396.779039][T10647] i2c i2c-0: delete_device: Can't find device in list [ 396.863450][ T10] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 397.093276][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 397.094781][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 397.096947][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 397.096964][ T10] usb 7-1: config 0 has no interface number 0 [ 397.096982][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.096994][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 397.097078][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.097092][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.097112][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.101402][ T10] usb 7-1: config 0 descriptor?? [ 397.410123][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 398.271275][ T50] usb 7-1: USB disconnect, device number 41 [ 398.277630][ T50] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 398.901591][T10671] netlink: 'syz.3.916': attribute type 5 has an invalid length. [ 398.906630][T10671] ip6erspan0: entered promiscuous mode [ 398.959273][T10671] nbd: must specify at least one socket [ 399.348804][T10680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.503125][ T10] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 399.815843][T10693] netlink: 'syz.0.921': attribute type 11 has an invalid length. [ 399.986010][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 399.986112][ T10] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 399.987391][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.987403][ T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 399.987427][ T10] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.223210][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.223265][ T10] usb 8-1: Product: syz [ 400.223336][ T10] usb 8-1: Manufacturer: syz [ 400.223348][ T10] usb 8-1: SerialNumber: syz [ 400.263002][ T50] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 400.413601][ T50] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 400.418240][ T50] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 400.422093][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.426864][ T50] usb 7-1: config 0 has no interface number 0 [ 400.426935][ T50] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.434773][ T50] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 400.438366][ T50] usb 7-1: Product: syz [ 400.440498][ T50] usb 7-1: SerialNumber: syz [ 400.445312][ T50] usb 7-1: config 0 descriptor?? [ 400.451626][ T50] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 400.501383][T10695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.664449][T10696] LUN: removable file: (no medium) [ 400.710429][ T50] usb 7-1: USB disconnect, device number 42 [ 400.714949][T10695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.832627][T10695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.838952][T10695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.848254][T10695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.848319][T10695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.860557][T10695] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 400.897642][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.897820][ T8780] bridge0: port 1(bridge_slave_0) entered listening state [ 400.910051][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.910221][ T8780] bridge0: port 2(bridge_slave_1) entered listening state [ 401.415073][T10707] syz_tun: entered allmulticast mode [ 401.753067][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 401.759013][ T10] usb 8-1: USB disconnect, device number 43 [ 401.849510][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.871248][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'. [ 401.879607][T10707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.926'. [ 401.879686][T10707] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 401.882699][T10706] syz_tun: left allmulticast mode [ 401.920098][T10701] netfs: Duplicate cookie detected [ 401.920182][T10701] netfs: O-cookie c=0000000a [fl=4000 na=0 nA=0 s=-] [ 401.920262][T10701] netfs: O-cookie V=00000009 [9p,syz,] [ 401.920291][T10701] netfs: O-key=[8] 'ad55700400000000' [ 401.920318][T10701] netfs: N-cookie c=0000000b [fl=0 na=0 nA=0 s=-] [ 401.920350][T10701] netfs: N-cookie V=00000009 [9p,syz,] [ 401.920377][T10701] netfs: N-key=[8] 'ad55700400000000' qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 402.362929][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 402.513424][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 402.517071][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 402.522294][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 402.527394][ T10] usb 5-1: config 0 has no interface number 0 [ 402.530481][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 402.535271][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 402.540253][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.545544][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 402.545587][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.562928][ T10] usb 5-1: config 0 descriptor?? [ 402.571398][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 402.588780][T10727] siw: device registration error -23 [ 402.635300][T10729] [U]  [ 402.722954][ T5813] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 402.837951][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 402.875849][ T5813] usb 6-1: unable to get BOS descriptor or descriptor too short [ 402.879457][ T5813] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 402.885248][ T5813] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.890363][ T5813] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 402.895099][ T5813] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.906603][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.910255][ T5813] usb 6-1: Product: syz [ 402.912491][ T5813] usb 6-1: Manufacturer: syz [ 402.917583][ T5813] usb 6-1: SerialNumber: syz [ 402.923790][ T6939] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 403.098605][ T6939] usb 8-1: unable to get BOS descriptor or descriptor too short [ 403.098731][ T6939] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 403.105208][ T6939] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.105228][ T6939] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 403.105262][ T6939] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.109530][ T6939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.109549][ T6939] usb 8-1: Product: syz [ 403.109561][ T6939] usb 8-1: Manufacturer: syz [ 403.109568][ T6939] usb 8-1: SerialNumber: syz [ 403.296328][T10745] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.456848][ T5813] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 403.463884][ T5813] usb 6-1: USB disconnect, device number 45 [ 403.493798][ T25] usb 5-1: USB disconnect, device number 39 [ 403.508710][ T25] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 403.547147][ T8960] udevd[8960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.722128][ T6939] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 403.731417][ T6939] usb 8-1: USB disconnect, device number 44 [ 403.768699][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.093280][T10760] devpts: Invalid uid '0x00000000ffffffff' [ 404.098377][T10760] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 404.105624][T10760] i2c i2c-0: delete_device: Can't find device in list [ 404.236062][T10763] No such timeout policy "syz1" [ 404.241798][T10763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.450783][T10765] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 404.454677][T10765] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 405.282895][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.932886][ T6939] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 406.088573][ T6939] usb 8-1: unable to get BOS descriptor or descriptor too short [ 406.088687][ T6939] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 406.090901][ T6939] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.090924][ T6939] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 406.090972][ T6939] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.098574][ T6939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.098596][ T6939] usb 8-1: Product: syz [ 406.098608][ T6939] usb 8-1: Manufacturer: syz [ 406.098621][ T6939] usb 8-1: SerialNumber: syz [ 406.197194][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 406.435398][ T25] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 406.627882][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 406.628031][ T25] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 406.632445][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.634056][ T25] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 406.634130][ T25] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.709137][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.709299][ T25] usb 7-1: Product: syz [ 406.709392][ T25] usb 7-1: Manufacturer: syz [ 406.709780][ T25] usb 7-1: SerialNumber: syz [ 407.761300][ T6939] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 407.769680][ T6939] usb 8-1: USB disconnect, device number 45 [ 407.830069][ T25] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 407.841549][ T25] usb 7-1: USB disconnect, device number 43 [ 407.854906][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.923206][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 408.000317][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.503488][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 408.503543][T10821] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 408.730221][T10808] gadgetfs: bound to dummy_udc driver [ 409.420231][T10808] netfs: Duplicate cookie detected [ 409.420283][T10808] netfs: O-cookie c=0000000c [fl=4000 na=0 nA=0 s=-] [ 409.420330][T10808] netfs: O-cookie V=0000000a [9p,syz,] [ 409.420350][T10808] netfs: O-key=[8] 'ad55700400000000' [ 409.420371][T10808] netfs: N-cookie c=0000000d [fl=0 na=0 nA=0 s=-] [ 409.420393][T10808] netfs: N-cookie V=0000000a [9p,syz,] [ 409.420418][T10808] netfs: N-key=[8] 'ad55700400000000' [ 409.452584][ T62] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 409.455558][ C1] gadgetfs: connected [ 409.457793][ T62] gadgetfs: disconnected [ 409.603534][ C1] gadgetfs: connected [ 409.609718][ T62] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 409.616083][ T62] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 409.616241][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.641844][ C1] gadgetfs: configuration #1 [ 409.707938][ T5828] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 409.786750][T10804] gadgetfs: suspended from state 3 [ 409.790999][T10804] gadgetfs: disconnected [ 409.795337][ T62] usb 5-1: USB disconnect, device number 40 [ 409.993555][ T5828] usb 8-1: Using ep0 maxpacket: 8 [ 410.010085][ T5828] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 410.041215][ T5828] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 410.041675][ T5828] usb 8-1: config 0 has no interface number 0 [ 410.042034][ T5828] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.042134][ T5828] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 410.042364][ T5828] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 410.042424][ T5828] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 410.042560][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.425381][ T5828] usb 8-1: config 0 descriptor?? [ 410.474608][ T5828] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 410.524086][T10841] devpts: Invalid uid '0x00000000ffffffff' [ 410.529469][T10841] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 410.531282][T10841] i2c i2c-0: delete_device: Can't find device in list [ 410.963249][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 410.963614][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 411.041326][T10848] ceph: No mds server is up or the cluster is laggy [ 411.830044][ T6939] usb 8-1: USB disconnect, device number 46 [ 411.834003][ T6939] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 412.266905][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 413.220528][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 413.223508][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 413.492648][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 413.495959][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 413.857415][T10865] ceph: No mds server is up or the cluster is laggy [ 413.902254][ T5829] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 414.003450][ T10] libceph: connect (1)[c::]:6789 error -101 [ 414.007370][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 414.029814][ T43] audit: type=1800 audit(1788667980.638:290): pid=10869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.951" name="bus" dev="ramfs" ino=44582 res=0 errno=0 [ 414.075695][ T5829] usb 7-1: unable to get BOS descriptor or descriptor too short [ 414.079305][ T5829] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 414.092856][ T5829] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.097683][ T5829] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 414.101932][ T5829] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.118313][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.122266][ T5829] usb 7-1: Product: syz [ 414.124393][ T5829] usb 7-1: Manufacturer: syz [ 414.126289][ T5829] usb 7-1: SerialNumber: syz [ 414.718903][ T5829] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 414.726493][ T5829] usb 7-1: USB disconnect, device number 44 [ 414.738887][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.812732][ T43] audit: type=1804 audit(1788667981.368:291): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.963" name="bus" dev="ramfs" ino=42399 res=1 errno=0 [ 414.822202][ T43] audit: type=1804 audit(1788667981.378:292): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.963" name="bus" dev="ramfs" ino=42399 res=1 errno=0 [ 414.879007][ T62] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 415.032301][ T62] usb 8-1: unable to get BOS descriptor or descriptor too short [ 415.032480][ T62] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 415.033756][ T62] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.033770][ T62] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 415.033801][ T62] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.036445][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.036458][ T62] usb 8-1: Product: syz [ 415.036466][ T62] usb 8-1: Manufacturer: syz [ 415.036473][ T62] usb 8-1: SerialNumber: syz [ 415.430773][T10898] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 416.015430][ T62] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 416.017965][ T62] usb 8-1: USB disconnect, device number 47 [ 416.039550][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.559829][T10923] devpts: Invalid uid '0x00000000ffffffff' [ 416.586008][T10923] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 416.592238][T10923] i2c i2c-0: delete_device: Can't find device in list [ 418.450745][ T6277] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 418.612757][ T6277] usb 7-1: Using ep0 maxpacket: 8 [ 418.614713][ T6277] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 418.616654][ T6277] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 418.616674][ T6277] usb 7-1: config 0 has no interface number 0 [ 418.616712][ T6277] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 418.616732][ T6277] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 418.616752][ T6277] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.616772][ T6277] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.616804][ T6277] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.621761][ T6277] usb 7-1: config 0 descriptor?? [ 418.667316][ T6277] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 419.251362][T10946] Console: switching to colour dummy device 80x25 [ 419.518142][ T5886] usb 7-1: USB disconnect, device number 45 [ 419.582292][ T5886] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 420.121960][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 420.588180][T10961] netlink: 27 bytes leftover after parsing attributes in process `syz.2.969'. [ 421.012255][ T50] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 421.025486][T10959] overlayfs: failed to resolve './file0': -2 [ 421.043391][T10972] ip6t_rt: too many addresses specified [ 421.195947][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 421.196241][ T50] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 421.247425][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.247684][ T50] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 421.247880][ T50] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.263544][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.263634][ T50] usb 8-1: Product: syz [ 421.263643][ T50] usb 8-1: Manufacturer: syz [ 421.263709][ T50] usb 8-1: SerialNumber: syz [ 421.441253][T10979] netlink: 'syz.2.972': attribute type 1 has an invalid length. [ 421.441867][T10979] netlink: 244 bytes leftover after parsing attributes in process `syz.2.972'. [ 422.940239][ T50] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 422.980049][ T50] usb 8-1: USB disconnect, device number 48 [ 423.191313][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.769582][T10995] ceph: No mds server is up or the cluster is laggy [ 423.822611][ T62] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 423.863994][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 423.864192][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 424.128998][T11006] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 424.171614][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 424.189773][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 424.262291][T11006] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 424.262672][T11006] overlayfs: failed to look up (tracing) for ino (-66) [ 424.946458][ T62] usb 5-1: unable to get BOS descriptor or descriptor too short [ 424.946565][ T62] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 424.954349][ T62] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.954419][ T62] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 424.954490][ T62] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.970803][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.970881][ T62] usb 5-1: Product: syz [ 424.970963][ T62] usb 5-1: Manufacturer: syz [ 424.970972][ T62] usb 5-1: SerialNumber: syz [ 425.980352][ T62] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 426.036059][ T62] usb 5-1: USB disconnect, device number 41 [ 426.401626][ T70] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 426.527521][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.582347][ T70] usb 8-1: Using ep0 maxpacket: 8 [ 426.597590][ T70] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 426.625547][ T70] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 426.630781][ T70] usb 8-1: config 0 has no interface number 0 [ 426.636983][ T70] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.644652][ T70] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 426.653020][ T70] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.660553][ T70] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 426.670669][ T70] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.770211][ T70] usb 8-1: config 0 descriptor?? [ 426.863384][ T70] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 430.095352][ T5886] usb 8-1: USB disconnect, device number 49 [ 430.106257][ T5886] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 431.364452][ C2] bridge0: port 2(bridge_slave_1) entered learning state [ 431.366440][ C2] bridge0: port 1(bridge_slave_0) entered learning state [ 434.586808][T11044] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 434.753176][ T7287] md_update_sb: can't update sb for read-only array md0 [ 435.311168][ T5886] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 435.463840][ T5886] usb 8-1: unable to get BOS descriptor or descriptor too short [ 435.463936][ T5886] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 435.466038][ T5886] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.466063][ T5886] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 435.466109][ T5886] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.469008][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.469031][ T5886] usb 8-1: Product: syz [ 435.469044][ T5886] usb 8-1: Manufacturer: syz [ 435.469058][ T5886] usb 8-1: SerialNumber: syz [ 436.607387][ T5886] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 436.615502][ T5886] usb 8-1: USB disconnect, device number 50 [ 436.793898][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.747204][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.522363][T11076] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 442.643701][T11082] serio: Serial port ptm0 [ 442.746317][T11083] netlink: 48 bytes leftover after parsing attributes in process `syz.3.994'. [ 445.062993][ T5747] Bluetooth: hci3: unexpected event for opcode 0x200a [ 446.210575][ T5886] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 446.468541][ T5886] usb 7-1: unable to get BOS descriptor or descriptor too short [ 446.469223][ T5886] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 446.531063][ T5886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.531700][ T5886] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 446.535810][ T5886] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.715341][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.715799][ T5886] usb 7-1: Product: syz [ 446.729494][ T5886] usb 7-1: Manufacturer: syz [ 446.729579][ T5886] usb 7-1: SerialNumber: syz [ 449.137704][ T5747] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 449.146365][ T5747] Bluetooth: hci3: Injecting HCI hardware error event [ 449.164388][ T5746] Bluetooth: hci3: hardware error 0x00 [ 449.216628][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 449.216723][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 449.216766][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 449.216803][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 449.216842][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 449.216884][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 449.216922][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 449.216969][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 449.217007][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 449.217045][T11111] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 449.217086][T11111] jffs2: Further such events for this erase block will not be printed [ 449.217146][T11111] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 449.217164][T11111] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 449.217180][T11111] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 449.234442][T11111] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 449.234463][T11111] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 451.290915][ T5746] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 451.671211][ T5886] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 451.728262][ T5886] usb 7-1: USB disconnect, device number 46 [ 452.301327][T11116] udevd[11116]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.324104][ T5886] kernel read not supported for file /dsp1 (pid: 5886 comm: kworker/2:3) [ 455.072403][T11135] FAULT_INJECTION: forcing a failure. [ 455.072403][T11135] name failslab, interval 1, probability 0, space 0, times 1 [ 455.072478][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.2.1008 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.072506][T11135] Tainted: [L]=SOFTLOCKUP [ 455.072512][T11135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 455.072519][T11135] Call Trace: [ 455.072524][T11135] [ 455.072529][T11135] dump_stack_lvl+0x100/0x190 [ 455.072549][T11135] should_fail_ex.cold+0x5/0xa [ 455.072565][T11135] should_failslab+0xc2/0x120 [ 455.072626][T11135] kmem_cache_alloc_noprof+0x92/0x6a0 [ 455.072640][T11135] ? __pfx_map_id_range_down+0x10/0x10 [ 455.072657][T11135] ? rcu_is_watching+0x13/0xc0 [ 455.072668][T11135] ? security_inode_alloc+0x3b/0x2c0 [ 455.072686][T11135] security_inode_alloc+0x3b/0x2c0 [ 455.072701][T11135] inode_init_always_gfp+0xc6f/0xfb0 [ 455.072718][T11135] alloc_inode+0x8e/0x250 [ 455.072734][T11135] sock_alloc+0x44/0x280 [ 455.072770][T11135] ? security_socket_create+0x7f/0x250 [ 455.072785][T11135] __sock_create+0xc2/0x860 [ 455.072805][T11135] __sys_socket+0x14d/0x260 [ 455.072816][T11135] ? xfd_validate_state+0x129/0x190 [ 455.072834][T11135] ? __pfx___sys_socket+0x10/0x10 [ 455.072851][T11135] __ia32_sys_socket+0x72/0xb0 [ 455.072861][T11135] ? lockdep_hardirqs_on+0x7d/0x110 [ 455.072878][T11135] __do_fast_syscall_32+0x13a/0x8b0 [ 455.072897][T11135] do_fast_syscall_32+0x32/0x70 [ 455.072913][T11135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.072928][T11135] RIP: 0023:0xf7f85fec [ 455.072940][T11135] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 455.072945][T11135] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 455.072957][T11135] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000003 [ 455.072965][T11135] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.072971][T11135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.072978][T11135] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 455.072985][T11135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.072999][T11135] [ 455.075561][T11135] socket: no more sockets [ 455.261891][ T43] audit: type=1326 audit(1788668021.880:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 455.262101][ T43] audit: type=1326 audit(1788668021.880:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 455.263878][ T43] audit: type=1326 audit(1788668021.880:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 455.263906][ T43] audit: type=1326 audit(1788668021.880:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 455.263926][ T43] audit: type=1326 audit(1788668021.880:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701efec code=0x7ffc0000 [ 455.263946][ T43] audit: type=1326 audit(1788668021.880:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 455.264076][ T43] audit: type=1326 audit(1788668021.880:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 455.265568][ T43] audit: type=1326 audit(1788668021.880:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 455.266001][ T43] audit: type=1326 audit(1788668021.880:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf701efec code=0x7ffc0000 [ 455.266025][ T43] audit: type=1326 audit(1788668021.880:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.3.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 456.785560][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 456.785674][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'. [ 456.814024][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7 [ 456.814128][ T5829] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max [ 456.822372][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 456.822451][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 456.822470][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 456.822488][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 456.822506][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 456.822524][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 456.822542][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 456.822560][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 456.822578][ T5829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 456.853539][ T5829] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 458.081039][ T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 458.231415][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 458.231544][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 459.619633][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.619734][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 459.619867][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 459.619913][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 459.669655][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.669731][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 459.669883][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 459.669931][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 459.862913][ T10] usb 7-1: unable to read config index 2 descriptor/all [ 459.863039][ T10] usb 7-1: can't read configurations, error -71 [ 461.040056][T11158] comedi comedi0: comedi_config --init_data is deprecated [ 461.441230][ C2] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.442144][ C2] bridge0: topology change detected, propagating [ 461.443919][ C2] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.444039][ C2] bridge0: topology change detected, propagating [ 464.034288][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 464.047295][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 464.057230][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 464.063172][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 464.068632][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 464.085341][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 464.085561][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 464.085635][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 464.085760][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 464.085829][T11175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 464.086028][T11175] jffs2: Further such events for this erase block will not be printed [ 464.086228][T11175] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 464.086352][T11175] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 464.086416][T11175] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 464.422121][T11175] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 464.426739][T11175] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 467.006864][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1020'. [ 473.516761][ T43] kauditd_printk_skb: 126 callbacks suppressed [ 473.516892][ T43] audit: type=1326 audit(1788668040.131:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.519185][ T43] audit: type=1326 audit(1788668040.141:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.613704][ T43] audit: type=1326 audit(1788668040.231:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.614118][ T43] audit: type=1326 audit(1788668040.231:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.616371][ T43] audit: type=1326 audit(1788668040.231:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.616415][ T43] audit: type=1326 audit(1788668040.231:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.616451][ T43] audit: type=1326 audit(1788668040.231:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.634606][ T43] audit: type=1326 audit(1788668040.251:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.635286][ T43] audit: type=1326 audit(1788668040.251:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.639854][ T43] audit: type=1326 audit(1788668040.251:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1025" exe="/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 473.845532][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 473.845785][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 473.845926][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 473.846048][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 473.846114][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 473.846185][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 473.846309][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 473.846380][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 473.846712][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 473.846835][T11213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 473.846899][T11213] jffs2: Further such events for this erase block will not be printed [ 473.847142][T11213] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 473.847497][T11213] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 473.847628][T11213] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 474.011890][T11213] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 474.012078][T11213] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 475.999102][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 476.151789][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 476.151993][ T10] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 476.153414][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.153437][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 476.153484][ T10] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.156714][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.156740][ T10] usb 6-1: Product: syz [ 476.156759][ T10] usb 6-1: Manufacturer: syz [ 476.156776][ T10] usb 6-1: SerialNumber: syz [ 476.684896][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 476.690613][ T10] usb 6-1: USB disconnect, device number 46 [ 476.720986][T11116] udevd[11116]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.246536][T11254] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 481.246599][T11254] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1035'. [ 483.284582][ T43] kauditd_printk_skb: 163 callbacks suppressed [ 483.284782][ T43] audit: type=1326 audit(1788668048.903:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 483.313027][ T43] audit: type=1326 audit(1788668048.923:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 483.344322][ T43] audit: type=1326 audit(1788668048.963:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 483.356165][ T43] audit: type=1326 audit(1788668048.973:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 483.370212][ T43] audit: type=1326 audit(1788668048.993:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 483.499244][ T43] audit: type=1326 audit(1788668049.123:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 483.499670][ T43] audit: type=1326 audit(1788668049.123:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 483.583468][ T43] audit: type=1326 audit(1788668049.203:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 483.719703][ T43] audit: type=1326 audit(1788668049.343:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 483.721014][ T43] audit: type=1326 audit(1788668049.343:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85fec code=0x7ffc0000 [ 484.629665][T11272] usb 1-1: USB disconnect, device number 2 [ 485.628974][T11169] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 486.086242][T11169] usb 5-1: unable to get BOS descriptor or descriptor too short [ 486.086536][T11169] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 486.175045][T11169] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.175241][T11169] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 486.176092][T11169] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.297265][T11169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.297822][T11169] usb 5-1: Product: syz [ 486.313764][T11169] usb 5-1: Manufacturer: syz [ 486.315192][T11169] usb 5-1: SerialNumber: syz [ 490.676398][T11169] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 490.809036][T11169] usb 5-1: USB disconnect, device number 42 [ 492.337908][T11116] udevd[11116]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.912633][T11317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1047'. [ 495.208506][T11327] 9pnet_virtio: no channels available for device syz [ 496.407735][T11169] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 496.560693][T11169] usb 7-1: unable to get BOS descriptor or descriptor too short [ 496.564462][T11169] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 496.566219][T11169] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.566241][T11169] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 496.566285][T11169] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.569680][T11169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.569708][T11169] usb 7-1: Product: syz [ 496.569724][T11169] usb 7-1: Manufacturer: syz [ 496.569741][T11169] usb 7-1: SerialNumber: syz [ 497.297027][T11342] netlink: 'syz.3.1050': attribute type 10 has an invalid length. [ 497.297211][T11342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1050'. [ 497.298240][T11342] dummy0: entered promiscuous mode [ 497.310635][T11342] bridge0: port 3(dummy0) entered blocking state [ 497.330049][T11342] bridge0: port 3(dummy0) entered disabled state [ 497.338109][T11342] dummy0: entered allmulticast mode [ 497.352131][T11350] fuse: Bad value for 'group_id' [ 497.355116][T11350] fuse: Bad value for 'group_id' [ 497.376319][T11342] bridge0: port 3(dummy0) entered blocking state [ 497.376522][T11342] bridge0: port 3(dummy0) entered forwarding state [ 497.543837][T11169] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 497.555368][T11169] usb 7-1: USB disconnect, device number 49 [ 497.600611][T11116] udevd[11116]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.965574][T11360] netlink: 'syz.3.1052': attribute type 1 has an invalid length. [ 497.972003][T11360] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1052'. [ 497.976984][T11360] netlink: 'syz.3.1052': attribute type 1 has an invalid length. [ 497.980657][T11360] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1052'. [ 497.994306][T11360] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1052'. [ 499.439770][T11377] FAULT_INJECTION: forcing a failure. [ 499.439770][T11377] name failslab, interval 1, probability 0, space 0, times 0 [ 499.445701][T11377] CPU: 3 UID: 0 PID: 11377 Comm: syz.3.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.445745][T11377] Tainted: [L]=SOFTLOCKUP [ 499.445753][T11377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 499.445763][T11377] Call Trace: [ 499.445771][T11377] [ 499.445779][T11377] dump_stack_lvl+0x100/0x190 [ 499.445809][T11377] should_fail_ex.cold+0x5/0xa [ 499.445833][T11377] should_failslab+0xc2/0x120 [ 499.445858][T11377] kmem_cache_alloc_noprof+0x92/0x6a0 [ 499.445877][T11377] ? __pfx_map_id_range_down+0x10/0x10 [ 499.445898][T11377] ? rcu_is_watching+0x13/0xc0 [ 499.445914][T11377] ? security_inode_alloc+0x3b/0x2c0 [ 499.445941][T11377] security_inode_alloc+0x3b/0x2c0 [ 499.445963][T11377] inode_init_always_gfp+0xc6f/0xfb0 [ 499.445994][T11377] alloc_inode+0x8e/0x250 [ 499.446017][T11377] sock_alloc+0x44/0x280 [ 499.446039][T11377] ? security_socket_create+0x7f/0x250 [ 499.446060][T11377] __sock_create+0xc2/0x860 [ 499.446087][T11377] __sys_socket+0x14d/0x260 [ 499.446101][T11377] ? xfd_validate_state+0x129/0x190 [ 499.446126][T11377] ? __pfx___sys_socket+0x10/0x10 [ 499.446147][T11377] __ia32_sys_socket+0x72/0xb0 [ 499.446161][T11377] ? lockdep_hardirqs_on+0x7d/0x110 [ 499.446184][T11377] __do_fast_syscall_32+0x13a/0x8b0 [ 499.446213][T11377] do_fast_syscall_32+0x32/0x70 [ 499.446240][T11377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 499.446262][T11377] RIP: 0023:0xf701efec [ 499.446281][T11377] Code: Unable to access opcode bytes at 0xf701efc2. [ 499.446289][T11377] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 499.446309][T11377] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000003 [ 499.446321][T11377] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.446333][T11377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.446344][T11377] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 499.446354][T11377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.446377][T11377] [ 499.536064][T11377] socket: no more sockets [ 501.120120][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.514966][T11416] fuse: Bad value for 'fd' [ 505.867155][T11169] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 506.063256][T11169] usb 5-1: unable to get BOS descriptor or descriptor too short [ 506.066701][T11169] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 506.081132][T11169] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.085952][T11169] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 506.090334][T11169] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.133348][T11169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.137277][T11169] usb 5-1: Product: syz [ 506.141198][T11169] usb 5-1: Manufacturer: syz [ 506.143335][T11169] usb 5-1: SerialNumber: syz [ 508.201876][T11169] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 508.211935][T11169] usb 5-1: USB disconnect, device number 43 [ 508.224559][T11116] udevd[11116]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.766874][T11169] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 508.919696][T11169] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 508.923322][T11169] usb 6-1: config 0 has no interfaces? [ 508.927957][T11169] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.928040][T11169] usb 6-1: Product: syz [ 508.928094][T11169] usb 6-1: Manufacturer: syz [ 508.928119][T11169] usb 6-1: SerialNumber: syz [ 508.937603][T11169] usb 6-1: config 0 descriptor?? [ 509.438938][T11444] netdevsim0 speed is unknown, defaulting to 1000 [ 509.439106][T11444] netdevsim0 speed is unknown, defaulting to 1000 [ 509.439796][T11444] netdevsim0 speed is unknown, defaulting to 1000 [ 509.440266][T11444] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 509.440303][T11444] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 509.440344][T11444] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 509.495066][T11444] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 509.531866][T11444] netdevsim0 speed is unknown, defaulting to 1000 [ 509.551125][T11444] netdevsim0 speed is unknown, defaulting to 1000 [ 509.725853][T11447] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 509.907151][T11444] netdevsim0 speed is unknown, defaulting to 1000 [ 509.931303][T11444] netdevsim0 speed is unknown, defaulting to 1000 [ 513.400106][T11169] usb 6-1: USB disconnect, device number 47 [ 516.407930][T11463] netlink: 'syz.2.1071': attribute type 10 has an invalid length. [ 516.411353][T11463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1071'. [ 516.414986][T11463] bridge0: port 4(dummy0) entered blocking state [ 516.417751][T11463] bridge0: port 4(dummy0) entered disabled state [ 516.421007][T11463] bridge0: port 4(dummy0) entered blocking state [ 516.421125][T11463] bridge0: port 4(dummy0) entered forwarding state [ 516.432629][T11463] fuse: Bad value for 'group_id' [ 516.432690][T11463] fuse: Bad value for 'group_id' [ 516.566496][ T5829] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 516.730916][ T5829] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 516.745047][ T5829] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 516.745108][ T5829] usb 8-1: Product: syz [ 516.745158][ T5829] usb 8-1: Manufacturer: syz [ 516.745186][ T5829] usb 8-1: SerialNumber: syz [ 516.761217][ T5829] usb 8-1: config 0 descriptor?? [ 516.770318][ T5829] ch341 8-1:0.0: ch341-uart converter detected [ 517.865370][ T5829] usb 8-1: failed to receive control message: -110 [ 517.905897][ T5829] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 519.493878][ T6939] Process accounting resumed [ 519.863498][ T5829] usb 8-1: USB disconnect, device number 51 [ 519.874660][ T5829] ch341 8-1:0.0: device disconnected [ 523.393137][T11494] xt_connbytes: Forcing CT accounting to be enabled [ 523.393445][T11494] Cannot find del_set index 0 as target [ 523.502908][T11494] ceph: No mds server is up or the cluster is laggy [ 523.503571][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 523.503809][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 523.757889][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 523.758128][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 524.766076][ T5829] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 524.936267][ T5829] usb 7-1: Using ep0 maxpacket: 32 [ 524.941032][ T5829] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 524.947513][ T5829] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 524.953756][ T5829] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 524.961772][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.966748][ T5829] usb 7-1: Product: syz [ 524.969461][ T5829] usb 7-1: Manufacturer: syz [ 524.972024][ T5829] usb 7-1: SerialNumber: syz [ 525.942637][T11506] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1081'. [ 526.089623][ T5829] usb 7-1: USB disconnect, device number 50 [ 527.195412][T11512] input: syz1 as /devices/virtual/input/input24 [ 528.849795][T11531] binder_alloc: 11529: binder_alloc_buf size 66480 failed, no address space [ 528.851576][T11531] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 530.722759][T11547] vlan0: entered allmulticast mode [ 530.722847][T11547] bond0: entered allmulticast mode [ 530.722923][T11547] bond_slave_0: entered allmulticast mode [ 530.722955][T11547] bond_slave_1: entered allmulticast mode [ 530.722987][T11547] veth0_to_bond: entered allmulticast mode [ 530.725332][T11547] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1090'. [ 530.759284][T11547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.763142][T11547] bond_slave_0: left allmulticast mode [ 530.882396][T11547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.895071][T11547] bond_slave_1: left allmulticast mode [ 530.909354][T11547] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 530.918729][T11547] veth0_to_bond: left allmulticast mode [ 530.920982][T11547] bond0 (unregistering): Released all slaves [ 536.737281][T11592] nvmet: adding nsid 1 to subsystem testnqn [ 548.194051][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 549.484819][ T1349] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 549.634569][ T1349] usb 8-1: Using ep0 maxpacket: 32 [ 549.635360][ T1349] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 549.636448][ T1349] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 549.636462][ T1349] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 549.639569][ T1349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.639591][ T1349] usb 8-1: Product: syz [ 549.639606][ T1349] usb 8-1: Manufacturer: syz [ 549.639620][ T1349] usb 8-1: SerialNumber: syz [ 549.896183][T11642] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1109'. [ 549.937436][ T1349] usb 8-1: USB disconnect, device number 52 [ 550.161982][ T1180] IPVS: starting estimator thread 0... [ 550.244705][T11648] IPVS: using max 27 ests per chain, 64800 per kthread [ 550.440601][T11653] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 550.833874][T11655] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 550.893886][ T13] rtrs_client L1777: : Resolving route failed, err: -ENODEV [ 550.943293][T11655] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 552.684628][T11663] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 552.685144][T11663] CIFS: Attempting to mount //127.0.0.1/share [ 553.030503][T11665] option changes via remount are deprecated (pid=11662 comm=syz.3.1114) [ 555.167701][T11663] CIFS: VFS: Error connecting to socket. Aborting operation. [ 555.167942][T11663] CIFS: VFS: cifs_mount failed w/return code = -4 [ 562.555990][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.992591][T11715] xt_connbytes: Forcing CT accounting to be enabled [ 566.996627][T11715] Cannot find del_set index 0 as target [ 567.203997][T11712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'. [ 567.484690][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 567.484782][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 567.485569][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 567.485589][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 567.485606][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 567.485627][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 567.485645][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 567.485675][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 567.485694][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 567.485711][T11721] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 567.485728][T11721] jffs2: Further such events for this erase block will not be printed [ 567.485790][T11721] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 567.485806][T11721] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 567.485821][T11721] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 567.500010][T11721] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 567.500025][T11721] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 572.170042][ T5747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.171795][ T5747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.178951][ T5747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.184566][ T5747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.185380][ T5747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 574.054194][T11730] wlan0 speed is unknown, defaulting to 1000 [ 574.099838][T11730] wg2 speed is unknown, defaulting to 1000 [ 574.323411][ T5746] Bluetooth: hci4: command tx timeout [ 574.431256][T11730] netdevsim0 speed is unknown, defaulting to 1000 [ 575.084408][T11753] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 575.235249][T11753] IPv6: addrconf: prefix option has invalid lifetime [ 575.742464][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.750693][T11730] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.766996][T11730] bridge_slave_0: entered allmulticast mode [ 575.787836][T11730] bridge_slave_0: entered promiscuous mode [ 575.797241][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.801287][T11730] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.801472][T11730] bridge_slave_1: entered allmulticast mode [ 575.821653][T11730] bridge_slave_1: entered promiscuous mode [ 576.225535][T11730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.232620][T11730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.270343][T11730] team0: Port device team_slave_0 added [ 576.274667][T11730] team0: Port device team_slave_1 added [ 576.294198][T11730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.294264][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.294735][T11730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.295745][T11730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.295753][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.295766][T11730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.319003][T11730] hsr_slave_0: entered promiscuous mode [ 576.319442][T11730] hsr_slave_1: entered promiscuous mode [ 576.319749][T11730] debugfs: 'hsr0' already exists in 'hsr' [ 576.319761][T11730] Cannot create hsr debugfs directory [ 576.393228][ T5746] Bluetooth: hci4: command tx timeout [ 577.927781][T11765] gfs2: error -5 reading superblock [ 578.474373][ T5746] Bluetooth: hci4: command tx timeout [ 578.778717][T10497] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.182179][T10497] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.553123][ T5746] Bluetooth: hci4: command tx timeout [ 580.892233][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 580.966367][T10497] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.982623][T11730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 581.003609][T11730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 581.004229][T11730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 581.009783][T11730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.013552][T11730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 581.042261][T11730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 581.049961][T11730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 581.058913][T11730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.156845][T10497] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.431105][T11730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.484222][T11730] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.594747][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.594966][ T8783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.597240][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.597321][ T8783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.817688][T10497] bridge_slave_1: left allmulticast mode [ 581.817833][T10497] bridge_slave_1: left promiscuous mode [ 581.821250][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.868204][T10497] bridge_slave_0: left allmulticast mode [ 581.868280][T10497] bridge_slave_0: left promiscuous mode [ 581.884033][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.211277][T10497] batman_adv: batadv0: Removing interface: ip6gretap1 [ 582.811312][T10497] bond1 (unregistering): Released all slaves [ 582.880689][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 583.279225][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 583.356084][T10497] IPVS: stopping master sync thread 11653 ... [ 583.881058][T11803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1138'. [ 583.965085][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 585.928224][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 586.312326][T10497] hsr_slave_0: left promiscuous mode [ 586.319353][T10497] hsr_slave_1: left promiscuous mode [ 586.320334][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.320395][T10497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.325198][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.325217][T10497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.357524][T10497] veth1_macvtap: left promiscuous mode [ 586.357708][T10497] veth0_macvtap: left promiscuous mode [ 586.360327][T10497] veth0_vlan: left promiscuous mode [ 586.636569][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 586.637321][ T43] audit: type=1326 audit(1788668152.249:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11821 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 586.637353][ T43] audit: type=1326 audit(1788668152.249:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11821 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 586.637375][ T43] audit: type=1326 audit(1788668152.259:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11821 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 586.794531][ T43] audit: type=1326 audit(1788668152.369:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11821 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 586.794623][ T43] audit: type=1326 audit(1788668152.419:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11821 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 588.264141][T10497] team0 (unregistering): Port device team_slave_1 removed [ 588.284162][T10497] team0 (unregistering): Port device team_slave_0 removed [ 588.453838][T11730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.942754][T11730] veth0_vlan: entered promiscuous mode [ 588.979658][T11730] veth1_vlan: entered promiscuous mode [ 589.039498][T11853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.120760][T11730] veth0_macvtap: entered promiscuous mode [ 589.149856][T11730] veth1_macvtap: entered promiscuous mode [ 589.205131][T11730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.239375][T11730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.282515][ T5550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.282653][ T5550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.289815][ T5550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.289856][ T5550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.559794][ T8778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.559962][ T8778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.648870][ T8773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.648997][ T8773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.643231][T10497] IPVS: stop unused estimator thread 0... [ 604.864242][T11966] ubi16: attaching mtd0 [ 604.866229][T11966] ubi16: scanning is finished [ 604.866264][T11966] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 604.920259][T11967] netlink: 'syz.2.1153': attribute type 21 has an invalid length. [ 604.920321][T11967] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1153'. [ 606.175219][T11967] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1153'. [ 606.185691][T11971] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 607.880540][T11966] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 608.151341][ T5747] Bluetooth: hci1: command 0x0c1a tx timeout [ 608.156778][ T5746] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 608.270307][T11989] capability: warning: `syz.2.1158' uses 32-bit capabilities (legacy support in use) [ 608.498370][T11992] Config c1/1 of g1 needs at least one function. [ 608.498523][T11992] udc dummy_udc.0: failed to start g1: -22 [ 608.498540][T11992] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 608.499054][T11992] UDC core: g1: couldn't find an available UDC or it's busy [ 611.958880][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 615.717862][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1164'. [ 617.502726][T12047] CIFS: Attempting to mount //127.0.0.1/share [ 618.414449][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1173'. [ 619.575244][T12047] CIFS: VFS: Error connecting to socket. Aborting operation. [ 619.575392][T12047] CIFS: VFS: cifs_mount failed w/return code = -4 [ 619.766172][T12066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'. [ 623.992030][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.907902][T12104] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1183'. [ 632.251300][T12140] new mount options do not match the existing superblock, will be ignored [ 632.257869][T12140] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 632.448991][ T43] audit: type=1326 audit(1788668198.071:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 632.459978][ T43] audit: type=1326 audit(1788668198.071:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 632.467895][ T43] audit: type=1326 audit(1788668198.081:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701efec code=0x7ffc0000 [ 632.476718][ T43] audit: type=1326 audit(1788668198.081:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 632.476753][ T43] audit: type=1326 audit(1788668198.091:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 632.476786][ T43] audit: type=1326 audit(1788668198.091:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efec code=0x7ffc0000 [ 632.476820][ T43] audit: type=1326 audit(1788668198.091:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 632.476851][ T43] audit: type=1326 audit(1788668198.091:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 632.476880][ T43] audit: type=1326 audit(1788668198.091:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 632.476910][ T43] audit: type=1326 audit(1788668198.091:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 638.513893][T12153] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 638.513922][T12153] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 638.524459][T12153] vhci_hcd vhci_hcd.0: Device attached [ 638.846718][ T5886] usb 44-1: SetAddress Request (18) to port 0 [ 638.847579][ T5886] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 644.052345][T12161] vhci_hcd: connection reset by peer [ 644.057061][T10497] vhci_hcd vhci_hcd.3: stop threads [ 644.069548][T10497] vhci_hcd vhci_hcd.3: release socket [ 644.072203][T10497] vhci_hcd vhci_hcd.3: disconnect device [ 644.076103][ T5886] usb 44-1: device descriptor read/8, error -110 [ 644.510463][ T5886] usb usb44-port1: attempt power cycle [ 645.119871][ T5886] usb usb44-port1: unable to enumerate USB device [ 647.255448][T12186] loop9: detected capacity change from 0 to 255852544 [ 648.113659][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 648.113748][ T43] audit: type=1807 audit(1788668213.732:643): action=measure res=1 [ 648.284962][T12190] ima: policy update completed [ 648.285141][ T43] audit: type=1802 audit(1788668213.912:644): pid=12190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.1203" res=1 errno=0 [ 649.257225][ T43] audit: type=1800 audit(1788668214.882:645): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 649.285142][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 649.285221][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 649.285914][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 649.287207][ T43] audit: type=1800 audit(1788668214.912:646): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 649.287347][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 649.287393][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 649.287426][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 649.287455][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 649.287492][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 649.287521][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 649.287549][T12197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 649.287576][T12197] jffs2: Further such events for this erase block will not be printed [ 649.287635][T12197] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 649.287663][T12197] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 649.287690][T12197] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 649.903682][T12197] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 649.904003][T12197] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 650.964978][T12199] overlay: ./file0 is not a directory [ 651.261756][T12200] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 651.487338][ T43] audit: type=1800 audit(1788668217.112:647): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 651.505965][ T43] audit: type=1800 audit(1788668217.132:648): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 653.253984][ T43] audit: type=1800 audit(1788668218.882:649): pid=12218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1206" name="scheduler" dev="sysfs" ino=21960 res=0 errno=0 [ 653.256538][T12210] syz_tun: entered allmulticast mode [ 653.261923][ T43] audit: type=1800 audit(1788668218.892:650): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1206" name="rotational" dev="sysfs" ino=21942 res=0 errno=0 [ 653.474153][ T43] audit: type=1800 audit(1788668219.102:651): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 653.525918][T12207] syz_tun: left allmulticast mode [ 654.187621][ T43] audit: type=1800 audit(1788668219.812:652): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 654.598451][T12230] [ 654.599726][T12230] ====================================================== [ 654.603063][T12230] WARNING: possible circular locking dependency detected [ 654.606098][T12230] syzkaller #0 Tainted: G L [ 654.609022][T12230] ------------------------------------------------------ [ 654.612146][T12230] syz.0.1209/12230 is trying to acquire lock: [ 654.614819][T12230] ffff888014211a70 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 654.619052][T12230] [ 654.619052][T12230] but task is already holding lock: [ 654.622253][T12230] ffff88802965c690 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 654.626984][T12230] [ 654.626984][T12230] which lock already depends on the new lock. [ 654.626984][T12230] [ 654.631281][T12230] [ 654.631281][T12230] the existing dependency chain (in reverse order) is: [ 654.635060][T12230] [ 654.635060][T12230] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 654.639476][T12230] lock_acquire+0x1d1/0x380 [ 654.641855][T12230] __mutex_lock+0x1a4/0x1bd0 [ 654.644116][T12230] process_measurement+0x5ab/0x2350 [ 654.646295][T12230] ima_file_check+0xcc/0x120 [ 654.648183][T12230] security_file_post_open+0xc4/0x210 [ 654.650380][T12230] path_openat+0x5cd/0x2440 [ 654.652264][T12230] do_file_open+0x20e/0x430 [ 654.654597][T12230] do_sys_openat2+0x10f/0x1e0 [ 654.656756][T12230] __x64_sys_openat+0x12d/0x210 [ 654.659040][T12230] do_syscall_64+0x121/0x770 [ 654.661503][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.664366][T12230] [ 654.664366][T12230] -> #2 (sb_writers#5){.+.+}-{0:0}: [ 654.667753][T12230] lock_acquire+0x1d1/0x380 [ 654.670245][T12230] mnt_want_write+0x6f/0x420 [ 654.672773][T12230] lookup_open+0x150/0x1990 [ 654.675213][T12230] path_openat+0xa2c/0x2440 [ 654.677547][T12230] do_file_open+0x20e/0x430 [ 654.679748][T12230] file_open_name+0x1c3/0x3e0 [ 654.681962][T12230] filp_open+0x2e/0x50 [ 654.683953][T12230] nvmet_file_ns_enable+0x95/0x420 [ 654.686315][T12230] nvmet_ns_enable+0x43b/0x650 [ 654.688559][T12230] nvmet_ns_enable_store+0x11e/0x160 [ 654.691054][T12230] configfs_write_iter+0x302/0x4e0 [ 654.693747][T12230] vfs_write+0x6af/0x1050 [ 654.696108][T12230] ksys_write+0x12a/0x250 [ 654.698366][T12230] __do_fast_syscall_32+0x13a/0x8b0 [ 654.700693][T12230] do_fast_syscall_32+0x32/0x70 [ 654.703009][T12230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.706124][T12230] [ 654.706124][T12230] -> #1 (&subsys->lock){+.+.}-{4:4}: [ 654.709174][T12230] lock_acquire+0x1d1/0x380 [ 654.711844][T12230] __mutex_lock+0x1a4/0x1bd0 [ 654.714155][T12230] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 654.716929][T12230] configfs_write_iter+0x302/0x4e0 [ 654.719318][T12230] vfs_write+0x6af/0x1050 [ 654.721361][T12230] ksys_write+0x12a/0x250 [ 654.723453][T12230] __do_fast_syscall_32+0x13a/0x8b0 [ 654.725873][T12230] do_fast_syscall_32+0x32/0x70 [ 654.728629][T12230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.731852][T12230] [ 654.731852][T12230] -> #0 (&p->frag_sem){.+.+}-{4:4}: [ 654.735078][T12230] check_prev_add+0xeb/0xe60 [ 654.736959][T12230] __lock_acquire+0x1492/0x1ec0 [ 654.738695][T12230] lock_acquire+0x1d1/0x380 [ 654.740937][T12230] down_read+0x99/0x4c0 [ 654.743081][T12230] __configfs_open_file+0xe8/0x9c0 [ 654.745544][T12230] do_dentry_open+0x6ab/0x14d0 [ 654.747891][T12230] vfs_open+0x82/0x3f0 [ 654.749887][T12230] dentry_open+0x71/0xd0 [ 654.752031][T12230] ima_calc_file_hash+0xe1/0x380 [ 654.754404][T12230] ima_collect_measurement+0x94f/0xb30 [ 654.757016][T12230] process_measurement+0xdfe/0x2350 [ 654.759623][T12230] ima_file_check+0xcc/0x120 [ 654.761958][T12230] security_file_post_open+0xc4/0x210 [ 654.764702][T12230] path_openat+0x5cd/0x2440 [ 654.766746][T12230] do_file_open+0x20e/0x430 [ 654.768818][T12230] do_sys_openat2+0x10f/0x1e0 [ 654.771035][T12230] __ia32_compat_sys_openat+0x12d/0x210 [ 654.773701][T12230] __do_fast_syscall_32+0x13a/0x8b0 [ 654.776074][T12230] do_fast_syscall_32+0x32/0x70 [ 654.778339][T12230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.780726][T12230] [ 654.780726][T12230] other info that might help us debug this: [ 654.780726][T12230] [ 654.784121][T12230] Chain exists of: [ 654.784121][T12230] &p->frag_sem --> sb_writers#5 --> &ima_iint_mutex_key[depth] [ 654.784121][T12230] [ 654.790320][T12230] Possible unsafe locking scenario: [ 654.790320][T12230] [ 654.793480][T12230] CPU0 CPU1 [ 654.795765][T12230] ---- ---- [ 654.798151][T12230] lock(&ima_iint_mutex_key[depth]); [ 654.800652][T12230] lock(sb_writers#5); [ 654.803862][T12230] lock(&ima_iint_mutex_key[depth]); [ 654.807129][T12230] rlock(&p->frag_sem); [ 654.808941][T12230] [ 654.808941][T12230] *** DEADLOCK *** [ 654.808941][T12230] [ 654.812400][T12230] locks held by syz.0.1209/12230: 1, last CPU#3: [ 654.815265][T12230] #0: ffff88802965c690 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 654.820222][T12230] [ 654.820222][T12230] stack backtrace: [ 654.822731][T12230] CPU: 3 UID: 0 PID: 12230 Comm: syz.0.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.827570][T12230] Tainted: [L]=SOFTLOCKUP [ 654.829894][T12230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 654.834336][T12230] Call Trace: [ 654.835778][T12230] [ 654.837045][T12230] dump_stack_lvl+0x100/0x190 [ 654.839074][T12230] print_circular_bug.cold+0x178/0x1be [ 654.841444][T12230] check_noncircular+0x146/0x160 [ 654.843871][T12230] ? kasan_save_stack+0x30/0x50 [ 654.846325][T12230] ? process_measurement+0xdfe/0x2350 [ 654.848886][T12230] check_prev_add+0xeb/0xe60 [ 654.850926][T12230] ? do_fast_syscall_32+0x32/0x70 [ 654.853062][T12230] __lock_acquire+0x1492/0x1ec0 [ 654.855148][T12230] lock_acquire+0x1d1/0x380 [ 654.857066][T12230] ? __configfs_open_file+0xe8/0x9c0 [ 654.859295][T12230] ? __pfx___might_resched+0x10/0x10 [ 654.861530][T12230] down_read+0x99/0x4c0 [ 654.863600][T12230] ? __configfs_open_file+0xe8/0x9c0 [ 654.866392][T12230] ? __pfx_down_read+0x10/0x10 [ 654.868672][T12230] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 654.871003][T12230] ? __configfs_open_file+0xcb/0x9c0 [ 654.873385][T12230] __configfs_open_file+0xe8/0x9c0 [ 654.875569][T12230] do_dentry_open+0x6ab/0x14d0 [ 654.877553][T12230] ? __pfx_configfs_open_file+0x10/0x10 [ 654.880051][T12230] vfs_open+0x82/0x3f0 [ 654.882097][T12230] dentry_open+0x71/0xd0 [ 654.884166][T12230] ima_calc_file_hash+0xe1/0x380 [ 654.886309][T12230] ima_collect_measurement+0x94f/0xb30 [ 654.888643][T12230] ? __pfx_ima_collect_measurement+0x10/0x10 [ 654.891225][T12230] ? process_measurement+0x5ab/0x2350 [ 654.893701][T12230] ? is_bad_inode+0xd/0x40 [ 654.895811][T12230] ? xattr_resolve_name+0x27d/0x3f0 [ 654.898151][T12230] ? vfs_getxattr_alloc+0xec/0x350 [ 654.900526][T12230] ? ima_get_hash_algo+0x241/0x400 [ 654.902799][T12230] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 654.905105][T12230] ? process_measurement+0xdfe/0x2350 [ 654.907386][T12230] process_measurement+0xdfe/0x2350 [ 654.909880][T12230] ? __pfx_process_measurement+0x10/0x10 [ 654.912759][T12230] ? lock_acquire+0x1d1/0x380 [ 654.915016][T12230] ? __configfs_open_file+0x6ca/0x9c0 [ 654.917384][T12230] ima_file_check+0xcc/0x120 [ 654.919389][T12230] ? __pfx_ima_file_check+0x10/0x10 [ 654.921596][T12230] security_file_post_open+0xc4/0x210 [ 654.923936][T12230] path_openat+0x5cd/0x2440 [ 654.925877][T12230] ? __pfx_path_openat+0x10/0x10 [ 654.928003][T12230] do_file_open+0x20e/0x430 [ 654.929966][T12230] ? __pfx_do_file_open+0x10/0x10 [ 654.932291][T12230] ? _raw_spin_unlock+0x28/0x50 [ 654.934651][T12230] ? alloc_fd+0x471/0x7a0 [ 654.936697][T12230] do_sys_openat2+0x10f/0x1e0 [ 654.938704][T12230] ? __pfx_do_sys_openat2+0x10/0x10 [ 654.940910][T12230] __ia32_compat_sys_openat+0x12d/0x210 [ 654.943367][T12230] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 654.946106][T12230] __do_fast_syscall_32+0x13a/0x8b0 [ 654.948476][T12230] do_fast_syscall_32+0x32/0x70 [ 654.950947][T12230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.954031][T12230] RIP: 0023:0xf7fe5fec [ 654.955834][T12230] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 654.958621][T12230] RSP: 002b:00000000f4c1e50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 654.962385][T12230] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200 [ 654.965760][T12230] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.969295][T12230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.973256][T12230] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 654.976566][T12230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.979879][T12230] [ 654.989760][ T43] audit: type=1800 audit(1788668220.612:653): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1209" name="console" dev="configfs" ino=51121 res=0 errno=0 [ 655.992979][ T43] audit: type=1800 audit(1788668221.622:654): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 656.869745][ T43] audit: type=1800 audit(1788668222.503:655): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0