last executing test programs: 6.831612747s ago: executing program 3 (id=641): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x30, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x5, 0x0, 0x2, '\x00', {0xf, 0x6, "ef91cc", 0x9, 0x3b, 0xff, @mcast2, @empty}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) r4 = syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000580)={&(0x7f0000000500)=""/67, 0x226000, 0x800, 0x401, 0x2}, 0x1c) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080009003fe1801a51fc5bf36275fff1e3597362829ccf4f2cdc7bec30247aa8ed636eb383321978d406c158e63b9e2d2b9885862e89025d8e1edb2bc722c8e390b444e581b7c02e4b45c1f408b2f28baf44d280327a054682788a0d4e0b39939a934fbb75238fc34838158dc7161f9e0c03ca42674445a68491a75da33cdffb0f06a246c071cc3fbf2b748d6f6e3a025f435b26705c06e4e2b74bb3727cb9ce6b577f8e674f4b33f8e14fb7fda6e1dc622e01c3790a840fb48c33715303392f25c531c563f697df1dc53dcfa9a55ef3220811c95c0c1b91e2964aea216a473820f78fac1b1525aa9ad39e2b91956bd40ec34585dc03b8690e9922f21ee32e37aa0c59e8af2dfdb38ea8515e0166c643e4dca2751c6ce6e714b7b69c7562e0f309e05efd01", @ANYRES32=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x1) fchdir(r7) wait4(r4, 0x0, 0x40000000, 0x0) 6.831250715s ago: executing program 0 (id=642): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7fffffff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) 6.790336437s ago: executing program 1 (id=644): syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x3, 0xf8}}}, 0xc) syz_clone(0x842a4011, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4, 0x0, 0x80, 0x2}, {0x6, 0x0, 0xff, 0x8000}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb241e5eb7080000000000007b8a8796a06e73d5ecb5f8ff00000000b7080000000000007b8af0ff00000400bf8100000000000007080000f8ffffffbf040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f00000004"], 0x58) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x101300) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000240)=""/158) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r5 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000200)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x2000000a}}, 0x10) close_range(r7, r7, 0x0) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 5.798776683s ago: executing program 0 (id=646): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) close(r4) 5.757701426s ago: executing program 1 (id=647): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaabaabb86dd6000000800282aff00000000000000000000000000000000ff020000000000000000000000000001870090780000002f80bdf7aa00fe8000000000000000000000000000ff7f02000000000000000000887c8d7a773c605bbde727c9000a2352634f4439f9c3c1529ca6612ee51dac3fe3a01128c82b6e11718e0852b5f5e31e547b5c8d80e3d33f63277cfa626c84525008866c5670cceb6719f98ea0bc3e208349d6bc4af6"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8000) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r2, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x20000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) 5.56436312s ago: executing program 3 (id=648): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', 0x0, 0x1008840, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000)={[{}]}) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) syz_io_uring_setup(0x38fa, &(0x7f0000000300)={0x0, 0x9943, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), 0x0, 0x0) 4.919178436s ago: executing program 0 (id=649): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20054840) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r2, 0x800005, 0x80000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1f000000000009000000000000000000000001007ccf61d1e898ec161ab1c822463516702b0e47", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ff010000000000006a13000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400000f02023e00000000008500000083000000bf090000000000005509010000000000950000000000000018310000030000000000000000000000bf91800000000000b702518832e07bc225fb000084000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x3, 0x9b, &(0x7f00000006c0)=""/155, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xd, 0xfffff801, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000009c0)=[r6, 0xffffffffffffffff, r4, r6, 0xffffffffffffffff, r4, r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x0, 0x2, 0xf}, {0x0, 0x1, 0xd, 0x7}, {0x4, 0x2, 0x3, 0xa}, {0x4, 0x2, 0x6, 0x4}, {0x2, 0x5, 0x4, 0x3}], 0x10, 0x7}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000040)={0xe0002014}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ffe5cc95f800000000bfa100000000000007010000f8ffffd5b702000008000000b703000002000000850000007200000085000000070000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.578436914s ago: executing program 1 (id=650): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) 3.970751726s ago: executing program 2 (id=651): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0xbe, 0x12) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0xfffffdce) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffb, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000180)=""/220) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x20, 0x2, {{0x1, [0x0, 0x0, 0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x36, 0xfffe, 0x0, 0x0, 0x1, 0x16, 0x8, 0x0, 0x5c4, 0xda8c, 0x0, 0x0, 0x3dc, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfff, 0x0, 0x0, 0xfffc, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24008810}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0x0, 0x8, 0xff}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) close(r6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000000c0)=0xfffffb6c, 0x4) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) 3.847447729s ago: executing program 0 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400011) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000000)={0x5, 0x9}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x60}}, 0x4880) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) 3.654191922s ago: executing program 3 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x4c}}, 0x40000) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r5, r7) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(r4, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) ioctl$OCFS2_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000180)={0x1, 0x1, 0x3, 0x480e4c1e, 0x2, 0x7ff}) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7fffffff) 3.603787396s ago: executing program 1 (id=654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r7, r9) fchdir(r6) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r10 = openat(r6, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) ioctl$OCFS2_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000180)={0x1, 0x1, 0x3, 0x480e4c1e, 0x2, 0x7ff}) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r11, r10, 0x0, 0x7fffffff) 2.240478938s ago: executing program 3 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'geneve1\x00'}) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x52dd9000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) r4 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000000)={0x5, 0x9}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.181695844s ago: executing program 2 (id=656): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x60, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000019000100000000000001"], 0x1c}}, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8040}, 0x18, 0x0) landlock_restrict_self(r2, 0x6) r3 = syz_open_dev$cec(0x0, 0x0, 0x2182) ioctl$CEC_RECEIVE(r3, 0xc0386106, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(0xffffffffffffffff) write$cgroup_subtree(r7, 0x0, 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) r9 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x4, 0x82, 0x0, r8}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r9, 0x18b8, 0x6997, 0x84, 0x0, 0x0) 2.13397071s ago: executing program 2 (id=657): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000019340)={@cgroup, 0xffffffffffffffff, 0xe, 0x2000}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000019140)=ANY=[@ANYRES16, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=r1, @ANYRESOCT=r3], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x400000000000247, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') r6 = openat2$dir(0xffffff9c, 0x0, &(0x7f0000019180)={0x480, 0x1, 0x10}, 0x18) mknodat$loop(r6, &(0x7f00000191c0)='./file0\x00', 0x2000, 0x1) preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000019080)={{0xa, 0x4e20, 0x3, @local, 0x2}, {0xa, 0x4e21, 0x45c, @private0, 0x6}, 0x0, {[0x6, 0x80000001, 0x1, 0x8000800, 0x4, 0x2, 0x1, 0x7e]}}, 0x5c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x8d, 0xfffffffd, 0xffffffff, 0xe, 0xcb, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x400, 0x4}) readv(r7, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xff) 2.120883308s ago: executing program 2 (id=658): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="430b29bd7000fbdbdf250400001e"], 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) splice(r1, 0x0, r3, 0x0, 0x3ff, 0x8) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0x1) accept4$x25(r6, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000003c0)={0x2e, "9bba14a574f790d4825264976cc28848a6393a71a97b19b8a1f300c839efc88240b5c3916fdcc718ddad084b3369df9dfa0c55ad06525bab148dfce0c6aaa10b0a2ce9c8dea4b67e383a5f30613b6cdb019558585761c28807273bd8729fc78e035ccb7669bb5e304ebbc3f76d50922ecced439b393c2311961fe6bfbc8d5d39"}) write$apparmor_current(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f00000002c0)='/dev/nbd') write$cgroup_pid(r0, &(0x7f0000000240), 0x12) r8 = mq_open(&(0x7f0000000000)='/dev/kvm\x00', 0x40, 0x1d4, &(0x7f0000000040)={0x3, 0x10a, 0x3, 0x101}) mq_timedsend(r8, &(0x7f0000000080)="131d8bb54e9c5368c0ccaa3a7f8df84e1f9b997d7aaa6c276eae45bb315b", 0x1e, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x28, 0x0, 0x0, 0x80000000}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.50272689s ago: executing program 0 (id=659): r0 = syz_io_uring_complete(0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/52) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) socket(0x200000000000011, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) openat$ptmx(0xffffff9c, &(0x7f0000000200), 0x201, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000240)={0x0, 0x68c, 0x4000, 0x0, 0xf}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb83e, 0x0, 0x1, 0x233, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d95, 0x400, 0x1, 0x115, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ff1, 0x0, 0x3, 0x164, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1454, 0x40, 0x1, 0x15f, 0x0, r4}}], 0x4, 0x0, &(0x7f00000015c0)) r5 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x74bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1.154605261s ago: executing program 1 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860cfc"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) r5 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, 0xfffffffffffffffe) 1.13070567s ago: executing program 3 (id=661): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff940200002000000040"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x1ac, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe}, 0x0, 0x188, 0x1ac, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x7b}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'hsr0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3dc) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.111161102s ago: executing program 2 (id=662): syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x3, 0xf8}}}, 0xc) syz_clone(0x842a4011, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4, 0x0, 0x80, 0x2}, {0x6, 0x0, 0xff, 0x8000}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb241e5eb7080000000000007b8a8796a06e73d5ecb5f8ff00000000b7080000000000007b8af0ff00000400bf8100000000000007080000f8ffffffbf040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f00000004"], 0x58) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x101300) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000240)=""/158) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r5 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000200)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x2000000a}}, 0x10) close_range(r7, r7, 0x0) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 200.986479ms ago: executing program 2 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0xc83c2) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000280)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980912, 0x0, '\x00', @p_u8=0x0}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) openat$audio1(0xffffffffffffff9c, &(0x7f0000000540), 0x7a344, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) execveat(r1, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000440)={[&(0x7f00000003c0)='comedi_bond\x00', &(0x7f0000000400)=',0\x00']}, 0x400) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x500, 0x8000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x4, 0x0, 0x6, 0x8, 0x30, 0x5, 0x8, 0x4, 0x8, 0xd, 0x9, 0x1, 0x3e, 0x7}, 0xe) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101301, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x4, 0x0, 0x7fffffff, 0x5, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffb, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9ea, 0x3, 0xb, 0x9, 0x101, 0x1, 0x990e, 0x5, 0x18, 0xf, 0x2000006, 0x77fd]}) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCCONS(r8, 0x541d) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) getpgrp(0x0) mmap$xdp(&(0x7f00005db000/0x1000)=nil, 0x1000, 0x100000b, 0x11, r7, 0x180000000) 67.454634ms ago: executing program 0 (id=664): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000") ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r9, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r9, 0x400c0930, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff02000400") 66.765885ms ago: executing program 3 (id=665): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) r2 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) r3 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0xfff80000) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r10, 0x40046208, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 0s ago: executing program 1 (id=666): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="abcc0000121408002abd7000ffdbdf250800030002000000080001000000000008004f0000000000080001000100000008004f0003000000080001000000000008004b00130000000800010002000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000030400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001cfa11800100ffff66656e65766500000c0002800600050000ef0000d1b7759bcfcdc562f4ed92416463f6ce009cbf231e5fcdd794137329f98dbf7531fed4cde3c4fc0a28632e222c663674fac25a8b759afcafdc8b1b0a8d9b9355470a27e7ff50a2f7370aacf6a2cc0e22f4160d41647ac5146357d632974554f3d85ae5f22bb45f3e46d1f97ba43c7d965c26ba91d108d769fda449707d770128c32fc691bd3aaeec928fc000e5d4ebddc547d91e76b7ef7a4d8c7b3e46"], 0x3c}}, 0x404c840) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="15000000", @ANYRES32=r3, @ANYBLOB="e794010d5c2c0103420000000000"], 0x14}, 0x1, 0x0, 0x0, 0x448c5}, 0x2010) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x20008004) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) kernel console output (not intermixed with test programs): 7-1:1.0: device disconnected [ 57.770314][ T6087] syzkaller1: entered promiscuous mode [ 57.772045][ T6087] syzkaller1: entered allmulticast mode [ 58.755293][ T6111] tipc: Started in network mode [ 58.756810][ T6111] tipc: Node identity 1eed83ff792e, cluster identity 4711 [ 58.759164][ T6111] tipc: Enabled bearer , priority 0 [ 58.762373][ T6111] syzkaller0: entered promiscuous mode [ 58.764092][ T6111] syzkaller0: entered allmulticast mode [ 58.776541][ T6111] tipc: Resetting bearer [ 58.781281][ T6110] tipc: Resetting bearer [ 58.793403][ T6110] tipc: Disabling bearer [ 59.106553][ T6121] Zero length message leads to an empty skb [ 59.112509][ T42] audit: type=1804 audit(1785202929.521:2): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.64" name="bus" dev="ramfs" ino=9094 res=1 errno=0 [ 59.119813][ T42] audit: type=1804 audit(1785202929.531:3): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.64" name="bus" dev="ramfs" ino=9094 res=1 errno=0 [ 60.109237][ T42] audit: type=1326 audit(1785202930.471:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 60.160621][ T6139] trusted_key: syz.3.70 sent an empty control message without MSG_MORE. [ 60.167470][ T6141] process 'syz.1.69' launched './file0' with NULL argv: empty string added [ 60.187889][ T6134] process '/newroot/24/file0' started with executable stack [ 60.258635][ T6149] syzkaller0: entered promiscuous mode [ 60.260806][ T6149] syzkaller0: entered allmulticast mode [ 60.271872][ T6149] tipc: Enabled bearer , priority 0 [ 60.332012][ T6149] tipc: Resetting bearer [ 60.336943][ T6148] tipc: Resetting bearer [ 60.345849][ T6148] tipc: Disabling bearer [ 60.585424][ T6154] lo: Caught tx_queue_len zero misconfig [ 60.813748][ T1041] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.189006][ T5894] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 61.338944][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 61.342520][ T5894] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 61.346998][ T5894] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 61.352410][ T5894] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.356479][ T5894] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 61.363967][ T5894] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 61.367727][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.371266][ T5894] usb 7-1: Product: syz [ 61.372948][ T5894] usb 7-1: Manufacturer: syz [ 61.374870][ T5894] usb 7-1: SerialNumber: syz [ 61.387434][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 61.458936][ T42] audit: type=1804 audit(1785202931.811:5): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.76" name="bus" dev="ramfs" ino=9107 res=1 errno=0 [ 61.466871][ T42] audit: type=1804 audit(1785202931.811:6): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.76" name="bus" dev="ramfs" ino=9107 res=1 errno=0 [ 62.058913][ T1041] usb 6-1: Using ep0 maxpacket: 8 [ 62.063131][ T1041] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 62.065767][ T1041] usb 6-1: config 0 has no interface number 0 [ 62.067901][ T1041] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 62.071819][ T1041] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 62.075432][ T1041] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.079181][ T1041] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.085456][ T1041] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 62.089257][ T1041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.356623][ T5894] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input6 [ 62.361675][ T1041] usb 6-1: config 0 descriptor?? [ 62.389478][ T5894] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 62.391132][ T1041] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 62.402416][ T5894] (id 0x00) [ 62.439874][ T5750] Bluetooth: hci2: hardware error 0x07 [ 62.459428][ T5894] rc_core: IR keymap rc-imon-pad not found [ 62.464972][ T5894] Registered IR keymap rc-empty [ 62.467366][ T5894] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 62.478740][ T5894] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 62.500129][ T5894] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 62.505335][ T5894] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input7 [ 62.512348][ T5894] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:4> initialized [ 62.601367][ T5823] usb 6-1: USB disconnect, device number 2 [ 62.613439][ T5823] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 62.871988][ T6174] loop7: detected capacity change from 0 to 16384 [ 63.449393][ T6175] loop7: detected capacity change from 16384 to 0 [ 63.478549][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 63.497988][ T42] audit: type=1804 audit(1785202933.901:7): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.83" name="bus" dev="ramfs" ino=11008 res=1 errno=0 [ 63.504649][ T42] audit: type=1804 audit(1785202933.911:8): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.83" name="bus" dev="ramfs" ino=11008 res=1 errno=0 [ 64.038171][ T6190] syzkaller0: entered promiscuous mode [ 64.039957][ T6190] syzkaller0: entered allmulticast mode [ 64.219792][ T6194] usbip-vudc usbip-vudc.0: gadget not bound [ 64.491622][ T5750] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 64.788330][ T6207] fuse: Bad value for 'rootmode' [ 64.800331][ T6207] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 66.089047][ T42] audit: type=1804 audit(1785202935.911:9): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.92" name="bus" dev="ramfs" ino=11500 res=1 errno=0 [ 66.095888][ T42] audit: type=1804 audit(1785202935.911:10): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.92" name="bus" dev="ramfs" ino=11500 res=1 errno=0 [ 66.396358][ T29] usb 7-1: USB disconnect, device number 4 [ 67.613750][ T6222] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 67.696924][ T6222] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 67.705954][ T6222] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 67.711301][ T6222] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 67.715253][ T6222] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 67.750128][ T6222] pci 0000:00:01.0: Adding to iommu group 1 [ 67.782212][ T6222] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 67.785232][ T6222] pci 0000:00:01.0: vgaarb: bridge control possible [ 67.787873][ T6222] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 67.864860][ T6222] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 67.880436][ T6222] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 67.894400][ T6222] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 67.917192][ T6222] [drm] Found bochs VGA, ID 0xb0c5. [ 67.921208][ T6222] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 67.947371][ T6222] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 68.023735][ T6222] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 69.119093][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.245774][ T42] audit: type=1804 audit(1785202939.651:11): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.103" name="bus" dev="ramfs" ino=11067 res=1 errno=0 [ 69.253846][ T42] audit: type=1804 audit(1785202939.661:12): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.103" name="bus" dev="ramfs" ino=11067 res=1 errno=0 [ 69.277943][ T55] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.287004][ T55] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 69.292434][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 69.294937][ T55] usb 5-1: Product: syz [ 69.296224][ T55] usb 5-1: Manufacturer: syz [ 69.303074][ T55] usb_debug 5-1:1.0: debug converter detected [ 69.308043][ T55] usb 5-1: debug converter now attached to ttyUSB0 [ 70.165896][ T6264] netlink: 'syz.2.107': attribute type 13 has an invalid length. [ 70.243720][ T55] usb 5-1: USB disconnect, device number 2 [ 70.248557][ T55] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 70.256804][ T55] usb_debug 5-1:1.0: device disconnected [ 70.283022][ T6268] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 70.300522][ T6268] syzkaller0: entered promiscuous mode [ 70.302236][ T6268] syzkaller0: entered allmulticast mode [ 70.522922][ T42] audit: type=1326 audit(1785202940.931:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.1.109" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 70.899420][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.929001][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.032242][ T42] audit: type=1804 audit(1785202942.441:14): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.114" name="bus" dev="ramfs" ino=11573 res=1 errno=0 [ 72.597026][ T42] audit: type=1804 audit(1785202942.441:15): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.114" name="bus" dev="ramfs" ino=11573 res=1 errno=0 [ 72.658961][ T6296] fuse: Unknown parameter 'use00000000000000000000' [ 72.682281][ T6296] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 73.214809][ T6301] lo: Caught tx_queue_len zero misconfig [ 73.547170][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 73.571619][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.573952][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.588914][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.596254][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.172010][ T42] audit: type=1326 audit(1785202944.581:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.2.122" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 74.219088][ T1041] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.378098][ T42] audit: type=1326 audit(1785202944.781:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.123" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 74.380941][ T1041] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.389703][ T1041] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 74.395606][ T1041] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.399810][ T1041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.434919][ T1041] usb 5-1: config 0 descriptor?? [ 74.458105][ T1041] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 75.927457][ T5758] Bluetooth: hci3: hardware error 0x07 [ 75.971435][ T6340] syzkaller0: entered promiscuous mode [ 75.973279][ T6340] syzkaller0: entered allmulticast mode [ 75.990852][ T56] cfg80211: failed to load regulatory.db [ 76.078595][ T6340] tipc: Started in network mode [ 76.080860][ T6340] tipc: Node identity 92cc4623bdac, cluster identity 4711 [ 76.083044][ T6340] tipc: Enabled bearer , priority 0 [ 76.094000][ T6339] tipc: Resetting bearer [ 76.107439][ T6339] tipc: Disabling bearer [ 76.840268][ T56] usb 5-1: USB disconnect, device number 3 [ 76.873929][ T1041] IPVS: starting estimator thread 0... [ 76.879917][ T6344] IPVS: lc: FWM 3 0x00000003 - no destination available [ 76.886457][ T6346] syzkaller0: entered promiscuous mode [ 76.888701][ T6346] syzkaller0: entered allmulticast mode [ 76.895541][ T6346] tipc: Enabled bearer , priority 0 [ 76.903385][ T6346] tipc: Resetting bearer [ 76.911762][ T6345] tipc: Resetting bearer [ 76.968984][ T6347] IPVS: using max 44 ests per chain, 105600 per kthread [ 77.599126][ T6345] tipc: Disabling bearer [ 77.730730][ T42] audit: type=1326 audit(1785202948.141:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.134" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 77.870271][ T42] audit: type=1326 audit(1785202948.281:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.0.135" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 77.990302][ T5758] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 78.999100][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.179495][ T5912] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 79.182714][ T5912] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.186061][ T5912] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.212740][ T5912] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.216102][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.224658][ T5912] usb 5-1: Product: syz [ 79.226102][ T5912] usb 5-1: Manufacturer: syz [ 79.230723][ T5912] usb 5-1: SerialNumber: syz [ 79.337071][ T5912] usb 5-1: config 0 descriptor?? [ 79.372644][ T5912] hub 5-1:0.0: bad descriptor, ignoring hub [ 79.374882][ T5912] hub 5-1:0.0: probe with driver hub failed with error -5 [ 79.410617][ T5912] usb 5-1: selecting invalid altsetting 0 [ 79.863707][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 79.892163][ T6381] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 79.900619][ T6381] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 79.903097][ T6381] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 79.905343][ T6381] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 79.908314][ T6381] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 79.927614][ T6381] pci 0000:00:01.0: Adding to iommu group 1 [ 79.932829][ T6381] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 79.934940][ T6381] pci 0000:00:01.0: vgaarb: bridge control possible [ 79.936954][ T6381] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 79.950156][ T6381] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 79.952794][ T6381] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 79.956270][ T6381] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 79.961586][ T5912] usb 5-1: USB disconnect, device number 4 [ 79.965314][ T6381] [drm] Found bochs VGA, ID 0xb0c5. [ 79.967494][ T6381] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 79.971272][ T6381] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 80.027602][ T42] audit: type=1804 audit(1785202950.431:20): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.143" name="bus" dev="ramfs" ino=11234 res=1 errno=0 [ 80.038931][ T42] audit: type=1804 audit(1785202950.431:21): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.143" name="bus" dev="ramfs" ino=11234 res=1 errno=0 [ 81.538923][ T5912] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.568819][ T42] audit: type=1804 audit(1785202951.971:22): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.147" name="bus" dev="ramfs" ino=12641 res=1 errno=0 [ 81.577797][ T42] audit: type=1804 audit(1785202951.981:23): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.147" name="bus" dev="ramfs" ino=12641 res=1 errno=0 [ 82.438980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.486154][ T42] audit: type=1326 audit(1785202952.261:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.1.146" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 82.498927][ T42] audit: type=1326 audit(1785202952.341:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.3.148" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 83.033212][ T6418] netlink: 71 bytes leftover after parsing attributes in process `syz.3.152'. [ 83.316375][ T42] audit: type=1804 audit(1785202953.601:26): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.153" name="bus" dev="ramfs" ino=13396 res=1 errno=0 [ 83.364841][ T42] audit: type=1804 audit(1785202953.601:27): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.153" name="bus" dev="ramfs" ino=13396 res=1 errno=0 [ 84.568921][ T1041] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 84.629718][ T42] audit: type=1326 audit(1785202955.031:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.2.158" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 84.813666][ T1041] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.823985][ T1041] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 84.827548][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 84.830291][ T1041] usb 8-1: Product: syz [ 84.831719][ T1041] usb 8-1: Manufacturer: syz [ 84.932342][ T1041] usb_debug 8-1:1.0: debug converter detected [ 85.010427][ T1041] usb 8-1: debug converter now attached to ttyUSB0 [ 85.018651][ T6440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.227496][ T6440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.557843][ T6449] tipc: Enabling of bearer rejected, failed to enable media [ 85.629775][ T29] usb 8-1: USB disconnect, device number 2 [ 85.646000][ T29] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 85.648999][ T29] usb_debug 8-1:1.0: device disconnected [ 85.737140][ T6440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.817075][ T6440] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.132382][ T5825] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.157173][ T5825] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.180853][ T5825] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.197107][ T5825] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.596632][ T6474] lo speed is unknown, defaulting to 1000 [ 86.603486][ T6474] lo speed is unknown, defaulting to 1000 [ 86.618708][ T6474] lo speed is unknown, defaulting to 1000 [ 86.631880][ T6474] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 86.644568][ T6474] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 86.667204][ T6474] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 86.733104][ T6474] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.075429][ T6474] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.512386][ T6474] lo speed is unknown, defaulting to 1000 [ 87.530531][ T6474] lo speed is unknown, defaulting to 1000 [ 87.538058][ T6474] lo speed is unknown, defaulting to 1000 [ 87.557017][ T6474] lo speed is unknown, defaulting to 1000 [ 88.239000][ T6495] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 88.251407][ T6495] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 88.254554][ T6495] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 88.257089][ T6495] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 88.263088][ T6495] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 88.404815][ T6495] pci 0000:00:01.0: Adding to iommu group 1 [ 88.436775][ T6495] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 88.438898][ T6495] pci 0000:00:01.0: vgaarb: bridge control possible [ 88.440920][ T6495] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 88.455196][ T6495] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 88.458800][ T6495] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 88.473938][ T6495] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 88.532934][ T6495] [drm] Found bochs VGA, ID 0xb0c5. [ 88.535491][ T6495] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 88.625870][ T6495] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 89.089702][ T6495] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 89.398953][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 89.438988][ T5912] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.560659][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.565907][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 89.568786][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 89.571379][ T24] usb 6-1: Product: syz [ 89.573009][ T24] usb 6-1: Manufacturer: syz [ 89.580012][ T24] usb_debug 6-1:1.0: debug converter detected [ 89.583869][ T24] usb 6-1: debug converter now attached to ttyUSB0 [ 89.618955][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 89.623280][ T5912] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 89.625776][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.628816][ T5912] usb 5-1: config 0 has no interface number 0 [ 89.630753][ T5912] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.634106][ T5912] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 89.636907][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.640712][ T5912] usb 5-1: config 0 descriptor?? [ 89.645529][ T5912] ldusb 5-1:0.55: Interrupt in endpoint not found [ 89.754097][ T42] audit: type=1326 audit(1785202960.161:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.176" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 89.865284][ T6507] lo speed is unknown, defaulting to 1000 [ 89.873710][ T5912] usb 6-1: USB disconnect, device number 3 [ 89.883300][ T5912] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 89.886186][ T5912] usb_debug 6-1:1.0: device disconnected [ 89.937959][ T845] usb 5-1: USB disconnect, device number 6 [ 90.600776][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.679022][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.848911][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 90.851965][ T29] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 90.854608][ T29] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 90.857454][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.860732][ T29] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 90.863518][ T29] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 90.866233][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.081167][ T10] usb 7-1: USB disconnect, device number 5 [ 91.499317][ T6530] loop5: detected capacity change from 0 to 7 [ 91.504550][ T6530] Dev loop5: unable to read RDB block 7 [ 91.506312][ T6530] loop5: unable to read partition table [ 91.508407][ T6530] loop5: partition table beyond EOD, truncated [ 91.510623][ T6530] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.572881][ T6536] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 92.129390][ T6544] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 92.141213][ T6544] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 92.143988][ T6544] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 92.146716][ T6544] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 92.150141][ T6544] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 92.180865][ T6544] pci 0000:00:01.0: Adding to iommu group 1 [ 92.202658][ T6544] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 92.204856][ T6544] pci 0000:00:01.0: vgaarb: bridge control possible [ 92.207070][ T6544] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 92.219328][ T6544] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 92.222186][ T6544] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 92.227350][ T6544] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 92.263407][ T6544] [drm] Found bochs VGA, ID 0xb0c5. [ 92.265392][ T6544] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 92.346097][ T6544] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 92.541549][ T6554] program syz.0.184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.583142][ T6544] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 93.079468][ T6554] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 93.089888][ T6554] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 93.093090][ T6554] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 93.096319][ T6554] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 93.200492][ T6554] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 93.301518][ T6554] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 98779 usecs [ 93.577328][ T6554] pci 0000:00:01.0: Adding to iommu group 1 [ 93.658062][ T6554] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 93.660236][ T6554] pci 0000:00:01.0: vgaarb: bridge control possible [ 93.662270][ T6554] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 93.677548][ T6554] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 93.680669][ T6554] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 93.782471][ T6554] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 93.837472][ T6554] [drm] Found bochs VGA, ID 0xb0c5. [ 93.839302][ T6554] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 93.871005][ T42] audit: type=1326 audit(1785202964.281:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.3.187" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 94.022968][ T6566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 94.025129][ T6566] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.097482][ T6566] vhci_hcd vhci_hcd.0: Device attached [ 94.326494][ T6554] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 94.389058][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 94.391202][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 94.401421][ T6554] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 94.532287][ T6568] vhci_hcd: connection reset by peer [ 94.544226][ T42] audit: type=1804 audit(1785202964.951:31): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.191" name="bus" dev="ramfs" ino=14489 res=1 errno=0 [ 94.556604][ T42] audit: type=1804 audit(1785202964.961:32): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.191" name="bus" dev="ramfs" ino=14489 res=1 errno=0 [ 94.724813][ T5825] vhci_hcd vhci_hcd.1: stop threads [ 94.738166][ T5825] vhci_hcd vhci_hcd.1: release socket [ 94.741734][ T5825] vhci_hcd vhci_hcd.1: disconnect device [ 95.181020][ T6576] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 95.333519][ T6587] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.678942][ T5912] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 95.708937][ T845] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 95.863202][ T5912] usb 7-1: config index 0 descriptor too short (expected 60928, got 36) [ 95.866041][ T5912] usb 7-1: config 47 has too many interfaces: 109, using maximum allowed: 32 [ 95.868783][ T5912] usb 7-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 95.872417][ T5912] usb 7-1: config 47 has 0 interfaces, different from the descriptor's value: 109 [ 95.875262][ T5912] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 95.878027][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.884959][ T845] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 95.888889][ T845] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.892117][ T845] usb 6-1: config 1 has no interface number 0 [ 95.894038][ T845] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 95.896798][ T845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.138465][ T5912] usb 7-1: string descriptor 0 read error: -71 [ 96.147763][ T5912] usb 7-1: USB disconnect, device number 6 [ 97.074376][ T42] audit: type=1804 audit(1785202967.481:33): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.200" name="bus" dev="ramfs" ino=13972 res=1 errno=0 [ 97.529909][ T42] audit: type=1804 audit(1785202967.491:34): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.200" name="bus" dev="ramfs" ino=13972 res=1 errno=0 [ 97.798919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.820787][ T42] audit: type=1804 audit(1785202968.231:35): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.203" name="bus" dev="ramfs" ino=12904 res=1 errno=0 [ 98.037895][ T42] audit: type=1804 audit(1785202968.231:36): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.203" name="bus" dev="ramfs" ino=12904 res=1 errno=0 [ 98.311077][ T6626] loop6: detected capacity change from 0 to 2640 [ 98.321499][ T5762] buffer_io_error: 14 callbacks suppressed [ 98.321510][ T5762] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.341421][ T5762] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.348724][ T5762] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.359173][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 98.374350][ T5762] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.390725][ T5762] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.523832][ T42] audit: type=1804 audit(1785202968.861:37): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.204" name="bus" dev="ramfs" ino=14592 res=1 errno=0 [ 98.550679][ T42] audit: type=1804 audit(1785202968.861:38): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.204" name="bus" dev="ramfs" ino=14592 res=1 errno=0 [ 98.851844][ T5912] usb 6-1: USB disconnect, device number 4 [ 99.173386][ T6626] netlink: 'syz.3.205': attribute type 11 has an invalid length. [ 99.429266][ T29] usb 40-1: device descriptor read/8, error -110 [ 100.313098][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'. [ 100.353002][ T29] usb usb40-port1: attempt power cycle [ 100.376305][ T42] audit: type=1326 audit(1785202970.781:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.1.212" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 100.388998][ T5750] Bluetooth: hci4: command 0x1003 tx timeout [ 100.389987][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 100.592478][ T42] audit: type=1326 audit(1785202971.001:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.3.213" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 100.670935][ T42] audit: type=1804 audit(1785202971.081:41): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.214" name="bus" dev="ramfs" ino=14010 res=1 errno=0 [ 100.678555][ T42] audit: type=1804 audit(1785202971.081:42): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.214" name="bus" dev="ramfs" ino=14010 res=1 errno=0 [ 100.922727][ T29] usb usb40-port1: unable to enumerate USB device [ 102.554026][ T6680] binder: 6679:6680 ioctl c0186405 800028c0 returned -22 [ 102.568986][ T5534] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 103.067315][ T6684] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 103.082234][ T6684] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 103.085074][ T6684] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 103.087650][ T6684] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 103.094903][ T6684] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 103.317551][ T5534] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 103.445746][ T6684] pci 0000:00:01.0: Adding to iommu group 1 [ 103.465210][ T6684] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 103.467491][ T6684] pci 0000:00:01.0: vgaarb: bridge control possible [ 103.469625][ T6684] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 103.496159][ T6684] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 103.501969][ T6684] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 103.514035][ T6684] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 103.552461][ T6684] [drm] Found bochs VGA, ID 0xb0c5. [ 103.552478][ T6687] capability: warning: `syz.3.223' uses 32-bit capabilities (legacy support in use) [ 103.562726][ T6684] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 103.596317][ T6684] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 103.609927][ T5534] usb 7-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.613694][ T5534] usb 7-1: config 0 interface 0 has no altsetting 0 [ 103.615658][ T5534] usb 7-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 103.618451][ T5534] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.623097][ T5534] usb 7-1: config 0 descriptor?? [ 103.645146][ T6669] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.769562][ T6684] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 103.902920][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 103.902965][ T42] audit: type=1326 audit(1785202974.311:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.1.222" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 104.168977][ T5117] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 104.592531][ T5117] usb 8-1: Using ep0 maxpacket: 32 [ 104.993386][ T5117] usb 8-1: config index 0 descriptor too short (expected 13339, got 27) [ 105.059588][ T5117] usb 8-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 105.065192][ T5117] usb 8-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 105.073737][ T5117] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.076565][ T5117] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.079121][ T5117] usb 8-1: Product: syz [ 105.080473][ T5117] usb 8-1: Manufacturer: syz [ 105.082052][ T5117] usb 8-1: SerialNumber: syz [ 105.251825][ T5534] usbhid 7-1:0.0: can't add hid device: -71 [ 105.253715][ T5534] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 105.268278][ T5534] usb 7-1: USB disconnect, device number 7 [ 105.383251][ T6687] syz.3.223 uses obsolete (PF_INET,SOCK_PACKET) [ 105.427554][ T42] audit: type=1804 audit(1785202975.831:46): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.226" name="bus" dev="ramfs" ino=14641 res=1 errno=0 [ 105.450776][ T42] audit: type=1804 audit(1785202975.841:47): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.226" name="bus" dev="ramfs" ino=14641 res=1 errno=0 [ 105.455809][ T5117] usb 8-1: USB disconnect, device number 3 [ 105.496963][ T6711] fuse: Unknown parameter '0x0000000000000008' [ 105.532072][ T6711] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 106.263354][ T6713] loop6: detected capacity change from 0 to 2640 [ 106.267441][ T6224] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.275332][ T6224] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.277996][ T6224] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.281924][ T6224] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.287177][ T6224] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.303060][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 106.359032][ T6713] netlink: 'syz.2.229': attribute type 11 has an invalid length. [ 106.361863][ T6715] bond1: Removing last arp target with arp_interval on [ 106.365446][ T6715] bond1: entered promiscuous mode [ 106.367068][ T6715] bond1: entered allmulticast mode [ 106.369058][ T6715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.502310][ T6725] fuse: Unknown parameter 'fd0x0000000000000008' [ 106.580891][ T6725] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 106.587653][ T6726] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.593647][ T6726] block device autoloading is deprecated and will be removed. [ 106.714089][ T6713] md: could not open device unknown-block(0,0). [ 106.717882][ T6713] md: md_import_device returned -6 [ 107.373605][ T5750] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 107.377100][ T5750] CPU: 0 UID: 0 PID: 5750 Comm: kworker/u34:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.377118][ T5750] Tainted: [L]=SOFTLOCKUP [ 107.377122][ T5750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.377142][ T5750] Workqueue: hci0 hci_rx_work [ 107.377231][ T5750] Call Trace: [ 107.377235][ T5750] [ 107.377240][ T5750] dump_stack_lvl+0x100/0x190 [ 107.377255][ T5750] sysfs_warn_dup.cold+0x1c/0x28 [ 107.377272][ T5750] sysfs_create_dir_ns+0x24b/0x2b0 [ 107.377329][ T5750] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.377345][ T5750] ? find_held_lock+0x2b/0x80 [ 107.377359][ T5750] ? kobject_add_internal+0x25f/0x930 [ 107.377377][ T5750] ? kobject_add_internal+0x25f/0x930 [ 107.377395][ T5750] ? do_raw_spin_unlock+0x145/0x1e0 [ 107.377408][ T5750] kobject_add_internal+0x2c8/0x930 [ 107.377427][ T5750] kobject_add+0x16a/0x1e0 [ 107.377443][ T5750] ? __pfx_kobject_add+0x10/0x10 [ 107.377458][ T5750] ? class_to_subsys+0x10f/0x150 [ 107.377471][ T5750] ? kobject_put+0xb9/0x640 [ 107.377485][ T5750] ? _raw_spin_unlock+0x28/0x50 [ 107.377500][ T5750] device_add+0x294/0x1970 [ 107.377517][ T5750] ? __pfx_dev_set_name+0x10/0x10 [ 107.377528][ T5750] ? __pfx_device_add+0x10/0x10 [ 107.377545][ T5750] ? mgmt_send_event_skb+0x2fb/0x460 [ 107.377561][ T5750] hci_conn_add_sysfs+0x1a3/0x260 [ 107.377576][ T5750] le_conn_complete_evt+0x11eb/0x1f60 [ 107.377593][ T5750] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 107.377605][ T5750] ? hci_event_packet+0x186/0xcd0 [ 107.377620][ T5750] hci_le_conn_complete_evt+0x23c/0x3a0 [ 107.377633][ T5750] ? skb_pull_data+0x15f/0x1e0 [ 107.377646][ T5750] hci_le_meta_evt+0x34a/0x5f0 [ 107.377660][ T5750] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 107.377675][ T5750] hci_event_packet+0x51c/0xcd0 [ 107.377687][ T5750] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 107.377701][ T5750] ? __pfx_hci_event_packet+0x10/0x10 [ 107.377716][ T5750] ? kcov_remote_start+0x394/0x670 [ 107.377735][ T5750] hci_rx_work+0x451/0xfc0 [ 107.377749][ T5750] process_one_work+0xa23/0x1940 [ 107.377772][ T5750] ? __pfx_process_one_work+0x10/0x10 [ 107.377792][ T5750] ? __pfx_hci_rx_work+0x10/0x10 [ 107.377806][ T5750] worker_thread+0x5ef/0xe50 [ 107.377830][ T5750] ? kthread+0x13a/0x450 [ 107.377843][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 107.377857][ T5750] kthread+0x370/0x450 [ 107.377871][ T5750] ? __pfx_kthread+0x10/0x10 [ 107.377886][ T5750] ret_from_fork+0x72b/0xd50 [ 107.377900][ T5750] ? __pfx_ret_from_fork+0x10/0x10 [ 107.377914][ T5750] ? native_load_gs_index+0x1e/0xc0 [ 107.377930][ T5750] ? __switch_to+0x800/0x10f0 [ 107.377947][ T5750] ? __pfx_kthread+0x10/0x10 [ 107.377962][ T5750] ret_from_fork_asm+0x1a/0x30 [ 107.377983][ T5750] [ 107.378058][ T5750] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.479792][ T5750] Bluetooth: hci0: failed to register connection device [ 107.671694][ T5912] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 107.826360][ T6752] input: syz0 as /devices/virtual/input/input8 [ 107.838964][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 107.842303][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.845658][ T5912] usb 6-1: config 0 has no interfaces? [ 107.849882][ T5912] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 107.852944][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.855440][ T5912] usb 6-1: Product: syz [ 107.856726][ T5912] usb 6-1: Manufacturer: syz [ 107.858411][ T5912] usb 6-1: SerialNumber: syz [ 107.865129][ T5912] usb 6-1: config 0 descriptor?? [ 108.310422][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 108.311517][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.821819][ T42] audit: type=1804 audit(1785202979.231:48): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.237" name="bus" dev="ramfs" ino=14674 res=1 errno=0 [ 108.834736][ T42] audit: type=1804 audit(1785202979.231:49): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.237" name="bus" dev="ramfs" ino=14674 res=1 errno=0 [ 109.109516][ T6742] Set syz1 is full, maxelem 65536 reached [ 109.299689][ T42] audit: type=1804 audit(1785202979.711:50): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.242" name="bus" dev="ramfs" ino=13104 res=1 errno=0 [ 110.269179][ T42] audit: type=1804 audit(1785202979.711:51): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.242" name="bus" dev="ramfs" ino=13104 res=1 errno=0 [ 110.414162][ T6776] fuse: Bad value for 'fd' [ 110.418173][ T6777] fuse: Unknown parameter '0x0000000000000008' [ 110.421756][ T6777] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 110.423313][ T9] usb 6-1: USB disconnect, device number 5 [ 110.660741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.667815][ T6785] ======================================================= [ 110.667815][ T6785] WARNING: The mand mount option has been deprecated and [ 110.667815][ T6785] and is ignored by this kernel. Remove the mand [ 110.667815][ T6785] option from the mount to silence this warning. [ 110.667815][ T6785] ======================================================= [ 111.098931][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 111.248935][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 111.252698][ T34] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 111.256000][ T34] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 111.260768][ T34] usb 8-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 111.263432][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.265687][ T34] usb 8-1: Product: syz [ 111.266899][ T34] usb 8-1: Manufacturer: syz [ 111.268244][ T34] usb 8-1: SerialNumber: syz [ 111.509104][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.533542][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.549581][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.640611][ T34] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 111.688999][ T34] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.695555][ T34] snd-usb-us122l 8-1:1.1: usb_set_interface error [ 111.698183][ T34] snd-usb-us122l 8-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 111.703552][ T34] usb 8-1: USB disconnect, device number 4 [ 111.704699][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 112.269654][ T42] audit: type=1326 audit(1785202982.681:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.3.251" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 112.507184][ T42] audit: type=1804 audit(1785202982.911:53): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.252" name="bus" dev="ramfs" ino=12246 res=1 errno=0 [ 112.536699][ T42] audit: type=1804 audit(1785202982.911:54): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.252" name="bus" dev="ramfs" ino=12246 res=1 errno=0 [ 112.847562][ T5117] IPVS: starting estimator thread 0... [ 112.954296][ T6807] IPVS: using max 44 ests per chain, 105600 per kthread [ 113.732208][ T6818] misc userio: Invalid payload size [ 113.751870][ T42] audit: type=1804 audit(1785202984.141:55): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.256" name="bus" dev="ramfs" ino=14723 res=1 errno=0 [ 113.766423][ T42] audit: type=1804 audit(1785202984.141:56): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.256" name="bus" dev="ramfs" ino=14723 res=1 errno=0 [ 113.999787][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 114.546160][ T42] audit: type=1326 audit(1785202984.951:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.2.259" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 115.823057][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 115.904846][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 116.172045][ T6866] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 116.172085][ T6866] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 116.172999][ T6866] vhci_hcd vhci_hcd.0: Device attached [ 116.362967][ T6855] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 116.493515][ T42] audit: type=1804 audit(1785202986.891:58): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.267" name="bus" dev="ramfs" ino=13190 res=1 errno=0 [ 116.552707][ T29] usb 38-1: SetAddress Request (2) to port 0 [ 116.614653][ T29] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 116.639183][ T5758] Bluetooth: hci0: command 0x0406 tx timeout [ 116.644176][ T42] audit: type=1804 audit(1785202986.891:59): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.267" name="bus" dev="ramfs" ino=13190 res=1 errno=0 [ 116.870191][ T42] audit: type=1326 audit(1785202987.281:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.2.268" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 117.022125][ T6867] vhci_hcd: connection reset by peer [ 117.027275][ T5825] vhci_hcd vhci_hcd.0: stop threads [ 117.029974][ T5825] vhci_hcd vhci_hcd.0: release socket [ 117.032935][ T5825] vhci_hcd vhci_hcd.0: disconnect device [ 117.380237][ T6880] ehci-pci 0000:00:1d.7: remove, state 1 [ 117.384997][ T6880] usb usb1: USB disconnect, device number 1 [ 117.388078][ T6880] usb 1-1: USB disconnect, device number 2 [ 117.432223][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'. [ 117.622438][ T42] audit: type=1804 audit(1785202988.031:61): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.271" name="bus" dev="ramfs" ino=13198 res=1 errno=0 [ 117.636552][ T42] audit: type=1804 audit(1785202988.031:62): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.271" name="bus" dev="ramfs" ino=13198 res=1 errno=0 [ 118.181521][ T42] audit: type=1326 audit(1785202988.591:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.272" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 118.232780][ T6880] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 118.518928][ T5117] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 119.073665][ T42] audit: type=1326 audit(1785202989.481:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.1.273" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 119.118762][ T5117] usb 2-1: not running at top speed; connect to a high speed hub [ 119.183476][ T5117] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 119.187649][ T5117] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 119.193180][ T5117] usb 2-1: Product: QEMU USB Tablet [ 119.196252][ T5117] usb 2-1: Manufacturer: QEMU [ 119.198119][ T5117] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 119.455974][ T5117] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input10 [ 119.683502][ T5117] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 120.281325][ T42] audit: type=1326 audit(1785202989.881:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.277" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 120.587509][ T42] audit: type=1804 audit(1785202990.451:66): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.278" name="bus" dev="ramfs" ino=13218 res=1 errno=0 [ 120.601428][ T42] audit: type=1804 audit(1785202990.451:67): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.278" name="bus" dev="ramfs" ino=13218 res=1 errno=0 [ 121.330804][ T42] audit: type=1804 audit(1785202991.741:68): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.283" name="bus" dev="ramfs" ino=13232 res=1 errno=0 [ 121.375869][ T42] audit: type=1804 audit(1785202991.741:69): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.283" name="bus" dev="ramfs" ino=13232 res=1 errno=0 [ 121.668950][ T29] usb 38-1: device descriptor read/8, error -110 [ 122.879476][ T29] usb usb38-port1: attempt power cycle [ 122.903134][ T42] audit: type=1326 audit(1785202993.311:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.284" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 123.233811][ T6941] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 123.236176][ T6941] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.243574][ T6941] vhci_hcd vhci_hcd.0: Device attached [ 123.466060][ T29] usb usb38-port1: unable to enumerate USB device [ 123.528997][ T56] usb 44-1: SetAddress Request (2) to port 0 [ 123.531032][ T56] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 123.697887][ T42] audit: type=1326 audit(1785202994.101:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.287" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 123.836031][ T6942] vhci_hcd: connection reset by peer [ 123.840809][ T5825] vhci_hcd vhci_hcd.3: stop threads [ 123.843081][ T5825] vhci_hcd vhci_hcd.3: release socket [ 123.845527][ T5825] vhci_hcd vhci_hcd.3: disconnect device [ 123.905546][ T6948] lo speed is unknown, defaulting to 1000 [ 124.791325][ T5823] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 124.849003][ T5117] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 124.857102][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 124.860996][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 124.880642][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.884042][ T6963] bond1: (slave bond0): making interface the new active one [ 124.887857][ T6963] bond1: (slave bond0): Enslaving as an active interface with an up link [ 124.892564][ T6963] netlink: 'syz.0.293': attribute type 4 has an invalid length. [ 124.895060][ T6963] netlink: 152 bytes leftover after parsing attributes in process `syz.0.293'. [ 124.901346][ T6963] .`: renamed from bond0 (while UP) [ 124.909886][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 124.940543][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 124.951567][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.958714][ T5823] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.965446][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.971222][ T5823] usb 6-1: Product: syz [ 124.973071][ T5823] usb 6-1: Manufacturer: syz [ 124.975065][ T5823] usb 6-1: SerialNumber: syz [ 124.980309][ T5823] usb 6-1: config 0 descriptor?? [ 124.985910][ T5823] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 124.990566][ T5823] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 125.019106][ T5117] usb 8-1: Using ep0 maxpacket: 16 [ 125.027032][ T5117] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 125.036025][ T5117] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 125.040844][ T5117] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.044588][ T5117] usb 8-1: Product: syz [ 125.046463][ T5117] usb 8-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞äŠážŠÞ…벒栲껎ﻒé¾ë™¡ã¦€ë¥è¡šã»£å¼ æ›ä¼¸é¿ŽÆ†å­›â“œä„ªï¹žã–·ëˆŸäŠˆç§¾ï¢´é¹‘㙘溽ê¡åŸ´ä”‡íŠ‚⿕绚안鋕éµí—‹ç„雲緻✠빋耭㴟屹䖢ä¼æŒê«¦ã¢ã‹¤Þ‘ê®ã³¶ï‚°ê›ªå±ì®ê‚½ë•«ì–耉킘殼ⶢãŒà¨…촒핚쑆ꪬ✸ﲶè«î¯¹é½˜ë°ƒë¤±á­¶å¢â¯ŠÇ¸ï£‡ä®™á®­è³¸îƒ«ì”팫货ꇬ [ 125.061038][ T5117] usb 8-1: SerialNumber: syz [ 125.380727][ T6961] netlink: 'syz.3.292': attribute type 21 has an invalid length. [ 125.383401][ T6961] netlink: 128 bytes leftover after parsing attributes in process `syz.3.292'. [ 125.388526][ T6961] netlink: 3 bytes leftover after parsing attributes in process `syz.3.292'. [ 125.435727][ T5117] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 125.627692][ T5823] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 125.683494][ T5117] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.705525][ T5117] usb 8-1: USB disconnect, device number 5 [ 125.725191][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 125.850426][ T6976] overlayfs: failed to resolve './cgroup': -2 [ 125.946554][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 126.076024][ T6959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.088767][ T6959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.151844][ T42] audit: type=1326 audit(1785202996.561:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.2.298" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 126.189823][ T42] audit: type=1326 audit(1785202996.601:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.3.299" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 126.299416][ T6984] bond0: (slave ip6tnl0): refused to change device type [ 126.812560][ T42] audit: type=1326 audit(1785202997.221:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.300" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 127.123539][ T5823] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 127.128004][ T5823] em28xx 6-1:0.0: board has no eeprom [ 127.134379][ T6959] em28xx 6-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 127.189196][ T5823] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 127.192191][ T5823] em28xx 6-1:0.0: dvb set to bulk mode. [ 127.194655][ T5117] em28xx 6-1:0.0: Binding DVB extension [ 127.201495][ T5823] usb 6-1: USB disconnect, device number 6 [ 127.204074][ T5823] em28xx 6-1:0.0: Disconnecting em28xx [ 127.236459][ T5117] em28xx 6-1:0.0: Registering input extension [ 127.237775][ T7008] ipt_rpfilter: unknown options [ 127.240968][ T5823] em28xx 6-1:0.0: Closing input extension [ 127.272305][ T5823] em28xx 6-1:0.0: Freeing device [ 127.694719][ T42] audit: type=1326 audit(1785202998.101:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.305" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 127.801484][ T42] audit: type=1804 audit(1785202998.211:76): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.306" name="bus" dev="ramfs" ino=13263 res=1 errno=0 [ 127.951984][ T42] audit: type=1804 audit(1785202998.211:77): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.306" name="bus" dev="ramfs" ino=13263 res=1 errno=0 [ 128.242418][ T42] audit: type=1326 audit(1785202998.651:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.309" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 128.555850][ T42] audit: type=1326 audit(1785202998.961:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.310" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 128.629062][ T56] usb 44-1: device descriptor read/8, error -110 [ 128.731980][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 129.029884][ T56] usb usb44-port1: attempt power cycle [ 129.115149][ T42] audit: type=1326 audit(1785202999.521:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.313" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 129.599454][ T56] usb usb44-port1: unable to enumerate USB device [ 129.715183][ T42] audit: type=1804 audit(1785203000.121:81): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.315" name="bus" dev="ramfs" ino=13283 res=1 errno=0 [ 130.178682][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 130.226700][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 130.466943][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 132.059051][ T7070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.320'. [ 132.078678][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.320'. [ 132.228959][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 132.228980][ T42] audit: type=1326 audit(1785203002.621:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.322" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 132.301330][ T42] audit: type=1326 audit(1785203002.711:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.321" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 132.339720][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.389412][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.805756][ T7082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.101226][ T7105] binder: 7104:7105 ioctl c00c6211 0 returned -14 [ 134.431288][ T42] audit: type=1804 audit(1785203004.681:87): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.330" name="bus" dev="ramfs" ino=15574 res=1 errno=0 [ 134.447217][ T42] audit: type=1804 audit(1785203004.681:88): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.330" name="bus" dev="ramfs" ino=15574 res=1 errno=0 [ 134.930787][ T42] audit: type=1804 audit(1785203005.341:89): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.331" name="bus" dev="ramfs" ino=14940 res=1 errno=0 [ 134.943156][ T42] audit: type=1804 audit(1785203005.341:90): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.331" name="bus" dev="ramfs" ino=14940 res=1 errno=0 [ 135.747066][ T42] audit: type=1804 audit(1785203006.151:91): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.333" name="bus" dev="ramfs" ino=15579 res=1 errno=0 [ 135.762365][ T42] audit: type=1804 audit(1785203006.161:92): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.333" name="bus" dev="ramfs" ino=15579 res=1 errno=0 [ 136.580683][ T42] audit: type=1326 audit(1785203006.991:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.3.335" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 136.634963][ T5753] Bluetooth: hci0: unexpected event for opcode 0x202d [ 137.428792][ T5753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 137.509300][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: kworker/u34:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.509361][ T5753] Tainted: [L]=SOFTLOCKUP [ 137.509368][ T5753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.509380][ T5753] Workqueue: hci1 hci_rx_work [ 137.509406][ T5753] Call Trace: [ 137.509412][ T5753] [ 137.509420][ T5753] dump_stack_lvl+0x100/0x190 [ 137.509450][ T5753] sysfs_warn_dup.cold+0x1c/0x28 [ 137.509478][ T5753] sysfs_create_dir_ns+0x24b/0x2b0 [ 137.509507][ T5753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 137.509532][ T5753] ? find_held_lock+0x2b/0x80 [ 137.509554][ T5753] ? kobject_add_internal+0x25f/0x930 [ 137.509583][ T5753] ? kobject_add_internal+0x25f/0x930 [ 137.509613][ T5753] ? do_raw_spin_unlock+0x145/0x1e0 [ 137.509635][ T5753] kobject_add_internal+0x2c8/0x930 [ 137.509666][ T5753] kobject_add+0x16a/0x1e0 [ 137.509693][ T5753] ? __pfx_kobject_add+0x10/0x10 [ 137.509717][ T5753] ? class_to_subsys+0x10f/0x150 [ 137.509737][ T5753] ? kobject_put+0xb9/0x640 [ 137.509759][ T5753] ? _raw_spin_unlock+0x28/0x50 [ 137.509782][ T5753] device_add+0x294/0x1970 [ 137.509807][ T5753] ? __pfx_dev_set_name+0x10/0x10 [ 137.509826][ T5753] ? __pfx_device_add+0x10/0x10 [ 137.509855][ T5753] ? mgmt_send_event_skb+0x2fb/0x460 [ 137.509885][ T5753] hci_conn_add_sysfs+0x1a3/0x260 [ 137.509912][ T5753] le_conn_complete_evt+0x11eb/0x1f60 [ 137.509940][ T5753] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 137.509960][ T5753] ? hci_event_packet+0x186/0xcd0 [ 137.509986][ T5753] hci_le_conn_complete_evt+0x23c/0x3a0 [ 137.510009][ T5753] ? skb_pull_data+0x15f/0x1e0 [ 137.510030][ T5753] hci_le_meta_evt+0x34a/0x5f0 [ 137.510054][ T5753] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 137.510079][ T5753] hci_event_packet+0x51c/0xcd0 [ 137.510101][ T5753] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 137.510124][ T5753] ? __pfx_hci_event_packet+0x10/0x10 [ 137.510151][ T5753] ? kcov_remote_start+0x394/0x670 [ 137.510183][ T5753] hci_rx_work+0x451/0xfc0 [ 137.510209][ T5753] process_one_work+0xa23/0x1940 [ 137.510245][ T5753] ? __pfx_process_one_work+0x10/0x10 [ 137.510280][ T5753] ? __pfx_hci_rx_work+0x10/0x10 [ 137.510304][ T5753] worker_thread+0x5ef/0xe50 [ 137.510338][ T5753] ? kthread+0x13a/0x450 [ 137.510360][ T5753] ? __pfx_worker_thread+0x10/0x10 [ 137.510385][ T5753] kthread+0x370/0x450 [ 137.510409][ T5753] ? __pfx_kthread+0x10/0x10 [ 137.510440][ T5753] ret_from_fork+0x72b/0xd50 [ 137.510466][ T5753] ? __pfx_ret_from_fork+0x10/0x10 [ 137.510492][ T5753] ? __switch_to+0x800/0x10f0 [ 137.510524][ T5753] ? __pfx_kthread+0x10/0x10 [ 137.510550][ T5753] ret_from_fork_asm+0x1a/0x30 [ 137.510590][ T5753] [ 137.516701][ T5753] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 137.639151][ T5753] Bluetooth: hci1: failed to register connection device [ 137.666740][ T42] audit: type=1804 audit(1785203008.071:94): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.339" name="bus" dev="ramfs" ino=15593 res=1 errno=0 [ 137.859076][ T42] audit: type=1804 audit(1785203008.071:95): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.339" name="bus" dev="ramfs" ino=15593 res=1 errno=0 [ 138.081783][ T7173] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 138.627283][ T845] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 139.311183][ T845] usb 8-1: Using ep0 maxpacket: 8 [ 139.317542][ T845] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.326959][ T845] usb 8-1: config 0 has no interfaces? [ 139.364690][ T7183] random: crng reseeded on system resumption [ 139.561070][ T845] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 139.571210][ T845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.578266][ T845] usb 8-1: Product: syz [ 139.580100][ T845] usb 8-1: Manufacturer: syz [ 139.583989][ T845] usb 8-1: SerialNumber: syz [ 139.589951][ T845] usb 8-1: config 0 descriptor?? [ 141.108562][ T42] audit: type=1326 audit(1785203011.511:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.2.347" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 141.129079][ T42] audit: type=1326 audit(1785203011.531:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7195 comm="syz.0.346" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 141.286069][ T845] usb 8-1: USB disconnect, device number 6 [ 141.927383][ T7208] fuse: fd is not a fuse device [ 141.933684][ T7208] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 142.085740][ T42] audit: type=1804 audit(1785203012.491:98): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.351" name="bus" dev="ramfs" ino=16555 res=1 errno=0 [ 142.099032][ T42] audit: type=1804 audit(1785203012.501:99): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.351" name="bus" dev="ramfs" ino=16555 res=1 errno=0 [ 143.532415][ T7234] syz.0.359 (7234): drop_caches: 0 [ 143.540715][ T7234] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.543337][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 143.632538][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 143.643700][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.358'. [ 144.172883][ T42] audit: type=1326 audit(1785203014.581:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.360" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 144.330258][ T7243] fuse: fd is not a fuse device [ 144.333751][ T7243] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 144.373041][ T7245] fuse: fd is not a fuse device [ 144.475591][ T42] audit: type=1326 audit(1785203014.881:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.3.363" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 144.853539][ T42] audit: type=1804 audit(1785203015.261:102): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.365" name="bus" dev="ramfs" ino=15651 res=1 errno=0 [ 144.865427][ T42] audit: type=1804 audit(1785203015.271:103): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.365" name="bus" dev="ramfs" ino=15651 res=1 errno=0 [ 145.447912][ T7263] bond0: Removing last arp target with arp_interval on [ 145.453868][ T7263] bond0: entered promiscuous mode [ 145.455816][ T7263] bond0: entered allmulticast mode [ 145.458510][ T7263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.814217][ T7274] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 146.055931][ T42] audit: type=1326 audit(1785203016.461:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.2.368" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 146.347568][ T7283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 146.350500][ T7283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 146.364507][ T7283] vhci_hcd vhci_hcd.0: Device attached [ 146.629383][ T5823] usb 44-1: SetAddress Request (6) to port 0 [ 146.637481][ T5823] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 146.749886][ T42] audit: type=1804 audit(1785203017.161:105): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.372" name="bus" dev="ramfs" ino=15668 res=1 errno=0 [ 146.762409][ T42] audit: type=1804 audit(1785203017.161:106): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.372" name="bus" dev="ramfs" ino=15668 res=1 errno=0 [ 146.794829][ T42] audit: type=1326 audit(1785203017.201:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.2.373" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 146.844172][ T7285] vhci_hcd: connection reset by peer [ 146.847862][ T5825] vhci_hcd vhci_hcd.3: stop threads [ 146.850142][ T5825] vhci_hcd vhci_hcd.3: release socket [ 146.851892][ T5825] vhci_hcd vhci_hcd.3: disconnect device [ 147.098783][ T42] audit: type=1326 audit(1785203017.501:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.0.374" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 147.440347][ T5758] Bluetooth: hci1: command 0x0406 tx timeout [ 147.650642][ T42] audit: type=1326 audit(1785203018.051:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.2.377" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 147.698476][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 147.707843][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 147.711665][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 147.716963][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 147.818938][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 147.988930][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 147.993690][ T10] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 147.996671][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.999648][ T10] usb 6-1: Product: syz [ 148.001130][ T10] usb 6-1: Manufacturer: syz [ 148.002684][ T10] usb 6-1: SerialNumber: syz [ 148.209068][ T1489] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.222143][ T10] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 148.227230][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.231776][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 148.236999][ T10] usb 6-1: media controller created [ 148.245288][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.368958][ T1489] usb 5-1: Using ep0 maxpacket: 16 [ 148.374112][ T1489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 148.379207][ T1489] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.382153][ T1489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.384853][ T1489] usb 5-1: Product: syz [ 148.386288][ T1489] usb 5-1: Manufacturer: syz [ 148.387873][ T1489] usb 5-1: SerialNumber: syz [ 148.391968][ T1489] usb 5-1: config 0 descriptor?? [ 148.397637][ T1489] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 148.400898][ T1489] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 148.486389][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 148.512741][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'. [ 148.579020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 148.588977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.628868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 149.440374][ T1489] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 149.536540][ T7322] pim6reg: entered allmulticast mode [ 149.545174][ T7322] pim6reg: left allmulticast mode [ 149.609539][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 149.609550][ T42] audit: type=1326 audit(1785203020.021:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.3.381" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 149.628686][ T10] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 149.640089][ T10] usb 6-1: USB disconnect, device number 7 [ 149.854116][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.861969][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.889621][ T42] audit: type=1804 audit(1785203020.301:113): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.384" name="bus" dev="ramfs" ino=17533 res=1 errno=0 [ 149.895948][ T42] audit: type=1804 audit(1785203020.301:114): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.384" name="bus" dev="ramfs" ino=17533 res=1 errno=0 [ 150.170882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 150.183707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 150.247475][ T42] audit: type=1326 audit(1785203020.651:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.1.385" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 150.268322][ T7318] bond0: (slave ip6tnl0): refused to change device type [ 150.694172][ T7341] Invalid source name [ 150.695840][ T7341] UBIFS error (pid: 7341): cannot open "/dev/sequencer", error -22 [ 150.718901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 150.973931][ T1489] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 151.120707][ T42] audit: type=1326 audit(1785203021.531:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.1.388" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 151.807674][ T5823] usb 44-1: device descriptor read/8, error -110 [ 152.068244][ T1489] em28xx 5-1:0.0: board has no eeprom [ 152.085147][ T7310] em28xx 5-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 152.094467][ T7356] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 152.141301][ T1489] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 152.148731][ T1489] em28xx 5-1:0.0: dvb set to bulk mode. [ 152.159861][ T1489] em28xx 5-1:0.0: Binding DVB extension [ 152.279163][ T5823] usb usb44-port1: attempt power cycle [ 152.893004][ T5823] usb usb44-port1: unable to enumerate USB device [ 153.483717][ T5894] usb 5-1: USB disconnect, device number 7 [ 153.488329][ T5894] em28xx 5-1:0.0: Disconnecting em28xx [ 153.700862][ T1489] em28xx 5-1:0.0: Registering input extension [ 153.710044][ T5894] em28xx 5-1:0.0: Closing input extension [ 153.843056][ T42] audit: type=1804 audit(1785203024.221:117): pid=7368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.392" name="bus" dev="ramfs" ino=15733 res=1 errno=0 [ 153.866494][ T42] audit: type=1804 audit(1785203024.231:118): pid=7368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.392" name="bus" dev="ramfs" ino=15733 res=1 errno=0 [ 153.905467][ T42] audit: type=1326 audit(1785203024.311:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.0.394" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 153.917247][ T5894] em28xx 5-1:0.0: Freeing device [ 155.132453][ T7391] Bluetooth: MGMT ver 1.23 [ 155.418124][ T7394] comedi comedi0: dt2801: I/O port conflict (0x294,2) [ 155.699637][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 155.711497][ T7394] bridge_slave_1: left allmulticast mode [ 155.717058][ T7394] bridge_slave_1: left promiscuous mode [ 155.942654][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.965276][ T7397] CIFS: VFS: UNC: missing share name [ 155.970599][ T7397] CIFS: VFS: Malformed UNC in devname [ 156.274004][ T7394] bridge_slave_0: left allmulticast mode [ 156.275922][ T7394] bridge_slave_0: left promiscuous mode [ 156.280527][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.189044][ T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 157.318951][ T24] usb 5-1: device descriptor read/64, error -71 [ 157.569041][ T24] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 157.699020][ T24] usb 5-1: device descriptor read/64, error -71 [ 157.812231][ T24] usb usb5-port1: attempt power cycle [ 158.150079][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 158.169392][ T24] usb 5-1: device descriptor read/8, error -71 [ 158.409039][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 158.429675][ T24] usb 5-1: device descriptor read/8, error -71 [ 158.540898][ T24] usb usb5-port1: unable to enumerate USB device [ 159.937009][ T42] audit: type=1804 audit(1785203028.346:120): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.407" name="bus" dev="ramfs" ino=15835 res=1 errno=0 [ 159.950339][ T42] audit: type=1804 audit(1785203028.346:121): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.407" name="bus" dev="ramfs" ino=15835 res=1 errno=0 [ 159.997016][ T42] audit: type=1804 audit(1785203028.406:122): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.406" name="bus" dev="ramfs" ino=18611 res=1 errno=0 [ 160.019231][ T42] audit: type=1804 audit(1785203028.406:123): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.406" name="bus" dev="ramfs" ino=18611 res=1 errno=0 [ 160.035481][ T42] audit: type=1326 audit(1785203028.426:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.408" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 161.455314][ T42] audit: type=1326 audit(1785203029.866:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.411" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 162.450106][ T7441] e1000e 0000:00:02.0 eth1: removed PHC [ 162.895677][ T7448] ptrace attach of ""[7452] was attempted by "/syz-executor exec"[7448] [ 162.945237][ T7441] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 163.044382][ T7459] syz_tun: entered allmulticast mode [ 163.222972][ T42] audit: type=1804 audit(1785203031.626:126): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.415" name="bus" dev="ramfs" ino=18632 res=1 errno=0 [ 163.231141][ T42] audit: type=1804 audit(1785203031.646:127): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.415" name="bus" dev="ramfs" ino=18632 res=1 errno=0 [ 163.456312][ T7474] syz_tun: left allmulticast mode [ 164.419180][ T7483] random: crng reseeded on system resumption [ 164.799941][ T7494] Illegal XDP return value 4294967294 on prog (id 67) dev syz_tun, expect packet loss! [ 165.404908][ T42] audit: type=1326 audit(1785203033.816:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.1.420" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 165.616090][ T42] audit: type=1326 audit(1785203034.026:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.2.421" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 165.712246][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'. [ 165.719352][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'. [ 165.769385][ T42] audit: type=1804 audit(1785203034.166:130): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.422" name="bus" dev="ramfs" ino=15861 res=1 errno=0 [ 165.777008][ T7522] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 165.779839][ T7522] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 165.786178][ T7522] vhci_hcd vhci_hcd.0: Device attached [ 165.794236][ T42] audit: type=1804 audit(1785203034.176:131): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.422" name="bus" dev="ramfs" ino=15861 res=1 errno=0 [ 166.020958][ T7525] vhci_hcd: connection closed [ 166.021273][ T5824] vhci_hcd vhci_hcd.3: stop threads [ 166.025667][ T5824] vhci_hcd vhci_hcd.3: release socket [ 166.028122][ T5824] vhci_hcd vhci_hcd.3: disconnect device [ 166.058932][ T5117] usb 44-1: enqueue for inactive port 0 [ 166.550317][ T5117] usb usb44-port1: attempt power cycle [ 166.629453][ T9] IPVS: starting estimator thread 0... [ 166.728971][ T7536] IPVS: using max 26 ests per chain, 62400 per kthread [ 166.842762][ T42] audit: type=1804 audit(1785203035.256:132): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.427" name="bus" dev="ramfs" ino=16782 res=1 errno=0 [ 166.850484][ T42] audit: type=1804 audit(1785203035.266:133): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.427" name="bus" dev="ramfs" ino=16782 res=1 errno=0 [ 167.079867][ T7548] netlink: 'syz.3.426': attribute type 2 has an invalid length. [ 167.083279][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 167.310144][ T7548] : entered promiscuous mode [ 167.572894][ T5117] usb usb44-port1: unable to enumerate USB device [ 167.891832][ T7556] overlayfs: failed to resolve './file0': -2 [ 168.853754][ T42] audit: type=1326 audit(1785203037.266:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.432" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 169.028910][ T5823] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 169.198984][ T5823] usb 8-1: Using ep0 maxpacket: 8 [ 169.221280][ T7562] lo speed is unknown, defaulting to 1000 [ 169.334086][ T5823] usb 8-1: unable to get BOS descriptor or descriptor too short [ 169.337341][ T5823] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 169.339982][ T5823] usb 8-1: can't read configurations, error -71 [ 169.552053][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 169.555657][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 169.561882][ T42] audit: type=1804 audit(1785203037.976:135): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.433" name="bus" dev="ramfs" ino=18709 res=1 errno=0 [ 169.958954][ T42] audit: type=1804 audit(1785203037.976:136): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.433" name="bus" dev="ramfs" ino=18709 res=1 errno=0 [ 169.967130][ T42] audit: type=1326 audit(1785203038.256:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7571 comm="syz.1.434" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 170.230918][ T5753] Bluetooth: hci0: command 0x0406 tx timeout [ 171.814303][ T7589] usb 2-1: USB disconnect, device number 2 [ 171.955461][ T42] audit: type=1326 audit(1785203040.366:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7593 comm="syz.3.440" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 172.648716][ T7589] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 172.663024][ T7589] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 172.668148][ T7589] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 172.689020][ T7589] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 172.696881][ T7589] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 172.700899][ T7589] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 172.705054][ T7589] usb usb1: Product: EHCI Host Controller [ 172.707456][ T7589] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 172.716357][ T7589] usb usb1: SerialNumber: 0000:00:1d.7 [ 172.757810][ T7589] hub 1-0:1.0: USB hub found [ 172.767601][ T7589] hub 1-0:1.0: 6 ports detected [ 172.852121][ T7589] hub 2-0:1.0: USB hub found [ 172.855634][ T7589] hub 2-0:1.0: 2 ports detected [ 172.905805][ T7589] hub 3-0:1.0: USB hub found [ 172.911727][ T7589] hub 3-0:1.0: 2 ports detected [ 172.975737][ T7589] hub 4-0:1.0: USB hub found [ 172.977875][ T7589] hub 4-0:1.0: 2 ports detected [ 173.059360][ T5826] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 173.174880][ T7616] 9pnet_virtio: no channels available for device syz [ 174.003344][ T5826] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 174.006966][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 174.010239][ T5826] usb 1-1: Product: QEMU USB Tablet [ 174.012359][ T5826] usb 1-1: Manufacturer: QEMU [ 174.014255][ T5826] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 174.038659][ T5826] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input14 [ 174.133971][ T5826] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 174.506755][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 174.511561][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 174.521667][ T42] audit: type=1804 audit(1785203042.936:139): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.445" name="bus" dev="ramfs" ino=18751 res=1 errno=0 [ 174.542128][ T42] audit: type=1804 audit(1785203042.946:140): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.445" name="bus" dev="ramfs" ino=18751 res=1 errno=0 [ 175.143496][ T42] audit: type=1326 audit(1785203043.556:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.1.451" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 177.003690][ T7650] 9pnet_virtio: no channels available for device syz [ 177.526961][ T7661] lo speed is unknown, defaulting to 1000 [ 178.253093][ T7678] lo speed is unknown, defaulting to 1000 [ 178.530974][ T7678] lo speed is unknown, defaulting to 1000 [ 178.543753][ T7678] lo speed is unknown, defaulting to 1000 [ 178.944690][ T7688] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 178.947296][ T7688] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.950275][ T7688] vhci_hcd vhci_hcd.0: Device attached [ 179.016739][ T7678] infiniband syz1: set active [ 179.021786][ T34] lo speed is unknown, defaulting to 1000 [ 179.028355][ T7678] infiniband syz1: added lo [ 179.138032][ T7678] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 179.148390][ T7678] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 179.159749][ T7678] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 179.252462][ T7689] vhci_hcd: connection closed [ 179.253439][ T5824] vhci_hcd vhci_hcd.1: stop threads [ 179.256547][ T5824] vhci_hcd vhci_hcd.1: release socket [ 179.259739][ T5824] vhci_hcd vhci_hcd.1: disconnect device [ 179.298998][ T5823] usb 40-1: enqueue for inactive port 0 [ 179.326227][ T7678] RDS/IB: syz1: added [ 179.344835][ T7678] smc: adding ib device syz1 with port count 1 [ 179.347677][ T7678] smc: ib device syz1 port 1 has no pnetid [ 179.361518][ T24] lo speed is unknown, defaulting to 1000 [ 179.374251][ T7678] lo speed is unknown, defaulting to 1000 [ 179.790240][ T5823] usb usb40-port1: attempt power cycle [ 179.910023][ T5758] Bluetooth: hci0: command 0x0406 tx timeout [ 179.944989][ T7678] lo speed is unknown, defaulting to 1000 [ 180.000175][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 180.120628][ T7678] lo speed is unknown, defaulting to 1000 [ 180.249831][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 180.308696][ T7678] lo speed is unknown, defaulting to 1000 [ 180.409231][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 180.419377][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 180.433698][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 180.441423][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.447002][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.450099][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.455827][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 31232, setting to 1024 [ 180.459415][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 180.463615][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.468983][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 180.472413][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.512654][ T24] usb 6-1: config 0 descriptor?? [ 180.730987][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 180.742744][ T24] usb 6-1: USB disconnect, device number 8 [ 180.749000][ T24] usblp0: removed [ 180.848161][ T5823] usb usb40-port1: unable to enumerate USB device [ 180.895004][ T42] audit: type=1326 audit(1785203049.306:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.3.468" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 181.158937][ T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 181.310351][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 181.316835][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 181.320982][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 181.323782][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.326604][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 31232, setting to 64 [ 181.329966][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.333793][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 181.336435][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.340323][ T24] usb 6-1: config 0 descriptor?? [ 181.342416][ T7702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.548743][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 181.558548][ T7718] overlayfs: failed to clone lowerpath [ 181.569225][ C0] usblp0: nonzero read bulk status received: -71 [ 181.570017][ T7718] overlayfs: failed to clone lowerpath [ 181.573062][ T7702] usblp0: error -71 reading from printer [ 181.578322][ C0] usblp0: nonzero read bulk status received: -71 [ 181.622354][ T7721] fuse: fd is not a fuse device [ 181.719704][ T5823] usb 6-1: USB disconnect, device number 9 [ 181.745195][ T5823] usblp0: removed [ 181.810795][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 181.814008][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 181.818611][ T42] audit: type=1804 audit(1785203050.226:143): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.476" name="bus" dev="ramfs" ino=17792 res=1 errno=0 [ 181.826242][ T42] audit: type=1804 audit(1785203050.236:144): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.476" name="bus" dev="ramfs" ino=17792 res=1 errno=0 [ 182.192737][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 182.202610][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 182.765826][ T42] audit: type=1804 audit(1785203050.616:145): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.477" name="bus" dev="ramfs" ino=16973 res=1 errno=0 [ 183.068396][ T42] audit: type=1804 audit(1785203050.626:146): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.477" name="bus" dev="ramfs" ino=16973 res=1 errno=0 [ 183.465716][ T42] audit: type=1326 audit(1785203051.876:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.0.480" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 183.598950][ T55] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 183.758905][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 183.762366][ T55] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 183.765638][ T55] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.769535][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.773217][ T55] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.777295][ T55] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.782349][ T55] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.786038][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.169185][ T42] audit: type=1804 audit(1785203052.586:148): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.482" name="bus" dev="ramfs" ino=17804 res=1 errno=0 [ 184.250455][ T42] audit: type=1804 audit(1785203052.586:149): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.482" name="bus" dev="ramfs" ino=17804 res=1 errno=0 [ 184.257003][ T42] audit: type=1326 audit(1785203052.656:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.3.483" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 184.772101][ T7743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.479'. [ 185.059409][ T7762] bond1: Removing last arp target with arp_interval on [ 185.063006][ T7762] bond1: entered promiscuous mode [ 185.064609][ T7762] bond1: entered allmulticast mode [ 185.066701][ T7762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.491209][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 185.493185][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 185.500858][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 185.510117][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 185.526916][ T42] audit: type=1804 audit(1785203053.916:151): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.488" name="bus" dev="ramfs" ino=17817 res=1 errno=0 [ 185.548420][ T7776] macsec1: entered promiscuous mode [ 185.550400][ T7776] dummy0: entered promiscuous mode [ 185.556714][ T7776] macsec1: entered allmulticast mode [ 185.558452][ T7776] dummy0: entered allmulticast mode [ 185.562504][ T56] usb 6-1: USB disconnect, device number 10 [ 185.778129][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 185.782342][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 187.366223][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.489'. [ 187.664461][ T7795] fuse: fd is not a fuse device [ 187.746358][ T7800] overlayfs: failed to resolve './cgroup': -2 [ 187.819486][ T7798] netlink: 80 bytes leftover after parsing attributes in process `syz.1.493'. [ 187.985883][ T7805] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 188.322724][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 188.322740][ T42] audit: type=1326 audit(1785203056.736:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.0.497" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 188.900220][ T7814] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 188.905088][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 188.927333][ T7819] binder: 7818:7819 ioctl c00c6211 0 returned -14 [ 188.995130][ T42] audit: type=1804 audit(1785203057.406:156): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.499" name="bus" dev="ramfs" ino=17124 res=1 errno=0 [ 189.012215][ T42] audit: type=1804 audit(1785203057.406:157): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.499" name="bus" dev="ramfs" ino=17124 res=1 errno=0 [ 190.068503][ T42] audit: type=1326 audit(1785203058.476:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7823 comm="syz.0.501" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x0 [ 190.080783][ T7828] fuse: fd is not a fuse device [ 191.785951][ T7857] lo speed is unknown, defaulting to 1000 [ 191.795228][ T7857] lo speed is unknown, defaulting to 1000 [ 192.178025][ T42] audit: type=1804 audit(1785203060.586:159): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.510" name="bus" dev="ramfs" ino=16129 res=1 errno=0 [ 192.181275][ T42] audit: type=1804 audit(1785203060.596:160): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.510" name="bus" dev="ramfs" ino=16129 res=1 errno=0 [ 192.708403][ T42] audit: type=1326 audit(1785203061.116:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.2.511" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 192.823337][ T7868] fuse: fd is not a fuse device [ 193.017470][ T42] audit: type=1804 audit(1785203061.426:162): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.514" name="bus" dev="ramfs" ino=18972 res=1 errno=0 [ 193.025497][ T42] audit: type=1804 audit(1785203061.426:163): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.514" name="bus" dev="ramfs" ino=18972 res=1 errno=0 [ 193.242409][ T5758] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 193.810332][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.812916][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.825378][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 194.228588][ T7886] batadv_slave_0: entered promiscuous mode [ 194.231285][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 194.235590][ T7886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.244769][ T42] audit: type=1804 audit(1785203061.657:164): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.517" name="bus" dev="ramfs" ino=17912 res=1 errno=0 [ 194.390346][ T42] audit: type=1804 audit(1785203061.667:165): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.517" name="bus" dev="ramfs" ino=17912 res=1 errno=0 [ 194.441083][ T7886] batadv_slave_0 (unregistering): left promiscuous mode [ 194.449249][ T7886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.793879][ T42] audit: type=1326 audit(1785203062.207:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.3.521" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 195.653193][ T7901] rdma_rxe: rxe_newlink: failed to add lo [ 195.718997][ T42] audit: type=1326 audit(1785203063.137:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.2.530" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 195.845317][ T42] audit: type=1804 audit(1785203063.257:168): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.523" name="bus" dev="ramfs" ino=17925 res=1 errno=0 [ 195.851452][ T42] audit: type=1804 audit(1785203063.257:169): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.523" name="bus" dev="ramfs" ino=17925 res=1 errno=0 [ 196.226789][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 196.699873][ T42] audit: type=1804 audit(1785203064.067:170): pid=7918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.525" name="bus" dev="ramfs" ino=19073 res=1 errno=0 [ 196.728928][ T42] audit: type=1804 audit(1785203064.067:171): pid=7918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.525" name="bus" dev="ramfs" ino=19073 res=1 errno=0 [ 200.037357][ T7934] rdma_rxe: rxe_newlink: failed to add lo [ 200.055441][ T845] IPVS: starting estimator thread 0... [ 200.073057][ T7932] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 200.169716][ T7937] IPVS: using max 43 ests per chain, 103200 per kthread [ 200.429094][ T42] audit: type=1804 audit(1785203067.757:172): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.532" name="bus" dev="ramfs" ino=16198 res=1 errno=0 [ 200.437129][ T42] audit: type=1804 audit(1785203067.767:173): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.532" name="bus" dev="ramfs" ino=16198 res=1 errno=0 [ 201.479877][ T7941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.483899][ T7941] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.499916][ T7941] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.540912][ T7941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.542869][ T7941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.550717][ T7941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.566374][ T7941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.680542][ T7963] netlink: 'syz.2.539': attribute type 4 has an invalid length. [ 201.690109][ T845] lo speed is unknown, defaulting to 1000 [ 201.691941][ T845] syz1: Port: 1 Link DOWN [ 201.700214][ T845] lo speed is unknown, defaulting to 1000 [ 202.629119][ T5758] Bluetooth: hci0: command 0x0406 tx timeout [ 203.372643][ T42] audit: type=1326 audit(1785203070.787:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.1.543" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 203.588964][ T5758] Bluetooth: hci1: command 0x0406 tx timeout [ 204.200383][ T42] audit: type=1804 audit(1785203071.617:175): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.546" name="bus" dev="ramfs" ino=16235 res=1 errno=0 [ 204.221335][ T42] audit: type=1804 audit(1785203071.617:176): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.546" name="bus" dev="ramfs" ino=16235 res=1 errno=0 [ 204.238883][ T42] audit: type=1326 audit(1785203071.647:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.3.545" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 204.880353][ T5758] Bluetooth: hci0: command 0x0406 tx timeout [ 205.218891][ T7994] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 205.578007][ T8003] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 205.669103][ T5758] Bluetooth: hci1: command 0x0406 tx timeout [ 206.958983][ T5758] Bluetooth: hci0: command 0x0406 tx timeout [ 207.110750][ T42] audit: type=1326 audit(1785203074.527:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8019 comm="syz.1.553" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 207.749832][ T5758] Bluetooth: hci1: command 0x0406 tx timeout [ 207.805942][ T8009] Set syz1 is full, maxelem 65536 reached [ 208.192327][ T42] audit: type=1326 audit(1785203075.607:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 208.201867][ T42] audit: type=1326 audit(1785203075.607:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 208.209193][ T42] audit: type=1326 audit(1785203075.617:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 208.215794][ T42] audit: type=1326 audit(1785203075.617:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 208.222493][ T42] audit: type=1326 audit(1785203075.617:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.556" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf701efec code=0x7ffc0000 [ 208.230831][ T42] audit: type=1326 audit(1785203075.617:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 208.238075][ T42] audit: type=1326 audit(1785203075.617:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 208.244867][ T42] audit: type=1326 audit(1785203075.617:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.556" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701efec code=0x7ffc0000 [ 208.252219][ T42] audit: type=1326 audit(1785203075.617:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.556" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x7ffc0000 [ 209.601497][ T8067] netlink: 'syz.1.565': attribute type 2 has an invalid length. [ 209.603873][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 209.633822][ T8067] : entered promiscuous mode [ 209.915531][ T5758] Bluetooth: hci1: command 0x0406 tx timeout [ 211.400085][ T8087] overlayfs: failed to clone upperpath [ 211.590392][ T8091] netlink: 'syz.2.569': attribute type 2 has an invalid length. [ 211.645583][ T8091] : entered promiscuous mode [ 212.318954][ T5534] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 212.468988][ T5534] usb 8-1: Using ep0 maxpacket: 8 [ 212.473899][ T5534] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.478362][ T5534] usb 8-1: config 0 has no interfaces? [ 212.482382][ T5534] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 212.485323][ T5534] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.489086][ T5534] usb 8-1: Product: syz [ 212.490889][ T5534] usb 8-1: Manufacturer: syz [ 212.492921][ T5534] usb 8-1: SerialNumber: syz [ 212.497783][ T5534] usb 8-1: config 0 descriptor?? [ 212.610383][ T5841] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 212.712138][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.717252][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.740774][ T8112] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 212.783961][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 212.811178][ T8113] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 212.840074][ T5841] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 212.855749][ T5841] usb 5-1: config 0 has no interface number 0 [ 212.878698][ T5841] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.887232][ T5841] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 212.895689][ T5841] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.903228][ T5841] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.907774][ T5841] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.910855][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.928458][ T5841] usb 5-1: config 0 descriptor?? [ 212.995749][ T5841] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 213.227768][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.577'. [ 213.765611][ T8128] syz_tun: entered allmulticast mode [ 213.851495][ T8128] syz_tun: left allmulticast mode [ 214.243439][ T8136] input: syz1 as /devices/virtual/input/input16 [ 214.813151][ T8140] batadv_slave_0: entered promiscuous mode [ 214.816822][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 214.820913][ T8140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.833906][ T8140] batadv_slave_0 (unregistering): left promiscuous mode [ 214.837044][ T8140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.902316][ T5823] usb 8-1: USB disconnect, device number 9 [ 214.995157][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 214.995174][ T42] audit: type=1326 audit(1785203082.407:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.3.583" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fec code=0x0 [ 215.447784][ T5823] usb 5-1: USB disconnect, device number 12 [ 215.461366][ T5823] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 216.186720][ T8163] fuse: fd is not a fuse device [ 216.193480][ T8163] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 216.450162][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 217.188184][ T8176] IPv6: syztnl0: Disabled Multicast RS [ 217.262035][ T42] audit: type=1804 audit(1785203084.677:196): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.593" name="bus" dev="ramfs" ino=18225 res=1 errno=0 [ 217.488842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.969013][ T42] audit: type=1804 audit(1785203084.687:197): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.593" name="bus" dev="ramfs" ino=18225 res=1 errno=0 [ 218.249882][ T42] audit: type=1326 audit(1785203085.667:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.2.596" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 218.346589][ T8154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.586'. [ 218.415971][ T8192] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 218.418589][ T8192] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 218.428950][ T8192] vhci_hcd vhci_hcd.0: Device attached [ 218.495406][ T8154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.586'. [ 218.699180][ T56] usb 44-1: SetAddress Request (14) to port 0 [ 218.701776][ T56] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 218.811477][ T8196] geneve2: entered allmulticast mode [ 218.945896][ T8200] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 219.058960][ T8193] vhci_hcd: connection reset by peer [ 219.060953][ T5825] vhci_hcd vhci_hcd.3: stop threads [ 219.062563][ T5825] vhci_hcd vhci_hcd.3: release socket [ 219.065443][ T5825] vhci_hcd vhci_hcd.3: disconnect device [ 219.269438][ T5753] Bluetooth: hci1: command 0x0406 tx timeout [ 220.751835][ T8220] syz_tun: entered allmulticast mode [ 220.800659][ T8222] fuse: fd is not a fuse device [ 220.803380][ T8222] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 220.881265][ T8223] syz_tun: left allmulticast mode [ 221.444102][ T8231] lo speed is unknown, defaulting to 1000 [ 221.459584][ T8231] lo speed is unknown, defaulting to 1000 [ 222.236661][ T8243] binder: 8242:8243 ioctl c00c6211 0 returned -14 [ 222.393855][ T8247] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 223.503163][ T8266] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 223.505520][ T8266] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.523201][ T8266] vhci_hcd vhci_hcd.0: Device attached [ 223.799067][ T34] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 223.950369][ T34] usb 6-1: device descriptor read/64, error -71 [ 224.094509][ T8267] vhci_hcd: connection reset by peer [ 224.097108][ T12] vhci_hcd vhci_hcd.3: stop threads [ 224.098698][ T12] vhci_hcd vhci_hcd.3: release socket [ 224.101897][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 224.103803][ T56] usb 44-1: device descriptor read/8, error -110 [ 224.200139][ T845] lo speed is unknown, defaulting to 1000 [ 224.208326][ T8272] wg2: Caught tx_queue_len zero misconfig [ 224.244352][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 224.379093][ T34] usb 6-1: device descriptor read/64, error -71 [ 224.499028][ T34] usb usb6-port1: attempt power cycle [ 224.567625][ T56] usb usb44-port1: attempt power cycle [ 224.734681][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 224.738484][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 224.741658][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 224.744597][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 224.808527][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.618'. [ 224.868910][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 224.899569][ T34] usb 6-1: device descriptor read/8, error -71 [ 225.148949][ T34] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 225.169740][ T34] usb 6-1: device descriptor read/8, error -71 [ 225.279271][ T34] usb usb6-port1: unable to enumerate USB device [ 225.528643][ T8307] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 225.663729][ T56] usb usb44-port1: unable to enumerate USB device [ 225.730867][ T8306] fuse: fd is not a fuse device [ 226.088485][ T8315] overlayfs: failed to clone upperpath [ 226.235471][ T5841] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 226.347720][ T8315] cgroup: subsys name conflicts with all [ 234.315074][ T8341] binder: 8338:8341 ioctl c00c6211 0 returned -14 [ 234.416171][ T8346] mmap: syz.1.626 (8346) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 234.571341][ T8353] overlayfs: failed lookup in lower (newroot/143, name='file1', err=-40): overlapping layers [ 234.610960][ T8350] xt_TCPMSS: Only works on TCP SYN packets [ 234.703285][ T8356] fuse: Bad value for 'fd' [ 236.106227][ T42] audit: type=1326 audit(1785203103.517:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.2.633" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 236.268651][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.630'. [ 236.291572][ T8384] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 236.935317][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 236.947615][ T5825] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.954463][ T5825] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.958972][ T5825] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.962193][ T5825] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.129509][ T8399] overlayfs: failed lookup in lower (newroot/152, name='file1', err=-40): overlapping layers [ 238.131830][ T8406] syz.1.640 (8406) used greatest stack depth: 18720 bytes left [ 238.228369][ T42] audit: type=1326 audit(1785203105.637:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8415 comm="syz.1.644" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 238.236808][ T42] audit: type=1326 audit(1785203105.647:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.2.643" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 238.533704][ T8418] netlink: 'syz.3.641': attribute type 2 has an invalid length. [ 239.383331][ T8434] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.647'. [ 241.349142][ T8457] netlink: 96 bytes leftover after parsing attributes in process `syz.2.651'. [ 241.425832][ T8462] netlink: 56 bytes leftover after parsing attributes in process `syz.2.651'. [ 241.428653][ T8462] batadv0: Caught tx_queue_len zero misconfig [ 242.049924][ T42] audit: type=1804 audit(1785203108.977:202): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.653" name="bus" dev="ramfs" ino=19640 res=1 errno=0 [ 242.677401][ T42] audit: type=1804 audit(1785203108.977:203): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.653" name="bus" dev="ramfs" ino=19640 res=1 errno=0 [ 242.688754][ T42] audit: type=1804 audit(1785203109.507:204): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.654" name="bus" dev="ramfs" ino=21533 res=1 errno=0 [ 242.701269][ T8466] netlink: 56 bytes leftover after parsing attributes in process `syz.2.651'. [ 242.711792][ T42] audit: type=1804 audit(1785203109.507:205): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.654" name="bus" dev="ramfs" ino=21533 res=1 errno=0 [ 243.982580][ T8510] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 244.178864][ T42] audit: type=1326 audit(1785203111.587:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.2.662" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 244.971449][ T8520] loop0: detected capacity change from 0 to 32768 [ 244.986085][ T8520] loop1: detected capacity change from 0 to 32768 [ 244.998782][ T8520] loop2: detected capacity change from 0 to 32768 [ 245.026460][ T8520] loop3: detected capacity change from 0 to 32768 [ 245.048482][ T8526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 245.065717][ T8526] lo speed is unknown, defaulting to 1000 [ 245.067655][ T8526] lo speed is unknown, defaulting to 1000 [ 245.082804][ T8526] lo speed is unknown, defaulting to 1000 [ 245.098138][ T8526] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 245.102541][ T8526] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 245.107546][ T8526] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 245.114911][ T8520] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 245.159731][ T8526] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 245.290282][ T8526] lo speed is unknown, defaulting to 1000 [ 245.297554][ T8520] md/raid:md0: not clean -- starting background reconstruction [ 245.298966][ T8526] lo speed is unknown, defaulting to 1000 [ 245.301592][ T8520] md/raid:md0: device loop2 operational as raid disk 2 [ 245.305416][ T8520] md/raid:md0: device loop1 operational as raid disk 1 [ 245.308491][ T8520] md/raid:md0: device loop0 operational as raid disk 0 [ 245.311341][ T8526] lo speed is unknown, defaulting to 1000 [ 245.320547][ T8526] lo speed is unknown, defaulting to 1000 [ 245.332508][ T8520] md/raid:md0: raid level 5 active with 3 out of 3 devices, algorithm 0 [ 245.344785][ T8520] md0: detected capacity change from 0 to 4096 [ 245.435658][ T34] [ 245.436745][ T34] ====================================================== [ 245.439615][ T34] WARNING: possible circular locking dependency detected [ 245.442469][ T34] syzkaller #0 Tainted: G L [ 245.445091][ T34] ------------------------------------------------------ [ 245.445447][ T8529] smbdirect: ib_dev[syz0] removed [ 245.447956][ T34] kworker/3:0/34 is trying to acquire lock: [ 245.447969][ T34] ffff888075b16358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_start_sync+0x79/0xbe0 [ 245.455931][ T34] [ 245.455931][ T34] but task is already holding lock: [ 245.458953][ T34] ffffc900005cfd08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 245.463561][ T34] [ 245.463561][ T34] which lock already depends on the new lock. [ 245.463561][ T34] [ 245.467086][ T34] [ 245.467086][ T34] the existing dependency chain (in reverse order) is: [ 245.470426][ T34] [ 245.470426][ T34] -> #3 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 245.474253][ T34] lock_acquire+0x1b9/0x370 [ 245.476356][ T34] process_one_work+0x98e/0x1940 [ 245.478535][ T34] worker_thread+0x5ef/0xe50 [ 245.480692][ T34] kthread+0x370/0x450 [ 245.482553][ T34] ret_from_fork+0x72b/0xd50 [ 245.484629][ T34] ret_from_fork_asm+0x1a/0x30 [ 245.486838][ T34] [ 245.486838][ T34] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 245.490054][ T34] lock_acquire+0x1b9/0x370 [ 245.492161][ T34] touch_wq_lockdep_map+0xad/0x1c0 [ 245.494450][ T34] __flush_workqueue+0x131/0x1200 [ 245.496679][ T34] md_alloc+0x30/0x10a0 [ 245.498622][ T34] md_probe+0x73/0xf0 [ 245.500442][ T34] blk_probe_dev+0x149/0x1e0 [ 245.502567][ T34] blk_request_module+0x16/0xc0 [ 245.504828][ T34] blkdev_get_no_open+0x9b/0xf0 [ 245.507079][ T34] blkdev_open+0x141/0x4f0 [ 245.509145][ T34] do_dentry_open+0x6ab/0x14d0 [ 245.511643][ T34] vfs_open+0x82/0x3f0 [ 245.513597][ T34] path_openat+0x2873/0x4280 [ 245.515718][ T34] do_file_open+0x20e/0x430 [ 245.517815][ T34] do_sys_openat2+0x10f/0x1e0 [ 245.519986][ T34] __ia32_compat_sys_openat+0x12d/0x210 [ 245.522495][ T34] __do_fast_syscall_32+0xe7/0x970 [ 245.524840][ T34] do_fast_syscall_32+0x32/0x70 [ 245.527064][ T34] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.529871][ T34] [ 245.529871][ T34] -> #1 (major_names_lock){+.+.}-{4:4}: [ 245.533082][ T34] lock_acquire+0x1b9/0x370 [ 245.535168][ T34] __mutex_lock+0x1a4/0x1bd0 [ 245.537302][ T34] blk_probe_dev+0x28/0x1e0 [ 245.539403][ T34] blk_request_module+0x16/0xc0 [ 245.541591][ T34] blkdev_get_no_open+0x9b/0xf0 [ 245.543800][ T34] bdev_file_open_by_dev+0x70/0x210 [ 245.546167][ T34] md_import_device+0x120/0x360 [ 245.548386][ T34] md_add_new_disk+0x4b6/0x1820 [ 245.550663][ T34] md_ioctl+0x2b28/0x36b0 [ 245.552688][ T34] compat_blkdev_ioctl+0x682/0x7b0 [ 245.555020][ T34] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 245.557494][ T34] __do_fast_syscall_32+0xe7/0x970 [ 245.559835][ T34] do_fast_syscall_32+0x32/0x70 [ 245.562080][ T34] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.564911][ T34] [ 245.564911][ T34] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 245.568280][ T34] check_prev_add+0xeb/0xe60 [ 245.570469][ T34] __lock_acquire+0x136c/0x1a40 [ 245.572705][ T34] lock_acquire+0x1b9/0x370 [ 245.574815][ T34] __mutex_lock+0x1a4/0x1bd0 [ 245.576952][ T34] md_start_sync+0x79/0xbe0 [ 245.579030][ T34] process_one_work+0xa23/0x1940 [ 245.581289][ T34] worker_thread+0x5ef/0xe50 [ 245.583394][ T34] kthread+0x370/0x450 [ 245.585333][ T34] ret_from_fork+0x72b/0xd50 [ 245.587435][ T34] ret_from_fork_asm+0x1a/0x30 [ 245.589611][ T34] [ 245.589611][ T34] other info that might help us debug this: [ 245.589611][ T34] [ 245.593750][ T34] Chain exists of: [ 245.593750][ T34] &mddev->reconfig_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->sync_work) [ 245.593750][ T34] [ 245.600216][ T34] Possible unsafe locking scenario: [ 245.600216][ T34] [ 245.603240][ T34] CPU0 CPU1 [ 245.605432][ T34] ---- ---- [ 245.607639][ T34] lock((work_completion)(&mddev->sync_work)); [ 245.610244][ T34] lock((wq_completion)md_misc); [ 245.613335][ T34] lock((work_completion)(&mddev->sync_work)); [ 245.616911][ T34] lock(&mddev->reconfig_mutex); [ 245.618990][ T34] [ 245.618990][ T34] *** DEADLOCK *** [ 245.618990][ T34] [ 245.622468][ T34] 2 locks held by kworker/3:0/34: [ 245.624567][ T34] #0: ffff8880216b9940 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 245.628869][ T34] #1: ffffc900005cfd08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 245.633624][ T34] [ 245.633624][ T34] stack backtrace: [ 245.636052][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.636077][ T34] Tainted: [L]=SOFTLOCKUP [ 245.636083][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.636095][ T34] Workqueue: md_misc md_start_sync [ 245.636122][ T34] Call Trace: [ 245.636128][ T34] [ 245.636134][ T34] dump_stack_lvl+0x100/0x190 [ 245.636154][ T34] print_circular_bug.cold+0x178/0x1c7 [ 245.636180][ T34] check_noncircular+0x146/0x160 [ 245.636201][ T34] ? lock_release+0x24d/0x310 [ 245.636227][ T34] check_prev_add+0xeb/0xe60 [ 245.636254][ T34] __lock_acquire+0x136c/0x1a40 [ 245.636283][ T34] lock_acquire+0x1b9/0x370 [ 245.636309][ T34] ? md_start_sync+0x79/0xbe0 [ 245.636333][ T34] ? __pfx___might_resched+0x10/0x10 [ 245.636361][ T34] __mutex_lock+0x1a4/0x1bd0 [ 245.636382][ T34] ? md_start_sync+0x79/0xbe0 [ 245.636405][ T34] ? md_start_sync+0x79/0xbe0 [ 245.636428][ T34] ? __lock_acquire+0x49f/0x1a40 [ 245.636453][ T34] ? check_prev_add+0x354/0xe60 [ 245.636479][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 245.636499][ T34] ? lockdep_unlock+0x5a/0xc0 [ 245.636522][ T34] ? md_spares_need_change+0x1dc/0x320 [ 245.636546][ T34] ? md_start_sync+0x79/0xbe0 [ 245.636570][ T34] md_start_sync+0x79/0xbe0 [ 245.636595][ T34] process_one_work+0xa23/0x1940 [ 245.636624][ T34] ? __pfx_process_one_work+0x10/0x10 [ 245.636650][ T34] ? __pfx_md_start_sync+0x10/0x10 [ 245.636695][ T34] worker_thread+0x5ef/0xe50 [ 245.636723][ T34] ? kthread+0x13a/0x450 [ 245.636745][ T34] ? __pfx_worker_thread+0x10/0x10 [ 245.636768][ T34] kthread+0x370/0x450 [ 245.636789][ T34] ? __pfx_kthread+0x10/0x10 [ 245.636811][ T34] ret_from_fork+0x72b/0xd50 [ 245.636833][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 245.636855][ T34] ? __switch_to+0x800/0x10f0 [ 245.636880][ T34] ? __pfx_kthread+0x10/0x10 [ 245.636903][ T34] ret_from_fork_asm+0x1a/0x30 [ 245.636931][ T34] [ 245.749979][ T8534] md: resync of RAID array md0 [ 245.762046][ T8534] md: md0: resync done. [ 246.231507][ C2] vcan0: j1939_tp_rxtimer: 0xffff888025245000: rx timeout, send abort [ 246.234669][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888025245000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 255.189389][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.191404][ T1442] ieee802154 phy1 wpan1: encryption failed: -22