last executing test programs: 21m28.054727653s ago: executing program 4 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf251b00000008009a00020000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) mount$tmpfs(0x0, &(0x7f00000012c0)='./file0\x00', &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0040d07, &(0x7f0000000040)=0x121) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) write$tun(r3, 0x0, 0xffe) (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000040)={0x5, 0x745, 0x5, 0xc262, 0x9}) chroot(&(0x7f0000000a40)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) syz_clone3(&(0x7f0000000080)={0x1a4060100, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) (rerun: 64) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0xc, 0x0, 0xb, 0x4, 0x35]}, &(0x7f0000000040)=0x54) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000140)=""/57, 0x39}) (async) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, &(0x7f00000003c0)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) sendmsg$nl_xfrm(r5, 0x0, 0x0) 21m27.996257113s ago: executing program 4 (id=545): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 64) 21m24.687154796s ago: executing program 4 (id=554): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = syz_io_uring_setup(0x11b, &(0x7f0000000780)={0x0, 0xd4bb, 0x800}, &(0x7f0000000800)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) (async) listen(r0, 0x5) (async) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 21m24.127832592s ago: executing program 4 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_PARMS={0x18, 0x1, {0xb899, 0x1, 0x0, 0x41d2, 0x400}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f0000000040)='./file0\x00') sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x20, 0x0, 0xb1d, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_PARMS={0x18, 0x1, {0xb899, 0x1, 0x0, 0x41d2, 0x400}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x20, 0x0, 0xb1d, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (async) sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) (async) 21m24.024583244s ago: executing program 4 (id=557): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x138e, &(0x7f0000001f80)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "f5d70f", 0x1358, 0x5e, 0x1, @private2, @loopback, {[@fragment={0x11, 0x0, 0xf0, 0x1, 0x0, 0x1, 0x67}, @hopopts={0x0, 0x2f, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x0, 0x78, "ffa12461422e1bfe8a6180029f9468b22d8b93e8626eadb31b96d98bdb345c6a0c529ea1dc29d5fdd38adace4ee4aa25ad555f02bddc8a8f0e58d5824b6d0c275abf232ae08d123ee527e8f639a153290eca2c0b3c8a59be69de1e90cb6fe1d42e4e9e14cd3db41ed384f421b3fdd7701177f61b7d5cfdef"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0xf, [0x2, 0x1ff]}}, @generic={0xf6, 0xa1, "1de5e837b72355200d4c553d495ec9b4971750ba9aa85852aa5e662f3cfa42d82817415c03ab7ab593c627e9963a736010010de39cd93e7f7102d156d917c7ef2e4c3a6ce5b0965ddfa37323e3658642feeaf16677743ccaf29c49130f7818b1e9ffb3b1742489ee76a326ffbd62bf9494ce294427b14c85238d6c3d73fa87b7fa8d230a9159200f75756457e50a67b49654aa9b5cdd3199dfa9bdb3af266168e4"}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0xfb, 0xc7c, [0x8, 0x100000000, 0x1, 0x100000001]}}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x11, 0x0, 0xd, 0x1, 0x0, 0x9, 0x64}, @fragment={0x3c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x65}, @dstopts={0x24b83cbc44c71148, 0x12, '\x00', [@ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0xe5}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x58, {0x0, 0x14, 0x2, 0xebce, [0x800, 0x180000, 0x3, 0x207, 0x6, 0x1b27ddc8, 0x9, 0x6e, 0x5, 0x1]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @hao={0xc9, 0x10, @empty}]}, @routing={0x21, 0x2, 0x1, 0x52, 0x0, [@private2]}, @routing={0x0, 0xa, 0x2, 0x9, 0x0, [@mcast2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}, @dstopts={0x4, 0x13, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x6, 0x6, [0x6, 0x4, 0x5, 0x7, 0x2, 0x5af]}}, @generic={0x4, 0x28, "e6cd6f47e77b2ce5468c530c9a9b1f531a4074263bdfe592b0545e6e926d667be70526e880ff63fc"}, @pad1, @ra={0x5, 0x2, 0xfffb}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x5, [0x5, 0x80000000, 0x8, 0xfffffffffffffffb]}}]}], "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"}}}}}, 0x0) 21m23.63903618s ago: executing program 4 (id=560): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, &(0x7f00000005c0)=0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000480)={0x1, 0x1ff, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$kcm(0x29, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x204, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB="000000000000f2000c002b8008000100", @ANYRES16=r0, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x18}], 0x1}, 0x800) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0443050c"], 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000000000000f9, 0x100, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) 21m23.338681608s ago: executing program 32 (id=560): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x2}, &(0x7f00000005c0)=0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000480)={0x1, 0x1ff, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$kcm(0x29, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x204, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB="000000000000f2000c002b8008000100", @ANYRES16=r0, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x18}], 0x1}, 0x800) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0443050c"], 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000000000000f9, 0x100, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) 7m21.772739704s ago: executing program 3 (id=3487): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x29, 0x5, 0x0, 0x2, 0x2, @private0, @mcast1, 0x20, 0x8000, 0x2, 0x400}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x1ac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x21, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xec, 0x2, 0x9, 0x4, 0x1, 0x7}}, {0x4}}, {{0x1c, 0x1, {0xa, 0x2, 0xffff, 0x8, 0x1, 0x0, 0x7fff, 0x2}}, {0x8, 0x2, [0x8d, 0x1]}}, {{0x1c, 0x1, {0xc, 0x2, 0x9, 0x1, 0x2, 0x1, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x7f, 0x6, 0xee7, 0x2, 0x2, 0x1000, 0x3, 0x6}}, {0x10, 0x2, [0xff10, 0x5, 0xa113, 0x690, 0x10, 0x0]}}, {{0x1c, 0x1, {0x6, 0x3, 0x1, 0x5, 0x2, 0x40, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x8c, 0xb2, 0xfff6, 0x8, 0x1, 0x200, 0x4, 0x2}}, {0x8, 0x2, [0xffff, 0x1]}}, {{0x1c, 0x1, {0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0xffff, 0x2}}, {0x8, 0x2, [0x200, 0x5d]}}, {{0x1c, 0x1, {0x6, 0x2, 0x3, 0x8000, 0x1, 0x80000000, 0x80, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0x7, 0x7, 0x3, 0x401, 0x0, 0x630, 0x2, 0x5}}, {0xe, 0x2, [0xf, 0x8001, 0x6, 0x6, 0x6]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6c8}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20004850}, 0x200000c0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7m20.289728807s ago: executing program 3 (id=3493): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) get_robust_list(0x0, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f00000000c0), 0x0, &(0x7f0000000240)={&(0x7f0000000140)}}, &(0x7f00000005c0)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x1298c2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x15, 0x110, 0xfa08, {r4, 0x4000, 0x10, 0x10, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4000, @broadcast}}}, 0x118) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000001f050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 7m19.700732653s ago: executing program 3 (id=3496): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d1ae0498103807600000000040000f395"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x10, @val=@perf_event={0x1000}}, 0x18) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fchmod(r7, 0x80) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000319000/0x2000)=nil, 0x2000, 0x64) ioctl$COMEDI_UNLOCK(0xffffffffffffffff, 0x6406) 7m18.813288929s ago: executing program 3 (id=3497): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='wbt_stat\x00', r0, 0x0, 0x3}, 0xafccd87a702481cb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) close(0x3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xba}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000000), 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f0000000740)=ANY=[@ANYRESHEX=r3], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000002050000000008000000000000", @ANYRES32, @ANYBLOB="000000000000000000f9ffffff000000000000a63fd0a11ba8c9d4c3bce1f164638712ccb7487b5d5f6650bb1eb925062b248922", @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/27], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffff2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xc1c6) r9 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0xdb7, {0xffff, 0x1}, {0x48, 0x3}, @cond=[{0x8, 0x4, 0x8, 0x849, 0x5, 0x7}, {0x94, 0x4, 0x1, 0x7, 0x6, 0x4}]}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x80, r10, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x7, 0x34, @random="831d95"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c1b1609f684b70dcc01f2f0dcde8d21c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "fb276cbab25ee8dab2bbdf8895c76398"}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x35}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() 7m18.322890184s ago: executing program 3 (id=3502): syz_init_net_socket$ax25(0x3, 0x3, 0xcb) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) (async) mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0) (async) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) r2 = socket$inet_sctp(0x2, 0x4296f684bf61a77, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x9, @loopback, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x10001, 0x2) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) 7m15.911929794s ago: executing program 3 (id=3511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000070000000020d796f68edf56e198eb06c9c9a4cb5ab61b686cdaa7adbc46b5b5edbed537e22b11425b501ec5799ecdd204105d4f5464f97b10dba349604cd8d4955e4a698dc17804dfc88e8ed5c4c52714fba90fff3db4534fb0ff12"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfddc, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r3, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/178, 0xb2}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000180), 0x400000000001, 0x211001) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc040564a, &(0x7f0000000200)={0x0, 0x1, 0x1011, 0xffffffffffffffff, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x15, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, r8, 0x1, 0x0, 0x2}, 0x50) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) rmdir(&(0x7f0000000100)='./control\x00') r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x2007, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) 6m59.883574079s ago: executing program 33 (id=3511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000070000000020d796f68edf56e198eb06c9c9a4cb5ab61b686cdaa7adbc46b5b5edbed537e22b11425b501ec5799ecdd204105d4f5464f97b10dba349604cd8d4955e4a698dc17804dfc88e8ed5c4c52714fba90fff3db4534fb0ff12"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfddc, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r3, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/178, 0xb2}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000180), 0x400000000001, 0x211001) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc040564a, &(0x7f0000000200)={0x0, 0x1, 0x1011, 0xffffffffffffffff, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x15, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, r8, 0x1, 0x0, 0x2}, 0x50) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) rmdir(&(0x7f0000000100)='./control\x00') r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x2007, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) 2m13.408242344s ago: executing program 2 (id=4554): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x2c, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x8}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x4, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0xa) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000d800010027bd7000fddbdf2500080001000100000008000200", @ANYRES32=0x0, @ANYBLOB="0800010004000000000000"], 0x2c}}, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000005c0)={0x2, "1898efe12602264e5329ea767c2a971f5a255b196a633fb7b93bae0f92c8aa56", 0x7e3e52ee274e9ef1, 0x2, 0x3, 0x0, 0x410, 0x8}) 2m9.921277673s ago: executing program 2 (id=4567): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000980)={0x880000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000980)={0x880000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m8.668977185s ago: executing program 2 (id=4571): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000007ff02000000000000000000000000000100000000200002"], 0x6c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400000000030000000000000071f7f6e2285fe15abbc889a3292e9613909e26b47ade8c22f4abc7b294a99a06d7d13450f95bd049f3331a735e2c3ade1a17a40ddefe780b149d5faa0f3f8b5218a268849841bf0604f17eee50505614e3b730b31a4c281ca89fb893159fbab61917aaa42dbbcd75214006427f91b972dc972439381653dbab569191d2fc705ec0faa11c00320d3bf04f7e7fe01ba4c5f6b79664d3e655c31bcdf983ec32df350fffe565f60e3d3801a1331aa523305737ff2af89ee59cca0d60ab264dd9ba", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES32=0x0, @ANYBLOB="140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d6, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201001900000040450c1351000000000001090224000100000000090400000103000000092100000001220780090581030000030000"], 0x0) flistxattr(r0, &(0x7f0000000080)=""/210, 0xd2) 2m3.13604736s ago: executing program 2 (id=4589): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'syzkaller0\x00'}) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r3) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2m1.216615757s ago: executing program 2 (id=4596): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@report={0xa4, 0x20, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2b, {@in6=@mcast1, @in=@rand_addr=0x64010102, 0x4e21, 0xfffc, 0x4e24, 0x3, 0xa, 0x80, 0xa0, 0x0, 0x0, r4}}, [@tmpl={0x4}, @replay_thresh={0x8, 0xb, 0x3c9c}, @replay_thresh={0x8, 0xb, 0x5}, @offload={0xc, 0x1c, {r5, 0x3}}, @replay_thresh={0x8, 0xb, 0x6}, @offload={0xc, 0x1c, {0x0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xb}, @XFRMA_SET_MARK={0x8, 0x1d, 0x10000}, @proto={0x5, 0x19, 0xff}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000040)={0x401, 0x6ef9b83b, 0x7, 0x7f, 0x3de1, 0x9}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0xbd, @none, 0x2e1}, 0xe) r11 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4140aecd, &(0x7f0000000080)) 2m0.548595898s ago: executing program 2 (id=4597): socket$kcm(0x21, 0x2, 0x2) (async) r0 = socket$kcm(0x21, 0x2, 0x2) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) (async) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x80800) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) syz_open_dev$vim2m(&(0x7f0000000380), 0x5000005, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x54}, 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x14081, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_uid}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x14081, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_uid}]}}) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 1m44.406149796s ago: executing program 34 (id=4597): socket$kcm(0x21, 0x2, 0x2) (async) r0 = socket$kcm(0x21, 0x2, 0x2) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) (async) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_init1(0x80800) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) syz_open_dev$vim2m(&(0x7f0000000380), 0x5000005, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x54}, 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x14081, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_uid}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x14081, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_uid}]}}) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 15.399233908s ago: executing program 1 (id=4946): epoll_create1(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xe799, @dev={0xfe, 0x80, '\x00', 0x34}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@tclass={{0x14, 0x29, 0x43, 0x3}}], 0x18}}], 0x1, 0x60004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000300)={0x0}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x1, &(0x7f0000000180)=0x9, 0x7, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400009ffe53f3328e89b093af55e328179c1ade8e030a01010000000000000000020000"], 0x14}}, 0x24008804) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000180)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r8, 0x0, 0x0, 0x40002042, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) 15.398503211s ago: executing program 7 (id=4947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000300)='\xe1\xb7}=\x9ag\v|\xec\b\xb4\x160\xd8W\xadC5\x93} \x00', 0x8c2, 0x30, &(0x7f0000000080)={0x1, 0x100000001, 0x2, 0x9}) (async) r2 = mq_open(&(0x7f0000000300)='\xe1\xb7}=\x9ag\v|\xec\b\xb4\x160\xd8W\xadC5\x93} \x00', 0x8c2, 0x30, &(0x7f0000000080)={0x1, 0x100000001, 0x2, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) (async) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) epoll_create1(0x80000) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) (async) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x16c) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0xeaf, 0x80000001, {}, {0xee00}, 0x3fae, 0x3}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0xeaf, 0x80000001, {0x0}, {0xee00}, 0x3fae, 0x3}) sched_setscheduler(r4, 0x5, &(0x7f0000000240)=0x10000) (async) sched_setscheduler(r4, 0x5, &(0x7f0000000240)=0x10000) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCSETA(r5, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) close_range(r6, 0xffffffffffffffff, 0x0) 14.443522908s ago: executing program 1 (id=4951): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000000)={0x3937, 0x7}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 14.328661601s ago: executing program 1 (id=4953): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r3, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 32) 11.112854274s ago: executing program 7 (id=4957): syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00}, 0x94) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}}], 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00'}) syz_emit_ethernet(0x6e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001300)=""/102400, 0x19000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000000000ff582d1bd15309fb6897fb00000000000000000095000000b1c632a7"], &(0x7f0000000000)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.029348123s ago: executing program 1 (id=4961): mprotect(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f00004cf000/0x2000)=nil, 0x2000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x7313, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0xc0040) 8.633788548s ago: executing program 7 (id=4964): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002003c84ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x7, @empty}}, 0x0, 0x7fc, 0x0, 0x0, 0x8a, 0x0, 0x3}, 0x9c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x4000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.041153687s ago: executing program 7 (id=4966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r4 = syz_open_procfs(r1, &(0x7f00000021c0)='net/ip_tables_targets\x00') mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r10, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 6.940453299s ago: executing program 6 (id=4967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0x0, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x420400, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.800728041s ago: executing program 5 (id=4969): socket(0x23, 0x80000, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000007cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000", @ANYRES32], 0x48}}, 0x0) 6.476984502s ago: executing program 6 (id=4970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r2, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4087, 0xff7, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x12, 0x1, 0x0}, &(0x7f0000000300)=0x40) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x400, 0x5, 0x0, 0x0, @msi={0x2, 0x807, 0xa, 0x7}}]}) 5.865622976s ago: executing program 6 (id=4971): r0 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@xdp={0x2c, 0x2, 0x0, 0x3f}, 0x80, 0x0}, 0x0, 0x80}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.737617677s ago: executing program 5 (id=4972): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = getpid() syz_pidfd_open(r0, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', &(0x7f0000000000)='fuse\x00', 0x3, 0x0) 4.784801771s ago: executing program 6 (id=4973): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffe94, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) signalfd(r4, &(0x7f0000000080)={[0xfffffffffffffff7]}, 0x8) sendto$inet(r0, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) 4.561210128s ago: executing program 5 (id=4974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, &(0x7f00000002c0)=""/153, 0x99) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4.353669527s ago: executing program 0 (id=4975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002040), 0x8, &(0x7f00000021c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r3, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x29, 0x4, 0x1800000, 0x433, 0x0, 0x84, 0x1, 0x0, 0x0, 0x10, 0x3}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0x4, {0x1, 0x7, 0x8, 0x1, 0x1, 0x4, 0x8, 0x127, 0xdab5, 0xa000, 0x9, r5, r6, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x4000, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) (async) read$FUSE(r3, &(0x7f0000004380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0xffffffff, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r9, r10, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f000001aa40)={0x2020}, 0x2020) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000004c0)="f9c66bd4a5cd3e5d8ea2790102fa7d0afe8a4d46e63448c891f9bac43c6034caedb0cfab0c6061b4ca68e681c027d39b473818b851c981399708c73e190f334cba6eeb2f1693faaffce0ee6c9bcb710a24dec860d320bf077a974b8f8859cb8f4f4e", 0x62}, {&(0x7f0000000a40)="c5c25f44a50e50abb959887890728b686b04e511b11cd15949cc2a0b8e9bae1d0113800dd808da5ef692cb8251dcb3462c71ef91fb9f79e77d06766bddf15470ccb8bbb92b219b8b9882dc652f2b9e6d3ec117ff58e09ddb16e362b655c002afcd79518083b73fcf14aa4f5bdadb732c820282e51696d333e895f787fce3e1d28f0474fd1f90c6deb40ba82f2a1eb6afbab452589c767f982176d23630a00025cf61468019c791f512492426c576d5578f9b10efd9dc0b8ac208c483c3b0e30d45e2d1334956bc7edc5c3032f56d90bfd6d3338589fb878e8ba2f9e3601fa127912f18c64f0f5853cf0941f5a088dc8020e3e6f690d44e86261ebffbe2806d83cad5a5cb0b4cf7785712a7c84b96eb205c34290305610a9b902ae03446241bc46a8743f33f05138ded667b350aa15800346a0dfd7abdaa70abff0c9f9d28e527cf6a7aa0950a1e8ddcf14dadad3426497952e9d0fa927cae73d5cb8d151a8834aca239ad48ea1019d4b0b6785735898aa16fbe1cc24c82b9f8875558e9200653dfe2223d4041db264bcd74e8641fc93294440230bcb2a33fd74bf7a5c28c75c0350fd4f0100c83351d25f2c5958e11362e5edacafacd1b846976fdc01f18c901b89c56278c4976ccb319fc6afa46f9de859df2318ab0947f47f9553c258362a7dc0d2c10787f2846b7a218e00c1009e97d97c7e67e25e9a33532030860752eaabf7d71896f92d74803301c4a492967a2cc92669f86cf8958ad22005898f6a34c8110ff92e98721316e2b71184cff76e446a41e4cbb7d1f23c03a20e9213ab8ecfbe467edebe75876e2b524ea67fefb06e7d6e412eb249278596b419c3c3252eb0cd8968fdf4a3e3607fc4e5bffa182f33892b3eaca194459e6febb451406538a9d227c96259dab794cc40aa6349d6633c5cf741dddb929582cc13851d9b89096eb50fe2d52583e3bc1b4b026d061fab3814d0e2cd0ade89a1980dc4786973edfaf7fdf5e82399c2f2fb8d1d89b92444c043a826cbe607d5e61aaa0f94ddc1888e3f99a11c1518f488af029805adb321d5c2e65c887f71749bc8ad848800d35d94bc417e1ad101afced5958c97e36ccbd45cf6c4a667a1c9951c8b4e0fb2d36ad859dc5aff5424e65b4de54f5c529b67a20b596898d7115acd4670ed238ee2607145f6b6e5c13d1ef2d0230c172febbd8cfe2daf7c23a6d7f94a2b1066bd581c5db8da2ef5ee39de98a00348c332852ae2036dc9cf0e9e5ce60e83194801a65ed7b7c86f3efdea632bf6234c6e66d0687f5aa1ff754cf0e56785963a7ce1ac5359e3f6f0928fb46064a7a6fe68600020ae8d421f8c0cf07b2118d41c6405996a656bafb5617e0c7bc4acff8347d0f21e04e6e9ca1aa04f395b68411bbf8a2e6232f2677c2ae9986c82cd6930419170eadcce52a57c4649067948295ec0ccf9c682c301f76d50a2c356faf506ed792436437258e12aec8958472eb1a78e1473884599bf6f994dc47cfb24e32af26f40bbc4a77ce506089c2965e0a1a7a7928d092884cc50f08b6b8cd4fec471ae242d7a49edb45ea9345b70621310a9136a0a87a55416c498a998371b0b1edfa30d2774d57422c28bfe83b4a0b8a58cd82d674d4bf1fc9c523121b54fad2007d94f6ffac919ac941710e02676ce04b56009e59026b5d980adead45f00b9c43caa5c920ac0c82525b2eba73a0728b16ac18d8eb0ee37f630043fe050fae5fe94067c34ccf390aa5c56f5b39adbb05140d3ad09abe02cb05c13e557d4059c12b46595ed6abf2a344557bd8f2b38964276dbdaaaefafdca137daf02a0521b45a9664d06831eb63b5cef23bda445b54bf6d6051672f3e41783114c4bf8c43c44c3b50a25943cbfdb08b459113ba9795347808c3f7ceeb5e48990a1efd24d86888a7556ac452cc1ed154c061f0074572735c828171b2268b6bcf3faae41a4607afa89c7035eed49c28cd2c4a633d4396591e927667ffceb1df2216b0e4def2960801ef63951958a56a8563739bfefbb08a4396cbafd130bfc08255442fd2f6a9ca1be55bb7729e446545b454b2cda93bca3aea0278ffc39ae72b13ecba4fea0a61749d46b870b44bf1b54e929cd66f7e0f4695bcdb0c84bbffd94a3168df90ff0cbfa7a4157906922c259914cabf699bc69f9601e9474eb62ad6c51c2de3d2df84aad6dbfb497ce1fc3d34cb6b5b1df5d0be9bfe3addad9b19273cfea7aef15ae7f74e627f6c06180b82e153fe0af484effbb58f049c362379eb74ee0d9687f0d5860989bec49d3e03b4df5325666cf1c749744f215725ce064ea5733546f23a7950c5a6b7b5348f7c86bbb9032b48f7af2dbd10088b88940bc20af0b75e6226b14b8dd3222c974b96e52ab2da4acf943dbfa47c6cbd9e14f65b00def060edc0323867b445e9cef50e69b6a0b481f60752ed85ffd35cd6a508fdef4c8bddc8c81b7d4801775e63e65d732997916b089f9749a1f4940472b0d853f66057dc738f85d885f5a79426215006fa3a57efad95b47cc99d443c3ed022da106d73db793dd870fc381caa0f63dbddb26c56250c843a5638658cd9816321f06d252c56310c99d72ad0cb3e7e47e7702cf099836f529bbba4480e5f98b6642f78392803a707394581a2e9c3c67a68c1a8f419463cda67a150a4695ea13e75deb50958572ab7882c29ec810cbaeb9d087a8fc790abb1a7e9b23cd5f5f6acc0814b7b4556ff85230fd00653c479492f51631ebb4ef3969eba1f75a21d8aefe4a0f417e7a2a3484b831a68df28dc7f69c6bd00d645e3611cb4b9e9667c752ac43e149acafa8995bfef5dcbdeb7f8ff6235385289cf6411d6ade3b0014600430874240e6693f100a186bd471deca9dd364bc7825f439d0dd31ca435d6e843f6a3a54b1a0d5e8977b1a9c8711fd2709425e72ec33b1d174378b2736527e044f69eefca7cbc303f7e08c79cf0d641257328709309fb8bd430532f93f5ed5fea6e2121a185d03a827c12436fb9c114f1b4ec0d4442f891af7d96df576aea3879e1413dddc6e7ec15c1854e7d5bfde6309d7bba9a2054665cfb66242a64ca2e97c402da07122ec8eb83a8e64c21a8dc1e023fa1d5498639dbdf70e88ee4a299f7e324a44f60b5333fc92ca843ce3a3f4b9ea4b3f4298e54a46a91cfd24bc004f6e2be0f49f257c8705cb1e26b71ae9afbe1b18ff717c603f238c36d0f6657675c04c16d25ffa0ebf6256d547115dca891a72833370e4936383ec0560319f4ac019028471ac7e34d13cf464ac0ea2f95ed52505a560fac0365ec554799abdde68779921533aa9103d532b0b0c3fac39bc6a269b8775be7b4dfd6c7bacc30f548f20dd72ee0ead67f1b5a18d9254b9a13714a651b5c09657dd046e8dbe0a3e5ffe5248efc7ab82e61cf77ee83177414f9ac55cf03aa23fbf4604017bda40a357f49628de8dfc6869572e6d29104f59338767f342fca90a58e1b874f5d2e5a8141927231a7eb0d4d2d411515028b78a8690450b4cda858a6e21da76a7d4cad1cdb7dc16d59cd4c70a90c3c96bbac53587ae083eb289f0182f37a2846742f3167a537cc62fcfb3c6eb58925389373632ac0a08b66248be13ea47294ef7cda2323678876482c5b2eb0ec7e73b1dabed242d11b6b66e557f10dc6ae30840024275694c0a19074f510fa359915cbb3137863d6e5e9aeda67bd7a0525bbd0a460d540c3dedf269db6edffd8c5715d74f1ea1d9f1638599ea1303e737cfe66cd1f0c33ee0a14efb0356967fee591e0b14cf08666941b0badcfa5d545a5383a61f84f5459e03b35897056643b627917a4ae8a4b5ae271d320e2db425ad5c6066696e2558d9697a0e5b59adb27fa2dcaaf06ff6f72f68e8f75fad3aeec9ad7f47c6d75a1224a558e82948034cca392f5e7c93a835d78e97c077a21b2cd947250c1207681e04ee35de24abdda7e77231e8295c81d75b7677e484671664a850a0db77815fd12b3c52fa58531247e7d9f4d234b04527ef62d3a3c45d9736557104394268ed749b3d97aa0d7afb98e235012ff71d2c252767231879ccb14fc6e5c82db196adfbfdba756d4ca1899602a831051ba4d7dd27b07025dac0014280785d7608ef6861f3f4e8f7456947d5232c33937a73e9211306a7f35bfd16ccddb4ad98a5d2ad70de036203f5860a9aa7855e8fe5cbbdb1afc59f3bce5580b34022a33e3d593c34d68b990b41bc94a6db4feaf3ba220f5c6c80bb30cff2b08ab6ee2f9bb52fcef54a7857afa2e19356e64896b1be0826f4d78195938a68074a51cbb4099e1feb9dcb006c24bcdf0c735a4671365c6b3aef86f83131882f04be5f5b6704cdd1709bff7e91f595583aea76faa0c9930208f01736882c80e3c133225e81c89c057efc0306376f788c6827f91fddbefe77ef9c7cd9ef209b26a9333a669c44230e977fa2ed96f2cc40b70ae1196f0063e343b804b31cbe2c608bd1c050a0fea74eda4f648b3236d8c5cfc92abc9608632d1d7a18aa623d765645b2b82c6c36d5f0dc352c2c0df7456ba0705d3a6fded02b0f1ccf79f0087ecc265df6648fa59c39d8fb9fa12e7baaad530c0b56faf25cdf332e985c25831f44a3cc75c1bbbbe37d60f0feba7bbe8765719fe3d5f9446abd953836fb3333aaff35eeaa69efb635b34dc5f88bd92d98f1abbe72e346fff143d59ac5e9327b527104b9d0bbacdaa481c3145901078c8b35e184603c065873c4c9a003e875f0a3cf470498f64167a0ed142d95701fb17583308c6c51bcfe5c453a568b9bc6ae1294b8416f1f2befc56696f48ab1b814cc78cd91a66c4fc6a0a5e6f3f619d21b5ae3a5605a81f5e681c3b56ef456ad75113ea873abb423d4afed76cab1382ff7936ffb243b2ef5d87151a1b8b7af5470b872ee28e7ba5c63530215039d4f4587c3f7ba6656266720757e270dd644e63da908632905276aab497317ffab10c7083babf0d48568cc02e2c541272281536bed6719c7f8a855362ecd9f73f6a6aed6bb9e324f53916d9e16182d733b99fe28bab59add7309f8d482f365fd8a97c7a88319a4ece1152184592e78ac265ef57338e717df09baaf67fcb4dd2f941432d67f3cbf98728fd8bb8741ba13185b9818d236252d4d2fa7ff6fc7e2ebae2b03aa1a7dce8157215b5b1e48e30656f8bf828e1e081388e055885a00561decbce34043d0362dec0e701c971141e671870f677494ce1b5afa4b88e88ab3cca57d832d59d371cbd12c7dc0da2de979d0e9a7a883fc97f44318edf44f60ee1e92a7d0f09761a5298e84fe7f72eb81b7f1334111c77a019b80c526cb04b8362bc0f303129e35d9237aa62612fa24c37b8bde469fce0a751b911b713030ff3f59d185bfcac23219d2f465de2b260b03cba0049df3425c0e908ac3703dca2635fdec2ca17df4e012914203ae950e5aef049fb8127156d725b042db087e638c5c10094be215b8dbb38ca1c57692e45ca4dcea0fd3b93cf1dba26d6cd442791c7af10e4c8f42170824d0973ce5dcb3bc8cda7788599b9bc63b41659d204d9ef4e2a8ef887312f493d7d8cf35bafa091e14af1ff4496e752555976af366e3e161b144cee778b236bb9866119b61eb75fdb7493cc52ef8b18960de1c8d2bda05148475149798ba3d3c3e06136f07b35be65579cf4abc9c6964f24c95dd4b9e2559de78d1c34f9bf46dda5c1d75aba88eb9272a826e68155147a984d79d7bd5ff70ef75b3bad5d90fc92fb04987f4e282d2b8f60925f6773cb05a018c50c9322d3c0ea01ae58b61eafcc264b6f1e3e5bbf2330c41", 0x1000}], 0x2, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {r0, r5, r7}}}, @rights={{0x24, 0x1, 0x1, [r8, r2, r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {r11, r5, r13}}}], 0x88, 0x4040014}}], 0x1, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2010, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 64) r14 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) (rerun: 64) mknodat$loop(r14, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) (async, rerun: 64) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 64) linkat(r14, &(0x7f0000000100)='./file1\x00', r14, &(0x7f0000000240)='./file0\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 3.979583092s ago: executing program 0 (id=4976): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4004, &(0x7f0000000500)=0x7, 0x3, 0x1) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x122}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0xbed5, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, 0x2}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22b82, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1}) r8 = accept$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x10) dup(r8) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0xffffffff}}], 0x30}], 0x1, 0x0) 3.875300426s ago: executing program 7 (id=4977): r0 = socket(0x10, 0xa, 0x7) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x248, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xe37}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xe2d9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfe4}, {0x8, 0x13, 0xb73}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x77ecf5c}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x2014}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2eee}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x6}, {0x5}}]}, 0x248}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) write(r0, &(0x7f0000000040)="240000ea1900e2035f0400f9f40737f2d0000700d31200", 0x17) r3 = userfaultfd(0x1) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029400030104a0090904000000010100000a2401f7ff0702010209240303000303030b05240506020904010000010200000904010101010200000924020182040910ca0c24020109040706000405000904020000010200000904020101010200000b240201060108013a388207240101c005000905820950"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3}) 3.408417092s ago: executing program 6 (id=4978): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x243, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="b18000001400110500000000000000002b0000014e2200000000000000000000000000000000e6ffffffffffffff0000000099076f5902f15f5a77030000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x85, 0x8000000000000001}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) mkdir(0x0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 3.406704307s ago: executing program 0 (id=4979): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4c9c5238, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fchdir(r3) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) openat(r0, &(0x7f0000000080)='./file1/file0\x00', 0x655341, 0xc) 3.379467259s ago: executing program 5 (id=4980): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x8, 0x10800) ioctl$SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000080)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x4) r3 = syz_open_dev$radio(&(0x7f0000000180), 0x2, 0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6f1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xb1b560e}}, './file0\x00'}) ioctl$COMEDI_POLL(r5, 0x640f) ptrace$setopts(0x4206, r4, 0x9, 0xa) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2, 0x0, 0x5, 0x9, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x20020800) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f0000000400)={@local, 0x400}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000440)={0x2, 'wg2\x00', {0x3}, 0x6}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r5, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x9c, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xec, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004810) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, &(0x7f0000000980)={0xa}) r11 = dup(r5) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f00000009c0)=0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r11, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xe8c8}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0x58}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r14, &(0x7f0000000f40)=[{{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000c80)="362ea9282fa7e4feee2434b87cdf14d3ce43c1a4", 0x14}, {&(0x7f0000000cc0)="83d2ed9713cdb748da2ab8f524706e18b5fd274e22dcb8ee980cedc00b8f56e2da1509d8863d89165bfec339c6c112338d52a54307bdb364efb5616d3f4e91dc40207e63735cea236cb28839f10ed9099e4c8847f94f6eba12b808dca8234b1db4e4eb9a3d61b34461bfd8da9b45a3a938af9080d216b96981e87f778d7b5f8edfe849b86385e15d69fb1443aca2aef63bc05666223c814b31f2ec41609b0508d2da278d481f93b98ade658a815bb95fae376bb6c341d46cc1b873d9a0b5fc689de9fba4a64281deda1d600917591da4a87c45793da355d26d7fb03a3ffb3d6a73a7", 0xe2}, {&(0x7f0000000dc0)="5481ca77e8c61d1be8ae2b08f7718a231511bbbf7e84e6afa444e2815385bc4e67", 0x21}, {&(0x7f0000000e00)="146fdf27101d672a3bd10b4e7e48f0496c33c8e3c1da453ec063178a7d79371a853e4a8ead6c4c75153b68467cfd5d8b288fc54701aff8544ff964f3480ccc47bddb48e05d7539e3eb2ade0410be405f99cada7ef58a51a338a13c31c0567f53dd2f83db999589c9625d8dfc9379d4acae", 0x71}], 0x4, &(0x7f0000000ec0)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r6, r2]}}, @rights={{0x28, 0x1, 0x1, [r3, r11, r7, r1, r0, r3]}}], 0x48, 0x4}}], 0x1, 0xc081) 3.195736199s ago: executing program 0 (id=4981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000000000000000c001400", @ANYBLOB, @ANYRESHEX], 0x28}}, 0x0) (async, rerun: 64) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xe9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getpgrp(r3) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x48) (async) ioperm(0x0, 0x1, 0x1) (async, rerun: 32) ioprio_set$pid(0x2, 0x0, 0x0) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb7", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@deltaction={0x14, 0x18, 0x1, 0x3, 0x25dfdbff, {0xa}}, 0x14}}, 0x0) 3.040522147s ago: executing program 5 (id=4982): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$igmp6(0xa, 0x3, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x3e8, 0x4000000) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_access\x00', &(0x7f0000000600)=""/210, 0xd2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000cb00240000002400000004000000020000000000000c03000000000000000000000604000000000000000000000d0200000000005f00"], 0x0, 0x40}, 0x28) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x902, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000700)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000340)={0xc, r4}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2a, &(0x7f00000001c0), 0xc7) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) cachestat(r5, 0x0, 0x0, 0x0) 2.440736678s ago: executing program 0 (id=4983): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000300)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x18806200, 0x0, 0x27, 0x0, 0x0, 0x0) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000340)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/255, 0xff}, {&(0x7f0000000500)=""/132, 0x84}], 0x4}, 0x5}, {{&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/86, 0x56}, {&(0x7f00000007c0)=""/116, 0x74}, {&(0x7f0000000840)=""/145, 0x91}, {&(0x7f0000000900)=""/10, 0xa}], 0x5, &(0x7f00000009c0)=""/153, 0x99}, 0xfffffffa}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f0000000c00)=""/41, 0x29}, {&(0x7f0000000c40)=""/122, 0x7a}, {&(0x7f0000000cc0)=""/132, 0x84}], 0x4, &(0x7f0000000dc0)=""/100, 0x64}, 0xa}, {{&(0x7f0000000e40)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000ec0)=""/154, 0x9a}, {&(0x7f0000001640)=""/209, 0xd1}, {&(0x7f0000001080)=""/228, 0xe4}], 0x3, &(0x7f00000011c0)=""/163, 0xa3}, 0xfffffe97}, {{&(0x7f0000001280)=@hci, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/142, 0x8e}], 0x2, &(0x7f00000014c0)=""/64, 0x40}, 0x9}], 0x5, 0x40000002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0x4007, 0x20, 0x14, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.46450394s ago: executing program 7 (id=4984): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) fchdir(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x1404, 0x2, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x810) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2156100201f0142030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x10004, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) (async) fchdir(r1) (async) open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x2) (async) socket$inet6(0xa, 0x80002, 0x0) (async) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x1404, 0x2, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2156100201f0142030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) (async) 1.288921727s ago: executing program 0 (id=4985): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000002200)=[{{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000480)=""/45, 0x2d}, {&(0x7f00000004c0)=""/8, 0x8}], 0x4, &(0x7f0000000540)=""/97, 0x61}, 0x401}, {{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/26, 0x1a}], 0x2, &(0x7f0000000800)=""/255, 0xff}, 0x50}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/113, 0x71}, {&(0x7f0000000b00)=""/163, 0xa3}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000bc0)=""/88, 0x58}, {&(0x7f0000000c40)=""/12, 0xc}], 0x5}, 0x4}, {{&(0x7f0000000d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/136, 0x88}, {&(0x7f0000000e40)=""/240, 0xf0}, {&(0x7f0000000f40)=""/13, 0xd}], 0x3}, 0x5954}, {{&(0x7f0000000fc0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001040)=""/111, 0x6f}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002100)=""/234, 0xea}}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3], 0x0}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x6, 0x80000, 0x6) sched_setattr(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x8000000000000}) fcntl$lock(r5, 0x7, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') unshare(0x22020600) preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x80000) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) 1.203519993s ago: executing program 1 (id=4986): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000180)=0x10000005) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x0, 0x80, 0x20203443, 0x2, [0x2], [0x80ffdc], [0xffffffff, 0x0, 0x3], [0x3ffffffffffffff, 0x0, 0x1000000]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r7, &(0x7f0000000300)=""/56, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r9, 0x0, 0x2, 0x4}}, 0x20) userfaultfd(0x801) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1.179971282s ago: executing program 5 (id=4987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r4 = syz_open_procfs(r1, &(0x7f00000021c0)='net/ip_tables_targets\x00') mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r10, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 756.490556ms ago: executing program 6 (id=4988): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf7bae105000700810005008100", 0x1c}, {&(0x7f0000000700)="e5548906af32f00bd876", 0xa}], 0x2}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xffe0, 0x2}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=4989): r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_per_queue_op={0x4b, 0xe, [0x9, 0x5, 0x3, 0x9, 0x7ff, 0x4, 0x1, 0x3ff, 0x3, 0x7, 0xe, 0x3, 0xe9e8, 0x8, 0x2, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x70, 0x9, 0x2, 0xc470, 0x9, 0xfffffffe, 0xe090, 0x0, 0x5, 0x5268, 0x2041, 0x2aa, 0x1, 0x8, 0x8, 0x7, 0x4, 0x6, 0x80000001, 0x10000, 0x3, 0x1ff, 0x9, 0x9, 0x7, 0x4, 0x5, 0x5, 0x480, 0x6, 0xfd, 0x8, 0x6, 0x1, 0xfffffff7, 0x7070, 0x101, 0x10, 0x1, 0xf, 0x9ba, 0x6, 0x80, 0x0, 0xe4ff, 0x3, 0x5, 0x7f, 0x1, 0x9, 0x7, 0x59, 0x3, 0x80000000, 0x0, 0xe, 0x752f, 0x7, 0x44e, 0x1ff, 0x4, 0xfffffd7e, 0xffffffbf, 0x0, 0x8, 0x1, 0x8456, 0x101, 0x9, 0x7, 0x80000001, 0xa, 0x2, 0x7, 0x1ff, 0x6, 0x8, 0xeb, 0x3, 0x66, 0x6, 0x6, 0x7, 0x49c6, 0x1, 0xc, 0x8, 0x5, 0x0, 0x0, 0xfff, 0x2cd9, 0x80000000, 0x25, 0x9, 0x8ed5, 0x8e, 0x7, 0x1, 0x9, 0x0, 0x9], "74ade76975cd20bd7f0a85df8a94da9834fb19a1f115050fe8ca252cb28c519f3b17b59652aac1b478bb5174abaa1a8d78c641d8751a59e089f72ee27148e25a42ed4d17b7cf5c44d552a1f6e002dd48ace0517004ad054c61e9277f2b9c08bdd72850f03412b6e4c9baf757312431a3811f647349d0ce6413096938119a04e5db2b864793891ee4bf3c4af4cf49ab33371e70a06a92188a64ecedbd5fff2e9d61cc4ccb62465c0c2caafbdc0893dd25"}}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x200, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): ): Releasing backup interface [ 1294.814541][T22786] team0: Port device team_slave_0 removed [ 1294.824934][T22786] team0: Port device team_slave_1 removed [ 1294.831063][T22786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.838467][T22786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.846565][T22786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.854062][T22786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.862209][T22786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1294.941936][T22790] team0: Mode changed to "loadbalance" [ 1294.961508][T22792] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4284'. [ 1295.217283][T22799] netlink: zone id is out of range [ 1295.222708][ T6415] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1295.231428][T22799] netlink: zone id is out of range [ 1295.255117][T22799] netlink: zone id is out of range [ 1295.278331][T22799] netlink: zone id is out of range [ 1295.294315][T22799] netlink: zone id is out of range [ 1295.320657][T22799] netlink: zone id is out of range [ 1295.418331][T22799] netlink: zone id is out of range [ 1295.421472][ T6415] usb 7-1: Using ep0 maxpacket: 32 [ 1295.423925][T22799] netlink: zone id is out of range [ 1295.812254][ T6415] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.256003][T22812] netlink: 'syz.5.4292': attribute type 13 has an invalid length. [ 1296.263814][T22812] netlink: 'syz.5.4292': attribute type 27 has an invalid length. [ 1296.281301][ T6415] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.307009][ T6415] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1296.322867][ T6415] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1296.345033][ T6415] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1296.363510][ T6415] usb 7-1: Product: syz [ 1296.367765][ T6415] usb 7-1: Manufacturer: syz [ 1296.381482][ T6415] usb 7-1: SerialNumber: syz [ 1296.400732][ T6415] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input73 [ 1296.488193][T22820] tipc: Invalid UDP bearer configuration [ 1296.488241][T22820] tipc: Enabling of bearer rejected, failed to enable media [ 1296.586583][T22820] netlink: 'syz.0.4294': attribute type 12 has an invalid length. [ 1296.594450][T22820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4294'. [ 1296.612991][T22820] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4294'. [ 1296.636346][T17242] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1296.735765][T22793] overlay: Unknown parameter 'subj_type' [ 1296.830518][T17242] usb 2-1: Using ep0 maxpacket: 8 [ 1296.837877][T17242] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1296.847684][T17242] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1296.860601][T17242] usb 2-1: config 0 has no interface number 0 [ 1296.869381][T17242] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1296.882313][T17242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.891280][T17242] usb 2-1: Product: syz [ 1296.895057][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4297'. [ 1296.895881][T17242] usb 2-1: Manufacturer: syz [ 1296.909187][T17242] usb 2-1: SerialNumber: syz [ 1296.921656][T17242] usb 2-1: config 0 descriptor?? [ 1296.938738][T17242] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 1297.154937][T17242] usb 2-1: USB disconnect, device number 125 [ 1297.590302][T12647] Bluetooth: hci3: Unknown advertising packet type: 0x73 [ 1297.590324][T12647] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1297.762335][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4299'. [ 1297.939350][T17242] usb 7-1: USB disconnect, device number 35 [ 1297.963250][T17242] appletouch 7-1:1.0: input: appletouch disconnected [ 1298.424533][T12647] Bluetooth: hci2: command 0x0406 tx timeout [ 1298.502628][T17242] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1299.011984][T17242] usb 2-1: device descriptor read/64, error -71 [ 1299.356919][T17242] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1299.641649][T17242] usb 2-1: device descriptor read/64, error -71 [ 1299.688310][ C0] net_ratelimit: 46 callbacks suppressed [ 1299.688336][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1299.802361][T17242] usb usb2-port1: attempt power cycle [ 1299.969518][T22863] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1300.090151][T22877] overlayfs: failed to clone upperpath [ 1300.188201][T22880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1300.572446][T22875] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.668091][T17242] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1300.773869][T17242] usb 2-1: device descriptor read/8, error -71 [ 1300.801688][T22889] netlink: 'syz.6.4314': attribute type 3 has an invalid length. [ 1301.127421][ T848] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1301.127496][T17242] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1301.601351][ T848] usb 3-1: Using ep0 maxpacket: 8 [ 1301.630681][ T848] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1301.660555][ T848] usb 3-1: config 179 has no interface number 0 [ 1301.680811][T17242] usb 2-1: device descriptor read/8, error -71 [ 1301.701418][ T848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1301.750497][ T848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1301.784635][ T848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1301.975013][T17242] usb usb2-port1: unable to enumerate USB device [ 1302.056412][T22914] batadv_slave_0: entered promiscuous mode [ 1302.131824][T22915] netlink: 'syz.6.4320': attribute type 10 has an invalid length. [ 1302.361094][ T848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1302.362915][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1302.417475][T22915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.430851][ T848] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1302.457242][T22915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.464366][T22915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.471708][T22915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.478841][T22915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.496914][ T848] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1302.507022][T22915] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1302.538774][ T848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.566865][T22891] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1302.594610][T22912] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1302.869293][ T848] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input74 [ 1302.936327][T22924] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1302.943170][T22924] VFS: Can't find a romfs filesystem on dev nullb0. [ 1302.943170][T22924] [ 1303.628062][T22941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'. [ 1303.857965][T22949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4329'. [ 1303.883652][T22944] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1304.295285][T22949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1304.573111][T22953] overlayfs: missing 'lowerdir' [ 1304.589858][T22953] fuse: Unknown parameter '0000000000000000000000000000000000000000000003' [ 1304.838426][T22960] overlayfs: failed to resolve './bus': -2 [ 1305.130625][T22966] No such timeout policy "syz1" [ 1305.142090][T22966] No control pipe specified [ 1305.148987][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1305.562029][T22955] netlink: 'syz.1.4334': attribute type 10 has an invalid length. [ 1305.573646][T17242] usb 3-1: USB disconnect, device number 23 [ 1305.573646][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1305.573684][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1305.582295][T22955] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1307.222958][T22985] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1307.455006][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.462886][ T848] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1309.539452][ T6415] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1309.637008][T23013] netlink: 'syz.5.4338': attribute type 7 has an invalid length. [ 1309.644751][T23013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4338'. [ 1309.678271][ T848] usb 3-1: Using ep0 maxpacket: 16 [ 1309.685399][ T848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.695860][ T848] usb 3-1: config 0 has no interfaces? [ 1309.705726][ T848] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1309.716113][ T848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.734900][ T848] usb 3-1: Product: syz [ 1309.736185][ T6415] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1309.749824][ T6415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.760256][ T848] usb 3-1: Manufacturer: syz [ 1309.762607][ T6415] usb 2-1: Product: syz [ 1309.837897][ T848] usb 3-1: SerialNumber: syz [ 1309.844552][ T6415] usb 2-1: Manufacturer: syz [ 1309.846291][ T848] usb 3-1: config 0 descriptor?? [ 1309.849663][ T6415] usb 2-1: SerialNumber: syz [ 1309.888877][ T6415] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1309.919061][T17242] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1310.084225][T23015] netlink: 774 bytes leftover after parsing attributes in process `syz.5.4348'. [ 1310.084628][T23018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.098718][T23015] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4348'. [ 1310.105150][T23018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.155658][ T6415] usb 3-1: USB disconnect, device number 24 [ 1310.401303][ T6415] usb 2-1: USB disconnect, device number 4 [ 1310.568178][T23034] netlink: 'syz.6.4351': attribute type 10 has an invalid length. [ 1310.576446][T23034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.583929][T23034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.915376][T23038] overlayfs: failed to clone upperpath [ 1310.971650][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1310.981170][T23030] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1311.137800][T17242] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1311.145003][T17242] ath9k_htc: Failed to initialize the device [ 1311.151582][ T6415] usb 2-1: ath9k_htc: USB layer deinitialized [ 1311.579225][ T848] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1311.837638][ T848] usb 7-1: Using ep0 maxpacket: 16 [ 1311.844670][ T848] usb 7-1: config 4 has an invalid interface number: 9 but max is 0 [ 1311.856112][ T848] usb 7-1: config 4 has no interface number 0 [ 1311.868950][ T848] usb 7-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 31 [ 1311.890891][ T848] usb 7-1: config 4 interface 9 has no altsetting 0 [ 1311.907699][ T848] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1312.002833][ T848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.022330][ T848] usb 7-1: Product: syz [ 1312.026518][ T848] usb 7-1: Manufacturer: syz [ 1312.033360][ T848] usb 7-1: SerialNumber: syz [ 1312.058878][T23045] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1312.110953][ T848] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1312.436123][T23045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1312.443354][T23045] IPv6: NLM_F_CREATE should be set when creating new route [ 1312.460614][ T848] usb 7-1: USB disconnect, device number 36 [ 1312.468432][ T4442] usb 7-1: Failed to submit usb control message: -71 [ 1312.475476][ T4442] usb 7-1: unable to send the bmi data to the device: -71 [ 1312.501743][ T4442] usb 7-1: unable to get target info from device [ 1312.508175][ T4442] usb 7-1: could not get target info (-71) [ 1312.514460][ T4442] usb 7-1: could not probe fw (-71) [ 1312.548284][T23064] binder: 23060:23064 ioctl c0306201 2000000003c0 returned -14 [ 1312.592102][T23074] binder: 23060:23074 ioctl c0306201 2000000001c0 returned -14 [ 1312.714627][T23076] netlink: 'syz.2.4361': attribute type 1 has an invalid length. [ 1312.757884][ T5929] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 1312.771410][T23076] bond1: entered promiscuous mode [ 1312.776862][T23076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1312.851767][T23076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1312.858959][T23076] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1312.876629][T23076] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1312.894006][T23076] bond1: (slave wireguard0): making interface the new active one [ 1312.902699][T23076] wireguard0: entered promiscuous mode [ 1312.910043][T23076] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1312.929532][ T5929] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1312.937931][ T5929] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1312.946469][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.958332][ T5929] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1313.045323][ T5929] usb 2-1: string descriptor 0 read error: -22 [ 1313.051601][ T5929] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1313.123240][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.132332][ T848] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1313.185476][ T5929] usb 2-1: config 0 descriptor?? [ 1313.195596][T23084] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4362'. [ 1313.207308][ T5929] hub 2-1:0.0: bad descriptor, ignoring hub [ 1313.213238][ T5929] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1313.271581][T23084] sp0: Synchronizing with TNC [ 1313.335302][ T848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.346840][ T848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.372779][ T848] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 1313.384502][ T848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.395266][ T848] usb 3-1: config 0 descriptor?? [ 1313.519006][ T30] audit: type=1800 audit(2000000049.332:1540): pid=23091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4364" name="file1" dev="tmpfs" ino=809 res=0 errno=0 [ 1313.669314][ T30] audit: type=1326 audit(2000000049.473:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23095 comm="syz.6.4365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca5618f749 code=0x0 [ 1313.848455][ T848] lg-g15 0003:046D:C225.0022: item fetching failed at offset 0/3 [ 1313.858768][ T848] lg-g15 0003:046D:C225.0022: probe with driver lg-g15 failed with error -22 [ 1314.059749][T23076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.068512][T23076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.078387][T17242] usb 3-1: USB disconnect, device number 25 [ 1314.506941][T23099] loop7: detected capacity change from 0 to 7 [ 1314.517191][ C1] blk_print_req_error: 55 callbacks suppressed [ 1314.517206][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.532982][ C1] buffer_io_error: 54 callbacks suppressed [ 1314.532995][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.549005][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.558574][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.566762][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.576381][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.584577][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.594148][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.603180][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.612775][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.620905][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.630509][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.638822][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.648427][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.656459][T23099] ldm_validate_partition_table(): Disk read failed. [ 1314.664337][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.673972][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.681931][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.691554][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.700689][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1314.710316][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1314.719054][T23099] Dev loop7: unable to read RDB block 0 [ 1314.726565][T23099] loop7: unable to read partition table [ 1314.732376][T23099] loop7: partition table beyond EOD, truncated [ 1314.738905][T23099] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1315.077715][T23114] netlink: 'syz.0.4370': attribute type 4 has an invalid length. [ 1315.119074][T17242] lo speed is unknown, defaulting to 1000 [ 1315.125004][T17242] syz0: Port: 1 Link DOWN [ 1315.134362][T23114] netlink: 'syz.0.4370': attribute type 4 has an invalid length. [ 1315.197250][T17242] lo speed is unknown, defaulting to 1000 [ 1315.212866][T17242] syz0: Port: 1 Link ACTIVE [ 1315.384878][ T848] usb 2-1: USB disconnect, device number 5 [ 1315.804572][T23117] sp0: Synchronizing with TNC [ 1315.809480][T23118] sp0: Found TNC [ 1315.819650][T23117] netlink: 'syz.1.4371': attribute type 6 has an invalid length. [ 1316.199001][T23123] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1316.205535][T23123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1316.220486][T23123] vhci_hcd vhci_hcd.0: Device attached [ 1316.239699][T23123] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11) [ 1316.246306][T23123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1316.267732][T23123] vhci_hcd vhci_hcd.0: Device attached [ 1316.286361][T23123] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(13) [ 1316.292962][T23123] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1316.302474][T23123] vhci_hcd vhci_hcd.0: Device attached [ 1316.309600][T23123] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15) [ 1316.316198][T23123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1316.324077][T23123] vhci_hcd vhci_hcd.0: Device attached [ 1316.331691][T23123] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(17) [ 1316.338281][T23123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1316.348853][T23123] vhci_hcd vhci_hcd.0: Device attached [ 1316.355337][T23123] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1316.356213][T23125] bridge0: port 3(gretap0) entered disabled state [ 1316.365290][T23123] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1316.392399][T23123] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1316.465552][ T848] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1316.550242][T23125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.557429][T23125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.658156][T17242] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1316.683104][ T30] audit: type=1400 audit(2000000052.270:1542): avc: denied { connect } for pid=23134 comm="syz.2.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1316.739907][ T30] audit: type=1400 audit(2000000052.270:1543): avc: denied { getopt } for pid=23134 comm="syz.2.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1316.861389][T17242] usb 7-1: Using ep0 maxpacket: 32 [ 1316.868189][T17242] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1316.879825][T17242] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 1316.896315][T17242] usb 7-1: config 7 has no interface number 0 [ 1316.905913][T17242] usb 7-1: config 7 interface 187 has no altsetting 0 [ 1316.924749][T17242] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1316.934500][T17242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.955819][T23125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.965447][T17242] usb 7-1: Product: syz [ 1316.975647][T17242] usb 7-1: Manufacturer: syz [ 1316.980679][T17242] usb 7-1: SerialNumber: syz [ 1317.047745][T23125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.236345][T17242] usb 7-1: Cannot retrieve CPort count: 0 [ 1317.242277][T17242] usb 7-1: Cannot retrieve CPort count: -5 [ 1317.258015][T17242] es2_ap_driver 7-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 1317.787734][T23146] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1317.807259][ T6341] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.816931][ T6341] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.832541][ T6341] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.842112][ T6341] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.583839][T23161] netlink: 'syz.5.4382': attribute type 10 has an invalid length. [ 1318.600303][T23161] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1318.620090][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1319.601152][ T5930] usb 7-1: USB disconnect, device number 37 [ 1319.613118][T23138] vhci_hcd: connection closed [ 1319.614009][T23132] vhci_hcd: connection closed [ 1319.624130][T18125] vhci_hcd vhci_hcd.6: stop threads [ 1319.629683][T23126] vhci_hcd: connection reset by peer [ 1319.641534][T23129] vhci_hcd: connection closed [ 1319.643076][T23136] vhci_hcd: connection closed [ 1319.693412][T18125] vhci_hcd vhci_hcd.6: release socket [ 1319.744003][T18125] vhci_hcd vhci_hcd.6: disconnect device [ 1319.792594][T23188] qrtr: Invalid version 4 [ 1319.803370][T18125] vhci_hcd vhci_hcd.6: stop threads [ 1319.901673][T18125] vhci_hcd vhci_hcd.6: release socket [ 1319.907549][T18125] vhci_hcd vhci_hcd.6: disconnect device [ 1319.913311][T18125] vhci_hcd vhci_hcd.6: stop threads [ 1319.918774][T18125] vhci_hcd vhci_hcd.6: release socket [ 1319.920127][ T976] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1319.924232][T18125] vhci_hcd vhci_hcd.6: disconnect device [ 1319.941586][T18125] vhci_hcd vhci_hcd.6: stop threads [ 1319.947087][T18125] vhci_hcd vhci_hcd.6: release socket [ 1319.953067][T18125] vhci_hcd vhci_hcd.6: disconnect device [ 1319.960934][T18125] vhci_hcd vhci_hcd.6: stop threads [ 1320.378795][T18125] vhci_hcd vhci_hcd.6: release socket [ 1320.384647][T18125] vhci_hcd vhci_hcd.6: disconnect device [ 1320.455682][T23194] overlayfs: failed to clone upperpath [ 1320.463209][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 1320.470596][ T976] usb 3-1: config 5 has an invalid interface number: 105 but max is 0 [ 1320.481721][ T976] usb 3-1: config 5 has no interface number 0 [ 1320.566328][ T976] usb 3-1: config 5 interface 105 has no altsetting 0 [ 1320.606515][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=60.eb [ 1320.749249][ T30] audit: type=1400 audit(2000000056.087:1544): avc: denied { connect } for pid=23200 comm="syz.0.4393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1320.849599][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.138842][T23206] sp0: Synchronizing with TNC [ 1321.236274][ T976] usb 3-1: string descriptor 0 read error: -71 [ 1321.250682][ T976] usb 3-1: USB disconnect, device number 26 [ 1321.927814][ T848] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1322.248224][ T5930] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1322.325789][T23228] bond3 (unregistering): Released all slaves [ 1322.427331][ T5930] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1322.451370][ T5930] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1322.558352][ T5930] usb 3-1: Product: syz [ 1322.562566][ T5930] usb 3-1: Manufacturer: syz [ 1322.567179][ T5930] usb 3-1: SerialNumber: syz [ 1322.575305][ T5930] usb 3-1: config 0 descriptor?? [ 1322.602440][ T5930] ch341 3-1:0.0: ch341-uart converter detected [ 1323.132347][ T5930] usb 3-1: failed to receive control message: -121 [ 1323.139293][ T5930] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1323.192194][ T5930] usb 3-1: USB disconnect, device number 27 [ 1323.198683][ T5930] ch341 3-1:0.0: device disconnected [ 1323.616533][ T5930] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1323.787239][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 1323.794327][ T5930] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1323.803007][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.821931][ T5930] usb 3-1: config 0 has no interface number 0 [ 1323.831806][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1323.841339][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.849375][ T5930] usb 3-1: Product: syz [ 1323.854836][ T5930] usb 3-1: Manufacturer: syz [ 1323.859481][ T5930] usb 3-1: SerialNumber: syz [ 1323.865755][ T5930] usb 3-1: config 0 descriptor?? [ 1323.874619][ T5930] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1323.882082][ T5930] uvcvideo 3-1:0.105: No valid video chain found. [ 1323.968894][ T848] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1324.093433][T11553] usb 3-1: USB disconnect, device number 28 [ 1324.118538][ T848] usb 2-1: device descriptor read/64, error -71 [ 1324.375110][ T848] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1324.514030][ T848] usb 2-1: device descriptor read/64, error -71 [ 1324.720256][ T848] usb usb2-port1: attempt power cycle [ 1324.969735][T23266] netlink: 'syz.2.4409': attribute type 10 has an invalid length. [ 1324.979270][T23266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.986543][T23266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.200994][T23262] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1325.241030][ T848] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1325.264546][ T848] usb 2-1: device descriptor read/8, error -71 [ 1326.583809][ T848] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1326.661711][ T848] usb 2-1: device descriptor read/8, error -71 [ 1326.693789][T23282] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4413'. [ 1326.790977][ T848] usb usb2-port1: unable to enumerate USB device [ 1327.605619][T23299] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4417'. [ 1328.002000][ T6415] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1328.020736][T23314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4421'. [ 1328.035703][T23314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23314 comm=syz.2.4421 [ 1328.057242][T23314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4421'. [ 1328.079378][ T30] audit: type=1400 audit(2000000062.945:1545): avc: denied { bind } for pid=23312 comm="syz.2.4421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1328.202292][ T6415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1328.220252][ T6415] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1328.254576][ T6415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1328.268271][ T6415] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1328.280605][ T6415] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1328.289872][ T6415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.319760][ T6415] usb 2-1: config 0 descriptor?? [ 1328.371647][ T30] audit: type=1326 audit(2000000063.216:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23327 comm="syz.2.4426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca32d8f749 code=0x0 [ 1328.622542][ T6415] hdpvr 2-1:0.0: unexpected answer of status request, len 0 [ 1328.640571][ T6415] hdpvr 2-1:0.0: device init failed [ 1329.032356][ T6415] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1329.054846][T23339] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1329.571485][T18695] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1330.939011][ T976] usb 2-1: USB disconnect, device number 10 [ 1330.961988][T23370] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4435'. [ 1331.295294][T23376] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4437'. [ 1334.362306][T23394] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4438'. [ 1334.620881][T23396] 9p: Bad value for 'rfdno' [ 1335.320568][ T30] audit: type=1326 audit(2000000069.699:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1335.435260][ T30] audit: type=1326 audit(2000000069.699:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1335.516163][ T30] audit: type=1326 audit(2000000069.699:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1335.644201][ T30] audit: type=1326 audit(2000000069.699:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1335.737678][ T30] audit: type=1326 audit(2000000069.699:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1335.808932][T23414] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23414 comm=syz.1.4447 [ 1335.861163][T23415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23415 comm=syz.1.4447 [ 1335.876425][ T30] audit: type=1326 audit(2000000069.699:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1335.950889][ T30] audit: type=1326 audit(2000000069.699:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1336.011268][ T30] audit: type=1326 audit(2000000069.699:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1336.105556][ T30] audit: type=1326 audit(2000000069.699:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1336.218549][ T30] audit: type=1326 audit(2000000069.699:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23399 comm="syz.5.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c218f749 code=0x7ffc0000 [ 1336.413659][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4446'. [ 1336.508849][T23404] vxcan1: left promiscuous mode [ 1336.837428][T23424] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1337.022711][T23404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.067490][T23404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.191230][T11553] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1337.255369][T17242] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 1337.272891][T23404] macvlan0: left promiscuous mode [ 1337.397535][T23404] batman_adv: batadv0: Interface deactivated: gretap1 [ 1337.428242][T17242] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1337.444480][T17242] usb 7-1: config 1 has an invalid interface number: 181 but max is 0 [ 1337.451636][T23404] bond1: left promiscuous mode [ 1337.457711][T17242] usb 7-1: config 1 has no interface number 0 [ 1337.466641][T23404] wireguard0: left promiscuous mode [ 1337.472201][T17242] usb 7-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 1337.494138][T17242] usb 7-1: config 1 interface 181 has no altsetting 0 [ 1337.511766][T17242] usb 7-1: string descriptor 0 read error: -22 [ 1337.551099][T17242] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 1337.561882][T23423] netlink: 'syz.1.4448': attribute type 12 has an invalid length. [ 1337.599746][T17242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.642376][T17242] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1337.865821][T23423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1337.876571][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.884971][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.897895][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.909381][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.430677][ T4211] usb 7-1: Failed to submit usb control message: -71 [ 1338.432628][ T9] usb 7-1: USB disconnect, device number 38 [ 1338.444034][ T4211] usb 7-1: unable to send the bmi data to the device: -71 [ 1338.454902][ T4211] usb 7-1: unable to get target info from device [ 1338.461299][ T4211] usb 7-1: could not get target info (-71) [ 1338.522467][T23447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4451'. [ 1339.361168][ T4211] usb 7-1: could not probe fw (-71) [ 1340.346852][T11553] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1340.420665][T11553] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1340.428261][T11553] usb 2-1: can't read configurations, error -71 [ 1340.436430][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1340.479411][T23465] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4457'. [ 1340.604538][T23468] netlink: 'syz.1.4458': attribute type 10 has an invalid length. [ 1340.773300][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1340.783563][T23466] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1340.801739][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1340.849503][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1340.858845][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.866840][ T9] usb 7-1: Product: syz [ 1340.879275][ T9] usb 7-1: Manufacturer: syz [ 1340.883891][ T9] usb 7-1: SerialNumber: syz [ 1340.890124][ T9] usb 7-1: config 0 descriptor?? [ 1340.904295][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1340.921770][ T9] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1341.061354][T23471] hub 1-0:1.0: USB hub found [ 1341.066152][T23471] hub 1-0:1.0: 1 port detected [ 1341.204249][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1341.204391][ T30] audit: type=1326 audit(2000000075.210:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723218f749 code=0x7ffc0000 [ 1341.370788][ T5922] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1341.525207][ T30] audit: type=1326 audit(2000000075.219:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723218f749 code=0x7ffc0000 [ 1341.654822][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 1341.660821][ T30] audit: type=1326 audit(2000000075.219:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f723218f749 code=0x7ffc0000 [ 1341.666023][ T5922] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1341.685848][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1341.721528][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.743178][ T30] audit: type=1326 audit(2000000075.219:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723218f749 code=0x7ffc0000 [ 1341.743681][ T5922] usb 1-1: config 0 descriptor?? [ 1341.777311][ T30] audit: type=1326 audit(2000000075.219:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f723218f749 code=0x7ffc0000 [ 1341.801352][ T30] audit: type=1326 audit(2000000075.219:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723218f749 code=0x7ffc0000 [ 1341.802796][ T5922] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1341.825060][ T30] audit: type=1326 audit(2000000075.219:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f723218f749 code=0x7ffc0000 [ 1341.861387][ T30] audit: type=1326 audit(2000000075.219:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723218f749 code=0x7ffc0000 [ 1341.888233][ T30] audit: type=1326 audit(2000000075.219:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f723218f749 code=0x7ffc0000 [ 1341.917303][ T30] audit: type=1326 audit(2000000075.266:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72321865e7 code=0x7ffc0000 [ 1342.035791][T23460] lo speed is unknown, defaulting to 1000 [ 1342.148183][T23460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4456'. [ 1342.176223][ T5922] gspca_sonixj: reg_w1 err -71 [ 1342.181046][ T5922] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1342.191161][ T6415] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1342.235251][ T5922] usb 1-1: USB disconnect, device number 59 [ 1342.247552][T18695] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1342.257454][T23484] tmpfs: Bad value for 'mpol' [ 1342.361752][ T6415] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.377643][ T9] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1342.398052][ T6415] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1342.575735][ T9] em28xx 7-1:0.0: board has no eeprom [ 1342.577371][ T6415] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1342.590575][ T6415] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1342.598555][ T6415] usb 3-1: SerialNumber: syz [ 1342.621716][ T6415] usb 3-1: 0:2 : does not exist [ 1343.080018][T23492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4464'. [ 1343.153551][ T9] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1343.211092][ T9] em28xx 7-1:0.0: dvb set to bulk mode. [ 1343.217925][T11553] em28xx 7-1:0.0: Binding DVB extension [ 1343.288063][ T9] usb 7-1: USB disconnect, device number 39 [ 1343.383603][T23430] udevd[23430]: failed to send result of seq 26600 to main daemon: Connection refused [ 1343.399936][ T9] em28xx 7-1:0.0: Disconnecting em28xx [ 1343.552122][ T6415] usb 3-1: USB disconnect, device number 29 [ 1343.651104][T11553] em28xx 7-1:0.0: Registering input extension [ 1343.670121][ T9] em28xx 7-1:0.0: Closing input extension [ 1344.139567][ T5922] IPVS: starting estimator thread 0... [ 1344.147873][ T9] em28xx 7-1:0.0: Freeing device [ 1344.257108][T23511] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1344.289991][T23511] VFS: Can't find a romfs filesystem on dev nullb0. [ 1344.289991][T23511] [ 1344.506917][T23510] IPVS: using max 40 ests per chain, 96000 per kthread [ 1344.561634][T23513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1345.630059][T23538] usb usb8: usbfs: process 23538 (syz.6.4477) did not claim interface 0 before use [ 1346.995948][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1346.995965][ T30] audit: type=1400 audit(2000000080.645:1576): avc: denied { setattr } for pid=23542 comm="syz.5.4479" name="" dev="pipefs" ino=93532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1347.219361][T23547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4476'. [ 1348.508025][T23557] netlink: 'syz.2.4481': attribute type 10 has an invalid length. [ 1348.750605][T23558] lo speed is unknown, defaulting to 1000 [ 1349.019237][T23551] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1349.219499][T23570] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4483'. [ 1349.772502][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1350.137582][T23585] netlink: 'syz.5.4480': attribute type 10 has an invalid length. [ 1350.151362][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1350.190590][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1350.206999][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.244705][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1350.264222][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.386625][ T9] usb 1-1: Product: syz [ 1350.390814][ T9] usb 1-1: Manufacturer: syz [ 1350.413706][ T9] usb 1-1: SerialNumber: syz [ 1350.691933][T23593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1350.757156][T23593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1351.055716][ T976] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1351.446809][ T30] audit: type=1400 audit(2000000091.518:1577): avc: denied { mounton } for pid=23601 comm="syz.2.4493" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1351.624611][ T976] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1351.695497][ T976] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 1351.730899][ T9] usb 1-1: reset high-speed USB device number 60 using dummy_hcd [ 1351.748976][ T976] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 1351.767133][ T976] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1351.786122][ T976] usb 7-1: config 129 has no interface number 0 [ 1351.805020][T23604] 9pnet_fd: p9_fd_create_tcp (23604): problem connecting socket to 127.0.0.1 [ 1351.857601][ T976] usb 7-1: config 129 has no interface number 1 [ 1351.863922][ T976] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1351.902977][ T976] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1351.921565][ T976] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1351.942491][ T976] usb 7-1: config 129 interface 135 has no altsetting 0 [ 1351.949457][ T976] usb 7-1: config 129 interface 5 has no altsetting 0 [ 1351.951768][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1351.976167][ T976] usb 7-1: string descriptor 0 read error: -22 [ 1351.982445][ T976] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1351.992349][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.002662][ T9] usb 1-1: device firmware changed [ 1352.014383][ T976] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1352.021659][ T9] usb 1-1: USB disconnect, device number 60 [ 1352.024743][ T976] usb 7-1: MIDIStreaming interface descriptor not found [ 1352.378880][T23597] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.4492' sets config #1 [ 1352.404310][T23611] delete_channel: no stack [ 1353.343060][ T976] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1353.481969][ T976] usb 3-1: device descriptor read/64, error -71 [ 1353.600373][T23644] netlink: 'syz.1.4501': attribute type 10 has an invalid length. [ 1353.610846][T23644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.620224][T23644] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1353.631295][T23644] netlink: 'syz.1.4501': attribute type 10 has an invalid length. [ 1353.639173][T23644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4501'. [ 1353.648194][T23644] batadv0: entered promiscuous mode [ 1353.653444][T23644] batadv0: entered allmulticast mode [ 1353.675248][T23644] bond0: (slave batadv0): Releasing backup interface [ 1353.692710][T23644] bridge0: port 4(batadv0) entered blocking state [ 1353.699275][T23644] bridge0: port 4(batadv0) entered disabled state [ 1353.756770][T23644] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 1353.770657][ T976] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1353.935245][ T976] usb 3-1: device descriptor read/64, error -71 [ 1354.060220][ T976] usb usb3-port1: attempt power cycle [ 1354.070583][T18415] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1354.080290][T18415] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1354.381811][ T5922] usb 7-1: USB disconnect, device number 40 [ 1354.443720][ T976] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1354.460434][T18695] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 1354.460546][T18695] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1354.510024][ T976] usb 3-1: device descriptor read/8, error -71 [ 1354.747037][T23672] veth1_macvtap: left promiscuous mode [ 1354.753038][T23672] macsec0: entered promiscuous mode [ 1354.772766][T23672] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4507'. [ 1354.797652][ T976] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1354.819079][ T976] usb 3-1: device descriptor read/8, error -71 [ 1354.919968][T23677] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4508'. [ 1354.938478][ T976] usb usb3-port1: unable to enumerate USB device [ 1355.187794][T23681] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1355.195460][T23681] VFS: Can't find a romfs filesystem on dev nullb0. [ 1355.195460][T23681] [ 1355.420932][T23691] wg1: entered promiscuous mode [ 1355.425869][T23691] wg1: entered allmulticast mode [ 1355.566624][ T976] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1355.823880][ T976] usb 7-1: config 2 has an invalid interface number: 174 but max is 0 [ 1355.832165][ T976] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.843150][ T976] usb 7-1: config 2 has no interface number 0 [ 1355.849506][ T976] usb 7-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1355.865325][ T976] usb 7-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 1355.876879][ T976] usb 7-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1355.892748][ T976] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1355.917589][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.928475][ T976] usb 7-1: Product: syz [ 1355.932855][ T976] usb 7-1: Manufacturer: syz [ 1355.941011][ T976] usb 7-1: SerialNumber: syz [ 1355.960441][T23686] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1356.030119][T23700] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 1356.041120][T23700] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 1356.049172][T23700] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 1356.057165][T23700] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 1356.068859][T23700] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 1356.076956][T23700] kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 1356.085124][T23700] kvm: requested 69561 ns i8254 timer period limited to 200000 ns [ 1356.094725][T23700] kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 1356.103304][T23700] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 1356.115064][T23700] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 1356.192064][ T976] usb 7-1: probing VID:PID(0424:012C) [ 1356.198925][ T976] usb 7-1: vub300 testing BULK IN EndPoint(0) 8E [ 1356.205322][ T976] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 1356.213712][ T976] vub300 7-1:2.174: probe with driver vub300 failed with error -22 [ 1356.228733][ T976] usb 7-1: USB disconnect, device number 41 [ 1356.965333][T23728] MTD: Couldn't look up '/dev/nullb0': -15 [ 1357.249116][T23744] futex_wake_op: syz.1.4526 tries to shift op by -1; fix this program [ 1358.969101][T23774] lo speed is unknown, defaulting to 1000 [ 1359.531880][T23780] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1359.543579][T23780] VFS: Can't find a romfs filesystem on dev nullb0. [ 1359.543579][T23780] [ 1359.892737][T23787] vivid-007: kernel_thread() failed [ 1359.924368][T23793] ptrace attach of ""[23794] was attempted by "./syz-executor exec"[23793] [ 1360.240459][ T5922] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1360.420880][T23809] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4538'. [ 1360.469861][ T5922] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 1360.483636][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.530831][ T5922] usb 3-1: config 0 has no interface number 0 [ 1360.553795][ T5922] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 1360.577701][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.616768][ T5922] usb 3-1: config 0 descriptor?? [ 1360.624464][ T5922] qmi_wwan 3-1:0.154: skipping garbage [ 1360.629941][ T5922] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 1360.646061][T23818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4540'. [ 1360.656383][ T5922] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 1360.784324][T23822] netlink: 'syz.6.4543': attribute type 10 has an invalid length. [ 1360.794420][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1360.800998][T23821] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1360.856286][T23793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.865218][T23793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.915105][ T5922] usb 3-1: USB disconnect, device number 34 [ 1361.018734][T23826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4545'. [ 1361.232832][T17242] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1361.247627][T23829] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4545'. [ 1361.259176][T23829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4545'. [ 1361.478546][T17242] usb 7-1: Using ep0 maxpacket: 8 [ 1361.495669][T17242] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1361.528451][T17242] usb 7-1: config 179 has no interface number 0 [ 1361.582132][T17242] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1361.612233][T17242] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1361.635680][T17242] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1361.659419][T17242] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1361.684255][T17242] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1361.712124][T17242] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1361.732331][T17242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.755556][T23824] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1362.000566][ T5922] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input78 [ 1362.055951][T17242] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1362.217053][T17242] usb 1-1: device descriptor read/64, error -71 [ 1362.506045][T23849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.514639][T23849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.558345][T17242] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1362.922174][ T30] audit: type=1400 audit(2000000102.537:1578): avc: denied { connect } for pid=23851 comm="syz.2.4551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1362.944638][T17242] usb 1-1: device descriptor read/64, error -71 [ 1363.071761][T17242] usb usb1-port1: attempt power cycle [ 1363.456432][T17242] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1363.511673][T17242] usb 1-1: device descriptor read/8, error -71 [ 1363.662504][T23857] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4552'. [ 1363.798459][T17242] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1363.831254][T23863] netlink: 'syz.5.4553': attribute type 12 has an invalid length. [ 1363.862644][T23863] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4553'. [ 1363.896638][T17242] usb 1-1: device descriptor read/8, error -71 [ 1363.926591][T23863] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4553'. [ 1364.012690][T17242] usb usb1-port1: unable to enumerate USB device [ 1364.850989][T23872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=216 sclass=netlink_route_socket pid=23872 comm=syz.2.4554 [ 1365.332138][T17242] usb 7-1: USB disconnect, device number 42 [ 1365.332164][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1365.346338][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1365.448676][T23881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4558'. [ 1365.815404][T23875] netlink: 'syz.0.4556': attribute type 1 has an invalid length. [ 1366.026629][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4557'. [ 1367.301222][T23902] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1367.309199][T23902] VFS: Can't find a romfs filesystem on dev nullb0. [ 1367.309199][T23902] [ 1367.958883][ T30] audit: type=1326 audit(2000000107.261:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.2.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d8f749 code=0x7ffc0000 [ 1368.047445][ T30] audit: type=1326 audit(2000000107.261:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.2.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d8f749 code=0x7ffc0000 [ 1368.071208][T23915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4565'. [ 1368.269087][ T30] audit: type=1326 audit(2000000107.261:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.2.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fca32d8f749 code=0x7ffc0000 [ 1368.364251][ T30] audit: type=1326 audit(2000000107.392:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.2.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d8f749 code=0x7ffc0000 [ 1368.447981][ T30] audit: type=1326 audit(2000000107.392:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.2.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d8f749 code=0x7ffc0000 [ 1368.601211][T23928] lo speed is unknown, defaulting to 1000 [ 1370.331605][T23941] netlink: 'syz.2.4571': attribute type 12 has an invalid length. [ 1370.426761][T23941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1371.398626][ T30] audit: type=1400 audit(2000000110.469:1584): avc: denied { write } for pid=23948 comm="syz.6.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1371.526394][T23955] x_tables: duplicate underflow at hook 1 [ 1371.541517][T23941] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1371.958813][T23959] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4576'. [ 1372.371602][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1372.429115][T23977] 9p: Bad value for 'port' [ 1372.438005][T23977] kAFS: unable to lookup cell '(,cL' [ 1372.489621][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.526462][T23982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4582'. [ 1372.810588][ T5922] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1373.313663][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 1373.315506][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1373.316394][ T5922] usb 1-1: config index 0 descriptor too short (expected 255, got 18) [ 1373.318451][ T5922] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1373.318481][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.318499][ T5922] usb 1-1: Product: syz [ 1373.318513][ T5922] usb 1-1: Manufacturer: syz [ 1373.318526][ T5922] usb 1-1: SerialNumber: syz [ 1373.409315][T17242] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1373.569644][T17242] usb 2-1: Using ep0 maxpacket: 32 [ 1373.576383][ T5922] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1373.587174][T17242] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1373.609224][T17242] usb 2-1: config 0 has no interface number 0 [ 1373.615860][ T5922] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1373.639378][T17242] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1373.655338][ T5922] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1373.662569][T17242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.676620][ T5922] usb 1-1: media controller created [ 1373.684118][T17242] usb 2-1: Product: syz [ 1373.697904][T17242] usb 2-1: Manufacturer: syz [ 1373.705417][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.724631][T17242] usb 2-1: SerialNumber: syz [ 1373.741421][T17242] usb 2-1: config 0 descriptor?? [ 1373.762271][T17242] smsc95xx v2.0.0 [ 1373.775166][ T5922] zl10353_read_register: readreg error (reg=127, ret==0) [ 1373.840291][ T5922] usb 1-1: USB disconnect, device number 65 [ 1374.189786][T17242] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1374.209175][T17242] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1374.412559][T17242] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1374.417707][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1374.424096][T17242] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1375.253328][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1375.261292][ T9] usb 3-1: can't read configurations, error -71 [ 1375.433611][T17242] usb 2-1: USB disconnect, device number 13 [ 1376.044204][T24014] binder: 24012:24014 ioctl c01064b5 200000000100 returned -22 [ 1376.133550][T24016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1376.306424][T11553] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1376.908425][T11553] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 1376.918596][T11553] usb 2-1: config 0 has no interface number 0 [ 1376.928154][T11553] usb 2-1: config 0 interface 235 has no altsetting 0 [ 1376.950037][T11553] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=7b.9e [ 1376.971479][T11553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.979613][T11553] usb 2-1: Product: syz [ 1376.985196][T11553] usb 2-1: Manufacturer: syz [ 1376.989820][T11553] usb 2-1: SerialNumber: syz [ 1376.998708][T11553] usb 2-1: config 0 descriptor?? [ 1377.259657][T24014] netlink: 'syz.1.4593': attribute type 39 has an invalid length. [ 1377.300277][T24014] syz_tun (unregistering): left allmulticast mode [ 1377.324209][T24014] bond0: (slave syz_tun): Releasing backup interface [ 1377.533982][T11553] usb 2-1: USB disconnect, device number 14 [ 1380.926038][T24097] netlink: 'syz.0.4612': attribute type 1 has an invalid length. [ 1380.957077][ T5922] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1381.265474][T24106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4613'. [ 1381.747102][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 1381.757147][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.997016][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.008587][ T5922] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1382.069893][ T5922] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1382.079487][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.089412][ T5922] usb 7-1: config 0 descriptor?? [ 1382.379219][ T9] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1382.554171][T24116] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1382.572664][T24115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1382.651048][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1383.773943][ T9] usb 1-1: config 0 has no interface number 0 [ 1383.789850][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1383.811367][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.821125][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1383.830998][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.841276][ T9] usb 1-1: config 0 descriptor?? [ 1383.988960][ T5922] usbhid 7-1:0.0: can't add hid device: -71 [ 1384.005371][ T5922] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1384.026320][ T5922] usb 7-1: USB disconnect, device number 43 [ 1384.618194][T24131] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1384.711442][T24132] overlayfs: overlapping lowerdir path [ 1385.087249][ T9] uclogic 0003:28BD:0094.0023: failed retrieving string descriptor #100: -71 [ 1385.087304][ T9] uclogic 0003:28BD:0094.0023: failed retrieving pen parameters: -71 [ 1385.087322][ T9] uclogic 0003:28BD:0094.0023: pen probing failed: -71 [ 1385.087338][ T9] uclogic 0003:28BD:0094.0023: failed probing parameters: -71 [ 1385.087425][ T9] uclogic 0003:28BD:0094.0023: probe with driver uclogic failed with error -71 [ 1385.097803][ T9] usb 1-1: USB disconnect, device number 66 [ 1385.158557][T24136] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24136 comm=syz.5.4624 [ 1385.341517][T24136] CIFS mount error: No usable UNC path provided in device string! [ 1385.341517][T24136] [ 1385.359593][T24136] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1385.371078][T24141] macvlan0: entered promiscuous mode [ 1385.377038][T24141] netlink: 'syz.1.4620': attribute type 1 has an invalid length. [ 1385.384991][T24141] netlink: 'syz.1.4620': attribute type 2 has an invalid length. [ 1385.819002][T24136] overlayfs: failed to clone upperpath [ 1385.921543][T24136] overlayfs: failed to clone upperpath [ 1386.473959][T24158] lo speed is unknown, defaulting to 1000 [ 1387.961341][T24183] kvm: pic: non byte write [ 1387.971153][T24183] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1389.258307][T24206] program syz.0.4643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1389.353456][ T30] audit: type=1326 audit(2000000127.232:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1389.458196][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1389.491650][ T30] audit: type=1326 audit(2000000127.241:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1389.616012][ T30] audit: type=1326 audit(2000000127.251:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1389.680430][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1389.686842][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.699855][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1389.712329][ T30] audit: type=1326 audit(2000000127.251:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1389.719736][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.736014][ T30] audit: type=1326 audit(2000000127.251:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1389.782423][ T9] usb 2-1: config 0 descriptor?? [ 1389.795165][ T9] hub 2-1:0.0: USB hub found [ 1389.797796][ T30] audit: type=1326 audit(2000000127.260:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1389.944370][ T30] audit: type=1326 audit(2000000127.260:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1389.978921][ T30] audit: type=1326 audit(2000000127.260:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1390.016142][ T9] hub 2-1:0.0: 1 port detected [ 1390.018713][ T30] audit: type=1326 audit(2000000127.260:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1390.526276][ T30] audit: type=1326 audit(2000000127.269:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24202 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b8f749 code=0x7ffc0000 [ 1390.829585][T24229] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4647'. [ 1390.988015][T24204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.017504][T24204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.303638][T18695] Bluetooth: hci2: Unknown advertising packet type: 0x73 [ 1391.303684][T18695] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1391.768033][ T5922] usb 2-1: USB disconnect, device number 15 [ 1391.775833][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1392.136721][T24257] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4656'. [ 1392.238089][T24256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4658'. [ 1392.248874][T24256] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4658'. [ 1392.571328][T24266] CUSE: info not properly terminated [ 1392.609902][ T5922] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1392.769938][ T5922] usb 7-1: Using ep0 maxpacket: 16 [ 1392.776438][ T5922] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1393.014322][ T5922] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1393.024751][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.070842][ T5922] usb 7-1: Product: syz [ 1393.083213][ T5922] usb 7-1: Manufacturer: syz [ 1393.098900][ T5922] usb 7-1: SerialNumber: syz [ 1394.439146][ T5922] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1394.502821][T24283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1394.519249][T24283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1394.530284][T24283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1394.539889][T24283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1394.547849][T24283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1394.560284][ T5922] usb 7-1: USB disconnect, device number 44 [ 1394.718281][T24281] lo speed is unknown, defaulting to 1000 [ 1394.819764][T24287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4668'. [ 1395.464388][T24294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4669'. [ 1396.035292][T24281] chnl_net:caif_netlink_parms(): no params data found [ 1397.251484][T18695] Bluetooth: hci5: command tx timeout [ 1398.310717][T24281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.329225][T24281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.364585][T24281] bridge_slave_0: entered allmulticast mode [ 1398.423139][T24281] bridge_slave_0: entered promiscuous mode [ 1398.438757][T24324] netlink: 'syz.0.4667': attribute type 10 has an invalid length. [ 1398.504620][T24324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.576819][T24281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.768490][T24281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.775659][T24281] bridge_slave_1: entered allmulticast mode [ 1398.782919][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1398.840013][T24281] bridge_slave_1: entered promiscuous mode [ 1398.966284][T24323] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1399.095448][T24281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.117050][T24281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.169841][T24281] team0: Port device team_slave_0 added [ 1399.186355][T24281] team0: Port device team_slave_1 added [ 1399.220089][T24281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.232429][T24281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.292150][T24281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.314998][T24281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.333563][T24281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.385712][T24281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.419647][T18695] Bluetooth: hci5: command tx timeout [ 1399.447750][T24281] hsr_slave_0: entered promiscuous mode [ 1399.457183][T24281] hsr_slave_1: entered promiscuous mode [ 1399.468808][T24281] debugfs: 'hsr0' already exists in 'hsr' [ 1399.479385][T24281] Cannot create hsr debugfs directory [ 1399.857254][T24281] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1400.010039][T24281] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1400.199458][T24353] lo speed is unknown, defaulting to 1000 [ 1400.205851][T24281] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1400.233564][T24281] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1400.691750][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1400.841599][ T9] usb 1-1: device descriptor read/64, error -71 [ 1400.888434][T24281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.098697][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1401.122972][T24374] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4683'. [ 1401.514587][T24375] openvswitch: netlink: Key type 1040 is out of range max 32 [ 1401.529384][T24281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.552380][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.559482][ T4211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.594709][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.601797][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.643339][T18695] Bluetooth: hci5: command tx timeout [ 1401.675388][ T9] usb 1-1: device descriptor read/64, error -71 [ 1401.793149][ T9] usb usb1-port1: attempt power cycle [ 1402.253005][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1402.296098][ T9] usb 1-1: device descriptor read/8, error -71 [ 1402.317448][T24281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.605463][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1402.713296][ T9] usb 1-1: device descriptor read/8, error -71 [ 1402.877990][ T9] usb usb1-port1: unable to enumerate USB device [ 1403.179818][T24281] veth0_vlan: entered promiscuous mode [ 1403.206364][T24281] veth1_vlan: entered promiscuous mode [ 1403.253074][T24405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4689'. [ 1403.867927][T18695] Bluetooth: hci5: command tx timeout [ 1403.891522][T24281] veth0_macvtap: entered promiscuous mode [ 1403.915428][T24281] veth1_macvtap: entered promiscuous mode [ 1404.007881][T24281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1404.152971][T24281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1404.259010][T24414] netlink: 'syz.0.4691': attribute type 12 has an invalid length. [ 1404.280437][T24414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1404.304247][T24414] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1404.756626][ T6341] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.766244][ T6341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.778149][ T6341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.790691][ T6341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.952545][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.127660][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.203116][ T5922] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1405.218043][T24431] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1405.265269][T18415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.274130][T18415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.804590][T24434] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1406.048729][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4696'. [ 1407.491895][T24453] netlink: 'syz.6.4699': attribute type 10 has an invalid length. [ 1407.501068][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1407.511017][T24452] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1407.817784][T24462] PKCS7: Unknown OID: [4] (bad) [ 1407.839224][T24462] PKCS7: Only support pkcs7_signedData type [ 1407.839625][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1407.870007][ T5922] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1407.888088][ T5922] usb 1-1: can't read configurations, error -71 [ 1408.027034][T24465] veth3: entered promiscuous mode [ 1408.477090][ T976] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1408.652160][ T976] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1408.664176][ T976] usb 7-1: config 6 has an invalid interface number: 200 but max is 0 [ 1408.675919][ T976] usb 7-1: config 6 has no interface number 0 [ 1408.686512][ T976] usb 7-1: config 6 interface 200 has no altsetting 0 [ 1408.697941][ T976] usb 7-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1408.707801][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.788924][ T976] usb 7-1: Product: syz [ 1408.795890][ T976] usb 7-1: Manufacturer: syz [ 1408.800505][ T976] usb 7-1: SerialNumber: syz [ 1408.903707][T24477] MTD: Couldn't look up '/dev/nullb0': -15 [ 1409.003125][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1409.003225][ T30] audit: type=1400 audit(2000000145.641:1596): avc: denied { map } for pid=24478 comm="syz.0.4706" path="socket:[98349]" dev="sockfs" ino=98349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1409.064536][ T30] audit: type=1400 audit(2000000145.650:1597): avc: denied { accept } for pid=24478 comm="syz.0.4706" path="socket:[98349]" dev="sockfs" ino=98349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1409.799185][T24479] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4706'. [ 1409.841535][T24491] netlink: 'syz.1.4708': attribute type 1 has an invalid length. [ 1411.065990][T24502] netlink: 'syz.1.4711': attribute type 10 has an invalid length. [ 1411.338934][T24500] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1411.343793][ T976] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1411.385456][ T976] dvb-usb: bulk message failed: -71 (3/0) [ 1411.453884][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1411.484687][ T976] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1411.505547][ T976] usb 7-1: media controller created [ 1412.019666][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1412.064330][ T976] dvb-usb: bulk message failed: -71 (6/0) [ 1412.078603][ T976] dvb-usb: bulk message failed: -71 (6/0) [ 1412.084824][ T976] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1412.105066][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input79 [ 1412.124526][ T976] dvb-usb: schedule remote query interval to 150 msecs. [ 1412.148536][ T976] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1412.174094][ T976] usb 7-1: USB disconnect, device number 45 [ 1412.221274][ T976] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1412.307093][T24518] Can't find ip_set type [ 1413.071475][ T976] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1413.374744][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.420901][ T976] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1413.488348][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.505025][T24532] lo speed is unknown, defaulting to 1000 [ 1413.524496][ T976] usb 7-1: config 0 descriptor?? [ 1413.591453][T24536] netlink: 'syz.7.4722': attribute type 10 has an invalid length. [ 1413.621957][T24536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.630152][T24536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.690772][T24536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.697938][T24536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.705417][T24536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.712533][T24536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.812395][ T976] usbhid 7-1:0.0: can't add hid device: -71 [ 1413.818859][ T976] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1413.863939][ T976] usb 7-1: USB disconnect, device number 46 [ 1413.896954][T24536] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1414.057194][T24533] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1414.335350][T24554] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4724'. [ 1416.951338][T24571] lo speed is unknown, defaulting to 1000 [ 1417.163310][T24576] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4731'. [ 1417.918202][ T5922] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1419.367107][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1419.367649][T24598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1419.389468][ T5922] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 1419.410765][ T5922] usb 2-1: config 0 has no interface number 0 [ 1419.431251][T24598] netlink: 'syz.5.4735': attribute type 1 has an invalid length. [ 1419.459074][ T5922] usb 2-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1419.495711][ T5922] usb 2-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1419.519066][T24598] netlink: 'syz.5.4735': attribute type 2 has an invalid length. [ 1419.528417][ T5922] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1419.537683][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1419.547208][ T5922] usb 2-1: Product: syz [ 1419.561971][ T5922] usb 2-1: Manufacturer: syz [ 1419.645348][ T5922] usb 2-1: config 0 descriptor?? [ 1419.731810][T24599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4735'. [ 1419.741716][T24599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4735'. [ 1419.746308][T24598] bond3: option xmit_hash_policy: invalid value (6) [ 1419.887051][T24598] bond3 (unregistering): Released all slaves [ 1419.967092][T24604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1420.362496][T24582] fuse: Bad value for 'fd' [ 1420.380711][ T5894] usb 2-1: USB disconnect, device number 16 [ 1422.081694][T24623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4739'. [ 1423.804811][T12724] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1423.968693][T12724] usb 1-1: device descriptor read/64, error -71 [ 1424.168035][T24650] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1424.176839][T24650] VFS: Can't find a romfs filesystem on dev nullb0. [ 1424.176839][T24650] [ 1424.425212][T12724] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1424.501844][T24652] netlink: 'syz.5.4749': attribute type 10 has an invalid length. [ 1424.511051][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1424.564077][T12724] usb 1-1: device descriptor read/64, error -71 [ 1424.584351][T24654] 9p: Bad value for 'rfdno' [ 1424.719359][T24658] FAULT_INJECTION: forcing a failure. [ 1424.719359][T24658] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.732879][T12724] usb usb1-port1: attempt power cycle [ 1424.778808][T24658] CPU: 0 UID: 0 PID: 24658 Comm: syz.6.4750 Tainted: G L syzkaller #0 PREEMPT(full) [ 1424.778826][T24658] Tainted: [L]=SOFTLOCKUP [ 1424.778830][T24658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1424.778836][T24658] Call Trace: [ 1424.778840][T24658] [ 1424.778844][T24658] dump_stack_lvl+0x16c/0x1f0 [ 1424.778864][T24658] should_fail_ex+0x512/0x640 [ 1424.778875][T24658] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1424.778889][T24658] should_failslab+0xc2/0x120 [ 1424.778904][T24658] __kvmalloc_node_noprof+0x14a/0xa40 [ 1424.778916][T24658] ? __pfx___mutex_lock+0x10/0x10 [ 1424.778932][T24658] ? traverse.part.0.constprop.0+0x397/0x650 [ 1424.778951][T24658] ? traverse.part.0.constprop.0+0x397/0x650 [ 1424.778965][T24658] traverse.part.0.constprop.0+0x397/0x650 [ 1424.778979][T24658] ? lockdep_hardirqs_on+0x7c/0x110 [ 1424.778994][T24658] ? irqentry_exit+0x1dd/0x8c0 [ 1424.779007][T24658] ? rcu_is_watching+0x12/0xc0 [ 1424.779020][T24658] seq_lseek+0x2bb/0x450 [ 1424.779036][T24658] proc_reg_llseek+0x208/0x2f0 [ 1424.779051][T24658] ksys_lseek+0xf3/0x1b0 [ 1424.779064][T24658] do_syscall_64+0xcd/0xf80 [ 1424.779079][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.779090][T24658] RIP: 0033:0x7fca5618f749 [ 1424.779099][T24658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.779109][T24658] RSP: 002b:00007fca56ff1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 1424.779119][T24658] RAX: ffffffffffffffda RBX: 00007fca563e6180 RCX: 00007fca5618f749 [ 1424.779126][T24658] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 0000000000000009 [ 1424.779132][T24658] RBP: 00007fca56ff1090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.779138][T24658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1424.779144][T24658] R13: 00007fca563e6218 R14: 00007fca563e6180 R15: 00007fff85aec688 [ 1424.779157][T24658] [ 1425.258949][ T30] audit: type=1400 audit(2000000160.859:1598): avc: denied { mounton } for pid=24660 comm="syz.1.4752" path="/proc/1454/task" dev="proc" ino=98255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1425.291095][T12724] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1425.345816][T12724] usb 1-1: device descriptor read/8, error -71 [ 1425.399455][T24562] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1425.622222][T12724] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1425.644278][T12724] usb 1-1: device descriptor read/8, error -71 [ 1425.686389][T24562] usb 7-1: Using ep0 maxpacket: 32 [ 1425.693219][T24562] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 1425.702362][T24562] usb 7-1: config 0 has no interface number 0 [ 1425.709938][T24562] usb 7-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1425.720692][T24562] usb 7-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1425.734627][T24562] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1425.744114][T24562] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1425.753219][T24562] usb 7-1: Product: syz [ 1425.757496][T24562] usb 7-1: Manufacturer: syz [ 1425.773518][T24562] usb 7-1: config 0 descriptor?? [ 1425.804884][ T30] audit: type=1800 audit(2000000161.346:1599): pid=24671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4754" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1426.080031][T12724] usb usb1-port1: unable to enumerate USB device [ 1426.166928][T24662] fuse: Bad value for 'fd' [ 1426.182912][T24562] usb 7-1: USB disconnect, device number 47 [ 1427.492012][T24683] geneve3: entered promiscuous mode [ 1427.497280][T24683] geneve3: entered allmulticast mode [ 1427.687947][T24562] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1427.846561][T24694] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4759'. [ 1427.952902][T24562] usb 1-1: Using ep0 maxpacket: 16 [ 1428.057460][T24562] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.084681][T24562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1428.096078][T24562] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1428.118421][T24562] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1428.131658][T24562] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1428.141072][T24562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.154341][T24562] usb 1-1: config 0 descriptor?? [ 1428.337652][T12724] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1428.369001][T24705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24705 comm=syz.5.4764 [ 1428.510231][T12724] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1428.538101][T12724] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 2858, setting to 64 [ 1428.555610][T12724] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1428.568286][T24707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1428.592551][T12724] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1428.602289][T12724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.610630][T12724] usb 8-1: Product: syz [ 1428.615811][T12724] usb 8-1: Manufacturer: syz [ 1428.620872][T12724] usb 8-1: SerialNumber: syz [ 1428.629603][T12724] usb 8-1: config 0 descriptor?? [ 1428.642401][T12724] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 1429.072070][T12724] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 1429.229164][T12724] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1429.245546][T24712] tipc: Enabled bearer , priority 0 [ 1429.303716][T24712] tipc: Disabling bearer [ 1429.313880][T17242] usb 8-1: USB disconnect, device number 2 [ 1429.351402][T24720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1430.209124][T24737] lo speed is unknown, defaulting to 1000 [ 1430.259754][T17242] usb 1-1: USB disconnect, device number 77 [ 1430.262635][T24738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1431.474720][T24760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4779'. [ 1431.545628][T24753] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1431.556169][T24760] trusted_key: encrypted_key: insufficient parameters specified [ 1431.564030][T24760] trusted_key: encrypted_key: insufficient parameters specified [ 1431.606206][T24753] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1431.624186][T24762] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4776'. [ 1431.640048][ T30] audit: type=1400 audit(2000000166.818:1600): avc: denied { firmware_load } for pid=24749 comm="syz.0.4777" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1431.641061][T24753] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1432.871487][T24771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4782'. [ 1432.928880][T24774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4782'. [ 1435.079601][T24796] lo speed is unknown, defaulting to 1000 [ 1435.143883][T24800] netlink: 296 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1435.172211][T24801] netlink: 'syz.7.4790': attribute type 10 has an invalid length. [ 1435.229988][T24801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.237712][T24801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.480440][ T30] audit: type=1400 audit(2000000170.279:1601): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56178 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1435.774460][T24797] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1437.942033][T24562] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1438.194705][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1438.590167][T24562] usb 1-1: Using ep0 maxpacket: 32 [ 1438.601143][T24562] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1438.649604][T24562] usb 1-1: config 0 has no interface number 0 [ 1438.655907][T24562] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1438.666908][T24562] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1438.678688][T24562] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1438.692752][T24562] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1438.703001][T24562] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1438.714870][T24562] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1438.724865][T24562] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1438.735214][T24562] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1438.804639][T24562] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1438.814778][T24562] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1438.865439][T24562] usb 1-1: string descriptor 0 read error: -71 [ 1439.069368][T24562] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1439.239594][T24562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.255030][T24562] usb 1-1: config 0 descriptor?? [ 1439.262637][T24562] usb 1-1: can't set config #0, error -71 [ 1439.275894][T24562] usb 1-1: USB disconnect, device number 78 [ 1439.416584][T24827] block nbd1: shutting down sockets [ 1439.461628][T24832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4796'. [ 1439.470787][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4796'. [ 1439.511925][T24832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4796'. [ 1440.005825][T24848] bridge0: port 2(gretap0) entered blocking state [ 1440.012365][T24848] bridge0: port 2(gretap0) entered disabled state [ 1440.018926][T24848] gretap0: entered allmulticast mode [ 1440.025594][T24848] gretap0: entered promiscuous mode [ 1440.037715][ T2020] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.070062][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4796'. [ 1440.091735][ T4442] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.263468][ T4442] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.287539][ T4442] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.502006][T24850] netlink: 'syz.5.4799': attribute type 12 has an invalid length. [ 1443.425715][T24884] 9p: Bad value for 'port' [ 1443.465421][T24884] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1443.743026][T12724] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1444.658604][T12724] usb 7-1: Using ep0 maxpacket: 16 [ 1444.665597][T12724] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 1444.673799][T12724] usb 7-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 1444.684244][T12724] usb 7-1: config 0 has no interface number 0 [ 1444.690327][T12724] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1444.702294][T12724] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1444.715745][T12724] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1444.746209][T12724] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x4 has an invalid bInterval 118, changing to 10 [ 1444.962750][T12724] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 25956, setting to 1024 [ 1445.164592][T12724] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1445.196720][T12724] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1445.212395][T12724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.231399][T12724] usb 7-1: config 0 descriptor?? [ 1445.247898][T24884] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1445.255388][T24884] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1445.265417][T12724] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1445.545428][T24881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.554056][T24881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.762880][ T6415] usb 7-1: USB disconnect, device number 48 [ 1447.114244][T24925] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 1447.956853][T24934] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4822'. [ 1448.415118][ T6415] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1448.659244][ T6415] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1448.841270][ T6415] usb 7-1: config 0 interface 0 has no altsetting 1 [ 1448.882391][ T6415] usb 7-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 1448.893991][ T6415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1448.922533][ T6415] usb 7-1: Product: syz [ 1448.945695][ T6415] usb 7-1: Manufacturer: syz [ 1448.955211][ T6415] usb 7-1: SerialNumber: syz [ 1448.987211][ T6415] usb 7-1: config 0 descriptor?? [ 1449.315056][ T6415] usb 7-1: USB disconnect, device number 49 [ 1450.163391][T24971] netlink: 'syz.1.4832': attribute type 10 has an invalid length. [ 1450.456654][ T6415] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1450.469173][ T30] audit: type=1400 audit(2000000184.441:1602): avc: denied { accept } for pid=24975 comm="syz.5.4835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1451.612973][T24989] tipc: Enabling of bearer rejected, failed to enable media [ 1451.625801][T24989] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4834'. [ 1451.643413][ T6415] usb 1-1: Using ep0 maxpacket: 16 [ 1451.650295][ T6415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.735859][ T6415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1451.750198][ T6415] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1451.791574][ T6415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.849648][ T6415] usb 1-1: config 0 descriptor?? [ 1451.910411][T12724] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1453.257064][ T6415] input: HID 041e:3100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.0024/input/input80 [ 1453.339154][ T6415] creative-sb0540 0003:041E:3100.0024: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.0-1/input0 [ 1454.149599][ T6415] usb 1-1: USB disconnect, device number 79 [ 1454.196543][T25005] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4844'. [ 1454.635467][T12724] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1454.656005][T12724] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1454.679483][T12724] usb 7-1: can't read configurations, error -71 [ 1455.066857][T25016] syz_tun: entered allmulticast mode [ 1455.076145][ T30] audit: type=1400 audit(2000000188.753:1603): avc: denied { execmod } for pid=25012 comm="syz.6.4847" path=2F6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0202864656C6574656429 dev="tmpfs" ino=2032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1455.273162][T25023] vxcan1: left promiscuous mode [ 1455.363050][T25028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25028 comm=syz.5.4850 [ 1455.481750][T25031] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4851'. [ 1456.886814][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1456.893042][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1456.899441][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1456.909563][T25043] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1457.415151][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1457.421944][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1457.428734][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1457.435373][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1457.442043][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1457.448780][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1457.455465][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1457.462158][T25043] wlan0 speed is unknown, defaulting to 1000 [ 1457.806636][T25051] overlayfs: missing 'workdir' [ 1457.969998][T11553] kernel write not supported for file /1549/net/snmp6 (pid: 11553 comm: kworker/0:1) [ 1457.980032][T12724] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1458.174386][T12724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.238357][T12724] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1458.257678][T12724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.273334][T12724] usb 1-1: config 0 descriptor?? [ 1458.512686][T25065] /dev/nullb0: Can't lookup blockdev [ 1461.214960][T12724] usbhid 1-1:0.0: can't add hid device: -71 [ 1461.220956][T12724] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1461.231520][T12724] usb 1-1: USB disconnect, device number 80 [ 1461.526723][ T30] audit: type=1400 audit(2000000194.758:1604): avc: denied { connect } for pid=25090 comm="syz.1.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1462.061380][T25104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4863'. [ 1462.085986][T25104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4863'. [ 1462.305778][ T30] audit: type=1326 audit(2000000195.507:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25106 comm="syz.1.4873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f723218f749 code=0x0 [ 1463.055447][T25121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4876'. [ 1463.065383][T25121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=25121 comm=syz.6.4876 [ 1463.081079][ T30] audit: type=1400 audit(2000000196.227:1606): avc: denied { shutdown } for pid=25120 comm="syz.6.4876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1463.158333][T12724] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1463.531203][T12724] usb 1-1: Using ep0 maxpacket: 16 [ 1463.538050][T12724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1463.570741][T12724] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1463.603009][T12724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.659985][T12724] usb 1-1: Product: syz [ 1463.683564][T12724] usb 1-1: Manufacturer: syz [ 1463.980345][T12724] usb 1-1: SerialNumber: syz [ 1464.000421][T12724] usb 1-1: config 0 descriptor?? [ 1464.248617][T12724] usb 1-1: USB disconnect, device number 81 [ 1465.244475][T25165] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4884'. [ 1465.359248][T12724] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1465.699569][T25169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4888'. [ 1465.744171][T12724] usb 7-1: device descriptor read/64, error -71 [ 1466.200062][T12724] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1466.856177][T12724] usb 7-1: device descriptor read/64, error -71 [ 1467.000953][T12724] usb usb7-port1: attempt power cycle [ 1467.055771][T25180] netlink: 'syz.7.4891': attribute type 10 has an invalid length. [ 1467.106686][T25180] pimreg: entered allmulticast mode [ 1467.313110][T25178] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1467.563543][T25190] lo speed is unknown, defaulting to 1000 [ 1467.569577][T25190] lo speed is unknown, defaulting to 1000 [ 1467.578737][T25190] lo speed is unknown, defaulting to 1000 [ 1467.634623][T25190] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1467.804981][T25190] lo speed is unknown, defaulting to 1000 [ 1467.820193][T25190] lo speed is unknown, defaulting to 1000 [ 1467.834473][T25190] lo speed is unknown, defaulting to 1000 [ 1467.849067][T25190] lo speed is unknown, defaulting to 1000 [ 1467.863212][T25190] lo speed is unknown, defaulting to 1000 [ 1467.869615][T25190] lo speed is unknown, defaulting to 1000 [ 1467.875997][T25190] lo speed is unknown, defaulting to 1000 [ 1467.882402][T25190] lo speed is unknown, defaulting to 1000 [ 1467.925360][T11553] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1467.932989][T12724] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1467.958261][T12724] usb 7-1: device descriptor read/8, error -71 [ 1468.092197][T25182] overlayfs: overlapping lowerdir path [ 1468.096584][T11553] usb 2-1: Using ep0 maxpacket: 16 [ 1468.107156][T11553] usb 2-1: config 1 has an invalid interface number: 241 but max is 0 [ 1468.115393][T11553] usb 2-1: config 1 has no interface number 0 [ 1468.133152][T11553] usb 2-1: config 1 interface 241 has no altsetting 0 [ 1468.157714][T11553] usb 2-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=35.36 [ 1468.218942][T11553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.227343][T12724] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1468.243426][T11553] usb 2-1: Product: syz [ 1468.248863][T11553] usb 2-1: Manufacturer: syz [ 1468.253801][T11553] usb 2-1: SerialNumber: syz [ 1468.262749][T12724] usb 7-1: device descriptor read/8, error -71 [ 1468.409724][T12724] usb usb7-port1: unable to enumerate USB device [ 1468.466061][T25199] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.4897'. [ 1468.683008][T25185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.693747][T25185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.704380][T11553] ax88179_178a 2-1:1.241: probe with driver ax88179_178a failed with error -22 [ 1468.730712][T11553] usb 2-1: USB disconnect, device number 17 [ 1469.111706][T12724] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1470.709446][T25224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4903'. [ 1470.754932][ T30] audit: type=1400 audit(2000000203.411:1607): avc: denied { append } for pid=25232 comm="syz.7.4906" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1472.867957][T25233] gfs2: not a GFS2 filesystem [ 1473.075965][T12724] IPVS: starting estimator thread 0... [ 1473.185185][T25268] IPVS: using max 44 ests per chain, 105600 per kthread [ 1473.993358][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4919'. [ 1474.045987][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4920'. [ 1474.093946][T25274] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4917'. [ 1474.125513][T12724] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1474.972869][T25286] netlink: 'syz.0.4917': attribute type 4 has an invalid length. [ 1474.980818][T25286] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4917'. [ 1475.030119][T25286] .`: renamed from bond0 (while UP) [ 1475.354488][T12724] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1475.364173][T12724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1475.374267][T12724] usb 7-1: SerialNumber: syz [ 1476.111294][T12724] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1476.138704][T12724] usb 7-1: USB disconnect, device number 57 [ 1477.553637][T25309] overlay: filesystem on ./file0 not supported as upperdir [ 1478.348356][ T976] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1478.391090][ T6415] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 1478.563511][ T976] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1478.572301][ T976] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1478.581018][ T976] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.591336][ T976] usb 1-1: config 8 has no interface number 0 [ 1478.597488][ T976] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1478.608536][ T976] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1478.623173][ T976] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1478.632916][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.641044][ T6415] usb 8-1: Invalid ep0 maxpacket: 64 [ 1478.649364][ T976] usb 1-1: Product: syz [ 1478.653577][ T976] usb 1-1: Manufacturer: syz [ 1478.672499][ T976] usb 1-1: SerialNumber: syz [ 1478.792851][ T6415] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 1479.089555][ T976] usb 1-1: USB disconnect, device number 82 [ 1479.118014][ T6415] usb 8-1: Invalid ep0 maxpacket: 64 [ 1479.123639][ T6415] usb usb8-port1: attempt power cycle [ 1479.866510][ T6415] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 1479.890358][ T6415] usb 8-1: Invalid ep0 maxpacket: 64 [ 1479.903074][T25348] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1479.915925][T25348] VFS: Can't find a romfs filesystem on dev nullb0. [ 1479.915925][T25348] [ 1480.080717][ T6415] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 1480.209259][ T6415] usb 8-1: Invalid ep0 maxpacket: 64 [ 1480.217610][ T6415] usb usb8-port1: unable to enumerate USB device [ 1480.315659][T25353] netlink: 'syz.0.4938': attribute type 10 has an invalid length. [ 1480.360626][T25353] pimreg: entered allmulticast mode [ 1480.477069][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1480.695035][T25358] lo speed is unknown, defaulting to 1000 [ 1480.701489][T25358] wlan0 speed is unknown, defaulting to 1000 [ 1480.708065][T25358] lo speed is unknown, defaulting to 1000 [ 1480.738148][T25351] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1481.114961][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4944'. [ 1481.656032][T25375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4942'. [ 1483.030479][ T5894] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1484.197375][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.210372][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.221816][ T5894] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1484.231315][ T5894] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1484.239332][ T5894] usb 7-1: Manufacturer: syz [ 1485.274071][ T5894] usb 7-1: config 0 descriptor?? [ 1485.392372][ T5894] usbhid 7-1:0.0: can't add hid device: -71 [ 1485.404440][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1485.404718][ T5894] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1485.550241][ T5894] usb 7-1: USB disconnect, device number 58 [ 1485.750571][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1485.767591][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.779991][ T9] usb 2-1: config 0 descriptor?? [ 1485.841380][T25412] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4954'. [ 1486.195478][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1486.459080][ T9] gspca_sunplus: reg_w_riv err -71 [ 1486.466271][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1486.476062][ T9] usb 2-1: USB disconnect, device number 18 [ 1487.039846][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4956'. [ 1487.270025][T25407] netlink: 'syz.5.4952': attribute type 10 has an invalid length. [ 1487.296622][T18695] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 1487.334837][T25407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4952'. [ 1487.376194][T25407] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1487.407231][T25407] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.495988][T25407] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1487.584724][T25432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=25432 comm=syz.0.4959 [ 1487.617128][T25432] netlink: 'syz.0.4959': attribute type 29 has an invalid length. [ 1488.136873][ T5922] kernel read not supported for file /dsp (pid: 5922 comm: kworker/1:5) [ 1489.794446][T18695] Bluetooth: hci5: Unknown advertising packet type: 0x73 [ 1489.794579][T18695] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1490.206094][T25462] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1490.215236][T25462] VFS: Can't find a romfs filesystem on dev nullb0. [ 1490.215236][T25462] [ 1491.149368][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4969'. [ 1493.518272][ T30] audit: type=1400 audit(2000000224.701:1608): avc: denied { mounton } for pid=25494 comm="syz.0.4975" path="/325/file0" dev="ramfs" ino=102470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1493.896824][T25505] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4973'. [ 1493.954139][ T51] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1494.010210][ T5922] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1494.022516][ T51] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1494.042081][ T51] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1494.061711][ T51] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1494.171715][ T5922] usb 8-1: not running at top speed; connect to a high speed hub [ 1494.200564][ T5922] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.227423][ T5922] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1494.251826][ T5922] usb 8-1: config 1 has no interface number 1 [ 1494.262320][ T5922] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1494.298745][ T5922] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1494.329579][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.338655][ T5922] usb 8-1: Product: syz [ 1494.370167][ T5922] usb 8-1: Manufacturer: syz [ 1494.402815][ T5922] usb 8-1: SerialNumber: syz [ 1495.207815][T25516] loop4: detected capacity change from 0 to 2560 [ 1495.215428][ T5922] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 1495.248078][ T5922] usb 8-1: USB disconnect, device number 7 [ 1495.653842][T25529] lo speed is unknown, defaulting to 1000 [ 1495.660571][T25529] wlan0 speed is unknown, defaulting to 1000 [ 1495.667399][T25529] lo speed is unknown, defaulting to 1000 [ 1496.639941][T25398] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1496.800969][T25398] usb 8-1: device descriptor read/64, error -71 [ 1496.850394][T25544] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 1497.013427][T25541] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888062267000 pfn:0x62267 [ 1497.024624][T25546] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803bacec80 pfn:0x3bace [ 1497.045760][T25541] memcg:ffff88801d2a0d40 [ 1497.056446][T25546] memcg:ffff88801d2a0d40 [ 1497.066684][T25541] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 1497.067530][T25398] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1497.075304][T25546] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 1497.091828][T25541] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 1497.100711][T25546] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 1497.109550][T25541] raw: ffff888062267000 0000000000000000 00000001ffffffff ffff88801d2a0d40 [ 1497.118388][T25546] raw: ffff88803bacec80 0000000000000000 00000001ffffffff ffff88801d2a0d40 [ 1497.127236][T25541] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 1497.137647][T25546] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 1497.185174][T25546] page_owner tracks the page as allocated [ 1497.196152][T25546] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 25546, tgid 25541 (syz.0.4985), ts 1497024604068, free_ts 1496947366849 [ 1497.234601][T25546] post_alloc_hook+0x1af/0x220 [ 1497.239515][T25398] usb 8-1: device descriptor read/64, error -71 [ 1497.250530][T25541] page_owner tracks the page as allocated [ 1497.263640][T25546] get_page_from_freelist+0xd0b/0x31a0 [ 1497.280890][T25541] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 25541, tgid 25541 (syz.0.4985), ts 1497013405659, free_ts 1496947386132 [ 1497.356020][T25546] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1497.356528][T25398] usb usb8-port1: attempt power cycle [ 1497.367845][T11553] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1497.380023][T25546] alloc_pages_mpol+0x1fb/0x550 [ 1497.395807][T25546] folio_alloc_noprof+0x20/0x2d0 [ 1497.404244][T25546] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 1497.420289][T25546] filemap_alloc_folio_noprof+0x5e/0x80 [ 1497.425842][T25546] page_cache_ra_order+0x571/0xed0 [ 1497.441677][T25541] post_alloc_hook+0x1af/0x220 [ 1497.446441][T25541] get_page_from_freelist+0xd0b/0x31a0 [ 1497.451885][T25541] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1497.463123][T25546] filemap_fault+0x16ac/0x29d0 [ 1497.468019][T25546] __do_fault+0x10d/0x490 [ 1497.472362][T25541] alloc_pages_mpol+0x1fb/0x550 [ 1497.477797][T25546] do_fault+0xae4/0x1ad0 [ 1497.482325][T25541] folio_alloc_noprof+0x20/0x2d0 [ 1497.487642][T25546] __handle_mm_fault+0x1919/0x2bb0 [ 1497.492803][T25541] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 1497.499498][T25546] handle_mm_fault+0x3fe/0xad0 [ 1497.504308][T25541] filemap_alloc_folio_noprof+0x5e/0x80 [ 1497.510124][T25546] __get_user_pages+0x54e/0x3590 [ 1497.515244][T25541] page_cache_ra_order+0x571/0xed0 [ 1497.521734][T25546] populate_vma_page_range+0x267/0x3f0 [ 1497.527421][T25541] filemap_fault+0x16ac/0x29d0 [ 1497.532319][T25546] __mm_populate+0x1d8/0x380 [ 1497.536909][T25546] page last free pid 25539 tgid 25538 stack trace: [ 1497.543500][T11553] usb 7-1: Using ep0 maxpacket: 8 [ 1497.552191][T25541] __do_fault+0x10d/0x490 [ 1497.557561][T11553] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1497.566305][T11553] usb 7-1: config 179 has no interface number 0 [ 1497.572765][T25541] do_fault+0x302/0x1ad0 [ 1497.580733][T11553] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1497.592047][T25546] __free_frozen_pages+0x7df/0x1170 [ 1497.597230][T25546] qlist_free_all+0x4c/0xf0 [ 1497.601707][T25546] kasan_quarantine_reduce+0x195/0x1e0 [ 1497.602532][T25541] __handle_mm_fault+0x1919/0x2bb0 [ 1497.607295][T11553] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1497.623758][T25546] __kasan_slab_alloc+0x69/0x90 [ 1497.627721][T25541] handle_mm_fault+0x3fe/0xad0 [ 1497.629265][T11553] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1497.634377][T25541] do_user_addr_fault+0x60c/0x1370 [ 1497.644678][T25546] kmem_cache_alloc_noprof+0x25e/0x770 [ 1497.650137][T25541] exc_page_fault+0x64/0xc0 [ 1497.655557][T25546] ptlock_alloc+0x1f/0x70 [ 1497.661122][T25541] asm_exc_page_fault+0x26/0x30 [ 1497.663865][T25546] pte_alloc_one+0x84/0x3d0 [ 1497.670010][T25541] page last free pid 25539 tgid 25538 stack trace: [ 1497.673377][T11553] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1497.691373][T25546] do_fault+0x8b8/0x1ad0 [ 1497.695624][T25546] __handle_mm_fault+0x1919/0x2bb0 [ 1497.700797][T25546] handle_mm_fault+0x3fe/0xad0 [ 1497.705623][T25541] __free_frozen_pages+0x7df/0x1170 [ 1497.705808][T11553] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1497.711395][T25541] qlist_free_all+0x4c/0xf0 [ 1497.724857][T25546] __get_user_pages+0x54e/0x3590 [ 1497.734173][T25541] kasan_quarantine_reduce+0x195/0x1e0 [ 1497.734209][T11553] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1497.749216][T25546] populate_vma_page_range+0x267/0x3f0 [ 1497.754724][T25546] __mm_populate+0x1d8/0x380 [ 1497.759310][T25546] vm_mmap_pgoff+0x37f/0x470 [ 1497.764033][T11553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.772682][T25546] ksys_mmap_pgoff+0x7d/0x5c0 [ 1497.777522][T25546] __x64_sys_mmap+0x125/0x190 [ 1497.779157][T25541] __kasan_slab_alloc+0x69/0x90 [ 1497.783106][T25546] ------------[ cut here ]------------ [ 1497.788156][T25398] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1497.792562][T25546] kernel BUG at mm/filemap.c:858! [ 1497.802220][T25544] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1497.805238][T25546] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1497.813930][T25541] kmem_cache_alloc_noprof+0x25e/0x770 [ 1497.818533][T25546] CPU: 0 UID: 0 PID: 25546 Comm: syz.0.4985 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.818558][T25546] Tainted: [L]=SOFTLOCKUP [ 1497.818564][T25546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1497.818574][T25546] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 1497.818593][T25546] Code: 95 c6 ff 48 c7 c6 00 ee 99 8b 4c 89 ef e8 af 72 11 00 90 0f 0b e8 57 95 c6 ff 48 c7 c6 60 ee 99 8b 4c 89 ef e8 98 72 11 00 90 <0f> 0b e8 40 95 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 32 95 c6 ff 48 [ 1497.818610][T25546] RSP: 0018:ffffc9000485f490 EFLAGS: 00010246 [ 1497.818625][T25546] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000e5d5000 [ 1497.818636][T25546] RDX: 0000000000080000 RSI: ffffffff81f86a48 RDI: ffff88804c02ce04 [ 1497.818648][T25546] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 1497.824807][T25541] ptlock_alloc+0x1f/0x70 [ 1497.834962][T25546] R10: ffffffff9088cbd7 R11: 0000000000000001 R12: 0000000000000004 [ 1497.834976][T25546] R13: ffffea0000eeb380 R14: 0000000000000000 R15: 0000000000000000 [ 1497.834986][T25546] FS: 00007fb9a1a0e6c0(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000 [ 1497.839698][T25541] pte_alloc_one+0x84/0x3d0 [ 1497.849317][T25546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1497.849332][T25546] CR2: 00007f7232fb3f98 CR3: 0000000044680000 CR4: 00000000003526f0 [ 1497.849344][T25546] Call Trace: [ 1497.849350][T25546] [ 1497.855691][T25541] do_fault+0x8b8/0x1ad0 [ 1497.874871][T25546] ? __pfx___filemap_add_folio+0x10/0x10 [ 1497.874898][T25546] filemap_add_folio+0x19a/0x610 [ 1497.874918][T25546] ? __lock_acquire+0x436/0x2890 [ 1497.874937][T25546] ? __pfx_filemap_add_folio+0x10/0x10 [ 1497.874952][T25546] ? __pfx_filemap_get_entry+0x10/0x10 [ 1497.874972][T25546] page_cache_ra_order+0x637/0xed0 [ 1497.875001][T25546] filemap_fault+0x16ac/0x29d0 [ 1497.875018][T25546] ? __pfx_filemap_fault+0x10/0x10 [ 1497.875041][T25546] ? __pfx_filemap_map_pages+0x10/0x10 [ 1497.875056][T25546] __do_fault+0x10d/0x490 [ 1497.875073][T25546] ? __pfx_filemap_map_pages+0x10/0x10 [ 1497.875087][T25546] do_fault+0xae4/0x1ad0 [ 1498.023687][T25546] ? __pfx_filemap_map_pages+0x10/0x10 [ 1498.029129][T25546] __handle_mm_fault+0x1919/0x2bb0 [ 1498.034223][T25546] ? __pfx___handle_mm_fault+0x10/0x10 [ 1498.039671][T25546] handle_mm_fault+0x3fe/0xad0 [ 1498.044419][T25546] __get_user_pages+0x54e/0x3590 [ 1498.049340][T25546] ? __pfx___get_user_pages+0x10/0x10 [ 1498.054691][T25546] populate_vma_page_range+0x267/0x3f0 [ 1498.060129][T25546] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1498.066085][T25546] ? __pfx_find_vma_intersection+0x10/0x10 [ 1498.071869][T25546] ? do_mmap+0x69c/0x1210 [ 1498.076181][T25546] __mm_populate+0x1d8/0x380 [ 1498.080752][T25546] ? __pfx___mm_populate+0x10/0x10 [ 1498.085845][T25546] ? up_write+0x282/0x4e0 [ 1498.090156][T25546] vm_mmap_pgoff+0x37f/0x470 [ 1498.094728][T25546] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1498.099817][T25546] ? __fget_files+0x20e/0x3c0 [ 1498.104476][T25546] ksys_mmap_pgoff+0x32c/0x5c0 [ 1498.109222][T25546] __x64_sys_mmap+0x125/0x190 [ 1498.113877][T25546] do_syscall_64+0xcd/0xf80 [ 1498.118362][T25546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.124231][T25546] RIP: 0033:0x7fb9a0b8f749 [ 1498.128622][T25546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1498.148208][T25546] RSP: 002b:00007fb9a1a0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1498.156594][T25546] RAX: ffffffffffffffda RBX: 00007fb9a0de6090 RCX: 00007fb9a0b8f749 [ 1498.164538][T25546] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1498.172486][T25546] RBP: 00007fb9a0c13f91 R08: 0000000000000004 R09: 000000002c93a000 [ 1498.180430][T25546] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 1498.188377][T25546] R13: 00007fb9a0de6128 R14: 00007fb9a0de6090 R15: 00007fff345de9e8 [ 1498.196329][T25546] [ 1498.199325][T25546] Modules linked in: [ 1498.203807][T25546] ---[ end trace 0000000000000000 ]--- [ 1498.216309][T25398] usb 8-1: device descriptor read/8, error -71 [ 1498.216352][T25541] __handle_mm_fault+0x1919/0x2bb0 [ 1498.228173][T25546] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 1498.234261][T25541] handle_mm_fault+0x3fe/0xad0 [ 1498.239163][T25541] __get_user_pages+0x54e/0x3590 [ 1498.244242][T25546] Code: 95 c6 ff 48 c7 c6 00 ee 99 8b 4c 89 ef e8 af 72 11 00 90 0f 0b e8 57 95 c6 ff 48 c7 c6 60 ee 99 8b 4c 89 ef e8 98 72 11 00 90 <0f> 0b e8 40 95 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 32 95 c6 ff 48 [ 1498.264040][T25541] populate_vma_page_range+0x267/0x3f0 [ 1498.269611][T25541] __mm_populate+0x1d8/0x380 [ 1498.274232][T25541] vm_mmap_pgoff+0x37f/0x470 [ 1498.278933][T25541] ksys_mmap_pgoff+0x7d/0x5c0 [ 1498.283946][T25546] RSP: 0018:ffffc9000485f490 EFLAGS: 00010246 [ 1498.286237][T25541] __x64_sys_mmap+0x125/0x190 [ 1498.290977][T25546] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000e5d5000 [ 1498.295193][T25541] ------------[ cut here ]------------ [ 1498.308559][T25541] kernel BUG at mm/filemap.c:858! [ 1498.315046][T25546] RDX: 0000000000080000 RSI: ffffffff81f86a48 RDI: ffff88804c02ce04 [ 1498.315640][T25541] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI [ 1498.323337][T25546] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 1498.329403][T25541] CPU: 1 UID: 0 PID: 25541 Comm: syz.0.4985 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1498.329429][T25541] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1498.329436][T25541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1498.329446][T25541] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 1498.329466][T25541] Code: 95 c6 ff 48 c7 c6 00 ee 99 8b 4c 89 ef e8 af 72 11 00 90 0f 0b e8 57 95 c6 ff 48 c7 c6 60 ee 99 8b 4c 89 ef e8 98 72 11 00 90 <0f> 0b e8 40 95 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 32 95 c6 ff 48 [ 1498.329482][T25541] RSP: 0018:ffffc9000484f840 EFLAGS: 00010293 [ 1498.329497][T25541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1498.329507][T25541] RDX: ffff88801cf44980 RSI: ffffffff81f86a48 RDI: ffff88801cf44e04 [ 1498.329518][T25541] RBP: 0000000000112cc0 R08: 0000000000000000 R09: 0000000000000000 [ 1498.329528][T25541] R10: ffffffff9088cbd7 R11: 0000000000000001 R12: 0000000000000004 [ 1498.329538][T25541] R13: ffffea00018899c0 R14: 0000000000000000 R15: 0000000000000000 [ 1498.329549][T25541] FS: 0000555578dff500(0000) GS:ffff8881249f1000(0000) knlGS:0000000000000000 [ 1498.329565][T25541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1498.329576][T25541] CR2: 00007f72321733e0 CR3: 0000000044680000 CR4: 00000000003526f0 [ 1498.329587][T25541] Call Trace: [ 1498.329593][T25541] [ 1498.329603][T25541] ? __pfx___filemap_add_folio+0x10/0x10 [ 1498.329624][T25541] filemap_add_folio+0x19a/0x610 [ 1498.329640][T25541] ? __lock_acquire+0x436/0x2890 [ 1498.329658][T25541] ? __pfx_filemap_add_folio+0x10/0x10 [ 1498.329673][T25541] ? __pfx_filemap_get_entry+0x10/0x10 [ 1498.329690][T25541] page_cache_ra_order+0x637/0xed0 [ 1498.329721][T25541] filemap_fault+0x16ac/0x29d0 [ 1498.329739][T25541] ? __pfx_filemap_fault+0x10/0x10 [ 1498.329756][T25541] ? lockdep_init_map_type+0x5c/0x270 [ 1498.329775][T25541] ? __raw_spin_lock_init+0x3a/0x110 [ 1498.329799][T25541] __do_fault+0x10d/0x490 [ 1498.329816][T25541] do_fault+0x302/0x1ad0 [ 1498.329837][T25541] ? __pfx_filemap_map_pages+0x10/0x10 [ 1498.329852][T25541] __handle_mm_fault+0x1919/0x2bb0 [ 1498.329877][T25541] ? reacquire_held_locks+0xcd/0x1f0 [ 1498.540594][T25541] ? __pfx___handle_mm_fault+0x10/0x10 [ 1498.546043][T25541] ? lock_vma_under_rcu+0x176/0x580 [ 1498.551219][T25541] ? lockdep_hardirqs_on+0x7c/0x110 [ 1498.556407][T25541] handle_mm_fault+0x3fe/0xad0 [ 1498.561160][T25541] do_user_addr_fault+0x60c/0x1370 [ 1498.566249][T25541] ? rcu_is_watching+0x12/0xc0 [ 1498.570995][T25541] exc_page_fault+0x64/0xc0 [ 1498.575478][T25541] asm_exc_page_fault+0x26/0x30 [ 1498.580313][T25541] RIP: 0033:0x7fb9a0b58b08 [ 1498.584712][T25541] Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f [ 1498.604297][T25541] RSP: 002b:00007fff345deb48 EFLAGS: 00010202 [ 1498.610343][T25541] RAX: 0000200000000200 RBX: 0000000000000004 RCX: 0030626c6c756e2f [ 1498.618286][T25541] RDX: 000000000000000c RSI: 6c756e2f7665642f RDI: 0000200000000200 [ 1498.626225][T25541] RBP: 00007fb9a0de7da0 R08: 0000001b33420000 R09: 0000000000000001 [ 1498.634165][T25541] R10: 0000000000000001 R11: 0000000000000009 R12: 00007fb9a0de609c [ 1498.642114][T25541] R13: 00007fff345dec40 R14: fffffffffffffffe R15: 00007fff345dec60 [ 1498.650076][T25541] [ 1498.653077][T25541] Modules linked in: [ 1498.658068][T25541] ---[ end trace 0000000000000000 ]--- [ 1498.660477][T25546] R10: ffffffff9088cbd7 R11: 0000000000000001 R12: 0000000000000004 [ 1498.683158][T25541] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 1498.689199][T25541] Code: 95 c6 ff 48 c7 c6 00 ee 99 8b 4c 89 ef e8 af 72 11 00 90 0f 0b e8 57 95 c6 ff 48 c7 c6 60 ee 99 8b 4c 89 ef e8 98 72 11 00 90 <0f> 0b e8 40 95 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 32 95 c6 ff 48 [ 1498.709174][T25541] RSP: 0018:ffffc9000485f490 EFLAGS: 00010246 [ 1498.709712][T25546] R13: ffffea0000eeb380 R14: 0000000000000000 R15: 0000000000000000 [ 1498.724978][T25541] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000e5d5000 [ 1498.733013][T25541] RDX: 0000000000080000 RSI: ffffffff81f86a48 RDI: ffff88804c02ce04 [ 1498.742070][T25546] FS: 00007fb9a1a0e6c0(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000 [ 1498.751124][T25541] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 1498.759735][T25541] R10: ffffffff9088cbd7 R11: 0000000000000001 R12: 0000000000000004 [ 1498.767336][T25546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1498.767821][T25541] R13: ffffea0000eeb380 R14: 0000000000000000 R15: 0000000000000000 [ 1498.774673][T25546] CR2: 00007f72323b6ad8 CR3: 0000000044680000 CR4: 00000000003526f0 [ 1498.783847][T25541] FS: 0000555578dff500(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000 [ 1498.791474][T25546] Kernel panic - not syncing: Fatal exception [ 1498.799583][T25546] Kernel Offset: disabled