last executing test programs: 21m41.16681427s ago: executing program 32 (id=586): r0 = syz_io_uring_setup(0xe41, &(0x7f00000006c0)={0x0, 0x211a, 0x8, 0x80000004, 0x1a6}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x42102, 0x0, 0xd}, &(0x7f0000000040)='./file0/file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r0, 0x47f6, 0x0, 0xcd, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 21m40.258451392s ago: executing program 33 (id=592): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x400000, {0x3, 0x0, 0xc550, 0x0, 0x1, 0x0, {0x8001, 0x0, 0x0, 0x803, 0x0, 0x0, 0x80, 0x0, 0x200, 0x1000, 0x0, r2, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x20000, 0x9, 0x0, {0x0, 0x0, 0x7, 0x9, 0x4, 0xfffffffffffffffe, 0x1, 0x40, 0x77, 0x1000, 0xfffffffe, 0x0, r3, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 21m29.766888181s ago: executing program 1 (id=634): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 21m28.715249566s ago: executing program 1 (id=637): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 19m9.827319622s ago: executing program 3 (id=1348): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 19m8.958105805s ago: executing program 3 (id=1353): syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x4, 0x4000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m8.822126995s ago: executing program 3 (id=1354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "d92a431e04397c3b8efe720290ac34a9"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6d92d34784aa079119cf89f47253ff9c"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 19m8.601818751s ago: executing program 36 (id=1354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "d92a431e04397c3b8efe720290ac34a9"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6d92d34784aa079119cf89f47253ff9c"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m59.282135448s ago: executing program 4 (id=3978): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r3) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 3m57.067556368s ago: executing program 4 (id=3981): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r4, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) 3m55.152168435s ago: executing program 4 (id=3985): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="09000000f5e57aa04e", 0x9) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0x1b833011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)='l0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3m52.565208358s ago: executing program 4 (id=3991): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m50.58110734s ago: executing program 4 (id=3994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x43) getdents(r5, &(0x7f0000000140)=""/48, 0x30) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3m38.550127256s ago: executing program 5 (id=4016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000001480)) socket$nl_route(0x10, 0x3, 0x0) 3m35.943550813s ago: executing program 5 (id=4021): epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='system.advise\x00') socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m35.400305306s ago: executing program 37 (id=3994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x43) getdents(r5, &(0x7f0000000140)=""/48, 0x30) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3m34.324052436s ago: executing program 5 (id=4029): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000180"]) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() syz_usb_connect(0x1d00, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000e65d00000000000000000000000a20000000000a03000000ffffffeb0000070000040900010073797a30000000008c000000090a010400000000000000000700000408000a40020000000900020073797a30000000000900010073797a3000000000080005400000000e48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000004100001800b00010064796e7365740000080003400000012014000000"], 0xd4}}, 0x20050800) 3m27.323617472s ago: executing program 5 (id=4039): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x903d01) syz_open_dev$evdev(&(0x7f0000000180), 0xce, 0x8002) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@orangefs_parent={0x28, 0x2, {{"3d26f9387866168a817cfa3ad8ed6d16", 0x6}, {"f3a7b9f5b898327b1564761254f84a88", 0x7}}}, 0x20000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x1) 3m26.526090916s ago: executing program 5 (id=4040): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x24000015) sendfile(r5, r4, 0x0, 0x100000002) 3m26.250168095s ago: executing program 5 (id=4041): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 3m10.991052227s ago: executing program 38 (id=4041): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 1m58.067895236s ago: executing program 9 (id=4194): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="09000000f5e57aa04e", 0x9) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0x1b833011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)='l0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) read(0xffffffffffffffff, &(0x7f0000001400)=""/4076, 0xfffffeea) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000003800010727bd7000ff72c02509"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 1m47.903118955s ago: executing program 9 (id=4202): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1}}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000100)) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$rxrpc(0x21, 0x2, 0xa) write$6lowpan_control(r3, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 1m45.583297578s ago: executing program 9 (id=4206): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003d00)={0xffffffffffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x7) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000004080)={'ip6tnl0\x00', &(0x7f0000004040)=@ethtool_sset_info={0x33, 0x4e, 0x800}}) r4 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x8}}) 1m35.706150451s ago: executing program 9 (id=4214): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000840)=[@code={0x1, 0x51, {"660f388239f3430fc7350200000064440f22033e81080000000066b8e2000f00d866ba4300b8f6ff0000ef36660fd4f8450f0ff10d450f00ddc441bdf67ca900"}}], 0x51}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000840)=ANY=[], 0x5e}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010400002200"]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c8100, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000018000000000000000500000000000000010000000000000085000000000700000000000000b8a2992d438e0f21f8350400f0000f23f848b866373fdf2a3145320f23d00f21f835100000030f23f8460f"], 0x9d}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m34.082641942s ago: executing program 9 (id=4219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, 0x0, 0x20000040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) r5 = syz_open_dev$loop(0x0, 0x760, 0xa382) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r5, r5, 0x0, 0x24002de8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x44}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r6, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m18.949489702s ago: executing program 39 (id=4219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, 0x0, 0x20000040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) r5 = syz_open_dev$loop(0x0, 0x760, 0xa382) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r5, r5, 0x0, 0x24002de8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x44}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r6, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m0.432724439s ago: executing program 1 (id=4241): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}, @exit_looper], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 57.782508123s ago: executing program 1 (id=4268): socket$alg(0x26, 0x5, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x7fffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003d00)={0xffffffffffffffff}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x7) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004080)={'ip6tnl0\x00', &(0x7f0000000200)=@ethtool_eeprom={0x43, 0x7fff, 0x3a, 0xc4, "e9ed2918c10612f4ba962493131dc43c2044cfef5ede8517c693a6f7261df6fb5770b8cba3cead44e3a88e673a8e0e5129cf8268e7c0993e8eda611f050521da119e514fd328bb58acc5894742fa99d074154158d55e5a62832137c4b6bf84288733e9abd99823dae4624b6966786e89b73766b86d707112edecf4e5ec8b7cf3c826b54e6346fca70c6e1fcc8a9eeda1034202a3eca2674ab83c576628253b3221211e2c6dad776190ff7072d95d78c5ed1784b868535e448d7544d9571f38eb0e2fabf3"}}) 55.319351727s ago: executing program 1 (id=4271): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r4, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) pipe2$watch_queue(0x0, 0x80) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0xfffffffa}}}, 0xd) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 39.730285838s ago: executing program 40 (id=4271): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r4, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) pipe2$watch_queue(0x0, 0x80) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0xfffffffa}}}, 0xd) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 23.983413044s ago: executing program 8 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) gettid() sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x0) 23.053950007s ago: executing program 7 (id=4285): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0xb47, 0x1, 0x3, 0x2}}, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802222, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000000)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 21.511103307s ago: executing program 0 (id=4311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x18, 0x1, 0x0) r4 = msgget(0x1, 0x64d) msgrcv(r4, 0x0, 0x0, 0x1, 0x2000) msgsnd(r4, 0x0, 0x8, 0x0) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000100)=""/70) r5 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) syz_pidfd_open(0x0, 0x0) sendfile(r8, r8, 0x0, 0xffffffff) 19.829901891s ago: executing program 7 (id=4313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x1ce) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x36e8, 0x5, 0x0, 0x4}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) socket$packet(0x11, 0x2, 0x300) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x5, r6, 0x0, &(0x7f000076e000/0x1000)=nil, 0x1000, 0x4897}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 19.666461812s ago: executing program 0 (id=4314): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x42342, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r5, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendfile(r4, r3, &(0x7f0000002700)=0x1, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0x1000000}) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xb4}}, 0x0) 19.373814429s ago: executing program 2 (id=4315): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000200)={r6, 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, 0xa}) 18.264986228s ago: executing program 8 (id=4316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7660, &(0x7f0000000040)={0x0, 0x766b, 0x2, 0x1, 0x138}, &(0x7f0000000100), &(0x7f00000001c0)) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r3, 0x0, 0xff2e) ioctl$TCFLSH(r3, 0x540b, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) 16.204119311s ago: executing program 2 (id=4318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000100)="7bf458e12fa4441b4b9a3c89900ad7868beea69bf17dc75383238308bf2e568384be3822a28268264ab0763485f029173f6055074d2a80c4f36b6498e3a38e726354e41a21b4d8900bdded521e33eebf10d1ebf55fa217784662be00da83e94c69e8691d944f3b0d7279d38c56d36a1c19fe9c2b981def269b28ea81eb9e856b0d8b25eb961e8b", 0x87}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x24, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2f, 0x0, @multicast2, @multicast2}}}}}}, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x5) timer_settime(0x0, 0x1, 0x0, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x24, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB="140000001002010000000000000000000100800a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480110001800b0001006578746864720000240002800800"], 0x108}}, 0x0) fallocate(r6, 0x1, 0x100000000, 0x80000000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048840}, 0x44000) 15.838000415s ago: executing program 7 (id=4319): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r4 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r4, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xa, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x200}}]}, 0x40}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f00000002800200", 0x2c}], 0x1}, 0x4000) 14.159044274s ago: executing program 0 (id=4320): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bind$qrtr(r2, &(0x7f0000000200), 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r5) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) ioctl$TIOCMGET(r3, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) 13.951894553s ago: executing program 8 (id=4321): socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0) r3 = getpid() r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r6, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x5, 0xee3, 0x7}) ioctl$TIOCMSET(r4, 0x5418, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x86f, 0x2001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prlimit64(r3, 0x0, &(0x7f0000000000), 0x0) 13.792455028s ago: executing program 7 (id=4323): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r4, 0x200004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRESOCT=0x0], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000180)) write$apparmor_exec(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 13.390837022s ago: executing program 2 (id=4324): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x10, 0x80000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0xb, "2313"}, @global=@item_4={0x3, 0x1, 0x4, "9cdf9d3f"}, @local=@item_4={0x3, 0x2, 0x3, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0xa7f080de355cf2d, "0900be00"}, @global=@item_4={0x3, 0x1, 0x9}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_012={0x2, 0x2, 0x1, "eece"}]}}, 0x0}, 0x0) r0 = socket(0xa, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x19, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001540)={0x0, {{0xa, 0x4e22, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x7, @remote, 0x3}}}, 0x108) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000180)=""/15) 11.267366832s ago: executing program 2 (id=4325): r0 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_open_dev$dri(0x0, 0x2, 0x98240) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x1000000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c001}, 0x4000000) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, 0x0, 0x0) setns(r1, 0x6a000000) 9.739193351s ago: executing program 8 (id=4326): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000200)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000540)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x4, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}, {{0x2, 0x4e22, @empty}}]}, 0x290) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="08001f0005000000050011000100000008001f0008000000080023"], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 9.427850302s ago: executing program 6 (id=4327): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @private}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, r4}, 0x50) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40086602, &(0x7f0000002740)) syz_io_uring_setup(0x1881, 0x0, &(0x7f0000000580), &(0x7f0000000900)) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000001c0)=@un=@file={0x1, './file0\x00'}}) io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0) 7.867441868s ago: executing program 6 (id=4328): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r4, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000001d80)={0x2, 0x4}, 0x2) 7.516461568s ago: executing program 0 (id=4329): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x30, 0x0, 0x0) r4 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe6, 0x3, 0x2, 0xfffff07c, 0x8001], [0x7, 0x18, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x1, 0x800, 0x5]], '\x00', [{0x8000, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x1, 0x0, 0x1}], '\x00', 0x2}) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 5.167135453s ago: executing program 6 (id=4330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r6, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="55b32bbd7000fedbdf25100000005637dbb9581e86c6baa2105f0f4415169d"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x800) mkdir(&(0x7f0000000080)='./file0\x00', 0x13c) 4.710562758s ago: executing program 8 (id=4331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x903d01) syz_open_dev$evdev(&(0x7f0000000180), 0xce, 0x8002) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=@orangefs_parent={0x28, 0x2, {{"3d26f9387866168a817cfa3ad8ed6d16", 0x6}, {"f3a7b9f5b898327b1564761254f84a88", 0x7}}}, 0x20000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x1) 4.460830001s ago: executing program 7 (id=4332): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x1fe, 0x12) socket$nl_generic(0x10, 0x3, 0x10) 4.132161622s ago: executing program 6 (id=4333): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x2, 0xffffffff, 0xffdfffff}, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a00000000", 0xe, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.674881048s ago: executing program 0 (id=4334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/41) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) r9 = open(0x0, 0x10000, 0x0) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.372815904s ago: executing program 2 (id=4335): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000000000)=""/165, 0xa5, 0x3) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r6, 0x5}, &(0x7f0000000180)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x9], 0x0, [0x40000000]}, 0x400}}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800700010063740000140002800800014000000002080002400000000b0500"], 0x80}}, 0x0) 3.283081772s ago: executing program 8 (id=4336): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000050a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008"], 0x92fc}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2.495631436s ago: executing program 6 (id=4337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') lseek(r4, 0x401, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.138200115s ago: executing program 7 (id=4338): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) r5 = msgget$private(0x0, 0x40) msgsnd(r5, &(0x7f0000000480)={0x1, "d4998204c8be3a1ea0fc7b3a06d189298d951a4bdc79cd5d691ed71674ecf277e3b72f2b7cca204485352181d4f09ff887dad08fab2ad6a24a0bfd8f2afaf746d15265777f1505f837"}, 0x51, 0x0) io_setup(0x9, &(0x7f0000000100)) write(r0, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fb", 0x32) 518.684641ms ago: executing program 0 (id=4339): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x100007, 0x4, 0x2, 0x5, 0x94, 0xc1, 0x9, 0x20000005, 0x10000, 0xa, 0x80000001, 0xd, 0x4, 0x7, 0x7, 0xcc000000, 0x6, 0x4, 0xf, 0x2, 0xfffffff3, 0x3}}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0xc00, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) pread64(r0, 0x0, 0x0, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2e0080c4) sendmsg$FOU_CMD_GET(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fedbdf250300000006000a004e23000005000300", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @loopback}, {0x20000010304, @multicast}, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 40.645919ms ago: executing program 2 (id=4340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r5}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1e94a0be7"], 0x0) 0s ago: executing program 6 (id=4341): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x800}, 0x24040040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) kernel console output (not intermixed with test programs): comm="syz.4.3902" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=98829 res=0 errno=0 [ 1205.398846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.029079][T13882] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1206.161614][ T30] audit: type=1326 audit(1756055446.646:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1206.217338][T13882] usb 6-1: Using ep0 maxpacket: 16 [ 1206.228666][T13882] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1206.278557][T13882] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1206.278833][ T30] audit: type=1326 audit(1756055446.646:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1206.325162][ T30] audit: type=1326 audit(1756055446.646:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1206.407755][T13882] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1206.419480][T13882] usb 6-1: config 1 has no interface number 1 [ 1206.431160][T13882] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1206.453579][T13882] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1206.467829][T13882] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1206.477539][T13882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.488778][T13882] usb 6-1: Product: syz [ 1206.501635][T13882] usb 6-1: Manufacturer: syz [ 1206.522209][T13882] usb 6-1: SerialNumber: syz [ 1206.529671][ T30] audit: type=1326 audit(1756055446.646:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1206.634047][ T30] audit: type=1326 audit(1756055446.646:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1206.690229][ T30] audit: type=1326 audit(1756055446.646:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1206.763200][ T30] audit: type=1326 audit(1756055446.646:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1206.849358][ T30] audit: type=1326 audit(1756055446.646:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb22dd8d550 code=0x7ffc0000 [ 1206.908116][T13882] usb 6-1: USB disconnect, device number 66 [ 1206.955644][ T30] audit: type=1326 audit(1756055446.646:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20297 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1211.879717][T20349] bond0: (slave bond_slave_0): Releasing backup interface [ 1212.012474][T20349] bond0: (slave bond_slave_1): Releasing backup interface [ 1212.126776][T20349] team0: Port device team_slave_0 removed [ 1212.224855][T20349] team0: Port device team_slave_1 removed [ 1212.243433][T20349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.379147][T20349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.552042][T20349] team0: Port device netdevsim0 removed [ 1212.728708][T20349] bond1: (slave vlan2): Releasing active interface [ 1212.811443][T20349] bond2: (slave geneve2): Releasing active interface [ 1212.868515][T20349] bond3: (slave gretap2): Releasing active interface [ 1212.967352][T20349] bond4: (slave veth5): Releasing active interface [ 1213.119129][T20349] bond5: (slave veth7): Releasing active interface [ 1213.225417][T20349] bond6: (slave veth9): Releasing active interface [ 1213.363524][T20349] bond7: (slave veth11): Releasing active interface [ 1213.477066][T20349] bond8: (slave veth13): Releasing active interface [ 1213.530482][T20349] bond9: (slave veth15): Releasing active interface [ 1213.916375][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1213.916391][ T30] audit: type=1326 audit(1756055454.406:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1214.039199][ T30] audit: type=1326 audit(1756055454.446:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1214.115486][ T30] audit: type=1326 audit(1756055454.446:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1214.251439][ T30] audit: type=1326 audit(1756055454.446:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1214.412306][ T30] audit: type=1326 audit(1756055454.446:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1214.511502][ T30] audit: type=1326 audit(1756055454.466:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae9898d550 code=0x7ffc0000 [ 1214.687436][ T30] audit: type=1326 audit(1756055454.466:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1214.744032][ T30] audit: type=1326 audit(1756055454.466:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1214.888388][ T30] audit: type=1326 audit(1756055454.466:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1214.952243][ T30] audit: type=1326 audit(1756055454.466:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20363 comm="syz.8.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1216.615958][T20389] delete_channel: no stack [ 1217.463525][T20403] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3926'. [ 1217.801957][T20406] kAFS: unable to lookup cell '' [ 1218.936171][T20415] netlink: 'syz.8.3928': attribute type 1 has an invalid length. [ 1219.004250][T20415] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1219.063373][T20415] bond8: (slave veth0_to_bond): Releasing active interface [ 1220.249373][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1220.249393][ T30] audit: type=1326 audit(1756055460.716:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1220.249447][ T30] audit: type=1326 audit(1756055460.716:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1220.249496][ T30] audit: type=1326 audit(1756055460.746:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1220.249544][ T30] audit: type=1326 audit(1756055460.746:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1220.250220][ T30] audit: type=1326 audit(1756055460.746:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae9898d550 code=0x7ffc0000 [ 1220.250272][ T30] audit: type=1326 audit(1756055460.746:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1220.250430][ T30] audit: type=1326 audit(1756055460.746:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1220.255437][ T30] audit: type=1326 audit(1756055460.746:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1220.255498][ T30] audit: type=1326 audit(1756055460.746:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1220.255545][ T30] audit: type=1326 audit(1756055460.746:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.8.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9898ebe9 code=0x7ffc0000 [ 1223.047629][ T5967] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1223.218198][ T5967] usb 9-1: config 0 has no interfaces? [ 1223.225058][ T5967] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1223.225084][ T5967] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.225099][ T5967] usb 9-1: Product: syz [ 1223.225110][ T5967] usb 9-1: Manufacturer: syz [ 1223.225122][ T5967] usb 9-1: SerialNumber: syz [ 1223.227573][ T5967] usb 9-1: config 0 descriptor?? [ 1224.337904][T20476] veth0_to_team: entered promiscuous mode [ 1226.598977][T20483] kernel profiling enabled (shift: 17) [ 1226.635433][T20483] netlink: 'syz.5.3944': attribute type 10 has an invalid length. [ 1226.647579][T20483] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3944'. [ 1226.670812][T20483] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1227.282891][T20486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1229.917464][T13882] usb 9-1: USB disconnect, device number 55 [ 1230.457483][T13882] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1230.607491][T13882] usb 10-1: Using ep0 maxpacket: 16 [ 1230.620353][T13882] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1230.655297][T13882] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1230.748254][T13882] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1230.765211][T13882] usb 10-1: config 1 has no interface number 1 [ 1230.772421][T13882] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1230.788810][T13882] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1230.804408][T13882] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1230.814792][T13882] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.829999][T13882] usb 10-1: Product: syz [ 1230.834635][T13882] usb 10-1: Manufacturer: syz [ 1230.839724][T13882] usb 10-1: SerialNumber: syz [ 1231.116751][T13882] usb 10-1: USB disconnect, device number 50 [ 1231.268822][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.822839][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1231.822854][ T30] audit: type=1326 audit(1756055472.316:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1231.939121][ T30] audit: type=1326 audit(1756055472.356:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1232.029990][ T30] audit: type=1326 audit(1756055472.366:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1232.096875][ T30] audit: type=1326 audit(1756055472.366:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1232.212170][ T30] audit: type=1326 audit(1756055472.366:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1232.276556][ T30] audit: type=1326 audit(1756055472.366:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1232.405547][ T30] audit: type=1326 audit(1756055472.366:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1232.462384][ T30] audit: type=1326 audit(1756055472.366:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8f098d550 code=0x7ffc0000 [ 1232.559725][ T30] audit: type=1326 audit(1756055472.366:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1232.654029][ T30] audit: type=1326 audit(1756055472.366:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.9.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1232.967632][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 1233.208642][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1233.220406][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1235.868354][T13882] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1236.065353][T13882] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.126017][T13882] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1236.195096][T13882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.503871][T13882] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1236.707152][T13882] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1236.906403][T20582] delete_channel: no stack [ 1236.917514][T13882] usb 5-1: USB disconnect, device number 75 [ 1238.017474][T20607] gretap0: entered promiscuous mode [ 1238.055251][T20607] gretap0: left promiscuous mode [ 1239.077207][T20621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1239.267459][T13882] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1239.537520][T13882] usb 6-1: Using ep0 maxpacket: 16 [ 1239.547791][T13882] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1239.593896][T13882] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1239.620172][T13882] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1239.656194][T13882] usb 6-1: config 1 has no interface number 1 [ 1239.698495][T13882] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1239.785105][T13882] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1239.842368][T13882] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1239.896549][T13882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.969808][T13882] usb 6-1: Product: syz [ 1240.004377][T13882] usb 6-1: Manufacturer: syz [ 1240.021911][T13882] usb 6-1: SerialNumber: syz [ 1240.327380][T13882] usb 6-1: USB disconnect, device number 67 [ 1240.441809][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.238344][T20640] netlink: 'syz.9.3977': attribute type 1 has an invalid length. [ 1241.409017][T20640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1242.118718][T20661] fuse: Bad value for 'fd' [ 1244.069427][T20656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1244.098473][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.105106][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.120071][T20656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1244.136788][T20656] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1244.146758][T20656] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1244.179842][T20656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1244.510368][T20671] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3981'. [ 1244.598508][T20671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1244.770648][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1244.770707][ T30] audit: type=1800 audit(1756055485.256:1296): pid=20677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3982" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1245.747523][T19844] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1245.802277][T19021] Bluetooth: hci3: command 0x0c1a tx timeout [ 1245.917804][T19844] usb 5-1: Using ep0 maxpacket: 16 [ 1245.925459][T19844] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1245.948025][T19844] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1245.983318][T19844] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1246.006341][T19844] usb 5-1: config 1 has no interface number 1 [ 1246.022556][T19844] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1246.054004][T19844] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1246.177485][T19021] Bluetooth: hci0: command 0x0406 tx timeout [ 1246.183776][T19021] Bluetooth: hci2: command 0x0406 tx timeout [ 1246.236511][T19844] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1246.250949][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 1246.259949][T19844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.289708][T19844] usb 5-1: Product: syz [ 1246.297531][T19844] usb 5-1: Manufacturer: syz [ 1246.302377][T19844] usb 5-1: SerialNumber: syz [ 1246.651049][T19844] usb 5-1: USB disconnect, device number 76 [ 1247.202773][T20709] netlink: 'syz.4.3990': attribute type 1 has an invalid length. [ 1247.226470][T20703] program syz.8.3988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1247.293705][T20709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1247.429830][ T30] audit: type=1326 audit(1756055487.926:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1247.501129][ T30] audit: type=1326 audit(1756055487.926:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1247.671181][ T30] audit: type=1326 audit(1756055488.166:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1247.725618][ T30] audit: type=1326 audit(1756055488.166:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1247.814605][ T30] audit: type=1326 audit(1756055488.166:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.6.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1248.247668][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 1248.603165][T20723] lo: left allmulticast mode [ 1248.622939][T20723] tunl0: left allmulticast mode [ 1248.631333][T20723] gre0: left allmulticast mode [ 1248.645505][T20723] gretap0: left allmulticast mode [ 1248.654728][T20723] erspan0: left allmulticast mode [ 1248.694438][T20723] ip_vti0: left allmulticast mode [ 1248.723174][T20723] ip6_vti0: left allmulticast mode [ 1248.730999][T20723] sit0: left allmulticast mode [ 1248.743916][T20723] ip6tnl0: left allmulticast mode [ 1248.752433][T20723] ip6gre0: left allmulticast mode [ 1248.760703][T20723] syz_tun: left allmulticast mode [ 1248.791649][T20723] ip6gretap0: left allmulticast mode [ 1248.814913][T20723] team0: left allmulticast mode [ 1248.822902][T20723] bond0: left allmulticast mode [ 1248.834865][T20723] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1248.893864][T20723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.902166][T20723] dummy0: left allmulticast mode [ 1248.912402][T20723] nlmon0: left allmulticast mode [ 1249.020354][T20723] caif0: left allmulticast mode [ 1249.055174][T20723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1250.327923][ T30] audit: type=1326 audit(1756055490.776:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1250.327991][ T30] audit: type=1326 audit(1756055490.776:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1250.328034][ T30] audit: type=1326 audit(1756055490.776:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1250.328067][ T30] audit: type=1326 audit(1756055490.776:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1250.328100][ T30] audit: type=1326 audit(1756055490.776:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1250.328132][ T30] audit: type=1326 audit(1756055490.776:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1250.328164][ T30] audit: type=1326 audit(1756055490.776:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1250.328197][ T30] audit: type=1326 audit(1756055490.776:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1250.328228][ T30] audit: type=1326 audit(1756055490.776:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1250.328261][ T30] audit: type=1326 audit(1756055490.776:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22dd8ebe9 code=0x7ffc0000 [ 1251.312283][T20746] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1253.134382][T20746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1253.134444][T20746] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1253.142540][T20746] tipc: Resetting bearer [ 1253.168294][T20746] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1253.168321][T20746] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1253.171730][T20746] tipc: Resetting bearer [ 1253.200939][T20746] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1253.200975][T20746] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1253.211109][T20746] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1253.211136][T20746] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1253.352814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.715213][T20788] netlink: 'syz.6.4001': attribute type 1 has an invalid length. [ 1253.947640][T19844] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1254.032730][T20788] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1254.097531][T19844] usb 6-1: Using ep0 maxpacket: 16 [ 1254.099555][T19844] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1254.099582][T19844] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1254.099604][T19844] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1254.099628][T19844] usb 6-1: config 1 has no interface number 1 [ 1254.099668][T19844] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1254.099703][T19844] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1254.101809][T19844] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1254.101830][T19844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.101846][T19844] usb 6-1: Product: syz [ 1254.101858][T19844] usb 6-1: Manufacturer: syz [ 1254.101869][T19844] usb 6-1: SerialNumber: syz [ 1254.353430][T19844] usb 6-1: USB disconnect, device number 68 [ 1254.426239][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1257.797416][T19844] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1257.950612][T19844] usb 6-1: Using ep0 maxpacket: 32 [ 1257.954421][T19844] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1257.954453][T19844] usb 6-1: config 0 has no interface number 0 [ 1257.954499][T19844] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1257.963236][T19844] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1257.963261][T19844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.963276][T19844] usb 6-1: Product: syz [ 1257.963288][T19844] usb 6-1: Manufacturer: syz [ 1257.963300][T19844] usb 6-1: SerialNumber: syz [ 1257.965598][T19844] usb 6-1: config 0 descriptor?? [ 1260.021222][T19844] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 1260.021288][T19844] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 1260.021303][T19844] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1260.021363][T19844] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 1260.334688][T20889] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 20889 comm: syz.6.4011) [ 1260.335023][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1260.335038][ T30] audit: type=1800 audit(1756055500.826:1363): pid=20889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4011" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=101036 res=0 errno=0 [ 1261.919588][T19844] usb 6-1: USB disconnect, device number 69 [ 1261.980421][ T30] audit: type=1800 audit(1756055502.476:1364): pid=20915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4015" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1265.838169][T20954] tipc: Enabling of bearer rejected, already enabled [ 1266.111680][T20958] netlink: 'syz.6.4028': attribute type 1 has an invalid length. [ 1266.397460][T19844] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1266.458915][T19021] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1266.461671][T19021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1266.471757][T19021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1266.473949][T19021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1266.474681][T19021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1266.484657][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1266.530917][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1266.533364][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1266.546720][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1266.551663][T19844] usb 10-1: Using ep0 maxpacket: 16 [ 1266.551717][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1266.558023][T19844] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1266.558052][T19844] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1266.558073][T19844] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1266.558094][T19844] usb 10-1: config 1 has no interface number 1 [ 1266.558134][T19844] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1266.558174][T19844] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1266.568865][T19844] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1266.568894][T19844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.568910][T19844] usb 10-1: Product: syz [ 1266.568921][T19844] usb 10-1: Manufacturer: syz [ 1266.568933][T19844] usb 10-1: SerialNumber: syz [ 1266.717408][T13882] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1266.840086][T19844] usb 10-1: USB disconnect, device number 51 [ 1266.989076][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1266.996747][T13882] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.996770][T13882] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1266.996798][T13882] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1266.996816][T13882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.398799][T20968] chnl_net:caif_netlink_parms(): no params data found [ 1267.771385][T20968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.771470][T20968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.771608][T20968] bridge_slave_0: entered allmulticast mode [ 1267.774601][T20968] bridge_slave_0: entered promiscuous mode [ 1267.780130][T20968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.780292][T20968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.780432][T20968] bridge_slave_1: entered allmulticast mode [ 1267.789670][T20968] bridge_slave_1: entered promiscuous mode [ 1267.890615][T20968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.893128][T20968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.052819][T20968] team0: Port device team_slave_0 added [ 1268.058083][T20968] team0: Port device team_slave_1 added [ 1268.163569][T20968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.163586][T20968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.163607][T20968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.164981][T20968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.164994][T20968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.165014][T20968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.267062][T20968] hsr_slave_0: entered promiscuous mode [ 1268.271199][T20968] hsr_slave_1: entered promiscuous mode [ 1268.271924][T20968] debugfs: 'hsr0' already exists in 'hsr' [ 1268.271941][T20968] Cannot create hsr debugfs directory [ 1268.595112][ T5866] Bluetooth: hci5: command tx timeout [ 1269.975587][T20968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1270.045430][T20968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1270.051269][T20968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1270.060191][T20968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1270.260069][T20968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.274383][T20968] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.286815][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.288367][ T6976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.295156][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.295237][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.378576][T20968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.416973][T20968] veth0_vlan: entered promiscuous mode [ 1270.423470][T20968] veth1_vlan: entered promiscuous mode [ 1270.461067][T20968] veth0_macvtap: entered promiscuous mode [ 1270.464600][T20968] veth1_macvtap: entered promiscuous mode [ 1270.482523][T20968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.493315][T20968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.505506][T14707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.505544][T14707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.505571][T14707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.505596][T14707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.648728][ T5866] Bluetooth: hci5: command tx timeout [ 1271.156341][T14707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.156366][T14707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.269174][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.269195][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.480370][T21029] tipc: Enabled bearer , priority 0 [ 1272.481669][T21029] syzkaller0: entered promiscuous mode [ 1272.481694][T21029] syzkaller0: entered allmulticast mode [ 1272.734723][ T5866] Bluetooth: hci5: command tx timeout [ 1273.089260][T13882] usb 6-1: USB disconnect, device number 70 [ 1273.238818][T21039] tipc: Resetting bearer [ 1273.243281][T21041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4037'. [ 1273.264704][ T30] audit: type=1326 audit(1756055513.756:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38f8ebe9 code=0x7ffc0000 [ 1273.268880][ T30] audit: type=1326 audit(1756055513.756:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38f8ebe9 code=0x7ffc0000 [ 1273.968568][ T30] audit: type=1326 audit(1756055514.446:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2a38f8ebe9 code=0x7ffc0000 [ 1273.968630][ T30] audit: type=1326 audit(1756055514.446:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38f8ebe9 code=0x7ffc0000 [ 1273.968680][ T30] audit: type=1326 audit(1756055514.446:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38f8ebe9 code=0x7ffc0000 [ 1273.968728][ T30] audit: type=1326 audit(1756055514.446:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38f8ebe9 code=0x7ffc0000 [ 1273.968775][ T30] audit: type=1326 audit(1756055514.446:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38f8ebe9 code=0x7ffc0000 [ 1273.968822][ T30] audit: type=1326 audit(1756055514.446:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a38f8d550 code=0x7ffc0000 [ 1273.968871][ T30] audit: type=1326 audit(1756055514.446:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38f8ebe9 code=0x7ffc0000 [ 1273.968918][ T30] audit: type=1326 audit(1756055514.446:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a38f8ebe9 code=0x7ffc0000 [ 1274.142264][T21028] tipc: Resetting bearer [ 1274.173225][ T3532] tipc: Resetting bearer [ 1274.807356][ T5866] Bluetooth: hci5: command tx timeout [ 1274.814285][T21084] program syz.5.4041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1280.040297][T21165] futex_wake_op: syz.9.4053 tries to shift op by 32; fix this program [ 1280.692139][ T5864] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1280.857369][ T5864] usb 9-1: Using ep0 maxpacket: 16 [ 1280.872657][ T5864] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1280.872687][ T5864] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1280.872708][ T5864] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1280.873001][ T5864] usb 9-1: config 1 has no interface number 1 [ 1280.873048][ T5864] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1280.883460][ T5864] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1280.920487][ T5864] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1280.920528][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.923766][ T5864] usb 9-1: Product: syz [ 1280.923787][ T5864] usb 9-1: Manufacturer: syz [ 1280.925203][ T5864] usb 9-1: SerialNumber: syz [ 1281.387692][ T5864] usb 9-1: USB disconnect, device number 56 [ 1281.621826][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.292983][T21196] pimreg: entered allmulticast mode [ 1283.007080][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1283.007100][ T30] audit: type=1326 audit(1756055523.496:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1283.007562][ T30] audit: type=1326 audit(1756055523.506:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1283.007892][ T30] audit: type=1326 audit(1756055523.506:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1283.008227][ T30] audit: type=1326 audit(1756055523.506:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1283.008270][ T30] audit: type=1326 audit(1756055523.506:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1283.013882][ T30] audit: type=1326 audit(1756055523.506:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1283.013942][ T30] audit: type=1326 audit(1756055523.506:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1283.013979][ T30] audit: type=1326 audit(1756055523.506:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f652e98d550 code=0x7ffc0000 [ 1283.014047][ T30] audit: type=1326 audit(1756055523.506:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1283.014079][ T30] audit: type=1326 audit(1756055523.506:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21206 comm="syz.0.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1283.087450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1283.153506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1284.138594][T21202] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1284.690659][T21239] netlink: 328 bytes leftover after parsing attributes in process `syz.6.4064'. [ 1284.937886][ T5864] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1285.228706][ T5864] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1285.228737][ T5864] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1285.228771][ T5864] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1285.228789][ T5864] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.281585][T21237] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1285.286719][ T5864] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1287.443012][ T5924] usb 10-1: USB disconnect, device number 52 [ 1288.388514][ T5924] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1288.549426][ T5924] usb 10-1: Using ep0 maxpacket: 16 [ 1288.553906][ T5924] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1288.553928][ T5924] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1288.553943][ T5924] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1288.553965][ T5924] usb 10-1: config 1 has no interface number 1 [ 1288.553993][ T5924] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1288.554021][ T5924] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1288.555784][ T5924] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1288.555807][ T5924] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.555822][ T5924] usb 10-1: Product: syz [ 1288.555833][ T5924] usb 10-1: Manufacturer: syz [ 1288.555845][ T5924] usb 10-1: SerialNumber: syz [ 1288.823102][ T5924] usb 10-1: USB disconnect, device number 53 [ 1288.940993][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.758169][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1289.758189][ T30] audit: type=1326 audit(1756055530.256:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1289.758498][ T30] audit: type=1326 audit(1756055530.256:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1289.778067][ T30] audit: type=1326 audit(1756055530.276:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1289.778559][ T30] audit: type=1326 audit(1756055530.276:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1289.778616][ T30] audit: type=1326 audit(1756055530.276:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1289.808472][ T30] audit: type=1326 audit(1756055530.306:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1289.808629][ T30] audit: type=1326 audit(1756055530.306:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1289.812662][ T30] audit: type=1326 audit(1756055530.306:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8f098d550 code=0x7ffc0000 [ 1289.813019][ T30] audit: type=1326 audit(1756055530.306:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1289.813161][ T30] audit: type=1326 audit(1756055530.306:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21325 comm="syz.9.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1290.611229][T19021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1290.613785][T19021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1290.614702][T19021] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1290.615456][T19021] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1290.616712][T19021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1291.510705][T21340] chnl_net:caif_netlink_parms(): no params data found [ 1292.466074][T21340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.466212][T21340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.466350][T21340] bridge_slave_0: entered allmulticast mode [ 1292.468702][T21340] bridge_slave_0: entered promiscuous mode [ 1292.474032][T21340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.474390][T21340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.474533][T21340] bridge_slave_1: entered allmulticast mode [ 1292.475815][T21340] bridge_slave_1: entered promiscuous mode [ 1292.647511][T19021] Bluetooth: hci6: command tx timeout [ 1292.838726][T21340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.904027][T21340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.124264][T21340] team0: Port device team_slave_0 added [ 1293.126459][T21340] team0: Port device team_slave_1 added [ 1293.169289][T21340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.169306][T21340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.169327][T21340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.170920][T21340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.170933][T21340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.170953][T21340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.228692][T21340] hsr_slave_0: entered promiscuous mode [ 1293.229756][T21340] hsr_slave_1: entered promiscuous mode [ 1293.230309][T21340] debugfs: 'hsr0' already exists in 'hsr' [ 1293.230326][T21340] Cannot create hsr debugfs directory [ 1294.098876][ T5864] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1294.290273][ T5864] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1294.290306][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.290322][ T5864] usb 9-1: Product: syz [ 1294.290333][ T5864] usb 9-1: Manufacturer: syz [ 1294.290345][ T5864] usb 9-1: SerialNumber: syz [ 1294.297712][ T5864] usb 9-1: config 0 descriptor?? [ 1294.650559][T21340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1294.654028][ T5864] cx82310_eth 9-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1294.656319][ T5864] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1294.663566][ T5864] usb 9-1: USB disconnect, device number 57 [ 1294.677826][T21340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1294.703633][T21340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1294.717149][T21340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1294.739673][T19021] Bluetooth: hci6: command tx timeout [ 1294.971120][T21340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.021892][T21340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.051591][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.051674][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.081035][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.081119][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.352493][T21340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.484307][T21340] veth0_vlan: entered promiscuous mode [ 1295.560061][T21340] veth1_vlan: entered promiscuous mode [ 1295.635763][T21340] veth0_macvtap: entered promiscuous mode [ 1295.664620][T21340] veth1_macvtap: entered promiscuous mode [ 1295.752780][T21340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.757147][T21340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.103591][ T6972] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.103649][ T6972] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.103677][ T6972] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.103704][ T6972] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.137469][T19341] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1296.324333][T19341] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1296.324361][T19341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.324376][T19341] usb 9-1: Product: syz [ 1296.324387][T19341] usb 9-1: Manufacturer: syz [ 1296.324399][T19341] usb 9-1: SerialNumber: syz [ 1296.326670][T19341] usb 9-1: config 0 descriptor?? [ 1296.511573][T21415] vlan2: entered allmulticast mode [ 1296.511594][T21415] veth0_to_bond: entered allmulticast mode [ 1296.725150][T19341] cx82310_eth 9-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1296.736188][T19341] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1296.749195][T19341] usb 9-1: USB disconnect, device number 58 [ 1296.807393][T19021] Bluetooth: hci6: command tx timeout [ 1297.030959][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1297.030978][ T30] audit: type=1326 audit(1756055537.526:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1297.031027][ T30] audit: type=1326 audit(1756055537.526:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1297.031521][ T30] audit: type=1326 audit(1756055537.526:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1297.031846][ T30] audit: type=1326 audit(1756055537.526:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1297.031897][ T30] audit: type=1326 audit(1756055537.526:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1297.032476][ T30] audit: type=1326 audit(1756055537.526:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1297.032528][ T30] audit: type=1326 audit(1756055537.526:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1297.033097][ T30] audit: type=1326 audit(1756055537.526:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8f098d550 code=0x7ffc0000 [ 1297.033149][ T30] audit: type=1326 audit(1756055537.526:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1297.033197][ T30] audit: type=1326 audit(1756055537.526:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.9.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1297.123292][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.123318][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.253375][ T6976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.253395][ T6976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.961176][T19021] Bluetooth: hci6: command tx timeout [ 1298.967165][T21468] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1298.972991][T21468] team0: Port device batadv1 added [ 1302.115435][T21519] tipc: Resetting bearer [ 1302.247603][T21519] tipc: Enabling of bearer rejected, already enabled [ 1302.799030][T21515] tipc: Resetting bearer [ 1303.168156][ T6972] tipc: Resetting bearer [ 1303.850823][T21490] delete_channel: no stack [ 1305.217304][ T5953] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1305.413716][ T5953] usb 10-1: Using ep0 maxpacket: 16 [ 1305.440010][ T5953] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.440062][ T5953] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1305.440106][ T5953] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1305.440131][ T5953] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.533077][ T5953] usb 10-1: config 0 descriptor?? [ 1305.542433][ T5953] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1305.548167][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.548232][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.328844][T21584] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 1307.740543][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4108'. [ 1308.014271][T13882] usb 10-1: USB disconnect, device number 54 [ 1308.241572][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1308.241588][ T30] audit: type=1326 audit(1756055548.726:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1308.241992][ T30] audit: type=1326 audit(1756055548.736:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1308.272519][ T30] audit: type=1326 audit(1756055548.766:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1308.282451][ T30] audit: type=1326 audit(1756055548.766:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1308.282516][ T30] audit: type=1326 audit(1756055548.766:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1308.282563][ T30] audit: type=1326 audit(1756055548.766:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1308.282606][ T30] audit: type=1326 audit(1756055548.766:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1308.282652][ T30] audit: type=1326 audit(1756055548.766:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8f098d550 code=0x7ffc0000 [ 1308.282697][ T30] audit: type=1326 audit(1756055548.766:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1308.282735][ T30] audit: type=1326 audit(1756055548.766:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21615 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f098ebe9 code=0x7ffc0000 [ 1308.457521][T13882] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1308.607471][T13882] usb 9-1: Using ep0 maxpacket: 16 [ 1308.608965][T13882] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1308.608985][T13882] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1308.609000][T13882] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1308.609016][T13882] usb 9-1: config 1 has no interface number 1 [ 1308.609044][T13882] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1308.609073][T13882] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1308.610862][T13882] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1308.610882][T13882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.610897][T13882] usb 9-1: Product: syz [ 1308.610909][T13882] usb 9-1: Manufacturer: syz [ 1308.610920][T13882] usb 9-1: SerialNumber: syz [ 1309.016890][T21603] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 1309.362623][T13882] usb 9-1: USB disconnect, device number 59 [ 1309.393527][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1310.100183][T21649] netlink: 'syz.9.4112': attribute type 6 has an invalid length. [ 1310.102974][T21649] netlink: 'syz.9.4112': attribute type 6 has an invalid length. [ 1310.258149][T21640] input: syz0 as /devices/virtual/input/input54 [ 1314.248378][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1314.248399][ T30] audit: type=1326 audit(1756055554.746:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21716 comm="syz.0.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1314.248455][ T30] audit: type=1326 audit(1756055554.746:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21716 comm="syz.0.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1314.291875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1314.325266][ T30] audit: type=1326 audit(1756055554.816:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21716 comm="syz.0.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1314.325328][ T30] audit: type=1326 audit(1756055554.816:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21716 comm="syz.0.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1314.325373][ T30] audit: type=1326 audit(1756055554.816:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21716 comm="syz.0.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1314.395387][ T30] audit: type=1326 audit(1756055554.876:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21716 comm="syz.0.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1314.395437][ T30] audit: type=1326 audit(1756055554.876:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21716 comm="syz.0.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1314.395470][ T30] audit: type=1326 audit(1756055554.876:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21716 comm="syz.0.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1314.820529][T21731] fuse: Bad value for 'fd' [ 1316.575250][ T30] audit: type=1326 audit(1756055557.066:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1316.575605][ T30] audit: type=1326 audit(1756055557.066:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21733 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1316.752007][T21737] vlan2: entered allmulticast mode [ 1318.390678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.810615][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.841042][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.956187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.363954][T21764] binder: 21761:21764 ioctl c0306201 0 returned -14 [ 1321.969528][T21775] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1323.006456][T21640] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1323.064933][T21719] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1323.590224][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1323.590248][ T30] audit: type=1400 audit(1756055564.066:1674): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21790 comm="syz.6.4135" [ 1323.737717][T21798] netlink: 'syz.2.4134': attribute type 10 has an invalid length. [ 1323.745910][T21798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4134'. [ 1323.756143][T21798] team0: entered promiscuous mode [ 1323.762526][T21798] team_slave_0: entered promiscuous mode [ 1323.801706][T21798] team_slave_1: entered promiscuous mode [ 1323.909008][T21798] team0: entered allmulticast mode [ 1323.917345][T21798] team_slave_0: entered allmulticast mode [ 1323.923290][T21798] team_slave_1: entered allmulticast mode [ 1323.942208][T21798] bridge0: port 3(team0) entered blocking state [ 1323.970220][T21798] bridge0: port 3(team0) entered disabled state [ 1324.004035][T21798] bridge0: port 3(team0) entered blocking state [ 1324.010545][T21798] bridge0: port 3(team0) entered forwarding state [ 1324.549020][T21784] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1325.586913][T21815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1327.246531][T21829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.739522][ T30] audit: type=1326 audit(1756055569.216:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1328.763931][ T30] audit: type=1326 audit(1756055569.216:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1328.786452][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.793623][ T30] audit: type=1326 audit(1756055569.216:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1328.831412][ T30] audit: type=1326 audit(1756055569.216:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1328.858691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.872545][ T30] audit: type=1326 audit(1756055569.226:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1328.901051][ T30] audit: type=1326 audit(1756055569.226:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1328.923517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.939466][ T30] audit: type=1326 audit(1756055569.226:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1329.013868][ T30] audit: type=1326 audit(1756055569.226:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1329.036485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.156315][ T30] audit: type=1326 audit(1756055569.226:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1329.238902][T21851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1329.311283][T21852] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1329.344191][ T30] audit: type=1326 audit(1756055569.226:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1331.464630][T21847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1332.087547][T21873] usb usb8: usbfs: process 21873 (syz.8.4149) did not claim interface 0 before use [ 1337.483080][T21930] tipc: Failed to remove unknown binding: 66,1,1/0:390943355/390943357 [ 1337.492220][T21930] tipc: Failed to remove unknown binding: 66,1,1/0:390943355/390943357 [ 1337.522938][T21930] input: syz0 as /devices/virtual/input/input55 [ 1338.392708][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4159'. [ 1339.917600][T21948] netlink: 'syz.9.4164': attribute type 21 has an invalid length. [ 1340.526245][T21935] netdevsim netdevsim6: Direct firmware load for nel/config failed with error -2 [ 1340.536039][T21948] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4164'. [ 1340.558531][T21935] netdevsim netdevsim6: Falling back to sysfs fallback for: nel/config [ 1342.188011][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1342.220978][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1342.278941][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1342.300915][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1342.328778][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1342.379354][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.537113][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.715782][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.963964][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.145150][T21964] chnl_net:caif_netlink_parms(): no params data found [ 1343.378154][ T12] bridge0: port 3(team0) entered disabled state [ 1343.392859][ T12] bridge_slave_1: left allmulticast mode [ 1343.400961][ T12] bridge_slave_1: left promiscuous mode [ 1343.406794][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.427120][ T12] bridge_slave_0: left allmulticast mode [ 1343.433063][ T12] bridge_slave_0: left promiscuous mode [ 1343.439479][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.012223][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.023395][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.034199][ T12] bond0 (unregistering): Released all slaves [ 1344.354874][T21964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.382422][T21964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.399742][T21964] bridge_slave_0: entered allmulticast mode [ 1344.421402][T21964] bridge_slave_0: entered promiscuous mode [ 1344.436254][ T5866] Bluetooth: hci3: command tx timeout [ 1344.439974][T21964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.454696][T21964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.463494][T21964] bridge_slave_1: entered allmulticast mode [ 1344.516329][T21964] bridge_slave_1: entered promiscuous mode [ 1345.989282][T22006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4174'. [ 1346.488117][ T5866] Bluetooth: hci3: command tx timeout [ 1347.341527][T22007] vlan2: entered allmulticast mode [ 1347.357053][T22007] bond1: entered allmulticast mode [ 1347.729784][T21964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.905013][T21964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.333207][ T12] hsr_slave_0: left promiscuous mode [ 1348.462388][ T12] hsr_slave_1: left promiscuous mode [ 1348.500743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1348.530691][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.558027][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1348.588469][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.651805][ T5866] Bluetooth: hci3: command tx timeout [ 1348.816432][ T12] veth1_macvtap: left promiscuous mode [ 1348.822247][ T12] veth0_macvtap: left promiscuous mode [ 1348.828103][ T12] veth1_vlan: left promiscuous mode [ 1348.861814][ T12] veth0_vlan: left promiscuous mode [ 1350.107635][T14095] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1350.387609][T14095] usb 10-1: Using ep0 maxpacket: 16 [ 1350.400007][T14095] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1350.415008][T14095] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1350.531531][T14095] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1350.643343][T14095] usb 10-1: config 1 has no interface number 1 [ 1350.671017][T14095] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1350.721995][T14095] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1350.733419][ T5866] Bluetooth: hci3: command tx timeout [ 1350.750940][T14095] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1350.798984][T14095] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.807135][T14095] usb 10-1: Product: syz [ 1350.831601][T22059] fuse: Bad value for 'fd' [ 1350.858938][T14095] usb 10-1: Manufacturer: syz [ 1350.873220][T14095] usb 10-1: SerialNumber: syz [ 1351.680030][ T12] team_slave_1 (unregistering): left promiscuous mode [ 1351.703576][ T12] team_slave_1 (unregistering): left allmulticast mode [ 1351.716842][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1351.935055][ T12] team_slave_0 (unregistering): left promiscuous mode [ 1351.947464][ T12] team_slave_0 (unregistering): left allmulticast mode [ 1351.958837][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1352.851790][T22067] Set syz1 is full, maxelem 6117 reached [ 1354.800260][T21964] team0: Port device team_slave_0 added [ 1354.874873][T21964] team0: Port device team_slave_1 added [ 1355.810073][T14095] usb 10-1: USB disconnect, device number 55 [ 1355.848261][T21964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.879818][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1355.897949][T21964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1355.992872][T21964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.382137][T21964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.397051][T21964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.428422][ T5953] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1356.512589][T21964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.609463][ T5953] usb 10-1: Using ep0 maxpacket: 16 [ 1356.638458][ T5953] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1356.655690][ T5953] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1356.673148][ T5953] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1356.696368][ T5953] usb 10-1: config 1 has no interface number 1 [ 1356.712926][ T5953] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1356.752345][ T5953] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1356.769277][ T5953] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1356.783761][ T5953] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.793896][ T5953] usb 10-1: Product: syz [ 1356.798990][ T5953] usb 10-1: Manufacturer: syz [ 1356.803957][ T5953] usb 10-1: SerialNumber: syz [ 1356.956250][T21964] hsr_slave_0: entered promiscuous mode [ 1356.996086][T21964] hsr_slave_1: entered promiscuous mode [ 1357.046857][T21964] debugfs: 'hsr0' already exists in 'hsr' [ 1357.063780][T21964] Cannot create hsr debugfs directory [ 1357.203690][ T5953] usb 10-1: USB disconnect, device number 56 [ 1357.354874][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1359.487370][T17700] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1359.772060][T17700] usb 10-1: Using ep0 maxpacket: 8 [ 1359.785804][T17700] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1359.795203][T17700] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.827239][T17700] usb 10-1: Product: syz [ 1359.908766][T17700] usb 10-1: Manufacturer: syz [ 1359.913583][T17700] usb 10-1: SerialNumber: syz [ 1359.942525][T17700] usb 10-1: config 0 descriptor?? [ 1360.165889][T17700] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1360.424563][T21964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1360.496421][T21964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1360.725680][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1360.725701][ T30] audit: type=1326 audit(1756055601.216:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.6.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1360.771691][T21964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1360.822601][ T30] audit: type=1326 audit(1756055601.266:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.6.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1360.911627][ T30] audit: type=1326 audit(1756055601.276:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.6.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1360.976803][T21964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1361.000315][ T30] audit: type=1326 audit(1756055601.376:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.6.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1361.055264][ T30] audit: type=1326 audit(1756055601.376:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.6.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1361.203125][ T30] audit: type=1326 audit(1756055601.586:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.6.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1361.328069][ T30] audit: type=1326 audit(1756055601.626:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.6.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1361.455775][ T30] audit: type=1326 audit(1756055601.626:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.6.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866938ebe9 code=0x7ffc0000 [ 1361.660629][T21964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.705848][T21964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.860984][T17700] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1361.891693][T17700] usb 10-1: USB disconnect, device number 57 [ 1363.207532][T19341] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1363.367451][T19341] usb 10-1: Using ep0 maxpacket: 16 [ 1363.374984][T19341] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1363.389220][T19341] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1363.412805][T19341] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1363.431719][T19341] usb 10-1: config 1 has no interface number 1 [ 1363.443796][T19341] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1363.488035][T19341] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1363.537968][T19341] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1363.564014][T19341] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.583381][T19341] usb 10-1: Product: syz [ 1363.617032][T19341] usb 10-1: Manufacturer: syz [ 1363.632710][T19341] usb 10-1: SerialNumber: syz [ 1363.926173][T22178] cifs: Unknown parameter 'f,' [ 1364.406414][T22184] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4196'. [ 1364.575580][ T12] bond0 (unregistering): Released all slaves [ 1364.890583][ T12] bond1 (unregistering): Released all slaves [ 1365.546366][ T12] bond2 (unregistering): Released all slaves [ 1365.616881][ T12] bond3 (unregistering): Released all slaves [ 1366.229497][ T12] bond4 (unregistering): Released all slaves [ 1366.607731][ T12] bond5 (unregistering): Released all slaves [ 1366.801570][T22187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1366.894527][ T12] bond6 (unregistering): Released all slaves [ 1366.984544][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.991488][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.166117][ T12] bond7 (unregistering): Released all slaves [ 1367.424074][ T12] bond8 (unregistering): Released all slaves [ 1367.664141][ T12] bond9 (unregistering): Released all slaves [ 1367.875623][ T12] bond10 (unregistering): Released all slaves [ 1368.099752][ T12] bond11 (unregistering): Released all slaves [ 1368.631292][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1369.169966][ T12] bond0 (unregistering): left promiscuous mode [ 1369.176337][ T12] bond_slave_0: left promiscuous mode [ 1369.183078][ T12] bond_slave_1: left promiscuous mode [ 1369.194257][ T12] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1369.204498][ T12] team0: Port device bond0 removed [ 1369.216152][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.228386][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.242770][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1369.253672][ T12] bond0 (unregistering): Released all slaves [ 1369.459750][ T12] bond1 (unregistering): Released all slaves [ 1369.670017][ T12] bond2 (unregistering): (slave veth5): Releasing active interface [ 1369.692529][ T12] bond2 (unregistering): Released all slaves [ 1369.907367][ T12] bond3 (unregistering): (slave veth7): Releasing active interface [ 1369.918728][ T12] bond3 (unregistering): (slave vlan2): Releasing active interface [ 1369.939058][ T12] bond3 (unregistering): Released all slaves [ 1370.193438][ T12] bond4 (unregistering): Released all slaves [ 1370.216612][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.223830][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.242055][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.249417][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.330485][ T5953] usb 10-1: USB disconnect, device number 58 [ 1370.404756][T21964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1370.704526][ T12] tipc: Left network mode [ 1370.722953][T21964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.878237][T21964] veth0_vlan: entered promiscuous mode [ 1370.892809][T21964] veth1_vlan: entered promiscuous mode [ 1370.911714][ T12] tipc: Disabling bearer [ 1370.941610][ T12] tipc: Left network mode [ 1371.176475][T21964] veth0_macvtap: entered promiscuous mode [ 1371.243922][T21964] veth1_macvtap: entered promiscuous mode [ 1372.142422][T21964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1372.210029][T21964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1372.254892][ T3592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.269012][ T3592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.338339][ T3592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.378241][ T3532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.646562][T22257] netlink: 'syz.0.4204': attribute type 3 has an invalid length. [ 1373.668722][T22257] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4204'. [ 1373.903451][T22241] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1373.910430][T22241] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1374.061237][T22241] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1374.372521][T22241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1374.387619][T22241] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1374.525243][T22241] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1375.007388][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.024909][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.267248][ T12] hsr_slave_0: left promiscuous mode [ 1375.425692][ T12] hsr_slave_1: left promiscuous mode [ 1375.531800][T19021] Bluetooth: hci5: command 0x0c1a tx timeout [ 1375.767824][ T12] hsr_slave_0: left promiscuous mode [ 1375.783488][ T12] hsr_slave_1: left promiscuous mode [ 1376.073679][T22271] vivid-007: ================= START STATUS ================= [ 1376.082287][T22271] vivid-007: Enable Output Cropping: true [ 1376.091908][T22271] vivid-007: Enable Output Composing: true [ 1376.099544][T22271] vivid-007: Enable Output Scaler: true [ 1376.105502][T22271] vivid-007: Tx RGB Quantization Range: Automatic [ 1376.170553][T22271] vivid-007: Transmit Mode: HDMI [ 1376.200763][T22271] vivid-007: Hotplug Present: 0x00000000 [ 1376.240232][T22271] vivid-007: RxSense Present: 0x00000000 [ 1376.252016][T22271] vivid-007: EDID Present: 0x00000000 [ 1376.310590][T22271] vivid-007: ================== END STATUS ================== [ 1376.407621][T19021] Bluetooth: hci3: command 0x0405 tx timeout [ 1377.298126][ T12] pim6reg (unregistering): left allmulticast mode [ 1377.608275][T19021] Bluetooth: hci5: command 0x0c1a tx timeout [ 1378.487389][T19021] Bluetooth: hci3: command 0x0405 tx timeout [ 1379.700115][T19021] Bluetooth: hci5: command 0x0c1a tx timeout [ 1380.573572][T19021] Bluetooth: hci3: command 0x0405 tx timeout [ 1381.167371][ T12] team_slave_1 (unregistering): left promiscuous mode [ 1381.175760][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1381.240732][ T12] team_slave_0 (unregistering): left promiscuous mode [ 1381.250500][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1381.852056][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.888051][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.012895][ T30] audit: type=1326 audit(1756055622.506:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.040405][ T30] audit: type=1326 audit(1756055622.506:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.071015][ T30] audit: type=1326 audit(1756055622.566:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.098327][ T30] audit: type=1326 audit(1756055622.566:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.128480][ T30] audit: type=1326 audit(1756055622.626:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.244513][ T30] audit: type=1326 audit(1756055622.736:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.268326][ T30] audit: type=1326 audit(1756055622.736:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.294323][ T30] audit: type=1326 audit(1756055622.736:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.318422][ T30] audit: type=1326 audit(1756055622.736:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.344198][ T30] audit: type=1326 audit(1756055622.736:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22319 comm="syz.0.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1382.831356][T22344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4213'. [ 1382.993053][T22348] netlink: 'syz.2.4166': attribute type 4 has an invalid length. [ 1383.024413][T22333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4166'. [ 1383.122667][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4166'. [ 1384.713998][T22347] vlan2: entered allmulticast mode [ 1385.538408][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4215'. [ 1386.181281][T22364] fuse: Bad value for 'fd' [ 1386.376390][T22358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.544855][T22372] use of bytesused == 0 is deprecated and will be removed in the future, [ 1386.582540][T22372] use the actual size instead. [ 1386.957217][T22377] netlink: 'syz.9.4219': attribute type 12 has an invalid length. [ 1386.965385][T22377] netlink: 9472 bytes leftover after parsing attributes in process `syz.9.4219'. [ 1387.902098][T22388] delete_channel: no stack [ 1388.906347][ T5866] Bluetooth: hci3: command 0x0405 tx timeout [ 1390.803970][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1390.803984][ T30] audit: type=1326 audit(1756055631.296:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1390.832751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.037576][ T30] audit: type=1326 audit(1756055631.346:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1391.093974][ T30] audit: type=1326 audit(1756055631.346:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1391.116461][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.178001][ T30] audit: type=1326 audit(1756055631.346:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1391.200509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.277961][ T30] audit: type=1326 audit(1756055631.346:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f652e98d550 code=0x7ffc0000 [ 1391.300480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.389573][ T30] audit: type=1326 audit(1756055631.346:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1391.459477][ T30] audit: type=1326 audit(1756055631.346:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1391.481961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.592174][T22401] vlan2: entered promiscuous mode [ 1391.600385][T22401] bond0: entered promiscuous mode [ 1391.611536][T22401] bond_slave_0: entered promiscuous mode [ 1391.627369][T22401] bond_slave_1: entered promiscuous mode [ 1391.845562][ T30] audit: type=1326 audit(1756055631.346:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1391.867985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.028834][ T30] audit: type=1326 audit(1756055631.346:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1392.051339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.222814][ T30] audit: type=1326 audit(1756055631.346:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1394.962997][T22460] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1394.986213][T22460] team0: Port device batadv1 added [ 1395.987683][T22473] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 1396.027316][T14095] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1396.454953][T14095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1396.797208][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1396.797228][ T30] audit: type=1326 audit(1756055637.286:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1396.848421][ T30] audit: type=1326 audit(1756055637.286:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1396.877106][ T30] audit: type=1326 audit(1756055637.286:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1396.909613][ T30] audit: type=1326 audit(1756055637.286:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1396.942685][ T30] audit: type=1326 audit(1756055637.286:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1397.003351][ T30] audit: type=1326 audit(1756055637.286:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1397.052052][ T30] audit: type=1326 audit(1756055637.286:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f652e98d550 code=0x7ffc0000 [ 1397.130959][ T30] audit: type=1326 audit(1756055637.286:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1397.167268][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4235'. [ 1397.185388][ T30] audit: type=1326 audit(1756055637.286:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1397.245620][ T30] audit: type=1326 audit(1756055637.286:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22480 comm="syz.0.4234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f652e98ebe9 code=0x7ffc0000 [ 1397.936079][T22509] random: crng reseeded on system resumption [ 1398.077103][T14095] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1398.103635][T14095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.129969][T14095] usb 3-1: Product: syz [ 1398.134203][T14095] usb 3-1: Manufacturer: syz [ 1398.490619][T14095] usb 3-1: SerialNumber: syz [ 1398.529805][T14095] usb 3-1: config 0 descriptor?? [ 1398.947551][T14095] usb 3-1: can't set config #0, error -71 [ 1398.978936][T14095] usb 3-1: USB disconnect, device number 9 [ 1402.262981][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1402.276023][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1402.312209][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1402.321518][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1402.334274][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1403.512019][T22566] chnl_net:caif_netlink_parms(): no params data found [ 1403.746997][T14095] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1403.930362][T14095] usb 3-1: Using ep0 maxpacket: 16 [ 1403.962226][T14095] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1403.992750][T14095] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1404.023028][T14095] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1404.097409][T14095] usb 3-1: config 1 has no interface number 1 [ 1404.155695][T14095] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1404.231046][T14095] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1404.338080][T14095] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1404.391400][T14095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.445462][T19021] Bluetooth: hci2: command tx timeout [ 1404.451470][T14095] usb 3-1: Product: syz [ 1404.451495][T14095] usb 3-1: Manufacturer: syz [ 1404.451524][T14095] usb 3-1: SerialNumber: syz [ 1404.790528][T22585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1405.007836][T22566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.023716][T22566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.064328][T22566] bridge_slave_0: entered allmulticast mode [ 1405.083958][T22566] bridge_slave_0: entered promiscuous mode [ 1405.136870][T22566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.157606][T22566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.180164][T22566] bridge_slave_1: entered allmulticast mode [ 1405.215251][T22566] bridge_slave_1: entered promiscuous mode [ 1405.651935][T22566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.680266][T22566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.862082][T22566] team0: Port device team_slave_0 added [ 1405.903495][T22566] team0: Port device team_slave_1 added [ 1405.936682][T22607] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1405.959731][T22607] team0: Port device batadv2 added [ 1406.103712][T14095] usb 3-1: USB disconnect, device number 10 [ 1406.478347][T22566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.487431][T19021] Bluetooth: hci2: command tx timeout [ 1406.519752][T22566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.580215][T22566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.754904][T22566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.788002][T22566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.870559][T22566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.900904][ T1113] bridge_slave_1: left allmulticast mode [ 1406.910025][ T1113] bridge_slave_1: left promiscuous mode [ 1406.923913][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.943941][ T1113] bridge_slave_0: left allmulticast mode [ 1406.958336][ T1113] bridge_slave_0: left promiscuous mode [ 1406.970502][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.565223][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.593117][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.630193][ T1113] bond0 (unregistering): Released all slaves [ 1408.106355][ T1113] bond1 (unregistering): Released all slaves [ 1408.573015][T19021] Bluetooth: hci2: command tx timeout [ 1408.962991][T22566] hsr_slave_0: entered promiscuous mode [ 1408.985649][T22566] hsr_slave_1: entered promiscuous mode [ 1409.024227][T22566] debugfs: 'hsr0' already exists in 'hsr' [ 1409.053181][T22566] Cannot create hsr debugfs directory [ 1409.175891][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1409.175911][ T30] audit: type=1326 audit(1756055649.666:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1409.304369][ T30] audit: type=1326 audit(1756055649.716:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1409.477595][ T30] audit: type=1326 audit(1756055649.716:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1409.650661][ T30] audit: type=1326 audit(1756055649.716:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1409.905423][ T30] audit: type=1326 audit(1756055649.716:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1410.120160][ T30] audit: type=1326 audit(1756055649.746:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44d538d550 code=0x7ffc0000 [ 1410.217357][ T1113] hsr_slave_0: left promiscuous mode [ 1410.229900][ T1113] hsr_slave_1: left promiscuous mode [ 1410.279717][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.318530][ T30] audit: type=1326 audit(1756055649.746:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1410.336227][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.650666][T19021] Bluetooth: hci2: command tx timeout [ 1410.678472][ T30] audit: type=1326 audit(1756055649.746:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1410.701055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.867268][T14095] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1410.896796][ T30] audit: type=1326 audit(1756055649.756:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1410.969038][ T30] audit: type=1326 audit(1756055649.756:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1411.311162][T14095] usb 3-1: Using ep0 maxpacket: 16 [ 1411.584047][T14095] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.612924][T14095] usb 3-1: config 0 has no interfaces? [ 1411.619487][T14095] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1411.632698][T14095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.643793][T14095] usb 3-1: config 0 descriptor?? [ 1412.315843][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 1412.426893][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 1413.906220][T19341] usb 3-1: USB disconnect, device number 11 [ 1414.441180][T22677] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1414.524799][T22677] team0: Port device batadv1 added [ 1415.239983][T19341] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1415.277590][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1415.437277][T19341] usb 9-1: device descriptor read/64, error -32 [ 1415.584555][T22566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1415.675871][T22566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1415.703799][T22566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1415.737337][T19341] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1415.769472][T22566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1416.119883][T22566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.156301][T22709] binder: 22696:22709 unknown command 0 [ 1416.180456][T22709] binder: 22696:22709 ioctl c0306201 200000000080 returned -22 [ 1416.243173][T22566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.295387][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.302632][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.423011][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.430273][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.563397][T19341] usb 9-1: config 0 has no interfaces? [ 1416.593968][T19341] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1416.628908][T22566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1416.658720][T19341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.690127][T22566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1416.717278][T19341] usb 9-1: Product: syz [ 1416.749690][T19341] usb 9-1: Manufacturer: syz [ 1416.811319][T19341] usb 9-1: SerialNumber: syz [ 1416.857911][T19341] usb 9-1: config 0 descriptor?? [ 1417.154169][T22566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.339253][T22718] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4261'. [ 1417.736587][T22566] veth0_vlan: entered promiscuous mode [ 1417.828468][T22566] veth1_vlan: entered promiscuous mode [ 1417.907205][T22566] veth0_macvtap: entered promiscuous mode [ 1417.926864][T22566] veth1_macvtap: entered promiscuous mode [ 1418.046491][T22566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.131337][T22566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.338931][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.418828][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.508732][T14707] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.780018][T22736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.927733][T22736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.195869][T14707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.702451][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.727072][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.875553][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.925982][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.426006][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 1420.748098][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 1420.757664][T22757] netlink: 'syz.1.4241': attribute type 5 has an invalid length. [ 1420.790452][T22757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4241'. [ 1420.861100][T22757] geneve2: entered promiscuous mode [ 1420.869348][T22757] geneve2: entered allmulticast mode [ 1420.931545][ T6972] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1421.023196][ T6972] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1421.096861][ T6972] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1421.217355][ T6972] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1423.336959][T22798] trusted_key: encrypted_key: key user:syz not found [ 1424.291362][T14095] usb 9-1: USB disconnect, device number 61 [ 1425.860116][T14095] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1426.177710][T14095] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1426.304965][T14095] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1426.346279][T14095] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1426.381325][T14095] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.480690][T22828] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1426.686567][T14095] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1427.500880][ T5967] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1427.682437][T13882] usb 9-1: USB disconnect, device number 62 [ 1427.851576][ T5967] usb 3-1: config 0 has no interfaces? [ 1427.999563][ T5967] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1428.075975][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.154169][ T5967] usb 3-1: Product: syz [ 1428.194658][ T5967] usb 3-1: Manufacturer: syz [ 1428.250745][ T5967] usb 3-1: SerialNumber: syz [ 1428.278063][ T5967] usb 3-1: config 0 descriptor?? [ 1428.423480][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.440245][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.383317][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1429.399455][ T30] audit: type=1800 audit(1756055669.856:1844): pid=22859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4275" name="bus" dev="ramfs" ino=109304 res=0 errno=0 [ 1430.613432][T14095] usb 3-1: USB disconnect, device number 12 [ 1432.187292][ T30] audit: type=1400 audit(1756055672.666:1845): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=22892 comm="syz.6.4278" [ 1434.366646][ T5967] delete_channel: no stack [ 1434.992052][T22923] syz.8.4279 (22923): drop_caches: 2 [ 1438.391069][T23016] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4283'. [ 1438.603288][T23021] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1438.620656][T23021] batadv1: entered allmulticast mode [ 1438.627301][T23021] team0: Port device batadv1 added [ 1441.477925][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1441.519290][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1441.538865][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1441.549986][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1441.558030][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1441.668030][T23057] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4284'. [ 1442.023925][T23066] netdevsim netdevsim0: Direct firmware load for nel/config failed with error -2 [ 1442.074442][T23066] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/config [ 1443.453721][T23060] chnl_net:caif_netlink_parms(): no params data found [ 1443.607862][ T5866] Bluetooth: hci4: command tx timeout [ 1444.889614][T23060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.932447][T23060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.961426][T23060] bridge_slave_0: entered allmulticast mode [ 1444.988224][T23060] bridge_slave_0: entered promiscuous mode [ 1445.039469][T23060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.092577][T23060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.116049][T23060] bridge_slave_1: entered allmulticast mode [ 1445.162664][T23060] bridge_slave_1: entered promiscuous mode [ 1445.311566][T23060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.379104][T23060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.560487][T23060] team0: Port device team_slave_0 added [ 1445.583885][T23060] team0: Port device team_slave_1 added [ 1445.689940][ T5866] Bluetooth: hci4: command tx timeout [ 1445.799821][T23060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.806803][T23060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.986124][T23060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.051126][T23060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.118684][T23060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.247420][T23060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.554607][T23060] hsr_slave_0: entered promiscuous mode [ 1446.561788][T23060] hsr_slave_1: entered promiscuous mode [ 1446.625191][T23060] debugfs: 'hsr0' already exists in 'hsr' [ 1446.643066][T23060] Cannot create hsr debugfs directory [ 1447.777244][ T5866] Bluetooth: hci4: command tx timeout [ 1447.821471][T23129] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1448.779321][T23060] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1449.127402][T23129] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1449.146659][T23129] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1449.163153][T23060] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1449.847283][ T5866] Bluetooth: hci4: command tx timeout [ 1449.921540][T23129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1449.927800][T23129] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1449.937856][T23060] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1450.080373][T23060] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1450.576817][T23129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1450.593351][T23129] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1450.631285][ T30] audit: type=1326 audit(1756055691.126:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.2.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1450.802933][ T30] audit: type=1326 audit(1756055691.126:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.2.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1450.985020][ T30] audit: type=1326 audit(1756055691.186:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.2.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1451.061301][T23129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1451.088789][T23129] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1451.154295][ T30] audit: type=1326 audit(1756055691.186:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23157 comm="syz.2.4299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d538ebe9 code=0x7ffc0000 [ 1451.205604][T23060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.246979][T23176] netdevsim netdevsim2: Direct firmware load for nel/config failed with error -2 [ 1451.289758][T23176] netdevsim netdevsim2: Falling back to sysfs fallback for: nel/config [ 1451.375007][T23060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.477189][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.484438][ T6976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.560721][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.567901][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.880303][T23060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1452.155309][T23060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.471105][T23060] veth0_vlan: entered promiscuous mode [ 1452.500560][T23060] veth1_vlan: entered promiscuous mode [ 1452.513661][T23197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4302'. [ 1453.944214][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4301'. [ 1455.924134][T23060] veth0_macvtap: entered promiscuous mode [ 1455.985199][T23060] veth1_macvtap: entered promiscuous mode [ 1456.062045][T23060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.114806][T23060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.280319][T14707] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.295463][T14707] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.364871][T14707] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.443763][ T3532] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.658086][T23248] vti0: entered promiscuous mode [ 1456.681304][T23248] vti0: entered allmulticast mode [ 1456.973088][T14707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.087238][T14707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.249623][T23252] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4305'. [ 1457.299644][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.318054][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.151818][T23286] vivid-000: disconnect [ 1460.019173][T23281] vivid-000: reconnect [ 1462.855661][T23301] netdevsim netdevsim7: Direct firmware load for nel/config failed with error -2 [ 1462.926473][T23301] netdevsim netdevsim7: Falling back to sysfs fallback for: nel/config [ 1464.557085][T23360] kvm: user requested TSC rate below hardware speed [ 1464.610637][T23360] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4318'. [ 1464.621922][T23360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4318'. [ 1464.639295][T23360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4318'. [ 1465.101106][T23369] xfrm0: entered promiscuous mode [ 1465.106470][T23369] xfrm0: entered allmulticast mode [ 1471.569142][T23449] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4326'. [ 1471.596398][T23449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4326'. [ 1476.908445][T23537] netlink: 'syz.7.4332': attribute type 4 has an invalid length. [ 1476.976892][T23537] netlink: 'syz.7.4332': attribute type 4 has an invalid length. [ 1478.286053][T23560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4337'. [ 1480.808510][T23583] netlink: 'syz.0.4339': attribute type 12 has an invalid length. [ 1481.147704][T23603] page: refcount:515 mapcount:0 mapping:ffff888057de2aa0 index:0x0 pfn:0x70c00 [ 1481.157675][T23603] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 1481.166199][T23603] aops:hugetlbfs_aops ino:1bc3a dentry name(?):"anon_hugepage" [ 1481.173754][T23603] flags: 0xfff000000000c1(locked|waiters|head|node=0|zone=1|lastcpupid=0x7ff) [ 1481.182607][T23603] page_type: f4(hugetlb) [ 1481.187222][T23603] raw: 00fff000000000c1 ffffc900039afe10 ffffc900039afe10 ffff888057de2aa0 [ 1481.195833][T23603] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1481.204426][T23603] head: 00fff000000000c1 ffffc900039afe10 ffffc900039afe10 ffff888057de2aa0 [ 1481.213109][T23603] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1481.221806][T23603] head: 00fff00000000009 ffffea0001c30001 0000000000000000 0000000000000000 [ 1481.230491][T23603] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 1481.239191][T23603] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1481.246471][T23603] page_owner tracks the page as allocated [ 1481.253239][T23603] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 23601, tgid 23585 (syz.2.4340), ts 1480973403535, free_ts 1457963637015 [ 1481.274204][T23603] post_alloc_hook+0x240/0x2a0 [ 1481.278989][T23603] get_page_from_freelist+0x21e4/0x22c0 [ 1481.284541][T23603] __alloc_frozen_pages_noprof+0x181/0x370 [ 1481.290349][T23603] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 1481.295893][T23603] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 1481.301870][T23603] alloc_surplus_hugetlb_folio+0x103/0x430 [ 1481.307684][T23603] alloc_hugetlb_folio+0xb1a/0x16a0 [ 1481.312896][T23603] hugetlb_fault+0x1dc2/0x2970 [ 1481.317674][T23603] handle_mm_fault+0x740/0x8e0 [ 1481.322448][T23603] __get_user_pages+0x1699/0x2ce0 [ 1481.327497][T23603] populate_vma_page_range+0x29f/0x3a0 [ 1481.332958][T23603] __mm_populate+0x24c/0x380 [ 1481.337586][T23603] vm_mmap_pgoff+0x387/0x4d0 [ 1481.342198][T23603] ksys_mmap_pgoff+0x587/0x760 [ 1481.346967][T23603] do_syscall_64+0xfa/0x3b0 [ 1481.351478][T23603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.357374][T23603] page last free pid 23252 tgid 23229 stack trace: [ 1481.363875][T23603] __free_frozen_pages+0xbc4/0xd30 [ 1481.369089][T23603] __folio_put+0x21b/0x2c0 [ 1481.373505][T23603] hpage_collapse_scan_pmd+0x184c/0x3c60 [ 1481.379144][T23603] madvise_collapse+0x3d1/0xa40 [ 1481.384447][T23603] madvise_vma_behavior+0xec8/0x3af0 [ 1481.389754][T23603] madvise_walk_vmas+0x51c/0xa30 [ 1481.394716][T23603] madvise_do_behavior+0x38e/0x550 [ 1481.399853][T23603] do_madvise+0x1bc/0x270 [ 1481.404297][T23603] __x64_sys_madvise+0xa7/0xc0 [ 1481.409078][T23603] do_syscall_64+0xfa/0x3b0 [ 1481.413594][T23603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.419625][T23603] ------------[ cut here ]------------ [ 1481.425131][T23603] kernel BUG at mm/filemap.c:154! [ 1481.430174][T23603] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1481.436420][T23603] CPU: 1 UID: 0 PID: 23603 Comm: syz.2.4340 Not tainted syzkaller #0 PREEMPT(full) [ 1481.445791][T23603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1481.455848][T23603] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1481.462103][T23603] Code: a4 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 73 f4 31 ff 90 0f 0b e8 eb a3 c9 ff 48 89 df 48 c7 c6 40 3a 94 8b e8 5c f4 31 ff 90 <0f> 0b e8 d4 a3 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 45 f4 31 ff [ 1481.481749][T23603] RSP: 0018:ffffc90003d1ee20 EFLAGS: 00010046 [ 1481.487829][T23603] RAX: 9bbaaab5dfc7ee00 RBX: ffffea0001c30000 RCX: 9bbaaab5dfc7ee00 [ 1481.495807][T23603] RDX: 0000000000000005 RSI: ffffffff8dba6c8e RDI: ffff88802ae65a00 [ 1481.503779][T23603] RBP: 0000000000000001 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 1481.511751][T23603] R10: dffffc0000000000 R11: ffffed10170e484b R12: 0000000000000040 [ 1481.519726][T23603] R13: 1ffffd4000386000 R14: 1ffffd4000386001 R15: ffffea0001c30008 [ 1481.527696][T23603] FS: 00007f44d61596c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1481.536628][T23603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1481.543214][T23603] CR2: 00002000000b2a70 CR3: 000000006a09a000 CR4: 00000000003526f0 [ 1481.551191][T23603] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e [ 1481.559169][T23603] DR3: 00000000000000b4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1481.567171][T23603] Call Trace: [ 1481.570493][T23603] [ 1481.573428][T23603] __filemap_remove_folio+0xc3/0x500 [ 1481.578740][T23603] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1481.584121][T23603] ? __pfx___filemap_remove_folio+0x10/0x10 [ 1481.590026][T23603] ? _raw_spin_lock_irq+0xae/0xf0 [ 1481.595065][T23603] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1481.600630][T23603] filemap_remove_folio+0xe6/0x1f0 [ 1481.605761][T23603] remove_inode_hugepages+0x594/0x1100 [ 1481.611235][T23603] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 1481.617173][T23603] ? hugetlbfs_fallocate+0xbaf/0x1100 [ 1481.622609][T23603] ? up_write+0x1c4/0x420 [ 1481.626959][T23603] hugetlbfs_fallocate+0xbc7/0x1100 [ 1481.632170][T23603] ? aa_file_perm+0x13a/0x1550 [ 1481.636950][T23603] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 1481.642590][T23603] ? __kernel_text_address+0xd/0x40 [ 1481.647805][T23603] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1481.653730][T23603] vfs_fallocate+0x666/0x7e0 [ 1481.658339][T23603] ? __pfx_vfs_fallocate+0x10/0x10 [ 1481.663462][T23603] madvise_vma_behavior+0x3254/0x3af0 [ 1481.668854][T23603] ? __page_table_check_zero+0xba/0x530 [ 1481.674418][T23603] ? __page_table_check_zero+0xba/0x530 [ 1481.679968][T23603] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1481.685693][T23603] ? post_alloc_hook+0x253/0x2a0 [ 1481.690642][T23603] ? css_rstat_updated+0x23a/0x4f0 [ 1481.695762][T23603] ? __pfx_css_rstat_updated+0x10/0x10 [ 1481.701226][T23603] ? memcg_rstat_updated+0xee/0x220 [ 1481.706466][T23603] ? rcu_is_watching+0x15/0xb0 [ 1481.711248][T23603] ? mod_memcg_lruvec_state+0x1bb/0x370 [ 1481.716809][T23603] ? mas_prev_slot+0xb31/0xbb0 [ 1481.721587][T23603] ? find_vma_prev+0xfc/0x170 [ 1481.726311][T23603] ? __pfx_find_vma_prev+0x10/0x10 [ 1481.731452][T23603] ? __lock_acquire+0xab9/0xd20 [ 1481.736334][T23603] madvise_walk_vmas+0x51c/0xa30 [ 1481.741287][T23603] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1481.746761][T23603] ? blk_start_plug+0x6f/0x1b0 [ 1481.751810][T23603] madvise_do_behavior+0x38e/0x550 [ 1481.756928][T23603] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1481.762564][T23603] ? down_read+0x1ad/0x2e0 [ 1481.766978][T23603] do_madvise+0x1bc/0x270 [ 1481.771315][T23603] ? __pfx_do_madvise+0x10/0x10 [ 1481.776183][T23603] __x64_sys_madvise+0xa7/0xc0 [ 1481.780970][T23603] do_syscall_64+0xfa/0x3b0 [ 1481.785569][T23603] ? lockdep_hardirqs_on+0x9c/0x150 [ 1481.790777][T23603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.796850][T23603] ? clear_bhb_loop+0x60/0xb0 [ 1481.801552][T23603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.807446][T23603] RIP: 0033:0x7f44d538ebe9 [ 1481.811861][T23603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1481.831465][T23603] RSP: 002b:00007f44d6159038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1481.839883][T23603] RAX: ffffffffffffffda RBX: 00007f44d55b6450 RCX: 00007f44d538ebe9 [ 1481.847863][T23603] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 1481.855860][T23603] RBP: 00007f44d5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1481.863846][T23603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.871951][T23603] R13: 00007f44d55b64e8 R14: 00007f44d55b6450 R15: 00007f44d56dfa28 [ 1481.879931][T23603] [ 1481.882959][T23603] Modules linked in: [ 1481.886860][T23603] ---[ end trace 0000000000000000 ]--- [ 1481.892399][T23603] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1481.898655][T23603] Code: a4 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 73 f4 31 ff 90 0f 0b e8 eb a3 c9 ff 48 89 df 48 c7 c6 40 3a 94 8b e8 5c f4 31 ff 90 <0f> 0b e8 d4 a3 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 45 f4 31 ff [ 1481.918366][T23603] RSP: 0018:ffffc90003d1ee20 EFLAGS: 00010046 [ 1481.924439][T23603] RAX: 9bbaaab5dfc7ee00 RBX: ffffea0001c30000 RCX: 9bbaaab5dfc7ee00 [ 1481.932522][T23603] RDX: 0000000000000005 RSI: ffffffff8dba6c8e RDI: ffff88802ae65a00 [ 1481.940496][T23603] RBP: 0000000000000001 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 1481.948468][T23603] R10: dffffc0000000000 R11: ffffed10170e484b R12: 0000000000000040 [ 1481.956442][T23603] R13: 1ffffd4000386000 R14: 1ffffd4000386001 R15: ffffea0001c30008 [ 1481.964416][T23603] FS: 00007f44d61596c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1481.973344][T23603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1481.979929][T23603] CR2: 00002000000b2a70 CR3: 000000006a09a000 CR4: 00000000003526f0 [ 1481.987903][T23603] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e [ 1481.995964][T23603] DR3: 00000000000000b4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1482.004024][T23603] Kernel panic - not syncing: Fatal exception [ 1482.010381][T23603] Kernel Offset: disabled [ 1482.014738][T23603] Rebooting in 86400 seconds..