last executing test programs: 45m33.089719299s ago: executing program 32 (id=268): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0xc8c0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x55f8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) 42m15.023727504s ago: executing program 33 (id=851): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @fixed, 0x4, 0x2}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) 20m17.046401084s ago: executing program 34 (id=3344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0xffff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r4 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r4, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) rt_sigsuspend(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 17m26.221274476s ago: executing program 35 (id=3797): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x2, 0x2, 0x101, 0x5}) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ustat(0x801, &(0x7f0000000300)) 13m17.899692688s ago: executing program 36 (id=4663): mmap$IORING_OFF_SQ_RING(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = userfaultfd(0x1) clock_nanosleep(0x9, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x110) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lseek(0xffffffffffffffff, 0x4, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa08, &(0x7f0000000180)={&(0x7f000063c000/0x4000)=nil, 0x4000}) 9m47.061708945s ago: executing program 2 (id=5418): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="c30c424700"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 9m46.76346071s ago: executing program 2 (id=5421): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x3, "76af7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b70200001000b15cbfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b252a37ff7e0d45728fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73bf1bca1cbec7614c8c3c76411e61fef6a93da8914490b50bd837d068e9bf8f3348794a44115d163b5ff85629b0a3ad4023448140770de2e5f262b9a50afcc210b8d8ea24b6dd7d068b356f53afaf89acae30935ec92657e37bf0821cbe612ac2aa7baf4d21ab373ea4fea57d0d9ac418862e791df3d1d85bb780fbfa401e09e3745d70174dd9ab52cdcadfd3454916408810090a19fa1cf0df6aa714fbcffbb7d6c7f45237df3296867725fd2bdbcd2f7ab10fea0fe85ce1137e775e4c01a136aed7f1d0d192a95be64bab53144ff3efd87fcb6421483e6a1690408712913dfb10a88201340c96dfd745a84dc177dd7a598ec015daa56eb0924e01df353a9ad69d0a59e40203018c82e74f39f8c4cb8823f0bfdfe170549e305628625f50"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6a, 0x7c, 0xc9, 0x40, 0x45e, 0x284, 0x3fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x72, 0x78}}]}}]}}, 0x0) 9m42.589259092s ago: executing program 2 (id=5437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3d, &(0x7f0000000180)=""/26, &(0x7f00000001c0)=0x1a) r8 = openat$procfs(0xffffff9c, &(0x7f0000000440)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0xfffffdef) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r9, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 9m41.76382291s ago: executing program 2 (id=5441): r0 = socket$kcm(0x2, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117f", 0x13}], 0x1) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000000), 0x98) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000000c0)={0x80}) 9m41.090714832s ago: executing program 2 (id=5443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES32=r0], 0x24}}, 0x0) 9m40.971921628s ago: executing program 2 (id=5446): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r0, 0x82000000) r1 = socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 9m24.378618317s ago: executing program 37 (id=5446): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r0, 0x82000000) r1 = socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 8m47.650250983s ago: executing program 9 (id=5615): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="800037bbfa9b", 0x6, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2, 0x400002}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100), 0x10) 8m46.537228734s ago: executing program 9 (id=5618): r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000900)=@l2={{0x1000000, 0x3a, 0xa00, 0x3a, 0xf00}, 0x2f, 0x30, 0x20, 'subj_type'}, 0xb7) 8m46.015670406s ago: executing program 9 (id=5622): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xa86) r1 = socket(0x40000000002, 0x3, 0xfb) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffd, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2c, 0x3, 0x1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x0, 0x1, @scatter={0x2, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/147, 0x93}, {&(0x7f00000002c0)=""/119, 0x77}]}, 0x0, 0x0, 0xfffffbfd, 0x0, 0x3, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000, 0xa4, &(0x7f0000000000)=0x1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001400000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x404, 0xfff, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, 0x0) 8m43.308839053s ago: executing program 9 (id=5636): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x88443, 0x2, 0x5}, 0x18) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x74) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r2, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0) mkdirat(r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./bus/file0/../file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0x80049370, 0x0) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xa002c000, 0x0) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x64266}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000102c0)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x1, 0x0, 0x80000000000, 0x0, 0x80000000000000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000041c0)="3ed9e61a56c808e5b9b93ba8b4f962a89463731128f3c66a19eb6c151bd431bca9464ad646717e1bdaa1189ea48a253bc16aa90182396226b965ad3d00d25625ada2ece4eb6552d3004b5ac7a76a0ba72ff572e9b35979d539ba0713768131f2b5b15a3a9da0ccd9688578a924a25fc668034e926e2767ed4733405fc481f9073497aa7ac129874ada5f5c26d0cf6be483a927a73d319bca9b44a95e4ab9ecbe6e389fdf9dea6faa57fd5fada03f7aeb1ac06abfb3fc3302b4d550db4fb7b010d38b61b61e6c6b84960b1c14b7b502106b67d8e6649042392dd043fe433dbbf4c67ffd9297a8b0d8acf91881d252a56a04fce66082a718f96e2e39165fa90d11b62346e19c089178b233f4afc32d0ea670e9214a627955bed6c23fa8eac69f59eff2890efeba4e3f5e0f07e83fb63d8f2e78c7b16fc91a08c52af90de4e092d8634ca6d04318d9746006e5e4b6751620a44b6043d4f0edfd1b41c304cecd4ea32f5ecf8e1c47f31b4615fdab752837c7b01f63e1a78ca6150e10f4460ad387b3ab7e36b20b07958fff41e4761c18057146ac4b3da65c0f91074681864e8ee77dcee66a347fd21f6e1030819ccf82f3fc5a7e3da65014c950e677bef86c7d21d46f0bdf18c887efae1946147328a2d3c8d9c607618ac4861f5f752d16640555208f9d482654d2c6a7ba11e15fb0cee3acd5cab74bf1ebe44837792c5a0bf3e3956f161802eaa4f09c028d1d9feb44b8dfe25cc4c145007f2e8d747805551d2f261cc25064882f56d77b79c68602687277d9fc9ffb4154ec26d01de6660676cc8294c725d7b5d7f948c4794e096bd72fbfe79b339e8b2fc70abd3df8ef8c56be55fa8b66b60bddd6a6b756e978fe3176e307a36ff782e2b20d07b32a1980a6e4e10efaf5aa5226a881b627af98d1300f481d557fb9ec6d2d4ff5ac7fe448723db213329137a3f92f0fdd620d28f05936177340cf1d8ef8a759281844f81e0075a8aeb5b8db471dee32d65e20e39acb438ad8bd9e4e402f7436e159a5d8f522a9085f8440c88a120f607fbc9cfde5cfead8cab7448558ef9c61ec636f2b199c8c52e575aa553560953b459727cc9985defe56dad6cbfe1ea7a47252696c579c548b6b4313e22db084153aaa8830bb582e9b8ef5a8b4f5ca6984a8be7709c4be5c39f6d68f36a4f22d9820e99fb9b8abe0d07e7a28a77fced16876fd8faeb378e9e5e32d7cd0a71da87a3eb1edbb1c9afc2f3e1bd6c930619bac69f6fed43f9e8b66d590b16eb2d022111d0e9b6acfbd36135ad5ac65736d2e6dacb034937863087395c425c2d1c5e28d55da90355a5f93e2fe7375662790f74b51a066dcf63ffc667542ceec658213ee6e26c3ba2055c826c711976068ee33fc42caa42bb7227eef080e6faa55d5bf7478c6cfc1f1fa93efb5aac1e72599a417a60042ea8bcd4db8bf34ecc357785dad926eff3fae0c98e7d0221cfb6afeb17bb204909349bb5a4e0935f39e53eecdc0ea86c5920f2b642e5272a49ea7b3d0e38b67c0ec351079bd39d61cfd86bb722395891e28d7a86a3204ae228021883a64124c44abac9c4150e6977c134c6f6ad4f5939d7bf26b58cb42a7eec2d0264b35efb6b743d84cc119f18e805ef8873817262f7d013cb1156462748cf2c39ef6f22e0375a2e09c40cadb7fac623d6cb6f3e7fbb9a06ba822ef0ec863b1f299cf9fcb4dca1d8c19b48d6d652a8143fe36afa23a19650d6d220409e53a50ce178f1aa1993f43600437d621bdbbea86106fe923f162755bc66a9c4488c85b178224b420f8ab18342eaca72246e164e155a98179b4283343c1e4c1f88f527abcffd185c5d7661e3f24b4479c89fd6319583088dad3e72a5f8c45320ba88433cec724af19905fbbb4b933c3b2933b2fb0b6134fa02764a5bc20e843757e5b75ec231d5f8605b537c463fb50a8af0357e1b7c380fc3a18de318b9b972bbd637b32f314dc265f00f51747f6c30e558a1c72543c85df77e7729b07e74f0f9a437529610be1d69e3842bf99eb0c3bf2ab30e5f03717dbcebd2e4ec16cbf4503272b300fd52cf177a96c19548e051d8a980acf9a130d51b908e7b78848f3a9442e5be2deaa9fa6a10f580399d3f894ba53ed20f028ac293d030f01961891abcd222e57b57e1c9a5884dbd86339ff616a4b9920fa10798eb12d0577c710ab1b98ad09f4d8a0fa22df901f7240285a03c77bb7fcd0ee40ab89918674084a7c5834e965514c5473527efe9e4cde7c4e417b52d9088d3c9d75e95250b547a9e86e747a61c954cdba4fe212ef730ad9a8786141b3ed49d0b0cd864463445d4acb72c4aa6d56933376858ccd62998bd9a5cd1e5cb66900b3fe63ecf110207b764836b3f331d04338c8eca0641c8315c520252b98ca319b84a06bf4c60fea2acbf0ba5d72cdb91f544a631f7969cb8f115356c217739b9be3cbc08ff29bd7711fd0ad0c4c68311ad002c409fce13379a23a8229a226e21bf6d1ce23a24b0a18fd366c21ad168c17e357b09edfe4ab4261f3105830609b0da8661753f9ef84fb5347c8c41b3d32f09adbc759ceb91e2c557e104519f0072b8843353b459e8c9544313f3e174acf8beb8fd9ebccf18babde6b39141e6f76c1357864b5f35a64b77ac0d609d66a5c2d425c952001867e62efcb2f50d85cb672d5466e781555b158cbd137cbdbfeb2becf958733a58487f9a4e7557027c3c5861b0d496cb72defdfbee54d51522b7e8eafcd8fc2a7a5c9543e28db72e2a3e7e392d9ef5145203d6c583a9e81a084ed4efb0ba5202c8a73e57a739fbdb553857da051847cfdaaf566273c10b93e4a67af78092ac08409e3ce352e253828bfbd6ea0af7aab7c98e81bc8b1d5c69fcc88edfdcc6f066561e5f525392818519206c42ebf256dcd2da61701a6f73884606f713a9addc0c01244120171d261cfead846feeb94d0408642671fffc23ea1fccfb2ca2ee4449349375f8dd9ec932b383af73815cdddface88a33c8a395c437625f5ddd0d0e991ccbe9eb7db2a21a3f7646ca7d00ec326794d8f0d0a64dc59cd34576df726fe978795d9b2cf98b282d8cfa1ff7b1e19ba198cd275fd1b3ed6780f1afa6d8c480a030b6b2d00609f2b5bb9ba2c25b7e1125ded723cad9c56d3acf7b59de2bb0241b92a1614d19ce0348ecebdfec892ea8370e7bdb1ec37492a0be6b8f325dd52de9736cf0bf45b6d70a84a1baedbf61bd0a58459166be21869f802f6368d50dec8ffadad3ceedc6d90d0670d8e68c13516508cb0e6df979be50bb25b0e92de9fd798bdb86b58690eac20fc523cfa29cf5c988363e2af7d1ec90005a849c2f590b173ffe4a1a22965648318c584995286909d623596f9fa9aaab84f1e4ee8b3acc2a611e9974de269bddf84cd5bf424c9d915c711e57fa0465ed5e7ff476e2adc7c44a5a30d1d4f7dcd61f8bd9aa2326c9d241dda0bf20db0fc5164ba30d866eb0b45c46a3daf113aae4c3945925e237fa36fbb862c030a370a8888fb16c245b86890bfdc3e6cfd75b2891eccfb0c5bd057f211f6e84b9c78dfe74d9d5286fc376e0b698ca5065d5f0df09202c63d92947fce76f4b45846ad98ee37f9e83d9d9ec19af9c382f2dec4bb51dc95cf26de95ff056b06e8da707df27d1f63183488edc089350624859c4cee6b8853ac920edc49ccfee4f57c12a75813cf745c67bbaed93f66b89207e7a6de876ea558c36e71299a8fc8957768c831ed711592f3a0b8e87593876fbf124c2cb07c7edd745680da68be13908e8567ca2c50be6738b4e4dc1d28c982b8e06f30361be5ebdc3e6a62bfacc5a2d05bf17a9c14c2eb7ee6c6b5d484aab4f78539e837499ccffdb661ba93e900f4760c55b0d34116166348b54c610d72625625ad2e6ff52fcc25856c32b520cce6a2495742e7e18cc4220bf358edccc3c581fd1f50ae884c1871a0b651fadddf89c14433d71d0a8c7052869d988b3aa3f515f8720852a8631e9f1fb0fbae0c36711f49b171b3077a788b281f4f2a1c80d784bba50cc03a1e2bab1e0c5ea847e7f35ccfc758d5237c798ae5ed73809b09d950e9824fa32e7d5053828b535e997d247420519ee17ea532a8a23671d648cbb772e4f89899fa007d5329b60874257966065af857df0c8b10bb132d199820296bf99d3287c67f8db99108117d5f810a7800d7aa7035df64a8e06cf0de62a34d68cb36c0749262985c3d057663170a1aa4ae922ff23855988583aa7807cb7d804ed7e0c93435a19d0b3a2d21ca1473f3f1029c8482166e3c9ef60102b1d8592ee9362016b83aa47b2ef78ea81775c8d8b6d331fa71b469b9257f5dabfc15651b8f9bfbf37f11639deb93d2290c531166a7ff4c02fa914dbf2564588741ba8a4ba26e94fb3b8f800386d45b7f12602004cb74fc9a8c5a5e8da428e38d17c834eded50bbddb8ead7eab90b1f64bcea75506220fe8271879c17bbedf143254c221b700339dca27b774ecb113ea13cdddc30a627f0d675b7fd12350541e9403e7b4aff03534963e033b91e1f985dfa177c15a67ea1f645573adcf4743fe250e31813125fa6b532dfdb37281652968b6d2a39c5d09368ade6a7f48cfcf6eeebf79e79dab6fbbfe06eb7320cdb0485e0c6de0e0ed33faaf685f409d5c01e093ff3ddf6abd272cdbb9efc5919dd6064c15d9dfbfe45279ab3cdfd90fa15bd437d9b1f7cd03c0c1a31ba5138b7dbe0173fe51659929cf0acc6c128790033481e8a1ac573bdccac7a71efc019e4abd08a3d618671edecc5d7e31c1b442591c7b46ddf24e585c9944d4915a677fe44de3587f5a8bdae328393fac377483c3fa9b7f0f68e6a655b9206d419eabbb7da9eecf23282933ab9b4aa8faaf5f0d9f4308dcc585db4b561ccfd97b0d528be53119f9287256ea6cfcaab1f875cac43030d0cdd952156668f01f19974d58b2f77009240e9613d8833b04597b1840edfca4dc36cd338e1acaac92c02a7e72447b5b3fe631170047f34ae529eecf9c8ee20081d1d01f04a08ac05c7717512ad9aded19c68c0fd56f6837de2039a03a43a86cd3ec765ab06c735069c2d15655acd008c215a87b6c32a626cfe528753d6bc6253e8e3bd666431726525e1675e33b32d551333fd0eb7765a502f90e02c5f0fe6ad8262968f70a70d027e1287984a3cb33adf2a35b7dab8b7c30502b2cfccf65cf0da4aec103759aa2503a45d6063db0f69b60a015c3569b15d8d9722d910200f62dfa77c7d2501cfb5f03a0fad7cc4357343edec5d2829b2fc5957f53d7a51a2e12968c67513be62ac8396f77115b86268c9f652e6837664127278368c907920bb26df6205d140c20f53c00eff4f201d6c8aa04904de099d813fe4ffba1c2a889ff33dde5c7007d27e1132d2a618e7877d02359a1696c8a9a24b1eac510722d9c0227f81d410b59c38afc1dfd12bbb8c1c59abf19f70d75a9db383d409f256c3ee7818f801907a25214d6d0ab95fb1c0e734aec1cb7538711d5cabd57034f3d236940610f4ba89e8270bce8d39453c704b6fdf00918eb6cea8b54b1018935ffaf7b77b4ab18717c5d1f5c053eb87a7d7742fc06146a2d34a56ecc4ccd66197242ef3d0d0751902162ccf7c583bbdbcf19a9f402eee6b11c7a6980d5654d20e8beae12211d2e3f1bdff456ffd6c3cbf2fd7681e1084234542f5a7460d3fae55611a58bf84bc4cde086be78c63f1436b170dad5961f63f8bf56c9efdb6fed94351ab39e3fefeb940d59a18efb92779703b28317b634d023fd27e9d998e7ee91bf4935a9856f07c26ca9b3bc0f337817e226c010ce1be5c4366e2d06045edb1f60950882ce4d34c1aa0879f5b6af951a709c2518989fd81c52878bf3a67d2a87fbade05359e0cd3213e388ed2be830b12c46e9f550467ea3d06cb2ba6d13273cc0aae12d48a0658c3bc6bd6cbb16ae593eb1b513f310edce983c4237c1329a7e9fbbf57ec26c67815396f385322ff898fec3761f1df87ec735346bdafa9b84ba36973fd35d09e95791445b820a5a09086486b1417d9ec8b9ab5c201f83fc96398af0a22552f48ddcd6b459904a7701abdbe17245a1cba26fe3c96030965741153cdf6b42ad687f70e40e5a7aeaa32c30eb79498254026276b3c2ff10e2d34791b516590f8f0760c65ec5514950aa4374c83be8aad7fd967e1383d14724c84b0a239484b6311b3ff1e53baa2de60950dcf6393f1d230c2dde99be06b9e168623da47fc0030e6f90454433aab91e07fba2ffdbd139f4c35d57dc489563a24c5a5e4d3e6ee2129151d8776b68c0a77fced00e8635a0474fbdeb36170eeaad4a3c0a98263334a41c288020ad0312d3673db67d1306e19b89cffe932951b0ec457f25cc6813e72e59a11d59b5f144ae9eff5bbefd952fec75e556422ca91c83839008a7d00e65ec96103506baa8355e3c6713a0cdfcb839cd21b2724570965db08073febb2e8f5cf36bd3d2a0c125c45223002ee6c36e3184298beb5d8f2fd027d414ef999b7aaf82318e46b829eef7a69f3a8f2b983a17c14bb4e5a939c21d4b8fa9866dc7d0f69cbb8704c20c9776390efc7afe7a1ad5a513ef48bf1b859dd39d95e7a9c76efd0ea02b384b4cf25c68ff65f027878637de939d6d2e1d43a10c99aafc357566990c95b9f19ff4a4a71a544c851d4f2cfdf865983694617d1f729f3f75071903ed8c0157e3a01cb58a4254bca6cd4edbd47c287b17bca0b9800def29645d6650d258cbd3d21c168d991cf6ab7ca65d643d9d0d718a0c605e57c5dbb006a01addd05202211cff89543331ecdeca6ce40176ca54a87158f26967f8ab06cf963ccf24a15e755975cab2c656597f4764ca3c87dbcaa1083e8bcbc1490c69a76eca20781adbbad046df8989e930389ba0db0909683bdcda76d7addb9dd01a3b3150fb3e95ae12793f3984392ef76b8b08b3699ca90c9f5064f2a2eec75e3bdbd6411783451607ed932a0638ca04891f312c2b715f7563fe275c2fc593faa47c5937068d9894e262ce676dede47151e6d4e04d543f7aa93dc2d7296ce21477e119c380482dfa4ac3e0c25776705f8568a4143c101b5a9b15fa69fe1dfc8ff92c76c05d4b74b16cbec265ceb18ba0eef535875b242fa0981c778fb8c9f37b43d9db887ff58f6584ece2cd07de26a5da464c40521d8e3d48381bda36ae7f4c75050da1981daf5a8555846bd5c0a5bf2819c687c858e49fe1aeab36a6f8457c15d75b5bf89628e9145709732a5ac0a4cb673c8ea6965d712dd77953631d19f1e808aa06c79f29ad429782ac25ea42b180d837f98ac850582067e9d59734b9a2e616a998006cf87cdf40219ab6f511c78d12af44729bacd101557cb30a3e0cdef412aaabcbadb2edcc1c181653c664de89d014935ed7c95d8a8b9c8084b97d8e07bfaeb5d6ea0fb67f6b4a6a5d526bee9f765b3499255c1d3309ef66503b1406472f3013014ab04682d652fcb6671d528020b3fcf82bdf022e8adc0606db4b26ad247a9c2057b9d99238111c36d32e3ff051290886685b17ac194e5fec8a6d561ad15f403dde1ee620f844d16478f32be34243e97604362a6231f63dfbd3bfdf138580275a2114c8620db538cfc3fee0f8bc34cf8985a3aa6310c757daf03680ab6b721a6f08a88e8e1d50dd8694f9f8bc44fcab7d91f3c22e9b89ec142e9549712715071e3c16c5a196229cabed9e28ea5ae0e61fdc2799851dcbed5c00018b7eebeccfbc9d6767a15825064ce36e457a94fdb3b533e99fc842f3c5f1e1a67f19cb211fc1e475ebc6c9b520b9a3a0d919106308427fe6af16d45ded4914a0a7ca65c762b7de4b540ac623e59f1a3fad25785b6b9460c01434aa3272b24a61c1ded967ca8a90c0b174fcf239f3fb4cad1d7204c7f05fd25317650f3a7928f7a6210a24a950b462a5eb8ceba5d65ce9f2cecee59b505928b9fc1b5242ff5108fc586a129124eac5a2d924a7c4ef7784aed4591cdb4b79c1bce4e99d7e02b33f42bac444a4b518eb288755eddf3601a600c6e7bbd427ed35e0b6a9f7877bf5d17efdc9f684b92cec7927a3075fbcc9ddcd6347aeed5002cc08645cccd994e169a40045a6d98c38b54bf08e90f6482ca4cce2ab6a83661a0e953f2abb981356e5564e149bb552dee13c274aef29a03493275741b4bbd8123c9653a09f5c55735696ffc2a873654afcc5ff386f14d26adc2dca69ba39fe64af5ca977892e13abf933bfc0242709474e8c304cb086492718fba1f36cc69253ee4b4d017d76e36179546cbc27ebb2001641be51cf5c9ce507871c7c3ebdceacc195afcaf34bd0fa6331120ed1f6d6109fbb905f0808ba0cb3892d0c670accf3fcf42db53aae903aae21c34ef53d33055363e4f5f5c44120f32f93d3dccb1d10209741d5b5ca699357b0e21637f9a246d366d90b7b6c007f21c4b141a37c98ff474ebb1de0f3237c98f142e37f090e74cb3e1629859cad93c252603505305f2fd3285cb7e66bf67ead403864b5d98c0e989ca29ff8423d0d4f91ab4ab0195746a10fd7a1370348458e144e6c58d2f7fee7de3c864d4b39e3ac30e1d0a8c84f9ce471d3bb15cb14d3f64b09a73966d765cc50a4de8dc61181e163d8bd83d95af2d706cf3412b277ff9622b6d3033eab184fa504f232372a944a9274dfc47a5ba8bf2d261c3f18614d9cd1ece3eee69c1a00dc5bd3b09256109788b96d6a66579634c455d2c1ca531bde926294d6e19b8db561e12fef2ea9ece7bb93d816e59d05586ac8e4306eed38d71429b88d2d7f7fc61c242d7b9c274386267fc7a19842db00df723b5e7abd197b7a2ec3d2c8575e92207352e2d07aa82b6d4a6fceca72c021a017a397885fdcd68d26a4e9ca494a586a8e4a971c6d9c8f6437f438edc6c1ff5f36aa1774480e7c4d6b91df793633cfc8b2def0f3cd2602f16bfd49a8d5c3f75c2b096fd22ca397ac8698ba34f104d8e50064b16de7b9a0e8f6743a9f80d60b0b7b5076912cf6d83f787472d6a84c2efe41be5dc2e70b16ed747b9eeb40e7be9355a45e87aa712b3a551d4339c5586eae65952111834d7b573ba71ded5b3b66ba53e501c43e5f445758dd8473bd9622651116591ae17c077085df5b794589d8f2736e96d28023314477cbb3c8f5a35716bc9840cd53f4bff39058765bda410565d717694c868a84a83551ce87a8d286a12e7a44088770a2a88685deafcc5452cfd5ae01731b18d9febc4f9d01cfd62416a61d77e8b9430c7a61037ff6ea79e19a303404f0bfc54d618a7feddb349a28d85ab20627e369d33d8f0f0e68688d827ae6a3d22460561745d4eaf6582da1020d75b0960d75fef607e19bc91954d43d35ace6d0a7ec9509d94dac4db6ae1962ad9b73a2a3ae7c98837a389dca1d494c06af78c1a608752f6559cd5e86da38c5fb1992ef987b56b21d1afdd592c6b9da42597b5035e57998850e750df553279c1b98d1ab23562fb32d04dca6ef7684acf19923c8c10a87aece43990e0681852eddf4a5a5b176dab5b6243c461f61a4c08d22fba0b21ae0d6acd78f4f0265eb1d614987a9cf5d1e033e159fc8161ded96ec73f04497245603053d5d777a2d71c633efc4ccbb5ff2d46dc6c3252a072830fd0ae68c652180672632ee20ff66a08605b7abc03c4445fbcd393c0820b635699b03b92cc3316ee3f20161d765b70aadf5ddc9744cdc9bc361a5a3a579184f5129a11d38f5da4c8c2caccb561263ad3ebb7033f34e346c0931cd869a0488ad68a957b2e7eab22aba041549a1d3fded120ed5906c9ecc0b668b52a376344ac184f0f479751c3c12f338a5d532d697af9edab71ae947ff96628ef939148edb5e23077c1f72c82a3e5f2b9177a35f2ba572eebff6e6bfdc21651349d2745efe40287482433d503292150ac367760b67d0432612540d340f86480243f57caa4ddca561464b5be81ea1656c0b9a1375bc4042b802cd0b26133bc688e498d6ccf4067439a286a75cde91474c397a8c2add6e4efd854ba3d059e174078ea94a0b407c165d1d20e846b6c8ee212ef7b3b1034ce6981557c1a433d4077a87e00193ca09ca73a3ef3c8f65a68a7fa142a5754f4c66073728f5f238d6c6ed202cb2408c45476eef8524b30381cd83a1bb51ceaea175c35b6ddacb448568390323a21a518057f8b2a7c4dcf4d3514b7658fba3d55ccefaa19a86eb1b321ae4d47eee87aac4e53bb187c2c5ecf97fa03b46ffc2a83e0bbe7b1eb31134c2b1d9543f41c09877ac1267819cef24fb86cee098694e87b43b421771dbb8a6e4af3008a90a4cb54212aca17299f2ad980b568751eacfc1d9e84e42e17eb217c1de6a38a2898a0a5941ebdbcb9e15bdb20a1a11e29f584222d468ef58481e3784476b887f99fdcf9deb61f9360dbec1208e4b96cdbbaff65ddd6fe4c6f04554c9f6f3c0f70dd19eaa295a9869eee5fa36e934d80f5a3f15804dba48709a8c823a144132d67cacad804960edb38e1772a00cf9db512c28e1024aff0abfc178f90f5ef6bfb9ec1804184c898c78211c3a3887699aea996914ff8635b226f49168b834f6ef1bc213e336767017ea805137a75ec7a03a814234e970656fb4c5f721e63b4d26d55b886000e7536162f9654beec6d72306034fadaa8671b2d41058fa8b86e96266ccb4001ca53fcb8c8e17cbaa2d55053b8f91ec441cc9b79aba89891027049f9be0b61de4e1645db5b998e076fd7fe1ec01b53f8d47f1d2b28b6a3712d543fc86419da87a9766bc2ca87aa04c9f1ad2fe8b01ce02c40dc5f66a0d451932d2310367f98c9bcf23ab40bf0ef6ca26029dd46cba11e1522c27939ff221c0cfcdddaecc5e3599c9f030efdd792dc9864dcbcef14a1aec8ddeac9193e7f8e6b79ba3256c6c95076f682ff3067831d7207dee637aff54eaa061d14e2c54f031a31f49ac8e5372df732a24eeb65a37e337e64984911160493dada90ddcc937fe948ef4627b1d877c486fea9467d988ff69ecf888a40a29e5d432c14c3e4dfaa427d9fad51054c005a3392987b1153c4bc6fd425e0a9200df0756ca4277a949e68ef1c3e3c32a66d18fde517a50977308b0625b9f5e98f429935c7300d6fe5ba24051af33bcaa2cdb9fbf737fa1a065cde1b5dc55d4d941d3ccbed897d55f6f5f7ca7c3dd4b4043e0af75705ff91795407fca341bc339d374ea120529f2c6d0c5346eb5276e671353dd2df7b5a94db42beae1b07d071e7119f2b94878fe050d65251ecd55ccb0e8065e7714aa50551887324e695ed552ca7267542f10485b4238daf164fc3519998e3538cbc034269bd9768b1ea3dba3d3c099bb9abf7b38945c346abcb6314e91a9ba1b6127255f7944e86fd0108b5c2fd27b531fac0d50d8d7e62996e4a0a812767f50bae2586886721dc2b4844e2544464b55602e1919cd7142a6190471fdd8775f2f415aa3af40a8ae2f2c55260803e736ef831771827dae45e737a717cea9db8d04bf7c7622dd12797367a2736a54b35d528393c89c3becb7442c9919d4e5f703884b66afa0f98ca471e3436f379450aa67102ad97227cc450f5624d1e11eb4d937c7ceb2e33dde35265ab6dc9df45b55bfe0731", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x7, 0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9ab, 0x0, 0xc000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) 8m40.366963795s ago: executing program 9 (id=5645): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = syz_io_uring_setup(0x6440, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) clock_nanosleep(0x4, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) 8m40.094529774s ago: executing program 9 (id=5647): mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB="000000020000de213c8cffff00000000000000000200000000007a9aa12521397eed204837378c"], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030009140000000000000000000000030006000000000002000000e00000020000000000000000030001000000000002000b00ac1414000000000000000000030005000000000002000000ac1e0001000000000000000004000400000000000000000000000000000000000000000000000000000000000400030000000000000000000000000000000000000000000000000000000000010018"], 0xa0}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000140)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x12d7c2) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 8m39.123988353s ago: executing program 38 (id=5647): mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB="000000020000de213c8cffff00000000000000000200000000007a9aa12521397eed204837378c"], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030009140000000000000000000000030006000000000002000000e00000020000000000000000030001000000000002000b00ac1414000000000000000000030005000000000002000000ac1e0001000000000000000004000400000000000000000000000000000000000000000000000000000000000400030000000000000000000000000000000000000000000000000000000000010018"], 0xa0}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000140)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x12d7c2) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 5m47.156807779s ago: executing program 0 (id=6200): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xe4, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x9) fstat(r6, &(0x7f00000028c0)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x23b) splice(r4, 0x0, r4, 0x0, 0x5ff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r9 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$IOMMU_IOAS_COPY(r9, 0x3b83, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000280)={0x4, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) 5m43.988197117s ago: executing program 0 (id=6208): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0xffffffffffffffff}], 0x2}, 0x2000000}], 0x2, 0x10162, 0x0) 5m43.699980125s ago: executing program 0 (id=6210): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x40000, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "98"}]}], {0x14}}, 0x74}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 5m41.761525529s ago: executing program 0 (id=6218): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffff7e) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000540)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @pic={0x0, 0x1, 0x1, 0x4, 0x3, 0xef, 0x0, 0x1b, 0xe, 0xa1, 0xfa, 0x2, 0x8, 0x0, 0xff, 0x3}}) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff7b76bf510100000c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22000c9078013c0001dc8b82dbf6e08238b957d9f668d63507e0f8873d"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x1}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x39, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000003000000080000000100000000000000fcb5cba7504e720c3f5a7793850cf409b7795e56e5220c9a2ca6203c1b25048fbaa5cba19f940f54f98bbcd81b17d8d99c65463066fabe7b6b3b8a1ffaa0f0a8733c89fc9fd38370c154d9d2025d9c139008dbe0e3f9af73c58d194de40c4cae7b268fe65767b656711dbc649c2e7323ecb653be8c08faff319cb72b939838329cdd836656c207262914ee7d91355f6bacda3b0bb3e6c97973c2399a40ab49df23bbf3c869213c0ccabfc543ab60a43e94c3bc76609d01929baae60952cae7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x800000, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 5m38.779971779s ago: executing program 0 (id=6230): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') ioprio_set$uid(0x3, 0x0, 0x0) close(r0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 5m38.555927758s ago: executing program 0 (id=6233): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000802, &(0x7f0000002840)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r2, 0x4b30, 0x8000000000000001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1fc, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000400000008000600", @ANYRES32=r4, @ANYBLOB="10000100000000002000000000000000"], 0x2c, 0x0) 5m37.569885968s ago: executing program 39 (id=6233): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000802, &(0x7f0000002840)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r2, 0x4b30, 0x8000000000000001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1fc, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000400000008000600", @ANYRES32=r4, @ANYBLOB="10000100000000002000000000000000"], 0x2c, 0x0) 2m58.064579676s ago: executing program 4 (id=6634): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m56.963841169s ago: executing program 4 (id=6636): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket$netlink(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x6}, 0x18) socket(0x40000000015, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@ieee802154={0x24, @short={0x2, 0x3}}, 0x80, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x8000, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m56.006160975s ago: executing program 4 (id=6638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x123301) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000000)=0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m54.033306091s ago: executing program 4 (id=6651): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x100100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001000000", @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 2m52.097701176s ago: executing program 4 (id=6657): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000500)='`y', 0x2, 0x0, &(0x7f0000000280)={0x11, 0x1a, r2, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 2m51.767803543s ago: executing program 4 (id=6660): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf2508000100000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m35.46393621s ago: executing program 40 (id=6660): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf2508000100000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m44.185519228s ago: executing program 7 (id=6937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000016001963d25a80648c56915a17aa2bfe", 0x14}], 0x1}, 0x0) 1m43.022309188s ago: executing program 7 (id=6944): open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) 1m42.884110381s ago: executing program 7 (id=6945): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m38.684266405s ago: executing program 7 (id=6963): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 1m37.311448241s ago: executing program 7 (id=6970): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1m35.709812463s ago: executing program 7 (id=6976): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffb}, 0x0) unshare(0x40020200) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf) sched_setscheduler(0x0, 0x1, 0x0) 1m19.517279184s ago: executing program 41 (id=6976): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffb}, 0x0) unshare(0x40020200) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf) sched_setscheduler(0x0, 0x1, 0x0) 12.373508711s ago: executing program 3 (id=7274): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x11, 0x7, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x67], [], [0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r9, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r10}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) epoll_create1(0x80000) syz_usb_control_io$cdc_ncm(r12, 0x0, 0x0) 10.079289023s ago: executing program 8 (id=7275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x58}}, 0x0) 9.974565635s ago: executing program 8 (id=7277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r2, 0x53}, &(0x7f0000000400)=0x8) 8.999485878s ago: executing program 8 (id=7280): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed00000001090224"], 0x0) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 7.779630686s ago: executing program 3 (id=7284): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00003df000/0x8000)=nil, 0x8000, 0x0, 0x101, 0x42010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 7.679957334s ago: executing program 1 (id=7285): mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) r0 = io_uring_setup(0x6743, &(0x7f0000000180)={0x0, 0x9826, 0x80, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='ext4_fc_commit_stop\x00', 0xffffffffffffffff, 0x0, 0x957}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.539293058s ago: executing program 1 (id=7286): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) newfstatat(0xffffffffffffff9c, &(0x7f0000002f00)='./bus\x00', 0x0, 0x6000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000080)={0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x3, [0x7, 0x0, 0xffffffff]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000033c0)}], 0x1, &(0x7f0000003500)=[@cred={{0x1c}}], 0x20, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x68, 0x20040800}}, {{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x4}}], 0x4, 0xc040) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add"}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f00000009c0)=0x6) close(r4) 6.538081809s ago: executing program 6 (id=7287): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f00000000c0)={'\x00', @ifru_map}) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="020200"/14], 0x14}, 0x1, 0x40030000000000}, 0x48094) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200800, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x101882, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x34}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000340)={0x82, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000900)=ANY=[], 0x700, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000000), 0x4) 6.49677687s ago: executing program 1 (id=7289): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0xfffd}, 0x0, [0x1000ffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x800, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x800, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x1, 0x9, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x58, 0x0, 0x0, 0x7fff, 0x3, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9b1, 0x0, 0x1e], [0x88000001, 0x0, 0x4, 0x29e59dd5, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004], [0x0, 0x0, 0x431, 0x0, 0x0, 0x0, 0xffffffff, 0x200, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfc2a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x5]}, 0x45c) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) 5.111937726s ago: executing program 5 (id=7291): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1, 0x2}, 0x10) 5.040338413s ago: executing program 1 (id=7292): socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000140), 0x4, 0xc8000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) syz_open_dev$sg(&(0x7f0000000100), 0x3, 0x143640) ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x3, &(0x7f00000000c0)={0x4, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)="d6", 0x3, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) 5.013106042s ago: executing program 8 (id=7293): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdir(0x0, 0x0) syz_emit_vhci(0x0, 0xd) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x4, 0xc9, 0x9e}}}, 0x8) socket$kcm(0x10, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f0000000540)="8d", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6(0xa, 0x80001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x111, 0x0) listen(r1, 0x1ff) sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="ab", 0x1, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 4.618295913s ago: executing program 1 (id=7294): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x9, &(0x7f0000000740)={0x0, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 4.617248526s ago: executing program 3 (id=7295): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) accept(r0, &(0x7f0000000080)=@can, 0x0) 4.331728921s ago: executing program 6 (id=7296): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x11, 0x7, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x67], [], [0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r9, 0x0, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r10}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xc, 0x3, "c27346e3580c3f0b"}, @NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) 4.095861505s ago: executing program 5 (id=7297): setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000120001"], 0x26}}, 0x0) 3.758717983s ago: executing program 1 (id=7298): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000001f680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a240000000500000108000a400000000408000540fffffffd140000001100010000000000000000000300000ae2fae1a79a5dd6a501c6917860966da83a919b29770aeaf0aad4f59660cc3d4d646c3b50d9c770d90ca0a94cd876bd3df362f229498e1c2fc64365f7d8442667ede71cd2f4d37d7e8dd23cbde08ab743edaf90d5f5270c59415d9c6ebd9e75d08864ac5e1e53586858d568159e6969a3ce7239ff917da28b9062b46e17bae891bf70416a137075a0113774cd1b7a313bbda2af994e7e9b9553b3cd8563ab3fe6aa9c9f9838bac5ebd26104ade41378f8404e88f6a0f60d"], 0x4c}, 0x1, 0x0, 0x0, 0x8008080}, 0x44881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.619737686s ago: executing program 3 (id=7299): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) newfstatat(0xffffffffffffff9c, &(0x7f0000002f00)='./bus\x00', 0x0, 0x6000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000080)={0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x3, [0x7, 0x0, 0xffffffff]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000033c0)}], 0x1, &(0x7f0000003500)=[@cred={{0x1c}}], 0x20, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x68, 0x20040800}}, {{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x4}}], 0x4, 0xc040) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add"}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f00000009c0)=0x6) close(r4) 2.832590802s ago: executing program 5 (id=7300): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, 0x0}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}, 0xffffff7f}) syz_open_dev$loop(0x0, 0x6, 0x80) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e20, @loopback}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 2.832175511s ago: executing program 8 (id=7301): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 2.789217306s ago: executing program 3 (id=7302): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x31e}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000033c0)}}], 0x2, 0x40000100, 0x0) 2.552707558s ago: executing program 6 (id=7303): socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) setresuid(0x0, 0x0, 0xee00) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @any, 0x8}, 0x80) shutdown(r0, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'veth1_vlan\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 2.535359594s ago: executing program 3 (id=7304): socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000140), 0x4, 0xc8000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) syz_open_dev$sg(&(0x7f0000000100), 0x3, 0x143640) ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x3, &(0x7f00000000c0)={0x4, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)="d6", 0x3, 0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) 1.335967155s ago: executing program 5 (id=7305): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x40001, 0x0) write$sequencer(r0, &(0x7f0000000680)=[@v={0x93, 0x2, 0x90, 0x1f, @MIDI_NOTEON=@note=0x3f, 0xfd, 0x9}, @e={0xff, 0xc, 0xf, 0xc7, @SEQ_CONTROLLER=0xff, 0x6, 0x3}], 0x10) 1.250946865s ago: executing program 6 (id=7306): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, 0x0) r6 = io_uring_setup(0x6d95, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 983.194964ms ago: executing program 5 (id=7307): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 208.510177ms ago: executing program 8 (id=7308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0x8010aa01, 0x0) r3 = syz_open_dev$sg(0x0, 0x7fffffffffffffff, 0x8800) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 184.877023ms ago: executing program 6 (id=7309): mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 80.974252ms ago: executing program 5 (id=7310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10}}, 0x80}}, 0x0) 0s ago: executing program 6 (id=7311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x780, 0x0, 0xc, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) kernel console output (not intermixed with test programs): onnect, device number 60 [ 2668.710807][T23895] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2668.782167][T29808] vivid-001: disconnect [ 2669.513011][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2669.525408][T23895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2669.534361][T23895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2669.546629][T29803] vivid-001: reconnect [ 2669.585005][T29750] udevd[29750]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2669.609283][T23895] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2669.749921][T23895] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2669.794555][T23895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2670.253702][T29804] lo speed is unknown, defaulting to 1000 [ 2671.254923][T28831] net_ratelimit: 1 callbacks suppressed [ 2671.254943][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2671.462017][T29812] syz.5.6490 (29812): drop_caches: 2 [ 2671.627924][T29804] chnl_net:caif_netlink_parms(): no params data found [ 2671.683854][T29804] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.691195][T29804] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.698587][T29804] bridge_slave_0: entered allmulticast mode [ 2671.706132][T29804] bridge_slave_0: entered promiscuous mode [ 2671.714515][T29804] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.721631][T29804] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.729210][T29804] bridge_slave_1: entered allmulticast mode [ 2671.736489][T29804] bridge_slave_1: entered promiscuous mode [ 2671.761921][T29804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2671.772789][T29804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2671.804783][T29804] team0: Port device team_slave_0 added [ 2671.812360][T29804] team0: Port device team_slave_1 added [ 2671.834451][T29804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2671.841467][T29804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2671.867846][T29804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2671.880471][T29804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2671.887653][T29804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2671.918547][T29804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2671.953031][T29804] hsr_slave_0: entered promiscuous mode [ 2671.959639][T29804] hsr_slave_1: entered promiscuous mode [ 2671.965784][T29804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2671.973554][T29804] Cannot create hsr debugfs directory [ 2672.072572][T29804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2672.149891][T29804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2672.231458][T29804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2672.294376][T29804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2672.351312][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2672.432527][ T5851] Bluetooth: hci4: command tx timeout [ 2672.444123][T29804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2672.457596][T29804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2672.466697][T29804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2672.476552][T29804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2672.500041][T29804] bridge0: port 2(bridge_slave_1) entered blocking state [ 2672.507133][T29804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2672.514563][T29804] bridge0: port 1(bridge_slave_0) entered blocking state [ 2672.521644][T29804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2672.566960][T29804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2672.586952][ T971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2672.595092][ T971] bridge0: port 2(bridge_slave_1) entered disabled state [ 2672.600100][T28994] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2672.603503][T16668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2672.618274][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2672.626936][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2672.652089][T29804] 8021q: adding VLAN 0 to HW filter on device team0 [ 2672.667154][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 2672.674281][ T6461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2672.696723][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 2672.703831][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2672.821577][T29804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2672.980369][T29804] veth0_vlan: entered promiscuous mode [ 2672.992894][T29804] veth1_vlan: entered promiscuous mode [ 2673.023176][T29804] veth0_macvtap: entered promiscuous mode [ 2673.032130][T29804] veth1_macvtap: entered promiscuous mode [ 2673.048286][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2673.058869][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.069527][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2673.080191][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.090270][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2673.101447][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.111454][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2673.123665][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.133489][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2673.144062][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.154921][T29804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2673.170418][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2673.182628][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.193409][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2673.204140][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.214531][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2673.225893][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.236496][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2673.247147][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.257203][T29804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2673.267723][T29804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.278596][T29804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2673.290209][T29804] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.299539][T29804] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.303141][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.309274][T29804] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.325299][T29804] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.406385][ T6461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2673.420331][ T6461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2673.440295][T16668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2673.449852][T16668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2673.458061][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.511566][T29834] xt_nat: multiple ranges no longer supported [ 2673.968127][ T6461] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2674.567459][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2674.662931][ T5851] Bluetooth: hci4: command tx timeout [ 2676.791548][T12739] net_ratelimit: 2 callbacks suppressed [ 2676.791579][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2676.875743][ T5851] Bluetooth: hci4: command tx timeout [ 2677.902318][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2678.074113][T23087] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2678.758980][T23087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2678.768869][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2678.783982][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2679.025011][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2679.110456][ T5851] Bluetooth: hci4: command tx timeout [ 2679.441710][ T6461] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2679.783864][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2680.125925][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2682.351775][T12739] net_ratelimit: 1 callbacks suppressed [ 2682.351795][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2683.051702][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2683.472260][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2684.231723][ T64] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2684.575472][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2685.600008][ T64] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2685.696628][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2686.303791][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2686.797387][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.908968][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2689.031168][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2689.039490][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2689.533528][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2689.705185][T23087] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2690.132684][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2691.254855][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2691.757908][T28994] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2692.366865][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2692.783592][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2693.474890][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2694.591282][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2695.092780][ T64] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2695.180771][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2695.187092][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2695.695797][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2696.033987][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2696.803448][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2697.423954][T23895] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2697.482937][T23895] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2697.513403][T23895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2697.586389][T23895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2697.606502][T23895] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2697.617278][T23895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2697.638302][T29856] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6495'. [ 2697.639232][T29854] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 2697.653778][T29854] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2697.661604][T29854] vhci_hcd vhci_hcd.0: Device attached [ 2697.863472][T12739] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2697.936922][T21345] usb 45-1: new high-speed USB device number 11 using vhci_hcd [ 2698.008282][T23087] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 2698.460700][T29857] vhci_hcd: connection reset by peer [ 2698.470346][T16668] vhci_hcd: stop threads [ 2698.475548][T16668] vhci_hcd: release socket [ 2698.480242][T16668] vhci_hcd: disconnect device [ 2698.606116][T29843] lo speed is unknown, defaulting to 1000 [ 2699.117038][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2699.192474][T29855] syz.4.6497 (29855): drop_caches: 2 [ 2699.198781][T29855] syz.4.6497 (29855): drop_caches: 2 [ 2699.246942][ T971] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2699.294916][T12130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2699.325084][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2699.371908][ T971] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.382391][ T971] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2699.392981][ T971] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19968 - 0 [ 2699.504294][T12739] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2699.513565][T12739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2699.526279][T12739] usb 9-1: config 0 descriptor?? [ 2699.615248][ T971] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2699.636767][ T971] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.647569][ T971] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2699.658191][ T971] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19968 - 0 [ 2699.698435][T29869] vivid-003: disconnect [ 2699.874403][ T971] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2699.885195][ T971] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.896024][ T971] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2699.910943][ T971] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19968 - 0 [ 2699.987697][T23895] Bluetooth: hci2: command tx timeout [ 2700.146885][T29873] syz.4.6501 (29873): drop_caches: 2 [ 2700.172111][T29873] syz.4.6501 (29873): drop_caches: 2 [ 2700.225406][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2700.272553][T29863] vivid-003: reconnect [ 2700.652585][T12739] ath6kl: Failed to submit usb control message: -110 [ 2700.659333][T12739] ath6kl: unable to send the bmi data to the device: -110 [ 2700.712320][T12739] ath6kl: Unable to send get target info: -110 [ 2700.751606][T12739] ath6kl: Failed to init ath6kl core: -110 [ 2700.791675][T12739] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2701.165125][T12739] usb 9-1: USB disconnect, device number 61 [ 2701.223239][T29880] overlayfs: missing 'lowerdir' [ 2701.366132][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2701.386999][ T971] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2701.399010][ T971] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2701.419845][ T971] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2701.451793][ T971] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19968 - 0 [ 2701.513373][T29843] chnl_net:caif_netlink_parms(): no params data found [ 2701.768871][T29843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2701.774176][T12739] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2701.780654][T29843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2701.797515][T29843] bridge_slave_0: entered allmulticast mode [ 2701.811988][T29843] bridge_slave_0: entered promiscuous mode [ 2701.839605][T29843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2701.847212][T29843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2701.859057][T29843] bridge_slave_1: entered allmulticast mode [ 2701.892830][T29843] bridge_slave_1: entered promiscuous mode [ 2701.934554][T12739] usb 5-1: Using ep0 maxpacket: 8 [ 2701.993199][T12739] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 2702.033511][T12739] usb 5-1: config 0 has no interface number 0 [ 2702.051439][T29897] netlink: 'syz.6.6507': attribute type 10 has an invalid length. [ 2702.161638][T12739] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2702.199834][T23895] Bluetooth: hci2: command tx timeout [ 2702.418602][T12739] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 2702.448898][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2702.575810][T25112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2702.587989][ T971] bridge_slave_1: left allmulticast mode [ 2702.588706][T12739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2702.593639][ T971] bridge_slave_1: left promiscuous mode [ 2702.593804][ T971] bridge0: port 2(bridge_slave_1) entered disabled state [ 2702.636982][ T971] bridge_slave_0: left allmulticast mode [ 2702.643181][T12739] usb 5-1: Product: syz [ 2702.648244][ T971] bridge_slave_0: left promiscuous mode [ 2702.654233][T12739] usb 5-1: Manufacturer: syz [ 2702.659439][ T971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2702.671118][T12739] usb 5-1: SerialNumber: syz [ 2702.687940][T12739] usb 5-1: config 0 descriptor?? [ 2702.729271][T29902] IPVS: length: 24 != 12312 [ 2703.053127][T12739] msi2500 5-1:0.246: Registered as swradio24 [ 2703.059638][T12739] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 2703.087515][T12739] usb 5-1: USB disconnect, device number 56 [ 2703.561266][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2703.773304][T21345] vhci_hcd: vhci_device speed not set [ 2704.094366][T29914] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6511'. [ 2704.276234][T29921] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 2704.371600][ T971] bond1 (unregistering): (slave bridge1): Releasing active interface [ 2704.414718][T23895] Bluetooth: hci2: command tx timeout [ 2704.679128][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2704.701040][ T971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2704.712669][ T971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2704.734253][ T971] bond0 (unregistering): Released all slaves [ 2704.914525][ T971] bond1 (unregistering): Released all slaves [ 2704.945021][T29897] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2705.069505][T29843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2705.115987][T29843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2705.783404][T12130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2705.791603][T12130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2705.899565][T29935] vivid-004: disconnect [ 2706.640889][T23895] Bluetooth: hci2: command tx timeout [ 2706.663968][T29930] vivid-004: reconnect [ 2706.691634][T29843] team0: Port device team_slave_0 added [ 2706.768645][T29843] team0: Port device team_slave_1 added [ 2706.896704][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2707.011731][T29944] syz.1.6518 (29944): drop_caches: 2 [ 2707.119578][T22024] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2707.290754][T22024] usb 9-1: Using ep0 maxpacket: 32 [ 2707.349920][T22024] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 2707.451788][T22024] usb 9-1: config 0 has no interface number 0 [ 2707.518673][T29944] syz.1.6518 (29944): drop_caches: 2 [ 2707.533603][T22024] usb 9-1: config 0 interface 12 has no altsetting 0 [ 2707.580260][T22024] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2707.594368][T29843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2707.640606][T22024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2707.648969][T29843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2707.676042][T22024] usb 9-1: Product: syz [ 2707.771554][T29843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2707.792717][T29843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2707.801130][T29843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2707.811510][T22024] usb 9-1: Manufacturer: syz [ 2707.832512][T22024] usb 9-1: SerialNumber: syz [ 2707.840434][T22024] usb 9-1: config 0 descriptor?? [ 2707.869139][T29843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2707.986304][T29954] fuse: Unknown parameter 'group_00000000000000000000' [ 2708.481322][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2708.753709][T29958] syz.1.6520 (29958): drop_caches: 2 [ 2708.772380][T29958] syz.1.6520 (29958): drop_caches: 2 [ 2708.945400][ T971] hsr_slave_0: left promiscuous mode [ 2708.954697][ T971] hsr_slave_1: left promiscuous mode [ 2708.971649][ T971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2708.979349][ T971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2708.988247][ T971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2708.996421][ T971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2709.031186][ T971] batadv0: left promiscuous mode [ 2709.039684][ T971] veth1_macvtap: left promiscuous mode [ 2709.050357][ T971] veth0_macvtap: left promiscuous mode [ 2709.083264][ T971] veth1_vlan: left promiscuous mode [ 2709.097373][ T971] veth0_vlan: left promiscuous mode [ 2709.150809][T12130] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2709.258461][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2709.838997][ T971] team0 (unregistering): Port device vlan2 removed [ 2709.878957][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2709.888898][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2709.889633][T12130] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2709.912516][T12130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2709.923464][T12130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2709.933290][T12130] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2709.952340][T12130] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2709.961395][T12130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2710.009035][T12130] usb 5-1: config 0 descriptor?? [ 2710.025381][T22024] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2710.034925][T22024] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 2710.081149][T22024] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2710.091413][T22024] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 2710.115279][T22024] usb 9-1: USB disconnect, device number 62 [ 2710.485494][T12130] usbhid 5-1:0.0: can't add hid device: -71 [ 2710.492027][T12130] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2710.493909][T29971] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6525'. [ 2710.512516][T12130] usb 5-1: USB disconnect, device number 57 [ 2710.924565][ T971] team0 (unregistering): Port device team_slave_1 removed [ 2711.000398][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2711.045137][ T971] team0 (unregistering): Port device C removed [ 2711.322478][T29975] vivid-004: disconnect [ 2712.063203][T29972] vivid-004: reconnect [ 2712.133435][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2712.544382][T12130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2712.559361][T29843] hsr_slave_0: entered promiscuous mode [ 2712.566345][T29843] hsr_slave_1: entered promiscuous mode [ 2712.577433][T29843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2712.586368][T29843] Cannot create hsr debugfs directory [ 2712.591995][T29964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6524'. [ 2712.601623][T29964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6524'. [ 2712.611237][T29964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6524'. [ 2713.873637][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2713.974446][T29983] syz.8.6529 (29983): drop_caches: 2 [ 2715.170586][T29995] fuse: Unknown parameter 'group_00000000000000000000' [ 2715.180739][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2715.346339][ T971] IPVS: stop unused estimator thread 0... [ 2715.820956][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2716.064603][T21345] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2716.270545][T21345] usb 2-1: Using ep0 maxpacket: 32 [ 2716.302875][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2716.371082][T21345] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2716.379400][T21345] usb 2-1: config 0 has no interface number 0 [ 2716.409918][T21345] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2716.475950][T21345] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2716.485147][T21345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2716.495030][T21345] usb 2-1: Product: syz [ 2716.499419][T21345] usb 2-1: Manufacturer: syz [ 2716.509869][T21345] usb 2-1: SerialNumber: syz [ 2716.671498][T30018] syz.8.6536 (30018): drop_caches: 2 [ 2717.394469][T30018] syz.8.6536 (30018): drop_caches: 2 [ 2717.402708][T21345] usb 2-1: config 0 descriptor?? [ 2717.491404][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2718.748974][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2718.925904][T30030] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6538'. [ 2718.994121][T29843] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2719.025420][T29843] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2719.037684][T29843] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2719.127530][T12130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2719.275468][T29843] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2719.283070][T21345] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2719.297070][T21345] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2719.304392][T21345] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2719.328476][T21345] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2719.446016][T21345] usb 2-1: USB disconnect, device number 38 [ 2719.584956][T30038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6543'. [ 2719.618921][T29843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2719.666637][T29843] 8021q: adding VLAN 0 to HW filter on device team0 [ 2719.735837][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 2719.742976][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2719.776673][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 2719.783856][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2719.819039][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2719.895000][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2720.276370][T29843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2720.415231][ T29] audit: type=1804 audit(2000002766.635:387): pid=30080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.6557" name="/newroot/166/file0/file0" dev="ramfs" ino=113324 res=1 errno=0 [ 2720.758169][T29843] veth0_vlan: entered promiscuous mode [ 2720.798971][T29843] veth1_vlan: entered promiscuous mode [ 2720.871423][ T29] audit: type=1326 audit(2000002767.065:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30099 comm="syz.1.6565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ed7e819 code=0x0 [ 2720.883206][T29843] veth0_macvtap: entered promiscuous mode [ 2720.950431][T29843] veth1_macvtap: entered promiscuous mode [ 2721.009721][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2721.020087][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2721.046201][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.060036][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2721.072606][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.083485][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2721.122121][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.143167][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2721.166886][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.192304][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2721.215920][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.230562][T29843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2721.271482][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2721.290797][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.305241][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2721.322363][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.335995][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2721.357476][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.369139][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2721.389430][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.414622][T29843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2721.432611][T29843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.446107][T29843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2721.496971][T29843] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.528326][T29843] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.554096][T29843] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.581479][T29843] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2722.032345][T26683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2722.067549][T26683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2722.177117][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2722.184319][T26683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2722.225782][T26683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2722.375931][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2723.316301][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2723.438465][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2723.674294][T30153] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2723.814057][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2724.519472][T18099] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2724.619445][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2724.684080][T18099] usb 9-1: Using ep0 maxpacket: 16 [ 2724.707812][T18099] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2724.719445][T18099] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2724.745702][T18099] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2724.758920][T18099] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2724.791018][T18099] usb 9-1: Product: syz [ 2724.796590][T18099] usb 9-1: Manufacturer: syz [ 2724.807347][T18099] usb 9-1: SerialNumber: syz [ 2724.818129][T18099] usb 9-1: config 0 descriptor?? [ 2724.842349][T18099] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 2724.849174][T18099] gspca_stv06xx: st6422 sensor detected [ 2725.101188][T22024] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2725.261218][T18099] STV06xx 9-1:0.0: probe with driver STV06xx failed with error -71 [ 2725.273671][T18099] usb 9-1: USB disconnect, device number 63 [ 2725.293838][T22024] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 2725.302949][T22024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2725.317543][T22024] usb 2-1: Product: syz [ 2725.321722][T22024] usb 2-1: Manufacturer: syz [ 2725.330213][T22024] usb 2-1: SerialNumber: syz [ 2725.340228][T22024] usb 2-1: config 0 descriptor?? [ 2725.636072][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2725.878699][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2726.031544][ T29] audit: type=1326 audit(2000002771.883:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.4.6600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b0af7e819 code=0x0 [ 2726.204012][T18099] usb 2-1: USB disconnect, device number 39 [ 2727.042591][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2727.675373][T30220] random: crng reseeded on system resumption [ 2728.084348][T30230] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6611'. [ 2728.119623][T30230] netlink: zone id is out of range [ 2728.124904][T30230] netlink: zone id is out of range [ 2728.130198][T30230] netlink: zone id is out of range [ 2728.410601][T30229] syzkaller0: entered allmulticast mode [ 2728.721823][T30227] syzkaller0: left allmulticast mode [ 2728.886312][T21345] net_ratelimit: 3 callbacks suppressed [ 2728.886327][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2729.105380][T30220] Restarting kernel threads ... done. [ 2729.108748][T30239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6616'. [ 2729.392802][ T5851] Bluetooth: hci5: command 0x1003 tx timeout [ 2729.401490][T23895] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2729.409965][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2730.000242][T30248] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2730.028335][T30248] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2730.039809][T30248] overlayfs: failed to get uuid (75/file1, err=-13); falling back to uuid=null. [ 2730.076412][T29900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2731.237884][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2731.562539][T30270] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2731.685748][T28831] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2731.871416][T28831] usb 9-1: Using ep0 maxpacket: 16 [ 2732.170094][T29900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2732.490737][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2732.505488][T28831] usb 9-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 2732.514790][T28831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2732.521613][T30281] team0: entered promiscuous mode [ 2732.522903][T28831] usb 9-1: Product: syz [ 2732.528072][T30281] team_slave_0: entered promiscuous mode [ 2732.532068][T28831] usb 9-1: Manufacturer: syz [ 2732.532088][T28831] usb 9-1: SerialNumber: syz [ 2732.546342][T28831] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2732.547371][T30281] team_slave_1: entered promiscuous mode [ 2732.560114][T28831] r8152-cfgselector 9-1: config 0 descriptor?? [ 2732.560279][T30281] team0: left promiscuous mode [ 2732.571110][T30281] team_slave_0: left promiscuous mode [ 2732.577735][T30281] team_slave_1: left promiscuous mode [ 2732.909973][T30290] xt_hashlimit: overflow, try lower: 35184372088832/511 [ 2732.956172][T30290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2732.969248][T30290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2733.401829][T29900] r8152-cfgselector 9-1: USB disconnect, device number 64 [ 2733.586476][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2734.690859][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2735.460583][T29900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2735.698995][T30317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2735.713417][T30317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2735.727981][T30317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2735.745465][T30317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2735.754734][T30317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2735.842684][T30318] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2735.857140][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2736.107296][T30317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2736.248399][T30317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2738.092744][T28831] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2738.271842][T28831] usb 2-1: Using ep0 maxpacket: 8 [ 2738.285925][T28831] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2738.306267][T28831] usb 2-1: config 179 has no interface number 0 [ 2738.312556][T28831] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2738.330121][T28831] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2738.341423][T28831] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2738.352821][T28831] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2738.364992][T28831] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2738.378945][T28831] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2738.378972][T15755] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2738.387976][T28831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2738.395647][T30332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2738.645966][T15755] usb 9-1: Using ep0 maxpacket: 8 [ 2738.654167][T15755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2738.665140][T15755] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2738.685920][T28831] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input66 [ 2738.714046][T15755] usb 9-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 2738.744548][T15755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2738.779253][T15755] usb 9-1: config 0 descriptor?? [ 2738.812059][T15755] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2738.860940][T15755] usb 2-1: USB disconnect, device number 40 [ 2738.860984][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2738.875651][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 2738.884832][T15755] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2739.105040][T30359] infiniband syz0: set active [ 2739.111340][T30359] infiniband syz0: added bond0 [ 2739.145575][T30359] RDS/IB: syz0: added [ 2739.149954][T30359] smc: adding ib device syz0 with port count 1 [ 2739.174307][T30359] smc: ib device syz0 port 1 has pnetid [ 2739.255813][T28831] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2739.352805][T15755] usb 9-1: USB disconnect, device number 65 [ 2739.438788][T28831] usb 5-1: config 0 has no interfaces? [ 2739.444328][T28831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2739.479346][T28831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2739.812122][T28831] usb 5-1: config 0 descriptor?? [ 2740.127934][T30369] usb usb5: usbfs: process 30369 (syz.6.6663) did not claim interface 0 before use [ 2740.335835][T15755] net_ratelimit: 11 callbacks suppressed [ 2740.335856][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2740.937375][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2741.056337][T30392] netlink: 'syz.1.6670': attribute type 10 has an invalid length. [ 2741.343250][T30392] syz_tun: entered promiscuous mode [ 2741.356909][T30392] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2741.429088][T30398] netlink: 168 bytes leftover after parsing attributes in process `syz.8.6673'. [ 2741.580298][T30404] syz.5.6674 (30404): drop_caches: 2 [ 2741.609933][T30404] syz.5.6674 (30404): drop_caches: 2 [ 2742.215701][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.278221][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.387625][T30409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.404920][T30409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.413995][T30409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.431244][T30409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.518726][T30409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.529678][T30409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2745.045803][T30436] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2745.825007][T30450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6691'. [ 2746.774279][T28831] net_ratelimit: 67 callbacks suppressed [ 2746.774299][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2747.863704][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2748.435254][T23895] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 2749.263150][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2749.271032][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2749.552704][T30489] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6706'. [ 2749.582624][T30489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2749.590100][T30489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2749.608431][T30489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2749.641228][T23895] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2749.641418][T30489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2749.888283][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2750.349376][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2750.678563][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2751.245036][T21345] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2751.453988][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2751.635817][T21345] usb 7-1: Using ep0 maxpacket: 8 [ 2751.650545][T21345] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2751.674440][T21345] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2751.708815][T21345] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2751.720920][T21345] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2751.731006][T21345] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2751.749042][T21345] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2751.762825][T21345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2752.469704][T21345] usb 7-1: usb_control_msg returned -32 [ 2752.475325][T21345] usbtmc 7-1:16.0: can't read capabilities [ 2752.481717][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2752.598120][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2753.572559][T30548] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 2753.616593][T30554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2753.625517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2753.677511][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2753.795997][ T9] usb 7-1: USB disconnect, device number 56 [ 2753.904826][T23895] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 2754.789673][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2755.194212][T30587] : renamed from veth1_vlan (while UP) [ 2755.739066][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2755.905179][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2756.166004][T30603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2756.321532][T30603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2756.406964][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2756.419418][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2756.435260][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2756.502758][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2756.513757][ T5851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2756.564852][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2757.016399][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2757.317829][T30625] syz.6.6755 (30625): drop_caches: 2 [ 2757.325670][T30625] syz.6.6755 (30625): drop_caches: 2 [ 2757.357367][T30627] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2758.125402][T12739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2758.331578][T30635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2758.340306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2758.463869][T30613] chnl_net:caif_netlink_parms(): no params data found [ 2758.657346][T30613] bridge0: port 1(bridge_slave_0) entered blocking state [ 2758.678679][T30613] bridge0: port 1(bridge_slave_0) entered disabled state [ 2758.701852][T30613] bridge_slave_0: entered allmulticast mode [ 2758.719821][T30613] bridge_slave_0: entered promiscuous mode [ 2758.733770][T30650] input: syz1 as /devices/virtual/input/input67 [ 2758.794923][T30613] bridge0: port 2(bridge_slave_1) entered blocking state [ 2758.803147][T30613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2758.810580][T23895] Bluetooth: hci5: command tx timeout [ 2758.838046][T30613] bridge_slave_1: entered allmulticast mode [ 2758.846150][T30613] bridge_slave_1: entered promiscuous mode [ 2758.876505][T30613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2758.888850][T30613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2758.965113][T30613] team0: Port device team_slave_0 added [ 2758.975063][T30613] team0: Port device team_slave_1 added [ 2758.990279][T18099] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2758.990621][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2759.024004][T30613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2759.030998][T30613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2759.062785][T30613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2759.079669][T30613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2759.086947][T30613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2759.113462][T30613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2759.161438][T18099] usb 7-1: Using ep0 maxpacket: 8 [ 2759.178494][T18099] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2759.189797][T30613] hsr_slave_0: entered promiscuous mode [ 2759.196571][T18099] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2759.205537][T30613] hsr_slave_1: entered promiscuous mode [ 2759.211676][T18099] usb 7-1: Product: syz [ 2759.216070][T30613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2759.223702][T30613] Cannot create hsr debugfs directory [ 2759.229549][T18099] usb 7-1: Manufacturer: syz [ 2759.234173][T18099] usb 7-1: SerialNumber: syz [ 2759.239888][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2759.255450][T18099] usb 7-1: config 0 descriptor?? [ 2759.574408][T18099] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2759.797418][ T29] audit: type=1326 audit(2000002803.396:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30662 comm="syz.8.6767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cc0b7e819 code=0x0 [ 2760.641978][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2760.866345][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2760.866513][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2760.994495][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2761.042971][T23895] Bluetooth: hci5: command tx timeout [ 2761.475220][T30684] usb 5-1: USB disconnect, device number 58 [ 2761.558402][T30685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2761.567375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2761.578000][T30685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2762.896084][T30613] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2762.916028][T30613] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2762.938187][T30613] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2762.966006][T30613] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2763.228767][T18099] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2763.231734][T30613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2763.250395][T18099] usb 7-1: USB disconnect, device number 57 [ 2763.256618][T23895] Bluetooth: hci5: command tx timeout [ 2763.269839][T30613] 8021q: adding VLAN 0 to HW filter on device team0 [ 2763.331284][T30613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2763.342415][T30613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2763.371443][T28994] bridge0: port 1(bridge_slave_0) entered blocking state [ 2763.378589][T28994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2763.387360][T28994] bridge0: port 2(bridge_slave_1) entered blocking state [ 2763.394495][T28994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2763.785221][ T29] audit: type=1326 audit(2000002807.082:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.8.6779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cc0b7e819 code=0x0 [ 2764.324939][T18099] net_ratelimit: 5 callbacks suppressed [ 2764.324957][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2765.479780][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2765.488089][T23895] Bluetooth: hci5: command tx timeout [ 2765.490646][T30613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2765.565254][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2765.641326][T30727] [U] [ 2765.644866][T30727] [U] [ 2765.647586][T30727] [U] [ 2765.650293][T30727] [U] [ 2765.676656][T30727] [U] [ 2765.679393][T30727] [U] [ 2765.682102][T30727] [U] [ 2765.684803][T30727] [U] [ 2765.696271][T30727] [U] [ 2765.699000][T30727] [U] [ 2765.701711][T30727] [U] [ 2765.704424][T30727] [U] [ 2765.708759][T30727] [U] [ 2765.711486][T30727] [U] [ 2765.714195][T30727] [U] [ 2765.716911][T30727] [U] [ 2765.778956][T30727] [U] [ 2765.781707][T30727] [U] [ 2765.784421][T30727] [U] [ 2765.787138][T30727] [U] [ 2765.811589][T30727] [U] [ 2765.814332][T30727] [U] [ 2765.817053][T30727] [U] [ 2765.819762][T30727] [U] [ 2765.864354][T30727] [U] [ 2765.867107][T30727] [U] [ 2765.869821][T30727] [U] [ 2765.872533][T30727] [U] [ 2765.928024][T30727] [U] [ 2765.930729][T30727] [U] [ 2765.933398][T30727] [U] [ 2765.936067][T30727] [U] [ 2765.953107][T30727] [U] [ 2765.955837][T30727] [U] [ 2765.958552][T30727] [U] [ 2765.961269][T30727] [U] [ 2765.995870][T30727] [U] [ 2765.998608][T30727] [U] [ 2766.001320][T30727] [U] [ 2766.004032][T30727] [U] [ 2766.022853][T30727] [U] [ 2766.025634][T30727] [U] [ 2766.028350][T30727] [U] [ 2766.031058][T30727] [U] [ 2766.058602][T30727] [U] [ 2766.061337][T30727] [U] [ 2766.064049][T30727] [U] [ 2766.066759][T30727] [U] [ 2766.116841][T30727] [U] [ 2766.119583][T30727] [U] [ 2766.122297][T30727] [U] [ 2766.125008][T30727] [U] [ 2766.146231][T30727] [U] [ 2766.148934][T30727] [U] [ 2766.151617][T30727] [U] [ 2766.154295][T30727] [U] [ 2766.189810][T30727] [U] [ 2766.192640][T30727] [U] [ 2766.195353][T30727] [U] [ 2766.198045][T30727] [U] [ 2766.206630][ T29] audit: type=1326 audit(2000002809.476:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc0b7e819 code=0x7ffc0000 [ 2766.238718][T30727] [U] [ 2766.241414][T30727] [U] [ 2766.244081][T30727] [U] [ 2766.246751][T30727] [U] [ 2766.268731][ T29] audit: type=1326 audit(2000002809.476:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc0b7e819 code=0x7ffc0000 [ 2766.295419][ T29] audit: type=1326 audit(2000002809.476:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4cc0b7e819 code=0x7ffc0000 [ 2766.318113][ T29] audit: type=1326 audit(2000002809.495:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc0b7e819 code=0x7ffc0000 [ 2766.339766][T30613] veth0_vlan: entered promiscuous mode [ 2766.356408][T30727] [U] [ 2766.359132][T30727] [U] [ 2766.361832][T30727] [U] [ 2766.364534][T30727] [U] [ 2766.405748][T30727] [U] [ 2766.408494][T30727] [U] [ 2766.411204][T30727] [U] [ 2766.413908][T30727] [U] [ 2766.419823][T30613] veth1_vlan: entered promiscuous mode [ 2766.479851][T30727] [U] [ 2766.482582][T30727] [U] [ 2766.485282][T30727] [U] [ 2766.487980][T30727] [U] [ 2766.495907][T30613] veth0_macvtap: entered promiscuous mode [ 2766.525119][T30613] veth1_macvtap: entered promiscuous mode [ 2766.559504][T30727] [U] [ 2766.569943][ T29] audit: type=1326 audit(2000002809.495:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cc0b7d1b0 code=0x7ffc0000 [ 2766.593798][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2766.802227][ T29] audit: type=1326 audit(2000002809.495:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc0b7e819 code=0x7ffc0000 [ 2766.828020][T30613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.956332][ T29] audit: type=1326 audit(2000002809.495:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc0b7e819 code=0x7ffc0000 [ 2766.979008][T30613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.989270][ T29] audit: type=1326 audit(2000002809.495:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4cc0b7e819 code=0x7ffc0000 [ 2767.018886][T30613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.051544][ T29] audit: type=1326 audit(2000002809.495:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc0b7e819 code=0x7ffc0000 [ 2767.211410][T30613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.253059][T30613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.614571][ T29] audit: type=1326 audit(2000002809.495:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30741 comm="syz.8.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc0b7e819 code=0x7ffc0000 [ 2767.634974][T30613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.659991][T30613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.670678][T30613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.686751][T30613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2767.700959][T30613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.713089][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2767.714608][T30613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2767.825520][T30613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.839696][T30613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.850306][T30613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.861277][T30613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.872011][T30613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.883008][T30613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.893208][T30613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2767.915078][T30613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2767.938029][T30613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2767.978274][T30613] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.997007][T30613] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.028094][T30613] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.056081][T30613] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2768.937359][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2769.094571][T29900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2769.648783][T23087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2769.656605][T23087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2769.697972][T23087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2769.711950][T23087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2770.367001][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2770.736673][T30783] [U] [ 2770.739391][T30783] [U] [ 2770.742074][T30783] [U] [ 2770.744753][T30783] [U] [ 2770.747911][T30783] [U] [ 2770.750610][T30783] [U] [ 2770.753287][T30783] [U] [ 2770.755965][T30783] [U] [ 2770.759181][T30783] [U] [ 2770.761886][T30783] [U] [ 2770.764581][T30783] [U] [ 2770.767274][T30783] [U] [ 2770.770519][T30783] [U] [ 2770.773225][T30783] [U] [ 2770.775906][T30783] [U] [ 2770.778605][T30783] [U] [ 2770.781940][T30783] [U] [ 2770.784657][T30783] [U] [ 2770.787346][T30783] [U] [ 2770.790026][T30783] [U] [ 2770.793554][T30783] [U] [ 2770.796263][T30783] [U] [ 2770.798947][T30783] [U] [ 2770.801631][T30783] [U] [ 2770.804931][T30783] [U] [ 2770.807627][T30783] [U] [ 2770.810309][T30783] [U] [ 2770.812992][T30783] [U] [ 2771.464386][T30778] [U] [ 2771.465868][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2771.508310][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2772.754623][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2772.763488][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2772.763652][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 2772.763665][ T29] audit: type=1326 audit(2000002814.846:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30785 comm="syz.1.6802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ed7e819 code=0x0 [ 2773.863444][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2774.603079][T30820] syzkaller0: entered allmulticast mode [ 2775.053618][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2775.067573][T30813] syzkaller0: left allmulticast mode [ 2775.663264][ T29] audit: type=1326 audit(2000002818.026:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30822 comm="syz.7.6816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e5c37e819 code=0x0 [ 2776.122105][T22024] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2776.154288][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2776.180973][T30828] block nbd5: Device being setup by another task [ 2776.436176][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2776.566743][T30838] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2777.187349][T22024] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2777.221632][T22024] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2777.280161][T22024] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2777.294718][T22024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2777.348739][T22024] usb 2-1: config 0 descriptor?? [ 2777.391959][T22024] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2777.540593][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2778.041778][T23895] block nbd5: Receive control failed (result -32) [ 2778.049036][ T5851] block nbd5: Receive control failed (result -32) [ 2778.323875][ T9] usb 2-1: USB disconnect, device number 41 [ 2778.355379][T30854] xt_ecn: cannot match TCP bits for non-tcp packets [ 2778.357932][T30842] block nbd5: shutting down sockets [ 2778.670086][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2779.410050][ T29] audit: type=1326 audit(2000002821.740:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30865 comm="syz.6.6827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd552b7e819 code=0x0 [ 2779.856853][T29900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2779.933546][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2779.957248][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2780.118191][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2780.125123][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2780.133349][ T9] usb 2-1: config 0 has no interface number 0 [ 2780.144203][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2780.160875][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.170603][ T9] usb 2-1: Product: syz [ 2780.233274][ T9] usb 2-1: Manufacturer: syz [ 2780.261597][ T9] usb 2-1: SerialNumber: syz [ 2780.519506][ T9] usb 2-1: config 0 descriptor?? [ 2780.584161][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2780.591186][T15755] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2780.833706][T15755] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2780.869938][T15755] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2780.904365][T15755] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2780.917527][T15755] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.951315][T15755] usb 8-1: config 0 descriptor?? [ 2780.981100][T15755] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2781.056264][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2781.387755][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2781.811360][ T29] audit: type=1326 audit(2000002823.984:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30911 comm="syz.6.6844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd552b7e819 code=0x0 [ 2782.202214][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2782.868783][ T9] gspca_spca1528: reg_r err -71 [ 2782.897662][ T9] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 2783.092585][ T9] usb 2-1: USB disconnect, device number 42 [ 2783.112456][T12130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2783.877681][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2783.932454][T15755] usb 8-1: USB disconnect, device number 9 [ 2784.046708][T30943] [U] [ 2784.049435][T30943] [U] [ 2784.052119][T30943] [U] [ 2784.054816][T30943] [U] [ 2784.058029][T30943] [U] [ 2784.060748][T30943] [U] [ 2784.063436][T30943] [U] [ 2784.066116][T30943] [U] [ 2784.069323][T30943] [U] [ 2784.072029][T30943] [U] [ 2784.074714][T30943] [U] [ 2784.077403][T30943] [U] [ 2784.080671][T30943] [U] [ 2784.083378][T30943] [U] [ 2784.086064][T30943] [U] [ 2784.088749][T30943] [U] [ 2784.092316][T30943] [U] [ 2784.095029][T30943] [U] [ 2784.097711][T30943] [U] [ 2784.100390][T30943] [U] [ 2784.103639][T30943] [U] [ 2784.106332][T30943] [U] [ 2784.109011][T30943] [U] [ 2784.111692][T30943] [U] [ 2784.114926][T30943] [U] [ 2784.117626][T30943] [U] [ 2784.120315][T30943] [U] [ 2784.123026][T30943] [U] [ 2784.128446][T30943] [U] [ 2784.131174][T30943] [U] [ 2784.133866][T30943] [U] [ 2784.136552][T30943] [U] [ 2784.139808][T30943] [U] [ 2784.142506][T30943] [U] [ 2784.145198][T30943] [U] [ 2784.147880][T30943] [U] [ 2784.151073][T30943] [U] [ 2784.153773][T30943] [U] [ 2784.156456][T30943] [U] [ 2784.159140][T30943] [U] [ 2784.162400][T30943] [U] [ 2784.165101][T30943] [U] [ 2784.167794][T30943] [U] [ 2784.170474][T30943] [U] [ 2784.173672][T30943] [U] [ 2784.176372][T30943] [U] [ 2784.179053][T30943] [U] [ 2784.181743][T30943] [U] [ 2784.184946][T30943] [U] [ 2784.187647][T30943] [U] [ 2784.190331][T30943] [U] [ 2784.193014][T30943] [U] [ 2784.196201][T30943] [U] [ 2784.198899][T30943] [U] [ 2784.201667][T30943] [U] [ 2784.204400][T30943] [U] [ 2784.207619][T30943] [U] [ 2784.210318][T30943] [U] [ 2784.213002][T30943] [U] [ 2784.215685][T30943] [U] [ 2784.218942][T30943] [U] [ 2784.221641][T30943] [U] [ 2784.224323][T30943] [U] [ 2784.227002][T30943] [U] [ 2784.231456][T30943] [U] [ 2784.234182][T30943] [U] [ 2784.236865][T30943] [U] [ 2784.239547][T30943] [U] [ 2784.242828][T30943] [U] [ 2784.245530][T30943] [U] [ 2784.248223][T30943] [U] [ 2784.250906][T30943] [U] [ 2784.254149][T30943] [U] [ 2784.256860][T30943] [U] [ 2784.259547][T30943] [U] [ 2784.262229][T30943] [U] [ 2784.265464][T30943] [U] [ 2784.268174][T30943] [U] [ 2784.270858][T30943] [U] [ 2784.273542][T30943] [U] [ 2784.276735][T30943] [U] [ 2784.279434][T30943] [U] [ 2784.282116][T30943] [U] [ 2784.284802][T30943] [U] [ 2784.288048][T30943] [U] [ 2784.290758][T30943] [U] [ 2784.293439][T30943] [U] [ 2784.296205][T30943] [U] [ 2784.299485][T30943] [U] [ 2784.302187][T30943] [U] [ 2784.304892][T30943] [U] [ 2784.307605][T30943] [U] [ 2784.310817][T30943] [U] [ 2784.313516][T30943] [U] [ 2784.316204][T30943] [U] [ 2784.318888][T30943] [U] [ 2784.322137][T30943] [U] [ 2784.324845][T30943] [U] [ 2784.327528][T30943] [U] [ 2784.330225][T30943] [U] [ 2784.333425][T30943] [U] [ 2784.336121][T30943] [U] [ 2784.338810][T30943] [U] [ 2784.341492][T30943] [U] [ 2784.345147][T30943] [U] [ 2784.347847][T30943] [U] [ 2784.350529][T30943] [U] [ 2784.353211][T30943] [U] [ 2784.356833][T30943] [U] [ 2784.359565][T30943] [U] [ 2784.362246][T30943] [U] [ 2784.364927][T30943] [U] [ 2784.368129][T30943] [U] [ 2784.370839][T30943] [U] [ 2784.373522][T30943] [U] [ 2784.376202][T30943] [U] [ 2784.379415][T30943] [U] [ 2784.382113][T30943] [U] [ 2784.384803][T30943] [U] [ 2784.387482][T30943] [U] [ 2784.390739][T30943] [U] [ 2784.393439][T30943] [U] [ 2784.396120][T30943] [U] [ 2784.398816][T30943] [U] [ 2784.402222][T30943] [U] [ 2784.404929][T30943] [U] [ 2784.407612][T30943] [U] [ 2784.794750][T30937] [U] [ 2785.048740][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2786.504463][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2786.534987][ T29] audit: type=1326 audit(2000002827.792:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30958 comm="syz.5.6859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f044137e819 code=0x0 [ 2786.747218][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2787.280053][T30986] [U] [ 2787.282776][T30986] [U] [ 2787.285458][T30986] [U] [ 2787.288139][T30986] [U] [ 2787.291327][T30986] [U] [ 2787.294038][T30986] [U] [ 2787.296740][T30986] [U] [ 2787.299430][T30986] [U] [ 2787.303598][T30986] [U] [ 2787.306309][T30986] [U] [ 2787.309035][T30986] [U] [ 2787.311725][T30986] [U] [ 2787.314913][T30986] [U] [ 2787.317649][T30986] [U] [ 2787.320354][T30986] [U] [ 2787.323039][T30986] [U] [ 2787.329612][T30986] [U] [ 2787.332323][T30986] [U] [ 2787.335006][T30986] [U] [ 2787.337708][T30986] [U] [ 2787.346304][T30986] [U] [ 2787.349021][T30986] [U] [ 2787.351704][T30986] [U] [ 2787.354386][T30986] [U] [ 2787.360249][T30986] [U] [ 2787.362962][T30986] [U] [ 2787.365652][T30986] [U] [ 2787.368331][T30986] [U] [ 2787.378113][T30986] [U] [ 2787.380820][T30986] [U] [ 2787.383501][T30986] [U] [ 2787.386199][T30986] [U] [ 2787.395233][T30986] [U] [ 2787.397949][T30986] [U] [ 2787.400633][T30986] [U] [ 2787.403313][T30986] [U] [ 2787.409526][T30986] [U] [ 2787.412237][T30986] [U] [ 2787.414948][T30986] [U] [ 2787.417636][T30986] [U] [ 2787.423698][T30986] [U] [ 2787.426410][T30986] [U] [ 2787.429100][T30986] [U] [ 2787.431779][T30986] [U] [ 2787.440301][T30986] [U] [ 2787.443010][T30986] [U] [ 2787.445697][T30986] [U] [ 2787.448379][T30986] [U] [ 2787.454699][T30986] [U] [ 2787.457395][T30986] [U] [ 2787.460078][T30986] [U] [ 2787.462759][T30986] [U] [ 2787.468436][T30986] [U] [ 2787.471146][T30986] [U] [ 2787.473830][T30986] [U] [ 2787.476510][T30986] [U] [ 2787.485011][T30986] [U] [ 2787.487719][T30986] [U] [ 2787.490401][T30986] [U] [ 2787.493082][T30986] [U] [ 2787.497721][T30986] [U] [ 2787.500428][T30986] [U] [ 2787.503112][T30986] [U] [ 2787.505799][T30986] [U] [ 2787.514197][T30986] [U] [ 2787.516908][T30986] [U] [ 2787.519588][T30986] [U] [ 2787.522268][T30986] [U] [ 2787.528379][T30986] [U] [ 2787.531085][T30986] [U] [ 2787.533765][T30986] [U] [ 2787.536445][T30986] [U] [ 2787.542457][T30986] [U] [ 2787.545169][T30986] [U] [ 2787.547857][T30986] [U] [ 2787.550544][T30986] [U] [ 2787.555518][T30986] [U] [ 2787.558226][T30986] [U] [ 2787.560910][T30986] [U] [ 2787.563589][T30986] [U] [ 2787.569569][T30986] [U] [ 2787.572270][T30986] [U] [ 2787.574952][T30986] [U] [ 2787.577633][T30986] [U] [ 2787.585039][T30986] [U] [ 2787.587739][T30986] [U] [ 2787.590422][T30986] [U] [ 2787.593102][T30986] [U] [ 2787.598372][T30986] [U] [ 2787.601126][T30986] [U] [ 2787.603806][T30986] [U] [ 2787.606489][T30986] [U] [ 2787.612491][T30986] [U] [ 2787.615200][T30986] [U] [ 2787.617884][T30986] [U] [ 2787.620572][T30986] [U] [ 2787.626707][T30986] [U] [ 2787.629417][T30986] [U] [ 2787.632154][T30986] [U] [ 2787.634837][T30986] [U] [ 2787.640375][T30986] [U] [ 2787.643079][T30986] [U] [ 2787.645790][T30986] [U] [ 2787.648478][T30986] [U] [ 2787.654531][T30986] [U] [ 2787.657238][T30986] [U] [ 2787.659923][T30986] [U] [ 2787.662602][T30986] [U] [ 2787.668652][T30986] [U] [ 2787.671357][T30986] [U] [ 2787.674038][T30986] [U] [ 2787.676720][T30986] [U] [ 2787.682728][T30986] [U] [ 2787.685432][T30986] [U] [ 2787.688115][T30986] [U] [ 2787.690799][T30986] [U] [ 2787.700439][T30986] [U] [ 2787.703144][T30986] [U] [ 2787.705829][T30986] [U] [ 2787.708511][T30986] [U] [ 2787.714642][T30986] [U] [ 2787.717351][T30986] [U] [ 2787.720030][T30986] [U] [ 2787.722709][T30986] [U] [ 2787.728010][T30986] [U] [ 2787.730719][T30986] [U] [ 2787.733404][T30986] [U] [ 2787.805519][T30978] [U] [ 2788.490541][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2789.801025][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2789.835885][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2789.860245][ T29] audit: type=1326 audit(2000002830.738:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31005 comm="syz.6.6874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd552b7e819 code=0x0 [ 2790.881279][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2791.112661][ T5851] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 2791.168965][T15755] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2791.350903][T15755] usb 2-1: Using ep0 maxpacket: 16 [ 2791.370572][T15755] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2791.383589][T15755] usb 2-1: config 0 has no interfaces? [ 2791.389110][T15755] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2791.466783][T15755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.477513][T15755] usb 2-1: config 0 descriptor?? [ 2792.240040][T15755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2792.321751][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2792.536410][T15755] usb 2-1: USB disconnect, device number 43 [ 2793.115054][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2793.515943][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2793.980254][ T29] audit: type=1326 audit(2000002835.396:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31050 comm="syz.5.6886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f044137e819 code=0x0 [ 2794.643857][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2795.839839][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2796.565046][T12130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2796.697245][T18099] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2796.959031][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2797.027590][T18099] usb 9-1: Using ep0 maxpacket: 16 [ 2797.104144][T18099] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2797.116107][ T29] audit: type=1326 audit(2000002838.268:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31087 comm="syz.7.6900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e5c37e819 code=0x0 [ 2797.310895][T18099] usb 9-1: config 0 has no interfaces? [ 2797.996004][T18099] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2798.005302][T18099] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2798.064762][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2799.114788][T18099] usb 9-1: config 0 descriptor?? [ 2799.623603][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2799.788387][T12130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2799.859504][T18099] usb 9-1: can't set config #0, error -71 [ 2799.873965][T18099] usb 9-1: USB disconnect, device number 66 [ 2800.860644][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2801.683269][T23895] Bluetooth: hci4: command 0x0406 tx timeout [ 2801.860102][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2802.385978][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2802.394135][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2802.410694][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 2802.453268][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2802.473596][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2802.498315][ T9] usb 8-1: Product: syz [ 2802.586692][ T9] usb 8-1: Manufacturer: syz [ 2802.597154][ T9] usb 8-1: SerialNumber: syz [ 2803.273203][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2803.284242][ T9] usb 8-1: config 0 descriptor?? [ 2803.538713][T18099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2803.550943][ T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2804.652839][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2804.703589][T21345] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2804.874646][T28831] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2804.928388][T21345] usb 7-1: Using ep0 maxpacket: 16 [ 2804.942635][T21345] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2804.953176][T21345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2804.975023][T21345] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2804.985148][T21345] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2804.995336][T21345] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2805.017470][T21345] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2805.027096][T21345] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2805.042766][T21345] usb 7-1: Manufacturer: syz [ 2805.045489][T28831] usb 9-1: Using ep0 maxpacket: 16 [ 2805.064512][T28831] usb 9-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 2805.075268][T21345] usb 7-1: config 0 descriptor?? [ 2805.088114][T28831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2805.107113][T28831] usb 9-1: Product: syz [ 2805.111848][T28831] usb 9-1: Manufacturer: syz [ 2805.116954][T28831] usb 9-1: SerialNumber: syz [ 2805.207621][T28831] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2805.214026][T28831] r8152-cfgselector 9-1: config 0 descriptor?? [ 2805.216357][T31187] siw: device registration error -23 [ 2805.416355][ T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2805.670101][ T9] usb 8-1: USB disconnect, device number 10 [ 2805.792362][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2805.845692][T31192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2805.857363][T31192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2806.018241][T21345] rc_core: IR keymap rc-hauppauge not found [ 2806.028883][T21345] Registered IR keymap rc-empty [ 2806.225978][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.278908][ T5897] r8152-cfgselector 9-1: USB disconnect, device number 67 [ 2806.339271][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.351776][T31187] syz.5.6932 (31187): drop_caches: 2 [ 2806.378183][T31187] syz.5.6932 (31187): drop_caches: 2 [ 2806.393236][T21345] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2806.411968][T21345] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input68 [ 2806.434947][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.467357][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.488581][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.521121][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.531545][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2806.543297][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.756810][T31207] fuse: Bad value for 'fd' [ 2806.759929][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.796942][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.830714][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.852515][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.873670][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2806.874119][T21345] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2806.926989][T21345] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 2806.935478][T21345] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2806.961685][T21345] usb 7-1: USB disconnect, device number 58 [ 2808.009445][T22024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2808.034328][T23895] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2808.046391][T23895] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2808.072281][T23895] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2808.082952][T23895] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2808.090533][T23895] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2808.099166][T23895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2808.199365][T28831] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2808.391581][T28831] usb 8-1: Using ep0 maxpacket: 8 [ 2808.391816][T21345] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2808.399993][T28831] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2808.414192][T28831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2808.422655][T28831] usb 8-1: Product: syz [ 2808.427121][T28831] usb 8-1: Manufacturer: syz [ 2808.431820][T28831] usb 8-1: SerialNumber: syz [ 2808.450028][T28831] usb 8-1: config 0 descriptor?? [ 2808.488700][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2808.557569][T26683] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2808.568712][T26683] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2808.588883][T21345] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 2808.598258][T21345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2808.606835][T21345] usb 7-1: Product: syz [ 2808.611437][T21345] usb 7-1: Manufacturer: syz [ 2808.620561][T31227] chnl_net:caif_netlink_parms(): no params data found [ 2808.627641][T21345] usb 7-1: SerialNumber: syz [ 2808.634931][T21345] usb 7-1: config 0 descriptor?? [ 2808.648111][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2808.658530][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 2808.667400][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2808.679176][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2808.690400][T28831] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2808.715053][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2808.741719][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2808.790229][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2808.808563][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2808.810837][T26683] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2808.817020][ T9] usb 2-1: Product: syz [ 2808.817041][ T9] usb 2-1: Manufacturer: syz [ 2808.838411][T26683] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2808.852427][ T9] usb 2-1: SerialNumber: syz [ 2808.869994][ T9] usb 2-1: config 0 descriptor?? [ 2808.881539][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2808.898700][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2808.934659][T31226] veth1_to_bridge: entered promiscuous mode [ 2808.940698][T31226] veth1_to_bridge: entered allmulticast mode [ 2809.007090][T31243] fuse: Bad value for 'fd' [ 2809.017238][T26683] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2809.037462][T26683] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.083197][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 2809.184806][T26683] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2809.195865][T26683] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.210446][T31227] bridge0: port 1(bridge_slave_0) entered blocking state [ 2809.218432][T31227] bridge0: port 1(bridge_slave_0) entered disabled state [ 2809.226668][T31227] bridge_slave_0: entered allmulticast mode [ 2809.233690][T31227] bridge_slave_0: entered promiscuous mode [ 2809.241891][ T9] usb 2-1: USB disconnect, device number 44 [ 2809.255951][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 2809.266897][T31227] bridge0: port 2(bridge_slave_1) entered blocking state [ 2809.285538][T31227] bridge0: port 2(bridge_slave_1) entered disabled state [ 2809.301760][T31227] bridge_slave_1: entered allmulticast mode [ 2809.309619][T31227] bridge_slave_1: entered promiscuous mode [ 2809.363230][T31227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2809.421912][T31227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2809.497759][T31227] team0: Port device team_slave_0 added [ 2809.514474][ T9] usb 7-1: USB disconnect, device number 59 [ 2809.534992][T31227] team0: Port device team_slave_1 added [ 2809.651694][T26683] erspan0: left allmulticast mode [ 2809.658947][T26683] erspan0: left promiscuous mode [ 2809.697591][T26683] bridge0: port 3(erspan0) entered disabled state [ 2809.721829][T26683] bridge_slave_1: left allmulticast mode [ 2809.727530][T26683] bridge_slave_1: left promiscuous mode [ 2809.745290][T26683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2809.756417][T26683] bridge_slave_0: left allmulticast mode [ 2809.772200][T26683] bridge_slave_0: left promiscuous mode [ 2809.777867][T26683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2810.383996][T23895] Bluetooth: hci6: command tx timeout [ 2811.019829][T28831] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2811.032775][T28831] usb 8-1: USB disconnect, device number 11 [ 2811.088492][T31271] fuse: Bad value for 'fd' [ 2811.531803][T26683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2811.596404][T26683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2811.730946][T26683] bond0 (unregistering): Released all slaves [ 2811.879251][T31278] syz.1.6961 (31278): drop_caches: 2 [ 2811.903703][T31278] syz.1.6961 (31278): drop_caches: 2 [ 2811.923678][T31227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2811.935545][T31227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2811.977879][T31227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2812.304505][T31227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2812.311621][T31227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2813.074316][T31227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2813.117187][T23895] Bluetooth: hci6: command tx timeout [ 2814.798860][T31227] hsr_slave_0: entered promiscuous mode [ 2814.865467][T31227] hsr_slave_1: entered promiscuous mode [ 2814.929774][T31227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2814.955601][T31227] Cannot create hsr debugfs directory [ 2815.016117][T31314] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6975'. [ 2815.116317][T31314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2815.203209][T31314] bridge_slave_0 (unregistering): left allmulticast mode [ 2815.221604][T31314] bridge_slave_0 (unregistering): left promiscuous mode [ 2815.238975][T31314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2815.340602][T23895] Bluetooth: hci6: command tx timeout [ 2818.082946][T23895] Bluetooth: hci6: command tx timeout [ 2819.210244][T31227] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2819.383898][T31227] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2819.426787][T31227] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2819.725073][T31227] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2820.763904][T31227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2820.938629][T31227] 8021q: adding VLAN 0 to HW filter on device team0 [ 2820.983219][T28893] bridge0: port 1(bridge_slave_0) entered blocking state [ 2820.990401][T28893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2821.068085][T28893] bridge0: port 2(bridge_slave_1) entered blocking state [ 2821.075299][T28893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2821.426410][T31227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2822.346676][T31394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6996'. [ 2823.161030][T31227] veth0_vlan: entered promiscuous mode [ 2823.281497][T31227] veth1_vlan: entered promiscuous mode [ 2824.430128][T31227] veth0_macvtap: entered promiscuous mode [ 2824.459867][T31227] veth1_macvtap: entered promiscuous mode [ 2824.569259][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2824.598459][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2824.619244][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2824.653736][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2824.702181][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2824.736606][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.030420][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2825.131934][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.224609][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2825.306895][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.330425][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2825.341059][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.352585][T31227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2825.437678][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2825.463074][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.473072][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2825.484307][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.507487][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2825.523538][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.533661][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2825.544457][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.554631][T31227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2825.565318][T31227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.602042][T31227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2825.639634][T31227] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.723281][T31227] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.753192][T31227] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.776869][T31227] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.685632][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2826.692105][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2827.042027][T17442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2827.049293][ T971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2827.157478][ T971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2827.320171][T17442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2828.628966][T18099] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2829.014461][T23895] Bluetooth: hci2: command 0x0406 tx timeout [ 2829.195767][T18099] usb 9-1: Using ep0 maxpacket: 8 [ 2829.210109][T18099] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 2829.220804][T18099] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2829.229286][T18099] usb 9-1: Product: syz [ 2829.233591][T18099] usb 9-1: Manufacturer: syz [ 2829.238295][T18099] usb 9-1: SerialNumber: syz [ 2829.244999][T18099] usb 9-1: config 0 descriptor?? [ 2829.339745][T31471] fuse: Bad value for 'fd' [ 2829.479913][T18099] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 2831.022081][T18099] gspca_sunplus: reg_r err -71 [ 2831.027088][T18099] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 2831.043149][T18099] usb 9-1: USB disconnect, device number 68 [ 2833.348205][T31516] fuse: Bad value for 'fd' [ 2833.434767][T23895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2833.464719][T23895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2833.536855][T23895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2833.546032][T23895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2833.556393][T23895] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2833.564571][T23895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2835.930266][T23895] Bluetooth: hci0: command tx timeout [ 2836.147631][T31553] netlink: 'syz.8.7043': attribute type 12 has an invalid length. [ 2836.170400][T31552] tty tty37: ldisc open failed (-12), clearing slot 36 [ 2836.691494][T31518] chnl_net:caif_netlink_parms(): no params data found [ 2838.095136][ T5851] Bluetooth: hci0: command tx timeout [ 2838.331888][T31518] bridge0: port 1(bridge_slave_0) entered blocking state [ 2838.347157][T31518] bridge0: port 1(bridge_slave_0) entered disabled state [ 2838.354404][T31518] bridge_slave_0: entered allmulticast mode [ 2838.361761][T31518] bridge_slave_0: entered promiscuous mode [ 2838.369854][T31518] bridge0: port 2(bridge_slave_1) entered blocking state [ 2838.383701][T31518] bridge0: port 2(bridge_slave_1) entered disabled state [ 2838.409406][T31518] bridge_slave_1: entered allmulticast mode [ 2838.427998][T31518] bridge_slave_1: entered promiscuous mode [ 2838.572647][T31518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2838.598376][T31518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2838.914778][T31518] team0: Port device team_slave_0 added [ 2838.929724][T31597] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2838.962873][T31518] team0: Port device team_slave_1 added [ 2839.097004][T31518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2839.116672][T23895] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 2839.155961][T31518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2839.208352][T31518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2839.244359][T31518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2839.251654][T31518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2839.278044][T31518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2839.368083][T31518] hsr_slave_0: entered promiscuous mode [ 2839.410063][T31518] hsr_slave_1: entered promiscuous mode [ 2839.436548][T31518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2839.479861][T31518] Cannot create hsr debugfs directory [ 2840.313759][ T5851] Bluetooth: hci0: command tx timeout [ 2840.525908][T31518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2840.761263][T31518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2841.491464][T31518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2841.684171][T31518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2841.757273][T31629] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2842.121816][T31518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2842.600825][ T5851] Bluetooth: hci0: command tx timeout [ 2842.763170][T31518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2842.786802][T31518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2842.806412][T31518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2842.953714][T31646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7076'. [ 2843.143693][T31518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2843.257092][T31518] 8021q: adding VLAN 0 to HW filter on device team0 [ 2843.304234][T28893] bridge0: port 1(bridge_slave_0) entered blocking state [ 2843.311455][T28893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2843.367434][T28893] bridge0: port 2(bridge_slave_1) entered blocking state [ 2843.374626][T28893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2843.739846][T31658] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2843.948758][T31667] binder: BINDER_SET_CONTEXT_MGR already set [ 2843.959225][T31667] binder: 31666:31667 ioctl 4018620d 200002c0 returned -16 [ 2844.035488][T31518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2844.082621][T31518] veth0_vlan: entered promiscuous mode [ 2844.098962][T31518] veth1_vlan: entered promiscuous mode [ 2844.129953][T31518] veth0_macvtap: entered promiscuous mode [ 2844.138576][T31518] veth1_macvtap: entered promiscuous mode [ 2844.159911][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.170545][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.193670][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.204166][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.214409][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.225518][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.235462][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.245948][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.255966][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.258830][T15755] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2844.266790][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.292707][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.306132][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.316705][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.327363][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.339894][T31518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2844.357136][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.367905][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.378859][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.389978][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.401147][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.413115][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.425040][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.440470][T15755] usb 2-1: Using ep0 maxpacket: 32 [ 2844.445986][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.454913][T15755] usb 2-1: config 0 has an invalid interface number: 70 but max is 0 [ 2844.458889][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.472249][T15755] usb 2-1: config 0 has no interface number 0 [ 2844.485406][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.492439][T15755] usb 2-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 2844.505991][T15755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2844.512620][T31518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.531148][T15755] usb 2-1: Product: syz [ 2844.535447][T15755] usb 2-1: Manufacturer: syz [ 2844.536260][T31518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.540862][T15755] usb 2-1: SerialNumber: syz [ 2844.552400][T31518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2844.571367][T15755] usb 2-1: config 0 descriptor?? [ 2844.601236][T31518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.629970][T31518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.647805][T31518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.661772][T31518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.755618][ T971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2844.776158][ T971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2844.801550][T22807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2844.809697][T22807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2844.900636][T25112] usb 2-1: USB disconnect, device number 45 [ 2845.107511][T31686] [U] [ 2845.110239][T31686] [U] [ 2845.112922][T31686] [U] [ 2845.115601][T31686] [U] [ 2845.118769][T31686] [U] [ 2845.121487][T31686] [U] [ 2845.124177][T31686] [U] [ 2845.126862][T31686] [U] [ 2845.130027][T31686] [U] [ 2845.132728][T31686] [U] [ 2845.135415][T31686] [U] [ 2845.138102][T31686] [U] [ 2845.141319][T31686] [U] [ 2845.144024][T31686] [U] [ 2845.146708][T31686] [U] [ 2845.149396][T31686] [U] [ 2845.152601][T31686] [U] [ 2845.155303][T31686] [U] [ 2845.157990][T31686] [U] [ 2845.160673][T31686] [U] [ 2845.164192][T31686] [U] [ 2845.166902][T31686] [U] [ 2845.169592][T31686] [U] [ 2845.172277][T31686] [U] [ 2845.175524][T31686] [U] [ 2845.178229][T31686] [U] [ 2845.180913][T31686] [U] [ 2845.183597][T31686] [U] [ 2845.186833][T31686] [U] [ 2845.189549][T31686] [U] [ 2845.192232][T31686] [U] [ 2845.194910][T31686] [U] [ 2845.844502][T31682] [U] [ 2846.750459][T31701] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2846.791283][T31704] binder: BINDER_SET_CONTEXT_MGR already set [ 2846.799361][T31704] binder: 31703:31704 ioctl 4018620d 200002c0 returned -16 [ 2846.960271][ T5851] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 2847.327075][T18099] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2847.508492][T18099] usb 9-1: Using ep0 maxpacket: 32 [ 2847.524078][T18099] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2847.541741][T18099] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2847.560670][T18099] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2847.582557][T18099] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2847.598039][T18099] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2847.620231][T18099] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2847.641518][T18099] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2847.657985][T18099] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2847.678104][T18099] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2847.699441][T18099] usb 9-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 2847.708932][T18099] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2847.724969][T18099] usb 9-1: Product: syz [ 2847.735177][T18099] usb 9-1: Manufacturer: syz [ 2847.745430][T18099] usb 9-1: SerialNumber: syz [ 2847.758942][T18099] usb 9-1: config 0 descriptor?? [ 2847.772149][T18099] ti_usb_3410_5052 9-1:0.0: TI USB 5052 2 port adapter converter detected [ 2847.788814][T18099] ti_usb_3410_5052 9-1:0.0: missing endpoints [ 2848.029855][T29900] usb 9-1: USB disconnect, device number 69 [ 2849.926406][T31748] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2850.160635][ T5851] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 2851.267897][ T29] audit: type=1326 audit(2000002889.032:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31769 comm="syz.8.7117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa0ef7e819 code=0x0 [ 2852.785488][T31788] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2853.821433][ T5851] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 2854.544322][T18099] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 2855.404757][T18099] usb 7-1: Using ep0 maxpacket: 8 [ 2855.883109][T31812] siw: device registration error -23 [ 2855.910059][ T29] audit: type=1326 audit(2000002893.382:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31807 comm="syz.1.7131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ed7e819 code=0x0 [ 2855.931133][ C1] vkms_vblank_simulate: vblank timer overrun [ 2855.974805][T18099] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2855.984135][T18099] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2855.995757][T18099] usb 7-1: Product: syz [ 2856.005104][T18099] usb 7-1: Manufacturer: syz [ 2856.015697][T18099] usb 7-1: SerialNumber: syz [ 2856.041577][T18099] usb 7-1: config 0 descriptor?? [ 2856.285989][T18099] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2856.467310][T22024] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2856.820170][T22024] usb 9-1: Using ep0 maxpacket: 8 [ 2856.829558][T22024] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2856.839710][T22024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2856.848207][T22024] usb 9-1: Product: syz [ 2856.863521][T22024] usb 9-1: Manufacturer: syz [ 2856.870393][T22024] usb 9-1: SerialNumber: syz [ 2856.997693][T22024] usb 9-1: config 0 descriptor?? [ 2857.461597][T31832] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 255 [ 2857.478385][T31832] binder: 31831:31832 ioctl 4018620d 20000100 returned -1 [ 2857.909947][T22024] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2859.700710][T31855] siw: device registration error -23 [ 2860.120505][T18099] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2860.131725][T18099] usb 7-1: USB disconnect, device number 60 [ 2861.299019][T22024] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2861.533722][T22024] usb 9-1: USB disconnect, device number 70 [ 2865.551937][T18099] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 2866.548440][T18099] usb 7-1: Using ep0 maxpacket: 8 [ 2866.557300][T18099] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2866.568642][T18099] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2866.577231][T18099] usb 7-1: Product: syz [ 2866.591197][T18099] usb 7-1: Manufacturer: syz [ 2866.595826][T18099] usb 7-1: SerialNumber: syz [ 2866.609033][T18099] usb 7-1: config 0 descriptor?? [ 2867.578713][T18099] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2867.884117][T12130] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2868.226878][T12130] usb 4-1: Using ep0 maxpacket: 8 [ 2868.241482][T12130] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 2868.250466][T12130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2868.270314][T12130] usb 4-1: config 0 has no interface number 0 [ 2868.286781][T12130] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2868.328061][T12130] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2868.375458][T12130] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2868.410180][T12130] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2868.452047][T12130] usb 4-1: config 0 interface 52 has no altsetting 0 [ 2868.473393][T12130] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2868.491803][T12130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2868.516636][T12130] usb 4-1: config 0 descriptor?? [ 2868.758641][T12130] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input69 [ 2869.213983][T16467] usb 4-1: USB disconnect, device number 98 [ 2869.621279][T31984] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7186'. [ 2870.749630][T18099] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2870.761431][T18099] usb 7-1: USB disconnect, device number 61 [ 2872.300029][T18099] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 2872.475525][T18099] usb 7-1: Using ep0 maxpacket: 16 [ 2872.535465][T16467] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2872.581388][T18099] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2872.590481][T18099] usb 7-1: config 0 has no interface number 0 [ 2872.637588][T18099] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2872.648302][T18099] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2872.660831][T18099] usb 7-1: Product: syz [ 2872.671719][T18099] usb 7-1: Manufacturer: syz [ 2872.695978][T16467] usb 2-1: device descriptor read/64, error -71 [ 2872.714194][T18099] usb 7-1: SerialNumber: syz [ 2872.847702][T18099] usb 7-1: config 0 descriptor?? [ 2872.953067][T16467] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2872.972893][T18099] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2873.108758][T16467] usb 2-1: device descriptor read/64, error -71 [ 2873.250559][T16467] usb usb2-port1: attempt power cycle [ 2873.626179][T16467] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2873.658543][T16467] usb 2-1: device descriptor read/8, error -71 [ 2873.932838][T16467] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2873.958670][T16467] usb 2-1: device descriptor read/8, error -71 [ 2874.079426][T16467] usb usb2-port1: unable to enumerate USB device [ 2874.877893][T18099] gspca_spca1528: reg_r err -71 [ 2874.882847][T18099] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 2875.096639][T18099] usb 7-1: USB disconnect, device number 62 [ 2878.947962][T32064] syzkaller0: entered allmulticast mode [ 2879.319317][T32061] syzkaller0: left allmulticast mode [ 2879.730302][ T5897] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2879.954605][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 2880.002051][ T5897] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2880.052932][ T5897] usb 4-1: config 0 has no interface number 0 [ 2880.095256][ T5897] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2880.111810][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2880.128046][T32075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7218'. [ 2880.137171][ T5897] usb 4-1: Product: syz [ 2880.141451][ T5897] usb 4-1: Manufacturer: syz [ 2880.149041][ T5897] usb 4-1: SerialNumber: syz [ 2880.155872][ T5897] usb 4-1: config 0 descriptor?? [ 2880.164500][ T5897] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2881.278298][ T5897] gspca_spca1528: reg_w err -110 [ 2881.302191][ T5897] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 2883.537043][T32116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7231'. [ 2883.646085][T18099] usb 4-1: USB disconnect, device number 99 [ 2889.675229][T23895] Bluetooth: hci5: command 0x0406 tx timeout [ 2890.410219][ T29] audit: type=1326 audit(2000002925.578:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32187 comm="syz.5.7253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f044137e819 code=0x0 [ 2891.903883][T32201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7255'. [ 2892.236421][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2892.254118][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2892.665623][T31815] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2893.141011][T31815] usb 9-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 2893.152917][T31815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2893.164794][T31815] usb 9-1: Product: syz [ 2893.169677][T31815] usb 9-1: Manufacturer: syz [ 2893.174322][T31815] usb 9-1: SerialNumber: syz [ 2893.182304][T31815] usb 9-1: config 0 descriptor?? [ 2893.307092][T18099] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2893.445805][T32208] veth1_to_bridge: entered promiscuous mode [ 2893.470214][T32208] veth1_to_bridge: entered allmulticast mode [ 2894.375336][T23087] bridge0: port 2(bridge_slave_1) entered disabled state [ 2894.697326][T18099] usb 7-1: Using ep0 maxpacket: 16 [ 2894.722416][T18099] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2894.868089][ T29] audit: type=1326 audit(2000002929.778:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32230 comm="syz.3.7266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7546d7e819 code=0x0 [ 2895.352359][T18099] usb 7-1: config 0 has no interfaces? [ 2895.366886][ T5896] usb 9-1: USB disconnect, device number 71 [ 2895.410273][T18099] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2895.420712][T18099] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2895.432126][T18099] usb 7-1: config 0 descriptor?? [ 2895.731655][T31815] usb 7-1: USB disconnect, device number 63 [ 2895.981019][T32241] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2900.854602][T18099] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2901.020829][T18099] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 2901.035860][T18099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2901.081652][T18099] usb 4-1: config 0 descriptor?? [ 2901.747496][T32276] 9pnet_fd: Insufficient options for proto=fd [ 2902.050783][T32282] xt_ecn: cannot match TCP bits for non-tcp packets [ 2902.160842][ T5896] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2902.672059][T18099] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2902.725881][T18099] asix 4-1:0.0: probe with driver asix failed with error -71 [ 2902.740228][T32283] nbd6: detected capacity change from 0 to 12 [ 2902.745574][T18099] usb 4-1: USB disconnect, device number 100 [ 2902.779866][T32284] block nbd6: NBD_DISCONNECT [ 2902.786004][T32284] block nbd6: Send disconnect failed -89 [ 2902.827742][T32179] block nbd6: Send control failed (result -89) [ 2902.899555][ T5896] usb 9-1: Using ep0 maxpacket: 16 [ 2902.906976][ T5896] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2902.928273][T32179] block nbd6: Request send failed, requeueing [ 2902.934720][ T5896] usb 9-1: config 0 has no interfaces? [ 2902.942238][ T5896] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2902.956879][T32179] block nbd6: Disconnected due to user request. [ 2902.978949][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.997382][ T5896] usb 9-1: config 0 descriptor?? [ 2903.033809][ T40] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.044167][ T40] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.071171][T32179] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.113399][T32179] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.256835][T32290] bond0: (slave bond_slave_0): Releasing backup interface [ 2903.276804][T32179] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.310179][T32179] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.319107][T32179] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.328280][T32179] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.336955][T32179] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.356148][T32179] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.372505][T32179] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.390343][T32179] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.426731][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2903.489713][T32179] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.690464][T32179] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.729881][T32179] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.787681][T32179] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.832994][T32179] ldm_validate_partition_table(): Disk read failed. [ 2903.870294][T32179] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.879425][T32179] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.888813][T32179] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2903.898424][T32179] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2903.906656][T32179] Dev nbd6: unable to read RDB block 0 [ 2903.912560][T32179] nbd6: unable to read partition table [ 2903.918299][T32179] nbd6: partition table beyond EOD, truncated [ 2903.929337][T32179] ldm_validate_partition_table(): Disk read failed. [ 2903.937397][T32179] Dev nbd6: unable to read RDB block 0 [ 2903.943146][T32179] nbd6: unable to read partition table [ 2903.963851][T32179] nbd6: partition table beyond EOD, truncated [ 2904.271663][ T5896] usb 9-1: USB disconnect, device number 72 [ 2905.501370][T32311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2905.508517][T32311] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 2905.519395][T32311] bond0: (slave sit0): Error -95 calling set_mac_address [ 2905.677002][T32308] block device autoloading is deprecated and will be removed. [ 2906.051221][T32308] syz.6.7287: attempt to access beyond end of device [ 2906.051221][T32308] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2906.658215][T32332] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 2908.211261][T32346] sp0: Synchronizing with TNC [ 2908.597486][T32353] Cannot find add_set index 0 as target [ 2909.383439][T32354] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7298'. [ 2910.701099][ T30] INFO: task syz.4.6660:30360 blocked for more than 143 seconds. [ 2910.867654][ T30] Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2910.924849][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2911.115141][ T30] task:syz.4.6660 state:D stack:23512 pid:30360 tgid:30358 ppid:29804 flags:0x00004004 [ 2911.331568][ T30] Call Trace: [ 2911.334905][ T30] [ 2911.337860][ T30] __schedule+0x17fb/0x4be0 [ 2911.342610][ T30] ? __pfx___schedule+0x10/0x10 [ 2911.347501][ T30] ? __pfx_lock_release+0x10/0x10 [ 2911.352618][ T30] ? schedule+0x90/0x320 [ 2911.357268][ T30] schedule+0x14b/0x320 [ 2911.362569][ T30] schedule_timeout+0xb0/0x290 [ 2911.367398][T32376] [U] [ 2911.368700][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2911.371229][T32376] [U] [ 2911.376689][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2911.379262][T32376] [U] [ 2911.385295][ T30] ? wait_for_completion+0x2fe/0x620 [ 2911.387898][T32376] [U] [ 2911.393204][ T30] ? wait_for_completion+0x2fe/0x620 [ 2911.395893][ C0] vkms_vblank_simulate: vblank timer overrun [ 2911.401164][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2911.674804][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2911.680155][ T30] ? wait_for_completion+0x2fe/0x620 [ 2911.685574][ T30] wait_for_completion+0x355/0x620 [ 2911.690804][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 2911.696580][ T30] ? remove_client_context+0xc0/0x1e0 [ 2911.702065][ T30] disable_device+0x1c7/0x360 [ 2911.707111][ T30] ? __pfx_disable_device+0x10/0x10 [ 2911.712435][ T30] __ib_unregister_device+0x2ac/0x3d0 [ 2911.717963][ T30] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 2911.723960][ T30] ib_unregister_device_and_put+0xb9/0xf0 [ 2911.729939][ T30] nldev_dellink+0x2c6/0x310 [ 2911.734636][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 2911.739978][ T30] ? cap_capable+0x1b4/0x250 [ 2911.744672][ T30] ? cap_capable+0x1b4/0x250 [ 2911.749391][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 2911.755311][ T30] ? bpf_lsm_capable+0x9/0x10 [ 2911.760146][ T30] ? security_capable+0x7e/0x2d0 [ 2911.765730][ T30] ? __pfx_nldev_dellink+0x10/0x10 [ 2911.772260][ T30] rdma_nl_rcv+0x6dd/0x9e0 [ 2911.776800][ T30] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 2911.781888][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 2911.787231][ T30] netlink_unicast+0x7f6/0x990 [ 2911.792289][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 2911.797663][ T30] ? __virt_addr_valid+0x183/0x530 [ 2911.802932][ T30] ? __check_object_size+0x48e/0x900 [ 2911.808328][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 2911.813284][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2911.818682][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2911.824108][ T30] __sock_sendmsg+0x221/0x270 [ 2911.828879][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 2911.833846][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2911.839238][ T30] ? __fget_files+0x2a/0x410 [ 2911.843926][ T30] ? __fget_files+0x2a/0x410 [ 2911.848643][ T30] __sys_sendmsg+0x269/0x350 [ 2911.853336][ T30] ? __pfx_futex_wake+0x10/0x10 [ 2911.858342][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 2911.863584][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2911.870092][ T30] ? do_syscall_64+0x100/0x230 [ 2911.875522][ T30] ? do_syscall_64+0xb6/0x230 [ 2911.880742][ T30] do_syscall_64+0xf3/0x230 [ 2911.885349][ T30] ? clear_bhb_loop+0x35/0x90 [ 2911.890177][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2911.896185][ T30] RIP: 0033:0x7f7b0af7e819 [ 2911.900898][ T30] RSP: 002b:00007f7b0bd62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2911.909461][ T30] RAX: ffffffffffffffda RBX: 00007f7b0b136080 RCX: 00007f7b0af7e819 [ 2911.917531][ T30] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2911.925651][ T30] RBP: 00007f7b0aff175e R08: 0000000000000000 R09: 0000000000000000 [ 2911.933789][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2911.941943][ T30] R13: 0000000000000000 R14: 00007f7b0b136080 R15: 00007fff6e406918 [ 2911.950040][ T30] [ 2911.953258][ T30] [ 2911.953258][ T30] Showing all locks held in the system: [ 2911.961115][ T30] 1 lock held by khungtaskd/30: [ 2911.966300][ T30] #0: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 2911.976349][ T30] 2 locks held by getty/5596: [ 2911.981115][ T30] #0: ffff8881488af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2911.991583][ T30] #1: ffffc900032fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 2912.002254][ T30] 3 locks held by kworker/u8:10/6461: [ 2912.008409][T32374] [U] [ 2912.018185][ T30] #0: ffff8880b873e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2912.036495][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 2912.055605][ T30] #2: ffff88805c7f8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd9/0x490 [ 2912.095654][ T30] 2 locks held by kworker/u8:2/16668: [ 2912.107155][ T30] 4 locks held by kworker/u8:9/26683: [ 2912.122752][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2912.142059][ T30] #1: ffffc9000ce67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2912.152947][ T30] #2: ffffffff8fcc9a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xcc0 [ 2912.162887][ T30] #3: ffff8880315706b8 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x3a/0x2f0 [ 2912.174337][ T30] 2 locks held by kworker/u8:12/28994: [ 2912.179904][ T30] #0: ffff888022e97948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2912.191161][ T30] #1: ffffc90003ed7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2912.204287][ T30] 2 locks held by syz.4.6660/30360: [ 2912.209578][ T30] #0: ffffffff9a7ade98 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32d/0x9e0 [ 2912.219702][ T30] #1: ffff8880315706b8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x264/0x3d0 [ 2912.231233][ T30] 2 locks held by syz.7.6976/31317: [ 2912.236438][ T30] #0: ffffffff8fcc9a50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 2912.246095][ T30] #1: ffff8880315706b8 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x3a/0x2f0 [ 2912.257524][ T30] [ 2912.259871][ T30] ============================================= [ 2912.259871][ T30] [ 2912.268410][ T30] NMI backtrace for cpu 0 [ 2912.272744][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2912.282889][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2912.292934][ T30] Call Trace: [ 2912.296211][ T30] [ 2912.299133][ T30] dump_stack_lvl+0x241/0x360 [ 2912.303813][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2912.309010][ T30] ? __pfx__printk+0x10/0x10 [ 2912.313648][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2912.318592][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2912.324080][ T30] ? _printk+0xd5/0x120 [ 2912.328249][ T30] ? __pfx__printk+0x10/0x10 [ 2912.332838][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2912.337691][ T30] ? __pfx__printk+0x10/0x10 [ 2912.342281][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2912.347303][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2912.353285][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2912.359268][ T30] watchdog+0xffb/0x1040 [ 2912.363504][ T30] ? watchdog+0x1ea/0x1040 [ 2912.367915][ T30] ? __pfx_watchdog+0x10/0x10 [ 2912.372585][ T30] kthread+0x2f0/0x390 [ 2912.376646][ T30] ? __pfx_watchdog+0x10/0x10 [ 2912.381318][ T30] ? __pfx_kthread+0x10/0x10 [ 2912.385903][ T30] ret_from_fork+0x4b/0x80 [ 2912.390322][ T30] ? __pfx_kthread+0x10/0x10 [ 2912.394907][ T30] ret_from_fork_asm+0x1a/0x30 [ 2912.399682][ T30] [ 2912.402755][ C0] vkms_vblank_simulate: vblank timer overrun [ 2912.409699][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2912.415473][ C1] NMI backtrace for cpu 1 [ 2912.415487][ C1] CPU: 1 UID: 0 PID: 16668 Comm: kworker/u8:2 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2912.415506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2912.415516][ C1] Workqueue: bat_events batadv_nc_worker [ 2912.415539][ C1] RIP: 0010:__lock_acquire+0x1265/0x2100 [ 2912.415558][ C1] Code: 40 da 0a 8c e8 fc 55 e5 ff 48 bf 00 00 00 00 00 fc ff df 90 0f 0b 90 90 90 31 db 48 83 c3 40 48 89 d8 48 c1 e8 03 80 3c 38 00 <74> 12 48 89 df e8 71 6a 8c 00 48 bf 00 00 00 00 00 fc ff df 48 83 [ 2912.415571][ C1] RSP: 0018:ffffc9000b78f850 EFLAGS: 00000046 [ 2912.415585][ C1] RAX: 1ffffffff27978c6 RBX: ffffffff93cbc630 RCX: ffffffff81712c55 [ 2912.415598][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 2912.415609][ C1] RBP: 1413ded959c52ac2 R08: ffffffff942e996f R09: 1ffffffff285d32d [ 2912.415621][ C1] R10: dffffc0000000000 R11: fffffbfff285d32e R12: ffff88802e360000 [ 2912.415633][ C1] R13: ffff88802e360000 R14: 1ffff11005c6c16a R15: 0000000000000000 [ 2912.415645][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2912.415658][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2912.415670][ C1] CR2: 00007f7546f08ab8 CR3: 0000000034c16000 CR4: 00000000003526f0 [ 2912.415685][ C1] Call Trace: [ 2912.415691][ C1] [ 2912.415697][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2912.415717][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2912.415734][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2912.415759][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2912.415779][ C1] ? nmi_handle+0x14f/0x5a0 [ 2912.415795][ C1] ? nmi_handle+0x2a/0x5a0 [ 2912.415810][ C1] ? __lock_acquire+0x1265/0x2100 [ 2912.415826][ C1] ? default_do_nmi+0x63/0x160 [ 2912.415840][ C1] ? exc_nmi+0x123/0x1f0 [ 2912.415854][ C1] ? end_repeat_nmi+0xf/0x53 [ 2912.415877][ C1] ? __lock_acquire+0xf55/0x2100 [ 2912.415893][ C1] ? __lock_acquire+0x1265/0x2100 [ 2912.415908][ C1] ? __lock_acquire+0x1265/0x2100 [ 2912.415925][ C1] ? __lock_acquire+0x1265/0x2100 [ 2912.415945][ C1] [ 2912.415951][ C1] [ 2912.415962][ C1] lock_acquire+0x1ed/0x550 [ 2912.415977][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 2912.415999][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2912.416014][ C1] ? __local_bh_disable_ip+0x187/0x220 [ 2912.416034][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 2912.416051][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 2912.416070][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 2912.416088][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 2912.416107][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 2912.416127][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2912.416146][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 2912.416166][ C1] _raw_spin_lock_bh+0x35/0x50 [ 2912.416183][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 2912.416202][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 2912.416223][ C1] batadv_nc_purge_paths+0xe8/0x3b0 [ 2912.416246][ C1] batadv_nc_worker+0x328/0x610 [ 2912.416265][ C1] ? batadv_nc_worker+0xcb/0x610 [ 2912.416284][ C1] ? process_scheduled_works+0x976/0x1850 [ 2912.416304][ C1] process_scheduled_works+0xa63/0x1850 [ 2912.416333][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2912.416356][ C1] ? assign_work+0x364/0x3d0 [ 2912.416376][ C1] worker_thread+0x870/0xd30 [ 2912.416393][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2912.416411][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2912.416427][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2912.416442][ C1] kthread+0x2f0/0x390 [ 2912.416457][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2912.416471][ C1] ? __pfx_kthread+0x10/0x10 [ 2912.416486][ C1] ret_from_fork+0x4b/0x80 [ 2912.416500][ C1] ? __pfx_kthread+0x10/0x10 [ 2912.416515][ C1] ret_from_fork_asm+0x1a/0x30 [ 2912.416538][ C1] [ 2912.423733][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2912.423748][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 2912.423770][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2912.423781][ T30] Call Trace: [ 2912.423789][ T30] [ 2912.423798][ T30] dump_stack_lvl+0x241/0x360 [ 2912.423826][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2912.423848][ T30] ? __pfx__printk+0x10/0x10 [ 2912.423867][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2912.423894][ T30] ? vscnprintf+0x5d/0x90 [ 2912.423919][ T30] panic+0x349/0x880 [ 2912.423942][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2912.423968][ T30] ? __pfx_panic+0x10/0x10 [ 2912.423987][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2912.424012][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2912.424033][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2912.424053][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2912.424077][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2912.424104][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2912.424132][ T30] watchdog+0x103a/0x1040 [ 2912.424152][ T30] ? watchdog+0x1ea/0x1040 [ 2912.424175][ T30] ? __pfx_watchdog+0x10/0x10 [ 2912.424200][ T30] kthread+0x2f0/0x390 [ 2912.424220][ T30] ? __pfx_watchdog+0x10/0x10 [ 2912.424237][ T30] ? __pfx_kthread+0x10/0x10 [ 2912.424257][ T30] ret_from_fork+0x4b/0x80 [ 2912.424274][ T30] ? __pfx_kthread+0x10/0x10 [ 2912.424294][ T30] ret_from_fork_asm+0x1a/0x30 [ 2912.424329][ T30] [ 2912.939281][ T30] Kernel Offset: disabled [ 2912.943591][ T30] Rebooting in 86400 seconds..