last executing test programs: 26m6.581549414s ago: executing program 32 (id=195): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="850000007e00000095000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x200, 0x0, 0x1}, {0x0, 0x1}]}, [{0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x1ff}, {0x448eade7}, {0x0, 0x0, 0x80000000, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x1000000}, {0x2}, {}, {0xfffffffc, 0x0, 0x400}, {0x0, 0xe}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe434}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {0x0, 0x400000}, {}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe10}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, {}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0xefa6}, {0xfffffffc}, {0x0, 0x8000000}, {}, {0x2b}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}}], 0x1, 0x41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000b0000000410000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="00000000050000000000000000000000001e00"/28], 0x50) splice(r5, 0x0, r2, 0x0, 0x1000, 0x0) 24m38.532693613s ago: executing program 33 (id=331): openat$nvram(0xffffffffffffff9c, 0x0, 0x480481, 0x0) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0xd4843, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f00000000c0)=[0x0], 0x0}) 24m27.805572974s ago: executing program 34 (id=350): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x82fb, 0x0, "f9ffffffffffffff"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_TMR_SELECT(r4, 0x40045408) socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x1, 0x400000}, 0x20) ioctl$VT_ACTIVATE(r1, 0x4b31, 0xfffffffffffffffd) r5 = socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000540)={@empty, @private=0xa010102, r7}, 0xc) 23m0.927212304s ago: executing program 35 (id=477): openat$nvram(0xffffffffffffff9c, 0x0, 0x480481, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0xd4843, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f00000000c0)=[0x0], 0x0}) 22m56.363147469s ago: executing program 36 (id=485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x4008804) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x25000001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 19m43.732782465s ago: executing program 37 (id=824): socket$inet(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x31, 0x0, 0x0, 0x1e}, 0x58) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000000)={0xfff, 0x0, 0xe, 0x82fb, 0x0, "f9ffffffffffffff"}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x9, 0x0, [0x0], [0xff, 0x0, 0x39a], [], [0x100000001]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 18m24.661920593s ago: executing program 3 (id=981): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x840}, 0x8004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 18m22.931359304s ago: executing program 38 (id=958): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x0) 18m22.66794873s ago: executing program 3 (id=986): r0 = epoll_create(0x1fffffe) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x20002021}) 18m20.908774409s ago: executing program 3 (id=989): socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) splice(r0, 0x0, r1, &(0x7f0000000140), 0x4, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0xffdf, 0x2) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x9e, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x24000010) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x88, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x66}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xa13}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @broadcast, @random="51f8df237d88", {}, @value=@ver_80211n={0x0, 0x2938, 0x1, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x23, @void}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc60}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x88}}, 0x4c854) 18m5.372188956s ago: executing program 39 (id=989): socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) splice(r0, 0x0, r1, &(0x7f0000000140), 0x4, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0xffdf, 0x2) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x9e, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x24000010) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x88, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x66}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xa13}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @broadcast, @random="51f8df237d88", {}, @value=@ver_80211n={0x0, 0x2938, 0x1, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x23, @void}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc60}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x88}}, 0x4c854) 16m19.003433906s ago: executing program 40 (id=1144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f00001b6000/0x2000)=nil}) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/148, 0x94}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2}, 0x1}], 0x2, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x62, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b120"], 0x20dc}}, 0x10) read(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}) 8m32.518325426s ago: executing program 41 (id=2126): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000280)}}) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, @remote}, 0x10, 0x0}, 0x3000c041) syz_open_dev$admmidi(&(0x7f0000000240), 0x2, 0x52de994789af003) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f00000002c0)="9f263fc51743b32241ad3f19a87834fbf23e1214c321ebc850b91098c84dfc65179c50afafffab1135e619c993ad182abdce37715462a9e1dd6522140fe133bc8d4caff8f2f8c13a1287a2247cb0b59a051574734cd3ba59ae96998c09f5c02932ce85f14451feae7282f61ab7cba66cbd3264b48f203d56808e246eed0f17cc0255dc15a5cf79a922dcdb4f6b413532effb8628520fc3") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) 8m30.971494937s ago: executing program 42 (id=2129): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000280)}}) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, @remote}, 0x10, 0x0}, 0x3000c041) syz_open_dev$admmidi(&(0x7f0000000240), 0x2, 0x52de994789af003) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f00000002c0)="9f263fc51743b32241ad3f19a87834fbf23e1214c321ebc850b91098c84dfc65179c50afafffab1135e619c993ad182abdce37715462a9e1dd6522140fe133bc8d4caff8f2f8c13a1287a2247cb0b59a051574734cd3ba59ae96998c09f5c02932ce85f14451feae7282f61ab7cba66cbd3264b48f203d56808e246eed0f17cc0255dc15a5cf79a922dcdb4f6b413532effb8628520fc3") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) 6m51.644067449s ago: executing program 43 (id=2324): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 5m37.242426572s ago: executing program 44 (id=2448): openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0x40, 0x0) syz_open_dev$sndmidi(&(0x7f0000003640), 0x2, 0x20042) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x20000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x6}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x2, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 5m13.034633863s ago: executing program 4 (id=2514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)={0x3f, 0x8, 0x2001, "14074195f8ff200012ee3cf29a9b2d4024cac629a795bcfab3d478caa34d7b31ec1832a7e71383c95b0500ddaef5d1e9b91fe2c9aaec32bb831eb170d632fa"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 5m10.00948887s ago: executing program 4 (id=2518): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 5m8.581250111s ago: executing program 2 (id=2523): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_clone3(&(0x7f0000000200)={0x100000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5m7.330596177s ago: executing program 2 (id=2525): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x36, 0x70, 0x8, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x39a3, 0x5, 0x1, {0x22, 0x8fc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0xff, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x10, 0xc5, 0x40, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc287, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x8800, 0x9b, 0x1, {0x22, 0xd0d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x10, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2c, 0x3, 0x2}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x6f, 0xf, 0x6, 0x10, 0x85}, 0xc, &(0x7f0000000300)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x0, 0x5}]}, 0x5, [{0x6f, &(0x7f0000000340)=@string={0x6f, 0x3, "1d185748efad90a8ac664ac2179fa6bb6557d863ba4bd0283ee94763940e8c358071b357a0a7452818302c5beb0d5a3bfb318e9aca6378123f6bb475d240b35fb0812be8b82c562c54fce219ffb352f4634f74533102562f8cdfb974ad7438c4db72ba3a0b0f1632775a682bf1"}}, {0x0, 0x0}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40f}}, {0x4a, &(0x7f00000004c0)=@string={0x4a, 0x3, "c3584f3edbcb60d369df602d6612cac795869a83e1af9405a2ab98be0636b29d77c4d6fa10ba6f39aa440d2b21abead0664cb88d2de2830433f50512833a21c951557497e6ea9e65"}}, {0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000d80)={0x14, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x40, 0xb, 0x86, "ec223bce486959439c773e8fc378c7be4e84bf6bac71873b2ea4f6751207145536eb35fef139e1e779b794b34665850f34c875023c36339b0eb7dc7fec6695b1732cec3107e0ec4ea3724497ce4957b2da0e8d6dc95718bd6c36f1ce0f7c783e6af4e0bb2807cbfea5d09270ac8cab11cb24384a7c03571b8993cb43e283f688c46b6f289dae"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x2}, 0x0, &(0x7f0000000f40)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000f80)={0x20, 0x83, 0x2}, &(0x7f0000000fc0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000001000)={0x20, 0x89, 0x2, 0x1}}) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x8d, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x68, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x8, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "16d60c15"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x8, 0xc8ee, 0xf}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x8, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x7, [0x160, 0x6, 0x8]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x8, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x2, 0x2c, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x18, 0xf9}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x0, 0x7, 0x40, 0x7, 0x8, 0xcb}, 0x14b, &(0x7f0000000800)={0x5, 0xf, 0x14b, 0x5, [@generic={0xce, 0x10, 0x4, "75ed13f4e37c26e1ae517221050d470945ee09c731a7be33d27af0e343354c9d515bf411b667596ecf6a68e55db4d8e2b04830be9008d7f99443ef0bfe04e09c9e2f9e52a7cbf8b7ff078a9a48b8380b7c587fbd7eb923ede9b67be6c8b7fb2107f6b90c4b8769ce96c4f9816ad2084efdd6c359136906b0fc7e3f828992986fab00896303e3142050ae0483b262e52eb32de6da2684cb64e6db8fd37833ca4f61112c2524511155c68f64f2c291e946ee5ea964b16dea313a8ad14fde947a05b8c76fb00ee65b719fb1cf"}, @generic={0x3c, 0x10, 0x1, "7c9e0c198f110821a62da2cf96f917712cf4328b94ea5762bba02cd9a72da7bde1212c527e044cc1d29c46075438759d4852b9e75814af433d"}, @ssp_cap={0xc, 0x10, 0xa, 0x10, 0x0, 0xcf, 0x0, 0x7fff}, @ssp_cap={0x1c, 0x10, 0xa, 0x86, 0x4, 0x6, 0xff0f, 0x8, [0xc0, 0x3f00, 0x3f00, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "58717622f7a752f0d1f95f92af5c63b7"}]}, 0x5, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x409}}, {0x0, 0x0}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x4f}}, {0xf, &(0x7f0000000b00)=@string={0xf, 0x3, "c693c12672668d51d1e41bf6c2"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x42c}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) dup(r2) 5m6.334090746s ago: executing program 4 (id=2526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x230, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x21c, 0x1, [@m_gact={0xe0, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc8a}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x254b, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x517, 0x2}}]}, {0x8d, 0x6, "6df9a3ff45af6728f15b399ae1e6c602b6fdc9641eb649419ed32e608a2f859ccdf40eef7eacae75151807a3f7b8ecded072ef88f4489c0d072daf9cdc0a1d651b2533f0275e191dc4ed2a0098a62051d98c633efc53bfb7b1971e5917acf7ad01a479f12d119916c688f7e477836bae70c06e0d3887dd9672445a63e29820734e42be66fd7df127e0"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_vlan={0x78, 0xd, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x40, 0xffffffffffffffff, 0x7, 0xfffffffa}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x1, 0x7, 0x228000, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0xbe6c4a687f3af6cc}}, {0xc, 0x8, {0x11b520613f9bf6d1, 0x1}}}}, @m_gact={0xc0, 0xb, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xfff, 0x1, 0x7fff, 0xa}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x5, 0x0, 0xffffffff, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x2, 0x2, 0x2, 0x1000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1f2, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x0, 0x8, 0x401}}]}, {0x25, 0x6, "7e6c2e2bf82e0b0d455cae73f177646f4a60f1d1e814a2a9013d7c1414379b5c32"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}]}, 0x230}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m4.900287909s ago: executing program 8 (id=2528): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa41080045c50030006800000901907864014102ac1414aa0b01907800000000451000040068000209040081ac1414bb64010101"], 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/mdstat\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/66, 0x42}], 0x1, 0x1000000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000010001fff000000257f4c7c0000001a43", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c0002800800150047e1060014000700fe880000000000000000000000000101080005"], 0x7c}}, 0x0) 5m4.020991385s ago: executing program 2 (id=2529): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5m3.576930153s ago: executing program 8 (id=2530): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5m3.506819097s ago: executing program 0 (id=2531): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_clone3(&(0x7f0000000200)={0x100000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5m3.462062903s ago: executing program 4 (id=2532): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, 0x0) gettid() clock_gettime(0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCFLSH(r0, 0x40384708, 0x20000000) 5m2.21479344s ago: executing program 8 (id=2533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0xdd, 0x0, 0x0, @tick=0x800, {}, {}, @result}], 0x1c) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000100)=[0xc03, 0x7, 0x728cf7a3, 0x6, 0x0, 0x4, 0xf506, 0xfffffffe]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x21) r5 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) 5m2.137910151s ago: executing program 0 (id=2534): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5m1.697445666s ago: executing program 2 (id=2535): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r0, 0x1, &(0x7f0000001d00)=[0x0]) 5m1.566360439s ago: executing program 3 (id=2474): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeb0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/186, 0xba) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 5m1.345998212s ago: executing program 0 (id=2536): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 4m59.361187284s ago: executing program 4 (id=2537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000000)={0x2, 0x200, 0x8195, 0x4, 0x5, "2321f721a63eadafcfe0afb17720e4ef146dfe"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x6, 0x3a, '$.[\\', 0x3a, '\\-', 0x3a, './file0'}, 0x2d) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000100)={@val={0x0, 0x19}, @val={0x2, 0x0, 0x2}, @x25={0x0, 0xc}}, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', r10, 0x8000, 0x20, 0x592, 0x7f, {{0x10, 0x4, 0x2, 0x4, 0x40, 0x66, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@lsrr={0x83, 0x17, 0xf1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, @loopback]}, @end, @noop, @rr={0x7, 0xf, 0xfc, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = getgid() setresgid(0x0, 0xffffffffffffffff, r12) setsockopt$inet_int(r11, 0x0, 0x9, &(0x7f0000000040)=0x1, 0x4) 4m59.360717011s ago: executing program 8 (id=2538): syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e244"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) 4m59.298148109s ago: executing program 0 (id=2539): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa41080045c50030006800000901907864014102ac1414aa0b01907800000000451000040068000209040081ac1414bb64010101"], 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/mdstat\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/66, 0x42}], 0x1, 0x1000000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000010001fff000000257f4c7c0000001a43", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c0002800800150047e1060014000700fe880000000000000000000000000101080005"], 0x7c}}, 0x0) 4m56.080489241s ago: executing program 2 (id=2540): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0) socket(0x200000000000011, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000100fe60f4246d670a03078a150f75080039000500", 0x32) 4m55.908633688s ago: executing program 3 (id=2541): socket(0x2a, 0x2, 0xe2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x10}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xd5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x80000000}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[], 0x3c}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000000ff", 0x24) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m55.7253307s ago: executing program 8 (id=2542): syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e244"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) 4m55.724836121s ago: executing program 0 (id=2543): syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e244"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 4m52.559297795s ago: executing program 3 (id=2544): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) 4m52.257723009s ago: executing program 8 (id=2545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={0x3f, 0x8, 0x2001, "14074195f8ff200012ee3cf29a9b2d4024cac629a795bcfab3d478caa34d7b31ec1832a7e71383c95b0500ddaef5d1e9b91fe2c9aaec32bb831eb170d632fa"}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 4m52.249292182s ago: executing program 0 (id=2546): r0 = io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000040)="d25b49eaa837aca70b55963d847cb9cdc64c6cb78f6fd498cd9bba2a17c0e17da219082fa57699f4f249087bddafb95f5df23a60cbb6a1633839a9d2ada455c0ba8f8d191df1879e6e9b66eb51a57735e48c743fa4", 0x55) close_range(r0, 0xffffffffffffffff, 0x0) 4m50.784480325s ago: executing program 4 (id=2547): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4m17.090447073s ago: executing program 2 (id=2548): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x20, 0x0, &(0x7f00000000c0)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$bind(0x0, 0x0, 0x0, 0x11080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 3m19.512370379s ago: executing program 45 (id=2547): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 3m18.486283738s ago: executing program 46 (id=2544): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) 3m13.975656387s ago: executing program 47 (id=2545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={0x3f, 0x8, 0x2001, "14074195f8ff200012ee3cf29a9b2d4024cac629a795bcfab3d478caa34d7b31ec1832a7e71383c95b0500ddaef5d1e9b91fe2c9aaec32bb831eb170d632fa"}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 3m13.915803844s ago: executing program 48 (id=2546): r0 = io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000040)="d25b49eaa837aca70b55963d847cb9cdc64c6cb78f6fd498cd9bba2a17c0e17da219082fa57699f4f249087bddafb95f5df23a60cbb6a1633839a9d2ada455c0ba8f8d191df1879e6e9b66eb51a57735e48c743fa4", 0x55) close_range(r0, 0xffffffffffffffff, 0x0) 3m13.820472685s ago: executing program 49 (id=2548): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x20, 0x0, &(0x7f00000000c0)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$bind(0x0, 0x0, 0x0, 0x11080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 2m27.795220788s ago: executing program 5 (id=2582): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m24.823179173s ago: executing program 5 (id=2587): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r0, 0x1) 2m22.582072759s ago: executing program 6 (id=2590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 2m22.529297168s ago: executing program 5 (id=2592): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1857cc401095553e0a000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x41, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 2m22.199710081s ago: executing program 9 (id=2594): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1857cc401095553e0a000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x41, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 2m21.177479412s ago: executing program 6 (id=2595): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m20.034642031s ago: executing program 7 (id=2596): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000200)={0x40, 0x8, 0x3, "e9d0f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m18.599761518s ago: executing program 9 (id=2597): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='illinois\x00', 0x9) 2m18.599169726s ago: executing program 1 (id=2598): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeb0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/186, 0xba) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 2m18.280979866s ago: executing program 5 (id=2599): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) openat$audio1(0xffffff9c, &(0x7f0000000040), 0xbfaafea3a8346deb, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0xc285a00, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) prlimit64(0x0, 0x6, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) 2m15.783377311s ago: executing program 6 (id=2600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x2000, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0xdd, 0x0, 0x0, @tick=0x800, {}, {}, @result}], 0x1c) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000100)=[0xc03, 0x7, 0x728cf7a3, 0x6, 0x0, 0x4, 0xf506, 0xfffffffe]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x21) r6 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) 2m15.493415131s ago: executing program 1 (id=2601): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) pivot_root(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 2m14.790094987s ago: executing program 9 (id=2602): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) pivot_root(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 2m12.845812319s ago: executing program 5 (id=2603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = syz_open_dev$admmidi(&(0x7f0000002480), 0x20, 0x101200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) 2m12.389703371s ago: executing program 1 (id=2604): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="24bdf5c2"}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 2m12.13515324s ago: executing program 7 (id=2605): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x800) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000e2c000/0x4000)=nil, 0x4000}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="44100900000000", 0x7) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000300)=0x208) bind$inet6(r2, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 2m11.437627466s ago: executing program 6 (id=2606): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000005c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0}) 2m10.649619404s ago: executing program 5 (id=2607): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0xffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="8000f2000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m10.278503803s ago: executing program 1 (id=2608): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) getrlimit(0x9, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fsopen(&(0x7f00000002c0)='qnx6\x00', 0x1) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') 2m9.818830271s ago: executing program 9 (id=2609): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1857cc401095553e0a000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x41, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 2m9.263558585s ago: executing program 7 (id=2610): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) getrlimit(0x9, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fsopen(&(0x7f00000002c0)='qnx6\x00', 0x1) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2m8.720593027s ago: executing program 1 (id=2611): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeb0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/186, 0xba) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 2m7.289770133s ago: executing program 9 (id=2612): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_clone3(&(0x7f0000000200)={0x100000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2m7.027673821s ago: executing program 6 (id=2613): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x1) 2m6.678318736s ago: executing program 7 (id=2614): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x1) 2m2.49369634s ago: executing program 7 (id=2615): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) getrlimit(0x9, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fsopen(&(0x7f00000002c0)='qnx6\x00', 0x1) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2m2.427886709s ago: executing program 9 (id=2616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x2000, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0xdd, 0x0, 0x0, @tick=0x800, {}, {}, @result}], 0x1c) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000100)=[0xc03, 0x7, 0x728cf7a3, 0x6, 0x0, 0x4, 0xf506, 0xfffffffe]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x21) r6 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) 2m2.060925935s ago: executing program 6 (id=2617): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) pivot_root(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 2m1.574968315s ago: executing program 1 (id=2618): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m59.897867321s ago: executing program 7 (id=2619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x3, 0x1801, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f00000001c0), &(0x7f0000000140)=@tcp=r1}, 0x20) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r5, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r6, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r7, 0x1) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$rfkill(r8, &(0x7f00000000c0), 0x8) r9 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r9, &(0x7f0000000100)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x3}, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x2010, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.006372732s ago: executing program 50 (id=2616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x2000, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0xdd, 0x0, 0x0, @tick=0x800, {}, {}, @result}], 0x1c) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000100)=[0xc03, 0x7, 0x728cf7a3, 0x6, 0x0, 0x4, 0xf506, 0xfffffffe]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x21) r6 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) 873.494266ms ago: executing program 51 (id=2619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x3, 0x1801, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f00000001c0), &(0x7f0000000140)=@tcp=r1}, 0x20) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r5, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r6, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r7, 0x1) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$rfkill(r8, &(0x7f00000000c0), 0x8) r9 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r9, &(0x7f0000000100)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x3}, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x2010, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 374.934931ms ago: executing program 52 (id=2607): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0xffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="8000f2000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 113.20012ms ago: executing program 53 (id=2617): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) pivot_root(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 0s ago: executing program 54 (id=2618): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) kernel console output (not intermixed with test programs): 3/../uevent} for writing: No such file or directory [ 1303.528137][T15333] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1303.541817][T15333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.550322][T15333] usb 1-1: Product: syz [ 1303.554645][T15333] usb 1-1: Manufacturer: syz [ 1303.559255][T15333] usb 1-1: SerialNumber: syz [ 1303.585169][T18164] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2265'. [ 1303.635238][T15287] usb 3-1: Using ep0 maxpacket: 16 [ 1303.652141][T15287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1303.662010][T15287] usb 3-1: can't read configurations, error -61 [ 1303.792155][T15287] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1303.880701][T15333] usb 1-1: 0:2 : does not exist [ 1303.912799][T15333] usb 1-1: USB disconnect, device number 21 [ 1303.961719][T15287] usb 3-1: Using ep0 maxpacket: 16 [ 1304.164462][T15287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1304.172315][T15287] usb 3-1: can't read configurations, error -61 [ 1304.179062][T15287] usb usb3-port1: attempt power cycle [ 1304.213212][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1305.036417][T15287] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1305.083522][T15287] usb 3-1: Using ep0 maxpacket: 16 [ 1305.129766][T15287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1305.172672][T15287] usb 3-1: can't read configurations, error -61 [ 1305.303387][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2265'. [ 1305.431624][T15287] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1305.589275][T15287] usb 3-1: Using ep0 maxpacket: 16 [ 1305.620983][T15287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1305.677036][T15287] usb 3-1: can't read configurations, error -61 [ 1306.888643][T15287] usb usb3-port1: unable to enumerate USB device [ 1306.921663][T15333] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1307.712465][T15333] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1307.732831][T15333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.740998][T15333] usb 2-1: Product: syz [ 1307.851670][T15287] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1308.043259][T15333] usb 2-1: Manufacturer: syz [ 1308.051836][T15333] usb 2-1: SerialNumber: syz [ 1308.092610][T15333] usb 2-1: config 0 descriptor?? [ 1308.233571][T15287] usb 5-1: device descriptor read/64, error -71 [ 1308.242395][ T5869] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1308.851617][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 1308.860454][ T5869] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1308.871864][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.879916][ T5869] usb 1-1: Product: syz [ 1308.911823][ T5869] usb 1-1: Manufacturer: syz [ 1308.916479][ T5869] usb 1-1: SerialNumber: syz [ 1308.988575][ T5869] usb 1-1: config 0 descriptor?? [ 1309.079807][T15287] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1309.217563][T15333] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1309.226237][T15333] usb 2-1: Firmware version (0.0) predates our first public release. [ 1309.482961][T15287] usb 5-1: device descriptor read/64, error -71 [ 1309.497715][T15333] usb 2-1: Please update to version 0.2 or newer [ 1309.542238][T18253] openvswitch: netlink: IP tunnel dst address not specified [ 1309.592566][T15287] usb usb5-port1: attempt power cycle [ 1309.630524][T18233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.659892][T18233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.702466][T18233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.714978][T18233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.745496][ T5869] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1309.745851][T18247] tipc: Enabling of bearer rejected, already enabled [ 1309.777682][T18247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1309.814012][T15333] usb 2-1: USB disconnect, device number 20 [ 1309.944769][T15287] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1310.372879][T15287] usb 5-1: device descriptor read/8, error -71 [ 1310.475819][T18274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.552696][T18274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.847623][ T5869] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1310.874027][ T5869] usb 1-1: USB disconnect, device number 22 [ 1311.207222][T15333] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1311.273311][ T8448] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1311.364700][T15333] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.375240][T15333] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1311.416395][T15333] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1311.427626][T15333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.432487][ T8448] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1311.452045][T15333] usb 2-1: Product: syz [ 1311.463876][T15333] usb 2-1: Manufacturer: syz [ 1311.476465][T15333] usb 2-1: SerialNumber: syz [ 1311.482735][ T8448] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1311.502175][ T8448] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1311.544703][ T8448] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1311.574944][ T8448] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1311.602112][ T8448] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1311.637829][ T8448] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1311.658531][ T8448] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1311.667874][ T8448] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1311.706027][ T8448] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1311.727292][ T8448] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1311.730927][T15333] usb 2-1: 0:2 : does not exist [ 1311.756997][ T8448] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1311.775903][ T8448] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1311.786274][ T8448] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1311.797711][T15333] usb 2-1: USB disconnect, device number 21 [ 1311.821262][ T8448] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1311.832594][T15287] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1311.910153][ T8448] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1311.929261][ T8448] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1311.940249][ T8448] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1311.987612][ T8448] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1312.002968][ T8448] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1312.021777][ T8448] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1312.037454][T15287] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1312.052211][T15287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.060563][ T8448] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1312.081074][T15287] usb 1-1: Product: syz [ 1312.086142][T15287] usb 1-1: Manufacturer: syz [ 1312.091322][ T8448] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1312.101445][ T8448] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1312.112566][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1312.117770][T15287] usb 1-1: SerialNumber: syz [ 1312.135751][ T8448] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1312.145146][ T8448] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1312.161596][ T8448] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1312.181618][T15287] usb 1-1: config 0 descriptor?? [ 1312.188365][ T8448] usb 7-1: Product: syz [ 1312.193265][ T8448] usb 7-1: Manufacturer: syz [ 1312.212176][ T8448] usb 7-1: SerialNumber: syz [ 1312.223388][ T8448] usb 7-1: config 0 descriptor?? [ 1312.245464][ T8448] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 1312.482859][ T8448] usb 7-1: USB disconnect, device number 34 [ 1312.506889][ T8448] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 1312.808449][T15287] usb 1-1: Firmware: major: 216, minor: 0, hardware type: ATUSB (0) [ 1313.207744][T18321] ufs: Invalid option: "GPL" or missing value [ 1313.214001][T18321] ufs: wrong mount options [ 1313.894162][T15287] usb 1-1: failed to fetch extended address, random address set [ 1314.736242][T15287] usb 1-1: USB disconnect, device number 23 [ 1314.762949][T18329] openvswitch: netlink: IP tunnel dst address not specified [ 1315.532663][ T46] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1315.592295][T15333] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1315.693212][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 1315.700107][ T46] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1315.716875][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.787428][T15333] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1315.807759][ T46] usb 5-1: config 0 descriptor?? [ 1315.816830][T15333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.881987][T15333] usb 2-1: Product: syz [ 1315.887055][T15333] usb 2-1: Manufacturer: syz [ 1315.911743][T15333] usb 2-1: SerialNumber: syz [ 1315.955232][T15333] usb 2-1: config 0 descriptor?? [ 1317.045928][T18370] ufs: Invalid option: "GPL" or missing value [ 1317.052531][T18370] ufs: wrong mount options [ 1317.860397][T18361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.904375][T15333] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1317.930476][T15333] usb 2-1: Firmware version (0.0) predates our first public release. [ 1318.178596][T15333] usb 2-1: Please update to version 0.2 or newer [ 1319.971797][T15287] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1320.046592][ T46] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1320.062079][ T46] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1320.072568][ T46] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1320.091843][ T46] usb 5-1: USB disconnect, device number 76 [ 1320.202040][T15333] usb 2-1: USB disconnect, device number 22 [ 1320.390479][T15287] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.401074][T15287] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1320.410484][T15287] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1320.441354][T15287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.641598][ T46] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1320.756664][T18415] syz.0.2302: attempt to access beyond end of device [ 1320.756664][T18415] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1320.805521][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2303'. [ 1320.830428][T15400] usb 7-1: USB disconnect, device number 35 [ 1320.914680][ T46] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1321.006861][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1321.352475][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1321.363762][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1321.381827][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1321.391100][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1321.461895][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1321.527060][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1321.548072][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1321.661613][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1321.803475][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1321.928565][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1322.040021][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1322.121724][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1322.171695][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1322.214078][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1322.243711][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1322.287590][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1322.348997][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1322.373002][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1322.404591][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1322.470938][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1322.532805][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1322.581859][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1322.627535][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1322.654858][ T46] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1322.685892][ T46] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1322.737827][ T46] usb 5-1: Product: syz [ 1322.757707][ T46] usb 5-1: Manufacturer: syz [ 1322.779732][ T46] usb 5-1: SerialNumber: syz [ 1322.812728][ T46] usb 5-1: config 0 descriptor?? [ 1322.830845][ T46] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1323.040714][ T8448] usb 5-1: USB disconnect, device number 77 [ 1323.048337][ T8448] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1326.641776][T15287] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1326.827399][T15287] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1326.837588][T15287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.861605][T15287] usb 1-1: Product: syz [ 1326.865818][T15287] usb 1-1: Manufacturer: syz [ 1326.870436][T15287] usb 1-1: SerialNumber: syz [ 1326.893629][T18478] openvswitch: netlink: IP tunnel dst address not specified [ 1326.902421][T15287] usb 1-1: config 0 descriptor?? [ 1328.361755][ T8448] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1328.541027][T15287] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1328.550098][T15287] usb 1-1: Firmware version (0.0) predates our first public release. [ 1328.705841][ T8448] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.077605][T15287] usb 1-1: Please update to version 0.2 or newer [ 1329.084517][ T8448] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1329.093909][ T8448] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1329.103184][ T8448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.133452][T15287] usb 1-1: USB disconnect, device number 24 [ 1329.354643][ T5869] usb 2-1: USB disconnect, device number 23 [ 1329.823451][T18505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1334.601860][T18542] syz.0.2325: attempt to access beyond end of device [ 1334.601860][T18542] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1338.416535][T18572] syz.6.2330: attempt to access beyond end of device [ 1338.416535][T18572] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1340.631623][ T5869] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1341.398245][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.408451][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1341.424878][ T5869] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1341.441169][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.561629][ T8448] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1341.584542][ T5869] usb 1-1: Product: syz [ 1341.589046][ T5869] usb 1-1: Manufacturer: syz [ 1342.013954][ T5869] usb 1-1: SerialNumber: syz [ 1342.072889][ T8448] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.083370][ T8448] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1342.096889][ T8448] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1342.133116][ T8448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.348663][ T5869] usb 1-1: 0:2 : does not exist [ 1342.376099][ T5869] usb 1-1: unit 4 not found! [ 1342.404301][ T8448] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1342.424339][ T5869] usb 1-1: USB disconnect, device number 25 [ 1342.470124][ T8448] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1342.496749][T15333] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1342.518744][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1342.546804][ T8448] usb 3-1: USB disconnect, device number 63 [ 1343.951639][ T46] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1344.081643][T15333] usb 7-1: device not accepting address 36, error -71 [ 1344.104347][ T46] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1344.159491][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.197675][ T46] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1344.312711][ T46] usb 5-1: config 1 has no interface number 1 [ 1344.476828][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1344.504462][ T46] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1344.584701][T15333] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1345.307050][ T46] usb 5-1: string descriptor 0 read error: -71 [ 1345.319906][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1345.335317][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.351113][ T46] usb 5-1: can't set config #1, error -71 [ 1345.361276][ T46] usb 5-1: USB disconnect, device number 78 [ 1345.441665][T15333] usb 7-1: Using ep0 maxpacket: 16 [ 1345.470645][T15333] usb 7-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 1345.528058][T15333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 78, changing to 10 [ 1345.566558][T15333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57694, setting to 1024 [ 1345.741624][T15333] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1345.757600][T15333] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1345.767479][T15333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.509971][T15333] usb 7-1: Product: syz [ 1346.514237][T15333] usb 7-1: Manufacturer: syz [ 1346.518834][T15333] usb 7-1: SerialNumber: syz [ 1346.698807][T15333] usb 7-1: config 0 descriptor?? [ 1346.764796][T15333] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1346.980959][T15333] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1346.987932][T15333] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1347.885109][T15333] usb 7-1: USB disconnect, device number 37 [ 1348.241892][T15333] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1348.437407][T15333] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.466934][T15333] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1348.495176][T15333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.550424][T15333] usb 7-1: config 0 descriptor?? [ 1348.586518][T15333] pwc: Askey VC010 type 2 USB webcam detected. [ 1348.623789][ T46] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1348.655041][T17366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1348.675245][T17366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1348.685180][T17366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1348.696837][T17366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1348.705890][T17366] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1348.714909][T17366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1348.822025][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 1348.843641][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.862970][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.881634][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1348.898624][ T46] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1348.908882][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.918539][ T46] usb 5-1: Product: syz [ 1348.923270][ T46] usb 5-1: Manufacturer: syz [ 1348.923277][ T2978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.927917][ T46] usb 5-1: SerialNumber: syz [ 1348.942033][ T46] usb 5-1: config 0 descriptor?? [ 1348.960820][ T46] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1349.010755][T15333] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1349.041222][T15333] pwc: recv_control_msg error -32 req 02 val 2700 [ 1349.060567][T15333] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1349.099356][T15333] pwc: recv_control_msg error -32 req 04 val 1000 [ 1349.127500][T15333] pwc: recv_control_msg error -32 req 04 val 1300 [ 1349.152882][T15333] pwc: recv_control_msg error -32 req 04 val 1400 [ 1349.171970][T15333] pwc: recv_control_msg error -32 req 02 val 2000 [ 1349.181664][T15333] pwc: recv_control_msg error -32 req 02 val 2100 [ 1349.196611][ T2978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.201687][T15333] pwc: recv_control_msg error -32 req 04 val 1500 [ 1349.214471][T15333] pwc: recv_control_msg error -32 req 02 val 2500 [ 1349.223061][T15333] pwc: recv_control_msg error -32 req 02 val 2400 [ 1349.230135][T15333] pwc: recv_control_msg error -32 req 02 val 2600 [ 1349.235284][T18689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2347'. [ 1349.239052][T15333] pwc: recv_control_msg error -32 req 02 val 2900 [ 1349.253832][T15333] pwc: recv_control_msg error -32 req 02 val 2800 [ 1349.390613][ T2978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.478022][T15333] pwc: recv_control_msg error -71 req 04 val 1200 [ 1349.582007][T15333] pwc: Registered as video103. [ 1349.588161][T15333] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 1349.659376][ T2978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.674871][T15333] usb 7-1: USB disconnect, device number 38 [ 1349.893773][ T46] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 1350.114503][ T5869] usb 5-1: USB disconnect, device number 79 [ 1350.379247][T18679] chnl_net:caif_netlink_parms(): no params data found [ 1350.399402][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 1350.401691][ T46] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1350.640987][ T46] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.743636][ T46] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1350.772754][T17366] Bluetooth: hci3: command tx timeout [ 1350.939438][T16585] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1350.943755][ T2978] bridge_slave_1: left allmulticast mode [ 1350.981792][ T2978] bridge_slave_1: left promiscuous mode [ 1351.006160][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.039950][ T46] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1351.091847][T16585] usb 7-1: device descriptor read/64, error -71 [ 1351.101910][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.141721][ T2978] bridge_slave_0: left allmulticast mode [ 1351.147417][ T2978] bridge_slave_0: left promiscuous mode [ 1351.148245][ T46] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1351.193059][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.206806][ T46] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1351.397912][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1351.502361][T16585] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1351.837745][ T46] usb 3-1: USB disconnect, device number 64 [ 1352.011669][T16585] usb 7-1: device descriptor read/64, error -71 [ 1352.121884][T16585] usb usb7-port1: attempt power cycle [ 1352.721619][T16585] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1352.772512][T16585] usb 7-1: device descriptor read/8, error -71 [ 1352.918476][T18758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1352.927775][T18758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1353.618666][T17366] Bluetooth: hci3: command tx timeout [ 1353.671650][T16585] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1353.761346][T16585] usb 7-1: device descriptor read/8, error -71 [ 1353.871969][T16585] usb usb7-port1: unable to enumerate USB device [ 1354.062708][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.027672][T17366] Bluetooth: hci3: command tx timeout [ 1356.118074][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.296119][ T8448] IPVS: starting estimator thread 0... [ 1356.414388][ T2978] bond0 (unregistering): Released all slaves [ 1356.441823][T18771] IPVS: using max 21 ests per chain, 50400 per kthread [ 1356.879353][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022f4d800: rx timeout, send abort [ 1357.387864][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022f4d800: abort rx timeout. Force session deactivation [ 1358.292640][ T8623] Bluetooth: hci3: command tx timeout [ 1358.339037][T18679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.348227][T18679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.356316][T18679] bridge_slave_0: entered allmulticast mode [ 1358.452987][T18679] bridge_slave_0: entered promiscuous mode [ 1358.558768][T18679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.587880][T18679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.600239][T18679] bridge_slave_1: entered allmulticast mode [ 1358.613190][T18679] bridge_slave_1: entered promiscuous mode [ 1358.671704][ T5869] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1358.738166][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2364'. [ 1358.747549][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2364'. [ 1358.933959][T18817] gretap0: entered promiscuous mode [ 1358.967181][T18817] batadv_slave_1: entered promiscuous mode [ 1359.071808][ T46] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1359.078024][ T5869] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.090061][ T5869] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1359.110168][ T5869] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1359.122553][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.241564][ T46] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1359.257409][ T46] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1359.308253][ T46] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1359.396313][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.576241][ T5869] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1359.589268][T18679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.603138][ T46] usb 7-1: config 0 descriptor?? [ 1359.625986][T18679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.710164][ T2978] hsr_slave_0: left promiscuous mode [ 1359.736199][ T5869] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1359.738630][ T46] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1359.777226][ T5869] usb 5-1: USB disconnect, device number 80 [ 1359.783692][ T2978] hsr_slave_1: left promiscuous mode [ 1359.825923][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.849736][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.894769][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.902836][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.926413][ T2978] veth1_macvtap: left promiscuous mode [ 1359.932242][ T2978] veth0_macvtap: left promiscuous mode [ 1359.938044][ T2978] veth1_vlan: left promiscuous mode [ 1359.944089][ T2978] veth0_vlan: left promiscuous mode [ 1360.163420][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1362.027961][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.075253][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.054782][ T46] usb 7-1: USB disconnect, device number 43 [ 1363.074786][T16585] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1363.261955][T16585] usb 3-1: Using ep0 maxpacket: 16 [ 1363.282563][T16585] usb 3-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 1363.301551][T16585] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 78, changing to 10 [ 1363.321557][T16585] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57694, setting to 1024 [ 1363.359748][T16585] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1363.375513][T16585] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1363.398292][T16585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.406867][T16585] usb 3-1: Product: syz [ 1363.411062][T16585] usb 3-1: Manufacturer: syz [ 1363.421716][T16585] usb 3-1: SerialNumber: syz [ 1363.431318][T16585] usb 3-1: config 0 descriptor?? [ 1363.442192][ T46] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1363.455261][T16585] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1363.529732][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f785c00: rx timeout, send abort [ 1363.538105][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f786400: rx timeout, send abort [ 1363.546632][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f785c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1363.561032][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f786400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1363.595192][ T46] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1363.609540][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.629174][ T46] usb 7-1: config 0 descriptor?? [ 1363.653139][ T46] cp210x 7-1:0.0: cp210x converter detected [ 1363.829882][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 1364.062269][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 1364.068180][ T46] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 1364.271985][ T46] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1364.295777][ T46] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1364.315082][T16585] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 1364.336828][ T46] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1364.384986][ T46] usb 7-1: USB disconnect, device number 44 [ 1364.411112][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1364.454604][ T46] cp210x 7-1:0.0: device disconnected [ 1364.594957][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 1364.602212][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 1364.609171][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 1364.617974][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 1364.624936][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 1364.632266][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 1364.639325][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 1364.646384][T16585] usb 3-1: USB disconnect, device number 65 [ 1364.652459][ C0] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 1364.652482][ C0] gspca_main: Resubmit URB failed with error -19 [ 1366.466997][T18936] syz.4.2377: attempt to access beyond end of device [ 1366.466997][T18936] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1367.218928][T18920] syzkaller0: entered promiscuous mode [ 1367.299094][T18920] syzkaller0: entered allmulticast mode [ 1367.811700][T18946] ufs: Invalid option: "GPL" or missing value [ 1367.817888][T18946] ufs: wrong mount options [ 1367.968523][T18947] block nbd0: NBD_DISCONNECT [ 1368.566381][T18679] team0: Port device team_slave_0 added [ 1370.744501][ T8448] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1370.882170][ T8448] usb 5-1: device descriptor read/64, error -71 [ 1370.915656][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880216b7400: rx timeout, send abort [ 1370.924005][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880216b7000: rx timeout, send abort [ 1370.932593][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880216b7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1370.947015][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880216b7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1371.421623][ T8448] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1371.591786][ T8448] usb 5-1: device descriptor read/64, error -71 [ 1371.711016][ T8448] usb usb5-port1: attempt power cycle [ 1371.798331][ T4734] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1371.981057][ T4734] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1371.992222][ T4734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.145756][ T4734] usb 1-1: config 0 descriptor?? [ 1372.216142][ T4734] cp210x 1-1:0.0: cp210x converter detected [ 1372.631083][ T4734] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 1372.883646][ T4734] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1372.891375][ T4734] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1372.931857][ T4734] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1373.001041][ T4734] usb 1-1: USB disconnect, device number 26 [ 1373.042671][ T4734] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1373.050866][ T4734] cp210x 1-1:0.0: device disconnected [ 1373.785303][T19009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2389'. [ 1373.851593][T19009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2389'. [ 1374.211834][T17366] Bluetooth: hci5: command 0x0406 tx timeout [ 1375.810191][T18679] team0: Port device team_slave_1 added [ 1375.845304][T19009] gretap0: entered promiscuous mode [ 1375.872734][T19009] batadv_slave_1: entered promiscuous mode [ 1375.901769][T19009] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1375.909383][T19009] Cannot create hsr debugfs directory [ 1376.040215][T18679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.057009][T18679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.102667][T18679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.121331][T18679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.130777][T18679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.161252][T18679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.766768][T18679] hsr_slave_0: entered promiscuous mode [ 1377.792412][T19063] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1378.749641][T16585] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1379.504630][T19048] kvm: pic: non byte read [ 1379.509951][T18679] hsr_slave_1: entered promiscuous mode [ 1379.537342][T16585] usb 7-1: device descriptor read/64, error -71 [ 1379.573861][T18679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1379.582501][T18679] Cannot create hsr debugfs directory [ 1380.031734][T16585] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1380.172166][T16585] usb 7-1: device descriptor read/64, error -71 [ 1380.252019][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d929800: rx timeout, send abort [ 1380.260418][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d92b000: rx timeout, send abort [ 1380.270846][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804d929800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1380.285276][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804d92b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1380.300890][T16585] usb usb7-port1: attempt power cycle [ 1380.698585][T19081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1381.607178][T19092] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1382.128543][T19078] tipc: Started in network mode [ 1382.159498][T19078] tipc: Node identity ac14140f, cluster identity 4711 [ 1382.189497][T19078] tipc: New replicast peer: 255.255.255.255 [ 1382.196054][T19078] tipc: Enabled bearer , priority 10 [ 1383.456710][ T46] tipc: Node number set to 2886997007 [ 1388.297979][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033ca5000: rx timeout, send abort [ 1388.806231][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033ca5000: abort rx timeout. Force session deactivation [ 1391.613919][T19164] netlink: 'syz.4.2411': attribute type 10 has an invalid length. [ 1391.732854][T19164] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1391.939198][T18679] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1392.066520][T18679] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1392.088928][T18679] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1392.525225][T18679] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1392.816713][T18679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.835456][T18679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.959742][T18679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1392.993720][T18679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1393.927452][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.934641][ T7572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.367328][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.374546][ T7572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.203131][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880622cb800: rx timeout, send abort [ 1395.211521][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880622c8800: rx timeout, send abort [ 1395.221646][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880622cb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1395.236073][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880622c8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1395.882696][T18679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.509034][T18679] veth0_vlan: entered promiscuous mode [ 1399.572979][T18679] veth1_vlan: entered promiscuous mode [ 1399.662612][T18679] veth0_macvtap: entered promiscuous mode [ 1399.693964][T18679] veth1_macvtap: entered promiscuous mode [ 1399.776606][T18679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.830137][T18679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.857999][T18679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.878894][T18679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.890341][T18679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.909409][T18679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.919952][T18679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.981561][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2431'. [ 1399.990933][T19270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2431'. [ 1400.039542][T18679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.098705][T18679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.426666][T18679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.681678][T18679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.729191][T18679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.751646][T18679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.778740][T18679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.789363][T18679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.799300][T18679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.810050][T18679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.821205][T18679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.841650][T18679] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.850429][T18679] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.859754][T18679] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.868570][T18679] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.163180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.191620][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.200010][ T7572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.269207][ T7572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.061907][ T4734] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1403.343301][ T4734] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1403.475572][ T4734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.486288][ T4734] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1403.495619][ T4734] usb 5-1: config 1 has no interface number 1 [ 1403.501996][ T4734] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1403.515182][ T4734] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1405.446258][T19319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2442'. [ 1405.455913][T19319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2442'. [ 1405.915588][ T4734] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1406.086637][ T4734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.096592][ T4734] usb 5-1: Product: syz [ 1406.101396][ T4734] usb 5-1: Manufacturer: syz [ 1406.122478][ T4734] usb 5-1: can't set config #1, error -71 [ 1406.129915][ T4734] usb 5-1: USB disconnect, device number 84 [ 1408.236621][T19336] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1408.790529][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d936800: rx timeout, send abort [ 1408.798920][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d937800: rx timeout, send abort [ 1408.807341][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d936800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1408.821828][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d937800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1409.652373][ T4734] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1410.010395][ T4734] usb 9-1: Using ep0 maxpacket: 8 [ 1410.059430][ T4734] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1410.099277][ T4734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.125281][ T4734] usb 9-1: Product: syz [ 1410.129503][ T4734] usb 9-1: Manufacturer: syz [ 1410.144813][ T4734] usb 9-1: SerialNumber: syz [ 1410.157525][ T4734] usb 9-1: config 0 descriptor?? [ 1410.379835][ T4734] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1411.218568][T19370] vlan2: entered promiscuous mode [ 1411.247296][T19370] bond0: entered promiscuous mode [ 1411.266822][T19370] bond_slave_0: entered promiscuous mode [ 1411.281829][T19370] bond_slave_1: entered promiscuous mode [ 1411.317127][T19370] vlan2: entered allmulticast mode [ 1411.907858][T19370] bond0: entered allmulticast mode [ 1411.918937][T19370] bond_slave_0: entered allmulticast mode [ 1411.929696][T19370] bond_slave_1: entered allmulticast mode [ 1412.293163][T19381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2457'. [ 1412.302410][T19381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2457'. [ 1415.738939][ T4734] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1415.760032][ T4734] usb 9-1: USB disconnect, device number 10 [ 1415.799096][T19405] tipc: Enabling of bearer rejected, failed to enable media [ 1417.211745][ T8448] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1417.256034][ T4734] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1417.481824][ T8448] usb 3-1: Using ep0 maxpacket: 16 [ 1417.497462][ T8448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.509802][ T8448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.121712][ T8448] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1418.131296][ T8448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.144020][ T8448] usb 3-1: config 0 descriptor?? [ 1418.386030][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2469'. [ 1418.395243][T19453] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2469'. [ 1419.338467][ T4734] usb 1-1: device descriptor read/all, error -71 [ 1419.736818][ T8448] usbhid 3-1:0.0: can't add hid device: -71 [ 1419.759150][ T8448] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1419.784337][ T8448] usb 3-1: USB disconnect, device number 66 [ 1420.381617][ T4734] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1420.562822][ T4734] usb 1-1: Using ep0 maxpacket: 16 [ 1420.893842][ T4734] usb 1-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 1421.113925][ T4734] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1421.380455][ T4734] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1421.406745][ T4734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.415106][ T4734] usb 1-1: Product: syz [ 1421.419318][ T4734] usb 1-1: Manufacturer: syz [ 1421.424299][ T4734] usb 1-1: SerialNumber: syz [ 1421.438425][ T4734] usb 1-1: config 0 descriptor?? [ 1422.159071][ T4734] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1422.258092][T17366] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1422.296506][T17366] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1422.569007][T17366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1422.577186][T17366] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1422.586520][T17366] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1422.598459][T17366] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1423.329841][ T4734] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 1423.350128][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.357060][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.389147][ T4734] usb 1-1: USB disconnect, device number 28 [ 1424.496715][T19488] chnl_net:caif_netlink_parms(): no params data found [ 1424.691815][T17366] Bluetooth: hci4: command tx timeout [ 1424.940578][T19488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.968751][T19488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.001966][T19488] bridge_slave_0: entered allmulticast mode [ 1425.042188][T19488] bridge_slave_0: entered promiscuous mode [ 1425.070983][T19488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.501711][T19533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2480'. [ 1425.511153][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2480'. [ 1426.019531][T19488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.061947][T19488] bridge_slave_1: entered allmulticast mode [ 1426.070274][T19488] bridge_slave_1: entered promiscuous mode [ 1426.883522][T17366] Bluetooth: hci4: command tx timeout [ 1428.000586][T19488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1428.067702][T19488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.113043][T17366] Bluetooth: hci4: command tx timeout [ 1429.320022][T19488] team0: Port device team_slave_0 added [ 1429.438251][T19488] team0: Port device team_slave_1 added [ 1429.645170][T19569] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1429.689605][T19569] kvm: pic: non byte read [ 1429.709071][T19569] kvm: pic: non byte read [ 1429.996439][T19488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.049775][T19488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.271715][T19488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.287560][T19488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.304840][T19488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.399356][T19488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.411753][ T5820] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1430.759904][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 1430.760670][T19488] hsr_slave_0: entered promiscuous mode [ 1430.847151][ T5820] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1430.896536][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.921698][ T5820] usb 3-1: Product: syz [ 1430.924193][T19488] hsr_slave_1: entered promiscuous mode [ 1430.925892][ T5820] usb 3-1: Manufacturer: syz [ 1430.992724][T19488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1431.000437][T19488] Cannot create hsr debugfs directory [ 1431.050650][ T5820] usb 3-1: SerialNumber: syz [ 1431.097523][ T5820] usb 3-1: config 0 descriptor?? [ 1431.202881][T17366] Bluetooth: hci4: command tx timeout [ 1431.702483][ T5820] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1432.069241][T19605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2492'. [ 1432.078623][T19605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2492'. [ 1433.121168][ T5820] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1433.135348][ T3000] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.900269][ T3000] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.210369][ T4734] usb 3-1: USB disconnect, device number 67 [ 1434.594822][ T3000] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.175363][T19660] netlink: 'syz.8.2499': attribute type 10 has an invalid length. [ 1437.283143][ T3000] bond0: (slave netdevsim0): Releasing backup interface [ 1437.389797][ T3000] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 1437.406535][ T3000] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 1437.457777][ T3000] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.697315][T19660] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1439.294255][T19684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2502'. [ 1439.303478][T19684] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2502'. [ 1440.574488][T19699] ufs: Invalid option: "GPL" or missing value [ 1440.580762][T19699] ufs: wrong mount options [ 1440.901453][ T3000] bridge_slave_1: left allmulticast mode [ 1440.916586][ T3000] bridge_slave_1: left promiscuous mode [ 1440.924397][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.938741][ T3000] bridge_slave_0: left allmulticast mode [ 1440.944965][ T3000] bridge_slave_0: left promiscuous mode [ 1440.951105][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.429683][ T3000] bond0 (unregistering): left promiscuous mode [ 1443.440611][ T3000] bond_slave_0: left promiscuous mode [ 1443.477170][ T3000] bond_slave_1: left promiscuous mode [ 1443.507538][ T46] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1443.550389][ T3000] bond0 (unregistering): left allmulticast mode [ 1443.604831][ T3000] bond_slave_0: left allmulticast mode [ 1443.621263][ T3000] bond_slave_1: left allmulticast mode [ 1443.661969][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 1444.101997][ T46] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1444.116015][ T3000] team0: Port device bond0 removed [ 1444.145135][ T3000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.171714][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.181570][ T46] usb 9-1: Product: syz [ 1444.185841][ T46] usb 9-1: Manufacturer: syz [ 1444.211809][ T46] usb 9-1: SerialNumber: syz [ 1444.238342][ T3000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.250995][ T46] usb 9-1: config 0 descriptor?? [ 1444.280659][ T3000] bond0 (unregistering): Released all slaves [ 1444.508714][T19716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.520164][ T3000] tipc: Disabling bearer [ 1444.531565][T19716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.540495][ T3000] tipc: Left network mode [ 1444.542347][T19716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.062607][T19716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.153937][ T46] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1445.365597][T19488] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1445.460439][T19488] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1445.522179][T19488] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1446.374876][ T46] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1446.581919][T19733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.633900][T19733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.755679][ T5869] usb 9-1: USB disconnect, device number 11 [ 1447.017183][T19738] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2516'. [ 1447.026563][T19738] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2516'. [ 1447.858200][T19488] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1448.459010][T19488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.476708][T19488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.488999][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.496131][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.581574][T19488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1448.651022][T19488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1448.687650][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.694853][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.701815][T16585] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1448.955457][T16585] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1448.971598][T16585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.008258][T19749] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1449.016435][T16585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1449.039759][ T3000] hsr_slave_0: left promiscuous mode [ 1449.046989][T16585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1449.067983][T16585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.099413][ T3000] hsr_slave_1: left promiscuous mode [ 1449.181866][T16585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1449.190843][T16585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1449.245365][ T3000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1449.274840][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.289110][T16585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.307121][T16585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1449.392057][ T3000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1449.403978][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.412613][T16585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1449.779351][T16585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.789702][T16585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1449.802937][T16585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1449.864346][T16585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.874772][T16585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1449.884031][T16585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1449.889349][ T3000] team0: left allmulticast mode [ 1449.911622][ T3000] team_slave_0: left allmulticast mode [ 1449.941045][ T3000] team_slave_1: left allmulticast mode [ 1449.951666][ T3000] team0: left promiscuous mode [ 1449.956482][ T3000] team_slave_0: left promiscuous mode [ 1449.971710][ T3000] team_slave_1: left promiscuous mode [ 1449.977438][ T3000] veth1_macvtap: left promiscuous mode [ 1449.987797][ T3000] veth0_macvtap: left promiscuous mode [ 1449.993634][ T3000] veth1_vlan: left promiscuous mode [ 1449.998919][ T3000] veth0_vlan: left promiscuous mode [ 1450.037819][T16585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.048220][T16585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.057398][T16585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1450.070799][T16585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.081817][T16585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.093447][T16585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1450.132731][T16585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.175364][T16585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1450.308542][T16585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1450.322510][T16585] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1450.331707][T16585] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1450.340382][T16585] usb 5-1: Product: syz [ 1450.351712][T16585] usb 5-1: Manufacturer: syz [ 1450.361312][T16585] usb 5-1: SerialNumber: syz [ 1450.401000][T16585] usb 5-1: config 0 descriptor?? [ 1451.042089][T16585] yurex 5-1:0.0: Could not find endpoints [ 1451.351953][ T4734] usb 5-1: USB disconnect, device number 85 [ 1451.581753][T16585] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1451.751728][T16585] usb 3-1: Using ep0 maxpacket: 8 [ 1451.788059][T16585] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1451.821860][T16585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.830024][T16585] usb 3-1: Product: syz [ 1451.834992][T16585] usb 3-1: Manufacturer: syz [ 1451.839622][T16585] usb 3-1: SerialNumber: syz [ 1451.854853][T16585] usb 3-1: config 0 descriptor?? [ 1452.122856][T19768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.132690][T19768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.161625][T19768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.222284][T19768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.284459][T16585] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1452.931259][T19779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.109397][T19779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.389557][ T3000] team0 (unregistering): Port device team_slave_1 removed [ 1453.391282][T16585] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1453.420177][T16585] usb 3-1: USB disconnect, device number 68 [ 1453.520882][ T3000] team0 (unregistering): Port device team_slave_0 removed [ 1453.719078][T19783] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2528'. [ 1453.728393][T19783] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2528'. [ 1455.024120][T19488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.059281][T19794] netlink: 'syz.8.2530': attribute type 10 has an invalid length. [ 1455.068833][T19488] veth0_vlan: entered promiscuous mode [ 1455.079375][T19488] veth1_vlan: entered promiscuous mode [ 1455.100395][T19488] veth0_macvtap: entered promiscuous mode [ 1455.109172][T19488] veth1_macvtap: entered promiscuous mode [ 1455.123693][T19488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.134342][T19488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.144344][T19488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.155028][T19488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.165337][T19488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.176174][T19488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.186339][T19488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.196988][T19488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.208499][T19488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.218042][T19488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.228590][T19488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.238601][T19488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.249114][T19488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.260545][T19488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.301992][T19488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.313021][T19488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.334244][T19488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.346758][T19488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.164204][T19488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.173052][T19488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.211730][T19488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.220696][T19488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.568765][ T3000] IPVS: stop unused estimator thread 0... [ 1456.596012][T17391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.604420][T17391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.681108][ T7572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.706094][ T7572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.461606][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078fa6800: rx timeout, send abort [ 1459.469967][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078fa4000: rx timeout, send abort [ 1459.481708][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078fa6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1459.496165][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078fa4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1459.595671][T19827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1459.604969][T19827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1481.351500][ C1] sched: DL replenish lagged too much [ 1494.785579][ T9702] Bluetooth: hci3: command 0x0406 tx timeout [ 1521.834925][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1521.846085][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.752896][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1558.759234][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1563.448411][ T9702] Bluetooth: hci4: command 0x0406 tx timeout [ 1563.566856][T17366] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1563.684136][T17366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1563.767058][T19866] Sensor A: ================= START STATUS ================= [ 1563.784898][T19866] Sensor A: Test Pattern: 75% Colorbar [ 1563.786969][T17366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1563.799964][T19866] Sensor A: Show Information: All [ 1563.803217][T17366] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1563.824100][T17366] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1563.832086][T17366] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1563.859874][T19866] Sensor A: Vertical Flip: false [ 1563.896920][T19866] Sensor A: Horizontal Flip: false [ 1563.906755][T19866] Sensor A: Brightness: 128 [ 1563.911757][T19866] Sensor A: Contrast: 128 [ 1563.916400][T19866] Sensor A: Hue: 0 [ 1563.920466][T19866] Sensor A: Saturation: 128 [ 1563.925741][T19866] Sensor A: ================== END STATUS ================== [ 1565.206891][ T8623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1565.218398][ T8623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1565.247979][ T8623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1565.258644][ T8623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1565.279141][ T8623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1565.296931][ T8623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1565.300336][T19881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1565.309258][ T8623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1565.313212][T19881] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1565.319926][ T8623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1565.343836][T19881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1565.346715][T19883] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1565.361138][T19881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1565.368422][T19883] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1565.369040][T19883] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1565.383933][ T8623] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1565.384390][T19882] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1565.392153][ T8623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1565.402514][T19882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1565.406207][T19883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1565.414686][ T8623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1565.430917][T19860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1565.434878][T19882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1565.448459][T19882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1565.694413][T17391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.825664][T17391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.893597][T19883] Bluetooth: hci2: command tx timeout [ 1565.925353][T17391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.998311][T17391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.240691][T19862] chnl_net:caif_netlink_parms(): no params data found [ 1566.320007][T19872] chnl_net:caif_netlink_parms(): no params data found [ 1566.459418][T19876] chnl_net:caif_netlink_parms(): no params data found [ 1566.496615][T19874] chnl_net:caif_netlink_parms(): no params data found [ 1566.649868][T17391] bridge_slave_1: left allmulticast mode [ 1566.671824][T17391] bridge_slave_1: left promiscuous mode [ 1566.677633][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.708068][T17391] bridge_slave_0: left allmulticast mode [ 1566.720918][T17391] bridge_slave_0: left promiscuous mode [ 1566.732025][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.359461][T17391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.371961][T17391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.383555][T17391] bond0 (unregistering): Released all slaves [ 1567.495326][T19883] Bluetooth: hci4: command tx timeout [ 1567.495644][T19880] Bluetooth: hci1: command tx timeout [ 1567.513255][T19875] chnl_net:caif_netlink_parms(): no params data found [ 1567.556389][T19872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.563912][T19872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.571187][T19872] bridge_slave_0: entered allmulticast mode [ 1567.577822][T19880] Bluetooth: hci7: command tx timeout [ 1567.581725][T19883] Bluetooth: hci6: command tx timeout [ 1567.593100][T19872] bridge_slave_0: entered promiscuous mode [ 1567.648405][T19862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.657534][T19862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.667110][T19862] bridge_slave_0: entered allmulticast mode [ 1567.674055][T19862] bridge_slave_0: entered promiscuous mode [ 1567.700613][T19872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.718927][T19872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.731965][T19872] bridge_slave_1: entered allmulticast mode [ 1567.739543][T19872] bridge_slave_1: entered promiscuous mode [ 1567.807853][T19862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.823604][T19862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.830933][T19862] bridge_slave_1: entered allmulticast mode [ 1567.852802][T19862] bridge_slave_1: entered promiscuous mode [ 1567.924147][T19872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.971868][T19883] Bluetooth: hci2: command tx timeout [ 1568.010634][T19874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.031885][T19874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.039186][T19874] bridge_slave_0: entered allmulticast mode [ 1568.063835][T19874] bridge_slave_0: entered promiscuous mode [ 1568.099798][T19872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.110538][T19876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.118436][T19876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.126036][T19876] bridge_slave_0: entered allmulticast mode [ 1568.133934][T19876] bridge_slave_0: entered promiscuous mode [ 1568.188265][T19874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.195993][T19874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.203476][T19874] bridge_slave_1: entered allmulticast mode [ 1568.210577][T19874] bridge_slave_1: entered promiscuous mode [ 1568.278056][T19876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.285496][T19876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.293687][T19876] bridge_slave_1: entered allmulticast mode [ 1568.300764][T19876] bridge_slave_1: entered promiscuous mode [ 1568.324286][T19862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.336586][T19862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.367953][T17391] hsr_slave_0: left promiscuous mode [ 1568.383689][T17391] hsr_slave_1: left promiscuous mode [ 1568.400693][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.411468][T17391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.432511][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.440255][T17391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.498703][T17391] veth1_macvtap: left promiscuous mode [ 1568.516367][T17391] veth0_macvtap: left promiscuous mode [ 1568.523961][T17391] veth1_vlan: left promiscuous mode [ 1568.529318][T17391] veth0_vlan: left promiscuous mode [ 1569.215400][T17391] team0 (unregistering): Port device team_slave_1 removed [ 1569.276926][T17391] team0 (unregistering): Port device team_slave_0 removed [ 1569.572774][T19883] Bluetooth: hci4: command tx timeout [ 1569.582084][T19880] Bluetooth: hci1: command tx timeout [ 1569.665798][T19883] Bluetooth: hci6: command tx timeout [ 1569.671247][T19883] Bluetooth: hci7: command tx timeout [ 1569.888949][T19872] team0: Port device team_slave_0 added [ 1569.988802][T19875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.011230][T19875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.021100][T19875] bridge_slave_0: entered allmulticast mode [ 1570.030463][T19875] bridge_slave_0: entered promiscuous mode [ 1570.038765][T19875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.046022][T19875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.061406][T19883] Bluetooth: hci2: command tx timeout [ 1570.062156][T19875] bridge_slave_1: entered allmulticast mode [ 1570.083220][T19875] bridge_slave_1: entered promiscuous mode [ 1570.094666][T19872] team0: Port device team_slave_1 added [ 1570.117743][T19876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.163963][T19874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.195721][T19874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.261685][T19876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.275724][T19862] team0: Port device team_slave_0 added [ 1570.357505][T19875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.379345][T19872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.390627][T19872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.418993][T19872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.464449][T19876] team0: Port device team_slave_0 added [ 1570.486363][T19862] team0: Port device team_slave_1 added [ 1570.498493][T19874] team0: Port device team_slave_0 added [ 1570.509077][T19874] team0: Port device team_slave_1 added [ 1570.519752][T19875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.571720][T19872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.578714][T19872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.606473][T19872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.636951][T19876] team0: Port device team_slave_1 added [ 1570.768412][T19875] team0: Port device team_slave_0 added [ 1570.819689][T19862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.827991][T19862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.860553][T19862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.883943][T19874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.890924][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.924315][T19874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.941282][T19875] team0: Port device team_slave_1 added [ 1570.975970][T19876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.983502][T19876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.012694][T19876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.025302][T19862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.035487][T19862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.066421][T19862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.083287][T19874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.090257][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.123700][T19874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.192496][T19876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.201377][T19876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.299556][T19876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.374910][T19862] hsr_slave_0: entered promiscuous mode [ 1571.392824][T19862] hsr_slave_1: entered promiscuous mode [ 1571.410080][T19862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1571.431196][T19862] Cannot create hsr debugfs directory [ 1571.437922][T19875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.456167][T19875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.496466][T19875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.513935][T19872] hsr_slave_0: entered promiscuous mode [ 1571.520576][T19872] hsr_slave_1: entered promiscuous mode [ 1571.527385][T19872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1571.535259][T19872] Cannot create hsr debugfs directory [ 1571.570301][T19875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.582477][T19875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.616915][T19875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.651756][T19880] Bluetooth: hci1: command tx timeout [ 1571.657293][T19883] Bluetooth: hci4: command tx timeout [ 1571.695772][T19874] hsr_slave_0: entered promiscuous mode [ 1571.703631][T19874] hsr_slave_1: entered promiscuous mode [ 1571.709696][T19874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1571.717803][T19874] Cannot create hsr debugfs directory [ 1571.727992][T19876] hsr_slave_0: entered promiscuous mode [ 1571.738078][T19876] hsr_slave_1: entered promiscuous mode [ 1571.742389][T19883] Bluetooth: hci7: command tx timeout [ 1571.749583][T19876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1571.749793][T19883] Bluetooth: hci6: command tx timeout [ 1571.757773][T19876] Cannot create hsr debugfs directory [ 1571.905677][T17391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.111034][T17391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.131722][T19883] Bluetooth: hci2: command tx timeout [ 1572.184295][T17391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.227123][T19875] hsr_slave_0: entered promiscuous mode [ 1572.247867][T19875] hsr_slave_1: entered promiscuous mode [ 1572.281109][T19875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1572.301680][T19875] Cannot create hsr debugfs directory [ 1572.436816][T17391] bond0: (slave netdevsim0): Releasing backup interface [ 1572.456136][T17391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.077593][T17391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.238226][T17391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.256681][T19872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1573.420579][T19872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1573.439480][T19872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1573.489458][T17391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.517342][T19872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1573.606683][T17391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.685860][T19872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.731936][T19883] Bluetooth: hci4: command tx timeout [ 1573.737394][T19883] Bluetooth: hci1: command tx timeout [ 1573.822067][T19883] Bluetooth: hci6: command tx timeout [ 1573.827540][T19883] Bluetooth: hci7: command tx timeout [ 1573.926683][T19872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.010853][T17391] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.056088][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.063267][ T7572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.118540][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.125928][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.179736][T17391] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.324034][T17391] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.443765][T17391] bond0: (slave netdevsim0): Releasing backup interface [ 1574.460937][T17391] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.566000][T19872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.746402][T19872] veth0_vlan: entered promiscuous mode [ 1575.006729][T17391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.037243][T19872] veth1_vlan: entered promiscuous mode [ 1575.088895][T17391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.131267][T19872] veth0_macvtap: entered promiscuous mode [ 1575.158864][T19872] veth1_macvtap: entered promiscuous mode [ 1575.203505][T17391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.230500][T19872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.242465][T19872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.255415][T19872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.267222][T19872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.279146][T19872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.290431][T19872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.300995][T19872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.312865][T19872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.324908][T19872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.349088][T19872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.360457][T19872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.381956][T19872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.393004][T19872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.403628][T19872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.415280][T19872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.425888][T19872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.437036][T19872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.448476][T19872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.491261][T17391] bond0: (slave netdevsim0): Releasing backup interface [ 1575.514331][T17391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.634962][T19872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.644628][T19872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.664426][T19872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.674093][T19872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.173719][T17391] bridge_slave_1: left allmulticast mode [ 1576.179426][T17391] bridge_slave_1: left promiscuous mode [ 1576.198956][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.208305][T17391] bridge_slave_0: left allmulticast mode [ 1576.214691][T17391] bridge_slave_0: left promiscuous mode [ 1576.220797][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.238956][T17391] bridge_slave_1: left allmulticast mode [ 1576.245247][T17391] bridge_slave_1: left promiscuous mode [ 1576.250984][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.266609][T17391] bridge_slave_0: left allmulticast mode [ 1576.272509][T17391] bridge_slave_0: left promiscuous mode [ 1576.278519][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.296564][T17391] bridge_slave_1: left allmulticast mode [ 1576.311729][T17391] bridge_slave_1: left promiscuous mode [ 1576.317473][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.339891][T17391] bridge_slave_0: left allmulticast mode [ 1576.351750][T17391] bridge_slave_0: left promiscuous mode [ 1576.357492][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.381062][T17391] bridge_slave_1: left allmulticast mode [ 1576.391784][T17391] bridge_slave_1: left promiscuous mode [ 1576.398200][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.418249][T17391] bridge_slave_0: left allmulticast mode [ 1576.424715][T17391] bridge_slave_0: left promiscuous mode [ 1576.430431][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.640460][T17391] bond0: left allmulticast mode [ 1576.651338][T17391] bond_slave_0: left allmulticast mode [ 1576.670393][T17391] bond_slave_1: left allmulticast mode [ 1576.678547][T17391] bond0: left promiscuous mode [ 1576.692583][T17391] bond_slave_0: left promiscuous mode [ 1576.698206][T17391] bond_slave_1: left promiscuous mode [ 1577.497231][T17391] gretap0 (unregistering): left promiscuous mode [ 1577.567036][T17391] gretap0 (unregistering): left promiscuous mode [ 1578.459964][T17391] team0: Port device bond0 removed [ 1578.468802][T17391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.482834][T17391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.494132][T17391] bond0 (unregistering): Released all slaves [ 1578.849677][T17391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.874449][T17391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.886172][T17391] bond0 (unregistering): Released all slaves [ 1579.208452][T17391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.225855][T17391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.238875][T17391] bond0 (unregistering): Released all slaves [ 1579.508623][T17391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.520810][T17391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.532256][T17391] bond0 (unregistering): Released all slaves [ 1579.547372][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.555338][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.762050][T17391] tipc: Disabling bearer [ 1579.784012][T11198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.784466][T17391] tipc: Left network mode [ 1579.795036][T11198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.852353][T17391] tipc: Disabling bearer [ 1579.883414][T17391] tipc: Left network mode [ 1579.975661][T17391] tipc: Left network mode [ 1580.382132][T20290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2552'. [ 1581.289093][T19876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1581.310934][T19876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1581.378587][T19876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1581.449560][T19876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1581.985378][T19862] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1582.014735][T19862] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1582.173998][T19874] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1582.195290][T19874] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1582.270931][T19874] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1582.280750][T19862] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1582.303825][T19862] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1582.646060][T19874] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1583.447191][T20326] Sensor A: ================= START STATUS ================= [ 1583.455485][T20326] Sensor A: Test Pattern: 75% Colorbar [ 1583.462032][T20326] Sensor A: Show Information: All [ 1583.468210][T20326] Sensor A: Vertical Flip: false [ 1583.473792][T20326] Sensor A: Horizontal Flip: false [ 1583.479435][T20326] Sensor A: Brightness: 128 [ 1583.484620][T20326] Sensor A: Contrast: 128 [ 1583.489675][T20326] Sensor A: Hue: 0 [ 1583.496218][T20326] Sensor A: Saturation: 128 [ 1583.501137][T20326] Sensor A: ================== END STATUS ================== [ 1583.647179][T19875] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1583.716358][T19875] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1583.750316][T17391] batadv_slave_1: left promiscuous mode [ 1583.798822][T17391] hsr_slave_0: left promiscuous mode [ 1583.812947][T17391] hsr_slave_1: left promiscuous mode [ 1583.825133][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.833437][T17391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.842506][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1583.849958][T17391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1583.871722][T17391] hsr_slave_0: left promiscuous mode [ 1583.899762][T17391] hsr_slave_1: left promiscuous mode [ 1583.911264][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.921378][T17391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.935664][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1583.944118][T17391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.119463][T17391] hsr_slave_0: left promiscuous mode [ 1584.130921][T17391] hsr_slave_1: left promiscuous mode [ 1584.151117][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1584.153401][T20330] Sensor A: ================= START STATUS ================= [ 1584.158974][T17391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.174068][T20330] Sensor A: Test Pattern: 75% Colorbar [ 1584.181207][T20330] Sensor A: Show Information: All [ 1584.182444][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1584.194899][T20330] Sensor A: Vertical Flip: false [ 1584.195807][T17391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.224224][T20330] Sensor A: Horizontal Flip: false [ 1584.231290][T20330] Sensor A: Brightness: 128 [ 1584.240244][T20330] Sensor A: Contrast: 128 [ 1584.246979][T20330] Sensor A: Hue: 0 [ 1584.252681][T20330] Sensor A: Saturation: 128 [ 1584.260497][T20330] Sensor A: ================== END STATUS ================== [ 1584.362729][T17391] batadv_slave_1: left promiscuous mode [ 1584.519245][T17391] hsr_slave_0: left promiscuous mode [ 1584.548794][T17391] hsr_slave_1: left promiscuous mode [ 1584.557944][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1584.566122][T17391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.574284][T17391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1584.582096][T17391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.689515][T17391] veth1_macvtap: left promiscuous mode [ 1584.696158][T17391] veth0_macvtap: left promiscuous mode [ 1584.702132][T17391] veth1_vlan: left promiscuous mode [ 1584.707582][T17391] veth0_vlan: left promiscuous mode [ 1584.716267][T17391] veth1_macvtap: left promiscuous mode [ 1584.722003][T17391] veth0_macvtap: left promiscuous mode [ 1584.727647][T17391] veth1_vlan: left promiscuous mode [ 1584.733828][T17391] veth0_vlan: left promiscuous mode [ 1584.740683][T17391] veth1_macvtap: left promiscuous mode [ 1584.746620][T17391] veth0_macvtap: left promiscuous mode [ 1584.752891][T17391] veth1_vlan: left promiscuous mode [ 1584.758353][T17391] veth0_vlan: left promiscuous mode [ 1584.765289][T17391] veth1_macvtap: left promiscuous mode [ 1584.770941][T17391] veth0_macvtap: left promiscuous mode [ 1584.788859][T17391] veth1_vlan: left promiscuous mode [ 1584.798292][T17391] veth0_vlan: left promiscuous mode [ 1587.272198][T17391] team0 (unregistering): Port device team_slave_1 removed [ 1587.361147][T20348] netlink: 'syz.1.2562': attribute type 10 has an invalid length. [ 1587.380590][T17391] team0 (unregistering): Port device team_slave_0 removed [ 1588.397021][T17391] team0 (unregistering): Port device team_slave_1 removed [ 1588.449185][T17391] team0 (unregistering): Port device team_slave_0 removed [ 1589.436996][T17391] team0 (unregistering): Port device team_slave_1 removed [ 1589.486099][T17391] team0 (unregistering): Port device team_slave_0 removed [ 1590.449871][T17391] team0 (unregistering): Port device team_slave_1 removed [ 1590.500390][T17391] team0 (unregistering): Port device team_slave_0 removed [ 1591.000419][T19876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.007781][T19875] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1591.019844][T19875] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1591.053692][T20348] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1591.069781][T19862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.184751][T19876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.209100][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.216269][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.250514][T19862] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.365807][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.372983][ T8689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.381733][T16585] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1591.383649][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.396463][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.436446][T19874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.456372][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.463503][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.540994][T19874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.573251][T16585] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.594033][T16585] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1591.610469][T16585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.627141][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.634358][ T8689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.675500][T16585] usb 2-1: config 0 descriptor?? [ 1591.687376][T16585] pwc: Askey VC010 type 2 USB webcam detected. [ 1591.703483][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.710646][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.765432][T19875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.058752][T19875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.091920][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.099055][ T8689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1592.121947][T16585] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1592.146348][T16585] pwc: recv_control_msg error -32 req 02 val 2700 [ 1592.161222][T16585] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1592.194344][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.201568][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1592.219373][T16585] pwc: recv_control_msg error -32 req 04 val 1000 [ 1592.233480][T16585] pwc: recv_control_msg error -32 req 04 val 1300 [ 1592.256075][T16585] pwc: recv_control_msg error -32 req 04 val 1400 [ 1592.280439][T16585] pwc: recv_control_msg error -32 req 02 val 2000 [ 1592.299220][T16585] pwc: recv_control_msg error -32 req 02 val 2100 [ 1592.307853][T16585] pwc: recv_control_msg error -32 req 04 val 1500 [ 1592.394556][T16585] pwc: recv_control_msg error -32 req 02 val 2500 [ 1592.422405][T16585] pwc: recv_control_msg error -32 req 02 val 2400 [ 1592.473545][T16585] pwc: recv_control_msg error -32 req 02 val 2600 [ 1592.501183][T16585] pwc: recv_control_msg error -32 req 02 val 2900 [ 1592.520035][T19862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.630978][T19876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.729291][T16585] pwc: recv_control_msg error -71 req 04 val 1100 [ 1592.757038][T16585] pwc: recv_control_msg error -71 req 04 val 1200 [ 1592.812665][T16585] pwc: Registered as video103. [ 1592.818711][T16585] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 1592.849913][T19874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.884464][T16585] usb 2-1: USB disconnect, device number 24 [ 1593.018781][T19875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.165688][T17391] IPVS: stop unused estimator thread 0... [ 1593.198492][T17391] IPVS: stop unused estimator thread 0... [ 1593.258217][T17391] IPVS: stop unused estimator thread 0... [ 1593.489081][T19862] veth0_vlan: entered promiscuous mode [ 1593.564349][T19862] veth1_vlan: entered promiscuous mode [ 1593.654131][T19876] veth0_vlan: entered promiscuous mode [ 1593.685832][T19876] veth1_vlan: entered promiscuous mode [ 1593.727454][T19862] veth0_macvtap: entered promiscuous mode [ 1593.784072][T19862] veth1_macvtap: entered promiscuous mode [ 1593.875198][T19874] veth0_vlan: entered promiscuous mode [ 1594.165830][T19874] veth1_vlan: entered promiscuous mode [ 1594.282430][T19876] veth0_macvtap: entered promiscuous mode [ 1594.381857][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1594.740234][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.762294][T19862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1594.839503][T19876] veth1_macvtap: entered promiscuous mode [ 1594.884191][T19874] veth0_macvtap: entered promiscuous mode [ 1594.898501][T19874] veth1_macvtap: entered promiscuous mode [ 1594.924049][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.955756][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.987070][T19862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1595.006315][T19875] veth0_vlan: entered promiscuous mode [ 1595.064553][T19875] veth1_vlan: entered promiscuous mode [ 1595.087073][T19862] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.103308][T19862] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.116905][T19862] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.131207][T19862] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.417668][T19876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1595.945845][T19876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1595.971818][T19876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1595.990403][T19876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.001681][T19876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1596.036557][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1596.047440][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.057824][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1596.068755][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.079092][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1596.089927][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.105343][T19874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1596.115784][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.126525][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.137007][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.148645][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.161594][T19874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.272317][T19875] veth0_macvtap: entered promiscuous mode [ 1596.281170][T19875] veth1_macvtap: entered promiscuous mode [ 1596.417280][T19876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.428020][T19876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.438544][T19876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.449138][T19876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.459400][T19876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.470472][T19876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.487273][T19876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.686001][T19874] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.757412][T19874] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.939616][T19874] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.085548][T19874] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.196524][T19876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.231704][T19876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.277768][T19876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.298515][T19876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.384800][T19875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.440249][T19875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.467747][T19875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.497366][T19875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.550949][T19875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.562335][T19875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.572997][T19875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.583499][T19875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.594774][T19875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1598.312422][T19875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.363281][T19875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.383011][T19875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.396044][T19875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.419610][T19875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.430340][T19875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.440600][T19875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.451464][T19875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.474191][T19875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1598.538743][T17391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.566721][T17391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.708654][T19875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.725444][T19875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.983210][T19875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.170173][T19875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.727028][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.748482][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.785470][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.804139][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.824232][T20491] netlink: 'syz.1.2569': attribute type 10 has an invalid length. [ 1599.870749][T17391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.885992][T17391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.919646][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.969222][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.525922][T17391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.616572][T17391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.709272][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.714473][T17391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.738155][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.760504][T17391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.989940][T15400] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1601.406852][T15400] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1601.608733][T15400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.771568][T15400] usb 2-1: Product: syz [ 1601.791685][T15400] usb 2-1: Manufacturer: syz [ 1601.797064][T15400] usb 2-1: SerialNumber: syz [ 1602.180495][T20524] fuse: Bad value for 'fd' [ 1603.532549][T15400] usb 2-1: config 0 descriptor?? [ 1603.563262][T15400] usb 2-1: can't set config #0, error -71 [ 1603.614304][T15400] usb 2-1: USB disconnect, device number 25 [ 1603.624719][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cb8fc00: rx timeout, send abort [ 1604.133035][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cb8fc00: abort rx timeout. Force session deactivation [ 1607.103295][T20553] overlayfs: failed to resolve './file0': -2 [ 1607.796761][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.803146][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.672464][T20558] netlink: 'syz.9.2578': attribute type 10 has an invalid length. [ 1609.722368][T20558] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1611.102759][T20587] fuse: Bad value for 'fd' [ 1611.856253][T20576] overlayfs: missing 'lowerdir' [ 1611.932127][T20589] overlayfs: conflicting lowerdir path [ 1613.167860][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f728400: rx timeout, send abort [ 1613.176227][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f72a000: rx timeout, send abort [ 1613.191628][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f728400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1613.206067][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f72a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1614.059032][T20596] fuse: Bad value for 'fd' [ 1614.667095][T20605] 9pnet_virtio: no channels available for device syz [ 1620.089770][T20626] netlink: 'syz.6.2595': attribute type 10 has an invalid length. [ 1620.180506][T20639] fuse: Bad value for 'fd' [ 1622.492013][T20626] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1622.522223][ T5900] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1622.693217][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033364400: rx timeout, send abort [ 1622.701611][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033367400: rx timeout, send abort [ 1622.711248][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033364400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1622.725653][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033367400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1623.429446][ T5900] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1623.438756][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.511653][ T5900] usb 8-1: Product: syz [ 1623.515877][ T5900] usb 8-1: Manufacturer: syz [ 1623.571718][ T5900] usb 8-1: SerialNumber: syz [ 1623.609760][ T5900] usb 8-1: config 0 descriptor?? [ 1625.538931][ T5900] usb 8-1: Firmware version (0.0) predates our first public release. [ 1625.548382][ T5900] usb 8-1: Please update to version 0.2 or newer [ 1626.204782][ T5900] usb 8-1: USB disconnect, device number 51 [ 1627.786118][T19883] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1627.799489][T19883] CPU: 0 UID: 0 PID: 19883 Comm: kworker/u9:7 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 1627.810476][T19883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1627.820560][T19883] Workqueue: hci4 hci_rx_work [ 1627.825287][T19883] Call Trace: [ 1627.828590][T19883] [ 1627.831537][T19883] dump_stack_lvl+0x241/0x360 [ 1627.836247][T19883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1627.841476][T19883] ? __pfx__printk+0x10/0x10 [ 1627.846188][T19883] ? __kmalloc_cache_noprof+0x243/0x390 [ 1627.851757][T19883] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 1627.857077][T19883] sysfs_create_dir_ns+0x2ce/0x3a0 [ 1627.862220][T19883] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1627.867889][T19883] kobject_add_internal+0x435/0x8d0 [ 1627.873126][T19883] kobject_add+0x152/0x220 [ 1627.877582][T19883] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1627.882808][T19883] ? device_add+0x3e7/0xbf0 [ 1627.887335][T19883] ? __pfx_kobject_add+0x10/0x10 [ 1627.892301][T19883] ? _raw_spin_unlock+0x28/0x50 [ 1627.897182][T19883] ? get_device_parent+0x165/0x410 [ 1627.902321][T19883] device_add+0x4e5/0xbf0 [ 1627.906680][T19883] hci_conn_add_sysfs+0xe8/0x200 [ 1627.911650][T19883] le_conn_complete_evt+0xc9f/0x12e0 [ 1627.916976][T19883] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1627.922731][T19883] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1627.928400][T19883] ? __pfx___mutex_lock+0x10/0x10 [ 1627.933464][T19883] ? skb_pull_data+0x112/0x230 [ 1627.938261][T19883] hci_le_conn_complete_evt+0x18c/0x420 [ 1627.943836][T19883] hci_event_packet+0xa55/0x1540 [ 1627.948808][T19883] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1627.954117][T19883] ? __pfx_hci_event_packet+0x10/0x10 [ 1627.959517][T19883] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1627.964749][T19883] ? hci_send_to_monitor+0xd8/0x7f0 [ 1627.969976][T19883] ? kcov_remote_start+0x97/0x7d0 [ 1627.975039][T19883] hci_rx_work+0x3f3/0xdb0 [ 1627.979493][T19883] ? process_scheduled_works+0x976/0x1840 [ 1627.985247][T19883] process_scheduled_works+0xa66/0x1840 [ 1627.990854][T19883] ? __pfx_process_scheduled_works+0x10/0x10 [ 1627.996871][T19883] ? assign_work+0x364/0x3d0 [ 1628.001504][T19883] worker_thread+0x870/0xd30 [ 1628.006129][T19883] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1628.012053][T19883] ? __kthread_parkme+0x169/0x1d0 [ 1628.017107][T19883] ? __pfx_worker_thread+0x10/0x10 [ 1628.022252][T19883] kthread+0x2f0/0x390 [ 1628.026367][T19883] ? __pfx_worker_thread+0x10/0x10 [ 1628.031509][T19883] ? __pfx_kthread+0x10/0x10 [ 1628.036132][T19883] ret_from_fork+0x4b/0x80 [ 1628.040572][T19883] ? __pfx_kthread+0x10/0x10 [ 1628.045192][T19883] ret_from_fork_asm+0x1a/0x30 [ 1628.049999][T19883] [ 1628.085093][T19883] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1628.101548][T19883] Bluetooth: hci4: failed to register connection device [ 1628.281972][ T5820] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1628.850209][T20690] 9pnet_virtio: no channels available for device syz [ 1629.109007][T20691] netlink: 'syz.5.2607': attribute type 10 has an invalid length. [ 1629.141933][ T5820] usb 7-1: Using ep0 maxpacket: 16 [ 1629.340140][ T5820] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1629.387416][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1630.419004][ T5820] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1630.428215][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.437073][ T5820] usb 7-1: Product: syz [ 1630.441271][ T5820] usb 7-1: Manufacturer: syz [ 1630.448803][ T5820] usb 7-1: SerialNumber: syz [ 1631.033946][ T5820] usb 7-1: config 0 descriptor?? [ 1631.043597][ T5820] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1631.052911][ T5820] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1631.134164][T20700] 9pnet_virtio: no channels available for device syz [ 1631.362474][ T5820] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1631.372246][ T5820] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1631.407704][ T5820] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1631.473229][ T5820] em28xx 7-1:0.0: No AC97 audio processor [ 1631.779565][ T5820] usb 7-1: USB disconnect, device number 48 [ 1631.838047][ T5820] em28xx 7-1:0.0: Disconnecting em28xx [ 1632.168531][ T5820] em28xx 7-1:0.0: Freeing device [ 1633.717228][T20721] fuse: Bad value for 'fd' [ 1636.155042][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028116400: rx timeout, send abort [ 1636.163390][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028117400: rx timeout, send abort [ 1636.181592][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888028116400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1636.196011][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888028117400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1636.788728][T20727] 9pnet_virtio: no channels available for device syz [ 1636.914463][T20734] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1636.938554][T20734] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1734.542141][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1734.548557][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.561462][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1734.567935][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1742.651560][T19882] Bluetooth: hci1: command 0x0406 tx timeout [ 1742.657694][T19882] Bluetooth: hci4: command 0x0406 tx timeout [ 1742.692154][ T9702] Bluetooth: hci6: command 0x0406 tx timeout [ 1742.698972][ T9702] Bluetooth: hci2: command 0x0406 tx timeout [ 1755.261640][T19882] Bluetooth: hci7: command 0x0406 tx timeout [ 1757.595152][T20745] syz.7.2619 (20745): drop_caches: 2 [ 1758.168953][T19882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1758.202854][T19882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1758.281706][T19882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1758.619147][T19882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1758.742022][T19882] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1758.791699][T19882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1758.852873][T19884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1758.869369][T19860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1758.882005][T19860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1758.944047][T19881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1759.211678][T19884] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1759.278965][T19884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1759.323002][T19884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1759.495799][T19884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1759.511702][T19884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1759.570280][T19860] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1759.583594][T19860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1759.610526][T19860] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1759.635142][T19860] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1759.663815][T19882] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1759.678203][T19860] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1759.687588][T19860] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1759.705785][T19860] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1759.719448][T19860] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1759.732736][T19860] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1759.740264][T19860] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1759.757173][T19860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1759.764358][T19860] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1759.772685][T19860] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1759.779863][T19860] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1760.931796][T20766] Bluetooth: hci0: command tx timeout [ 1761.731816][T20766] Bluetooth: hci3: command tx timeout [ 1761.897243][T19860] Bluetooth: hci9: command tx timeout [ 1761.903161][T19881] Bluetooth: hci5: command tx timeout [ 1761.917977][T20766] Bluetooth: hci8: command tx timeout [ 1763.011809][T20766] Bluetooth: hci0: command tx timeout [ 1763.827143][T20766] Bluetooth: hci3: command tx timeout [ 1763.986664][T20766] Bluetooth: hci8: command tx timeout [ 1763.992245][T20766] Bluetooth: hci9: command tx timeout [ 1763.998449][T20766] Bluetooth: hci5: command tx timeout [ 1765.091855][ T8623] Bluetooth: hci0: command tx timeout [ 1765.891690][ T8623] Bluetooth: hci3: command tx timeout [ 1766.057119][ T8623] Bluetooth: hci5: command tx timeout [ 1766.062658][ T9702] Bluetooth: hci8: command tx timeout [ 1766.069397][T17366] Bluetooth: hci9: command tx timeout [ 1767.171742][T17366] Bluetooth: hci0: command tx timeout [ 1767.978213][T17366] Bluetooth: hci3: command tx timeout [ 1768.131958][ T8623] Bluetooth: hci5: command tx timeout [ 1768.137425][ T9702] Bluetooth: hci8: command tx timeout [ 1768.142988][T17366] Bluetooth: hci9: command tx timeout [ 1791.976712][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.991586][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.452027][ T30] INFO: task dhcpcd:5488 blocked for more than 140 seconds. [ 1796.460071][ T30] Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 1796.467854][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1796.512924][ T30] task:dhcpcd state:D stack:20248 pid:5488 tgid:5488 ppid:5487 flags:0x00000002 [ 1796.556766][ T30] Call Trace: [ 1796.568714][ T30] [ 1796.580226][ T30] __schedule+0x17fb/0x4be0 [ 1796.709302][ T30] ? __pfx___schedule+0x10/0x10 [ 1796.731620][ T30] ? __pfx_lock_release+0x10/0x10 [ 1796.736711][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1796.817189][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1796.828344][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1796.861537][ T30] ? schedule+0x90/0x320 [ 1796.899507][ T30] schedule+0x14b/0x320 [ 1796.921551][ T30] schedule_preempt_disabled+0x13/0x30 [ 1796.927070][ T30] __mutex_lock+0x7e7/0xee0 [ 1796.955818][ T30] ? __mutex_lock+0x5ef/0xee0 [ 1796.961003][ T30] ? devinet_ioctl+0x31a/0x1ac0 [ 1797.004625][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1797.009723][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 1797.022236][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1797.026977][ T30] devinet_ioctl+0x31a/0x1ac0 [ 1797.037853][ T30] ? _copy_from_user+0x99/0xc0 [ 1797.043050][ T30] ? get_user_ifreq+0x1bb/0x200 [ 1797.047943][ T30] inet_ioctl+0x3d7/0x4f0 [ 1797.060668][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 1797.066884][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 1797.080210][ T30] ? tomoyo_path_number_perm+0x206/0x860 [ 1797.087506][ T30] sock_do_ioctl+0x158/0x460 [ 1797.100535][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1797.107015][ T30] ? __pfx_lock_release+0x10/0x10 [ 1797.119464][ T30] ? __asan_memset+0x23/0x50 [ 1797.124555][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 1797.129719][ T30] sock_ioctl+0x626/0x8e0 [ 1797.140998][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1797.146390][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1797.158242][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1797.165865][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1797.170764][ T30] __se_sys_ioctl+0xf5/0x170 [ 1797.181613][ T30] do_syscall_64+0xf3/0x230 [ 1797.186750][ T30] ? clear_bhb_loop+0x35/0x90 [ 1797.191476][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.206863][ T30] RIP: 0033:0x7f1f1514dd49 [ 1797.211319][ T30] RSP: 002b:00007ffc94f5bf58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1797.227653][ T30] RAX: ffffffffffffffda RBX: 00007f1f1507f6c0 RCX: 00007f1f1514dd49 [ 1797.238915][ T30] RDX: 00007ffc94f6c148 RSI: 0000000000008914 RDI: 000000000000000e [ 1797.252936][ T30] RBP: 00007ffc94f7c308 R08: 00007ffc94f6c108 R09: 00007ffc94f6c0b8 [ 1797.260955][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1797.273988][ T30] R13: 00007ffc94f6c148 R14: 0000000000000028 R15: 0000000000008914 [ 1797.288299][ T30] [ 1797.291469][ T30] INFO: task syz.5.2607:20686 blocked for more than 141 seconds. [ 1797.305569][ T30] Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 1797.319423][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1797.339420][ T30] task:syz.5.2607 state:D stack:27136 pid:20686 tgid:20685 ppid:19875 flags:0x00000004 [ 1797.354543][ T30] Call Trace: [ 1797.357861][ T30] [ 1797.360813][ T30] __schedule+0x17fb/0x4be0 [ 1797.370174][ T30] ? __pfx___schedule+0x10/0x10 [ 1797.378765][ T30] ? __pfx_lock_release+0x10/0x10 [ 1797.387468][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1797.397503][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1797.407619][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1797.419536][ T30] ? schedule+0x90/0x320 [ 1797.424993][ T30] schedule+0x14b/0x320 [ 1797.429212][ T30] schedule_preempt_disabled+0x13/0x30 [ 1797.444344][ T30] __mutex_lock+0x7e7/0xee0 [ 1797.448906][ T30] ? __mutex_lock+0x5ef/0xee0 [ 1797.457569][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1797.468039][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1797.475727][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1797.486645][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1797.496152][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1797.506490][ T30] ? ref_tracker_free+0x643/0x7e0 [ 1797.514176][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1797.518991][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1797.528326][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1797.536702][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1797.548019][ T30] netlink_unicast+0x7f6/0x990 [ 1797.556456][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1797.566568][ T30] ? __virt_addr_valid+0x45f/0x530 [ 1797.581635][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 1797.586713][ T30] ? __check_object_size+0x47a/0x730 [ 1797.600406][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1797.605515][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.610854][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.623138][ T30] __sock_sendmsg+0x221/0x270 [ 1797.627878][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 1797.638157][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1797.643783][ T30] ? __fget_files+0x2a/0x410 [ 1797.648412][ T30] ? __fget_files+0x2a/0x410 [ 1797.661555][ T30] __sys_sendmsg+0x269/0x350 [ 1797.666196][ T30] ? __pfx_futex_wake+0x10/0x10 [ 1797.671086][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1797.687491][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1797.699344][ T30] ? do_syscall_64+0x100/0x230 [ 1797.706731][ T30] ? do_syscall_64+0xb6/0x230 [ 1797.711460][ T30] do_syscall_64+0xf3/0x230 [ 1797.720902][ T30] ? clear_bhb_loop+0x35/0x90 [ 1797.727032][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.738908][ T30] RIP: 0033:0x7f4d84b85d19 [ 1797.744797][ T30] RSP: 002b:00007f4d85992038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1797.758136][ T30] RAX: ffffffffffffffda RBX: 00007f4d84d75fa0 RCX: 00007f4d84b85d19 [ 1797.771221][ T30] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 1797.785200][ T30] RBP: 00007f4d84c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 1797.800338][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1797.812038][ T30] R13: 0000000000000000 R14: 00007f4d84d75fa0 R15: 00007ffd7a0764b8 [ 1797.820086][ T30] [ 1797.829068][ T30] INFO: task syz.5.2607:20691 blocked for more than 141 seconds. [ 1797.838269][ T30] Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 1797.853312][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1797.865679][ T30] task:syz.5.2607 state:D stack:24912 pid:20691 tgid:20685 ppid:19875 flags:0x00004006 [ 1797.881543][ T30] Call Trace: [ 1797.884976][ T30] [ 1797.887961][ T30] __schedule+0x17fb/0x4be0 [ 1797.901129][ T30] ? __pfx___schedule+0x10/0x10 [ 1797.909226][ T30] ? __pfx_lock_release+0x10/0x10 [ 1797.920695][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1797.927078][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1797.940124][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1797.946859][ T30] ? schedule+0x90/0x320 [ 1797.951143][ T30] schedule+0x14b/0x320 [ 1797.961324][ T30] schedule_preempt_disabled+0x13/0x30 [ 1797.968260][ T30] __mutex_lock+0x7e7/0xee0 [ 1797.978727][ T30] ? __mutex_lock+0x5ef/0xee0 [ 1797.983651][ T30] ? rtnl_newlink+0xbcb/0x2150 [ 1797.988457][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1798.005345][ T30] ? cap_capable+0x1b4/0x250 [ 1798.010012][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 1798.026316][ T30] ? ns_capable+0x8a/0xf0 [ 1798.030723][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 1798.036992][ T30] rtnl_newlink+0xbcb/0x2150 [ 1798.047592][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1798.054114][ T30] ? __netlink_deliver_tap+0x56b/0x7f0 [ 1798.059615][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1798.071012][ T30] ? __sock_sendmsg+0x221/0x270 [ 1798.077382][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 1798.088182][ T30] ? __sys_sendmsg+0x269/0x350 [ 1798.094513][ T30] ? do_syscall_64+0xf3/0x230 [ 1798.099237][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.111702][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1798.117744][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1798.134116][ T30] ? mark_lock+0x9a/0x360 [ 1798.138511][ T30] ? __lock_acquire+0x1397/0x2100 [ 1798.149572][ T30] ? __pfx_lock_release+0x10/0x10 [ 1798.154933][ T30] ? cap_capable+0x1b4/0x250 [ 1798.159561][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 1798.171749][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1798.176835][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 1798.188779][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1798.194284][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1798.200935][ T30] ? ref_tracker_free+0x643/0x7e0 [ 1798.214742][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1798.219567][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1798.233769][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1798.239144][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1798.252454][ T30] netlink_unicast+0x7f6/0x990 [ 1798.257290][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1798.268900][ T30] ? __virt_addr_valid+0x45f/0x530 [ 1798.275679][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 1798.280762][ T30] ? __check_object_size+0x47a/0x730 [ 1798.291535][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1798.296365][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1798.309699][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1798.316031][ T30] __sock_sendmsg+0x221/0x270 [ 1798.320759][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 1798.333038][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1798.338378][ T30] ? __fget_files+0x2a/0x410 [ 1798.351217][ T30] ? __fget_files+0x2a/0x410 [ 1798.356150][ T30] __sys_sendmsg+0x269/0x350 [ 1798.360786][ T30] ? __pfx_futex_wake+0x10/0x10 [ 1798.371529][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1798.376727][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1798.389495][ T30] ? do_syscall_64+0x100/0x230 [ 1798.394636][ T30] ? do_syscall_64+0xb6/0x230 [ 1798.399364][ T30] do_syscall_64+0xf3/0x230 [ 1798.411528][ T30] ? clear_bhb_loop+0x35/0x90 [ 1798.416262][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.429673][ T30] RIP: 0033:0x7f4d84b85d19 [ 1798.437368][ T30] RSP: 002b:00007f4d85971038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.453381][ T30] RAX: ffffffffffffffda RBX: 00007f4d84d76080 RCX: 00007f4d84b85d19 [ 1798.461420][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 1798.478954][ T30] RBP: 00007f4d84c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 1798.489545][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1798.501251][ T30] R13: 0000000000000000 R14: 00007f4d84d76080 R15: 00007ffd7a0764b8 [ 1798.514885][ T30] [ 1798.518025][ T30] [ 1798.518025][ T30] Showing all locks held in the system: [ 1798.530897][ T30] 2 locks held by ksoftirqd/0/16: [ 1798.537633][ T30] 1 lock held by khungtaskd/30: [ 1798.551616][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1798.569064][ T30] 1 lock held by dhcpcd/5488: [ 1798.574041][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x31a/0x1ac0 [ 1798.589125][ T30] 2 locks held by getty/5575: [ 1798.595310][ T30] #0: ffff888035a2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1798.611744][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1798.634576][ T30] 3 locks held by kworker/0:3/5820: [ 1798.639830][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1798.661533][ T30] #1: ffffc90003ae7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1798.682858][ T30] #2: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x99/0xfb0 [ 1798.698580][ T30] 8 locks held by kworker/0:7/5900: [ 1798.704901][ T30] 3 locks held by kworker/u8:12/7572: [ 1798.717342][ T30] #0: ffff88814cd87948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1798.730025][ T30] #1: ffffc90004d3fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1798.750962][ T30] #2: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1798.760901][ T30] 4 locks held by kworker/0:0/8448: [ 1798.771530][ T30] 3 locks held by kworker/u8:17/17391: [ 1798.777026][ T30] 1 lock held by syz-executor/19862: [ 1798.792732][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1798.808845][ T30] 1 lock held by syz-executor/19872: [ 1798.815643][ T30] #0: ffff88801baec148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x7a/0x160 [ 1798.833125][ T30] 1 lock held by syz-executor/19876: [ 1798.838596][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1798.852827][ T30] 1 lock held by syz.5.2607/20686: [ 1798.857974][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1798.878494][ T30] 1 lock held by syz.5.2607/20691: [ 1798.887284][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xbcb/0x2150 [ 1798.905216][ T30] 1 lock held by syz.7.2619/20745: [ 1798.910363][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1798.924115][ T30] 1 lock held by syz-executor/20752: [ 1798.929459][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 1798.944118][ T30] 1 lock held by syz-executor/20757: [ 1798.949440][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 1798.966440][ T30] 1 lock held by syz-executor/20760: [ 1798.974529][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 1798.990476][ T30] 1 lock held by syz-executor/20762: [ 1799.000947][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 1799.017484][ T30] 1 lock held by syz-executor/20764: [ 1799.027223][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 1799.040462][ T30] 1 lock held by udevd/20771: [ 1799.048929][ T30] #0: ffff88801baec148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xd4/0x560 [ 1799.063195][ T30] [ 1799.065555][ T30] ============================================= [ 1799.065555][ T30] [ 1799.078987][ T30] NMI backtrace for cpu 1 [ 1799.083358][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 1799.093885][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1799.103964][ T30] Call Trace: [ 1799.107260][ T30] [ 1799.110211][ T30] dump_stack_lvl+0x241/0x360 [ 1799.114918][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1799.120143][ T30] ? __pfx__printk+0x10/0x10 [ 1799.124790][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1799.129760][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1799.135243][ T30] ? _printk+0xd5/0x120 [ 1799.139420][ T30] ? __pfx__printk+0x10/0x10 [ 1799.144038][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1799.148916][ T30] ? __pfx__printk+0x10/0x10 [ 1799.153531][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1799.158575][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1799.164581][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1799.170585][ T30] watchdog+0xff6/0x1040 [ 1799.174850][ T30] ? watchdog+0x1ea/0x1040 [ 1799.179377][ T30] ? __pfx_watchdog+0x10/0x10 [ 1799.184072][ T30] kthread+0x2f0/0x390 [ 1799.188166][ T30] ? __pfx_watchdog+0x10/0x10 [ 1799.192864][ T30] ? __pfx_kthread+0x10/0x10 [ 1799.197473][ T30] ret_from_fork+0x4b/0x80 [ 1799.201903][ T30] ? __pfx_kthread+0x10/0x10 [ 1799.206513][ T30] ret_from_fork_asm+0x1a/0x30 [ 1799.211315][ T30] [ 1799.215158][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1799.221116][ C0] NMI backtrace for cpu 0 [ 1799.221130][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 1799.221150][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1799.221160][ C0] RIP: 0010:memset_orig+0x36/0xb0 [ 1799.221187][ C0] Code: b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 70 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 48 89 07 <48> 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 [ 1799.221201][ C0] RSP: 0018:ffffc90000156dd8 EFLAGS: 00000202 [ 1799.221217][ C0] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 0000000000000002 [ 1799.221228][ C0] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: ffff88803705cdc0 [ 1799.221240][ C0] RBP: ffffc90000156eb0 R08: ffff88803705ce87 R09: 0000000000000000 [ 1799.221252][ C0] R10: ffff88803705cdc0 R11: ffffed1006e0b9d1 R12: 0000000000000000 [ 1799.221263][ C0] R13: dffffc0000000000 R14: ffff88803705cdc0 R15: ffff888083a72000 [ 1799.221276][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1799.221290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1799.221303][ C0] CR2: 00007ffd94326f00 CR3: 000000000e736000 CR4: 00000000003526f0 [ 1799.221318][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1799.221328][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1799.221339][ C0] Call Trace: [ 1799.221346][ C0] [ 1799.221353][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1799.221371][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1799.221391][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1799.221408][ C0] ? nmi_handle+0x2a/0x5a0 [ 1799.221432][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1799.221453][ C0] ? nmi_handle+0x14f/0x5a0 [ 1799.221470][ C0] ? nmi_handle+0x2a/0x5a0 [ 1799.221491][ C0] ? memset_orig+0x36/0xb0 [ 1799.221510][ C0] ? default_do_nmi+0x63/0x160 [ 1799.221527][ C0] ? exc_nmi+0x123/0x1f0 [ 1799.221544][ C0] ? end_repeat_nmi+0xf/0x53 [ 1799.221572][ C0] ? memset_orig+0x36/0xb0 [ 1799.221594][ C0] ? memset_orig+0x36/0xb0 [ 1799.221617][ C0] ? memset_orig+0x36/0xb0 [ 1799.221639][ C0] [ 1799.221645][ C0] [ 1799.221651][ C0] __alloc_skb+0x232/0x440 [ 1799.221671][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1799.221693][ C0] synproxy_send_client_synack_ipv6+0x1b4/0xcc0 [ 1799.221724][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 1799.221750][ C0] ? synproxy_pernet+0x45/0x270 [ 1799.221770][ C0] nft_synproxy_do_eval+0x739/0xa60 [ 1799.221790][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1799.221806][ C0] ? __queue_work+0x199/0xf50 [ 1799.221823][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1799.221841][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1799.221862][ C0] nft_do_chain+0x4ad/0x1da0 [ 1799.221881][ C0] ? nf_nat_inet_fn+0xa30/0xd10 [ 1799.221907][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1799.221933][ C0] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 1799.221953][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1799.221973][ C0] nft_do_chain_inet+0x418/0x6b0 [ 1799.221991][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1799.222005][ C0] ? nf_nat_ipv6_local_in+0x1cd/0x620 [ 1799.222026][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 1799.222044][ C0] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 1799.222065][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1799.222080][ C0] nf_hook_slow+0xc3/0x220 [ 1799.222101][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1799.222118][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1799.222136][ C0] NF_HOOK+0x29e/0x450 [ 1799.222155][ C0] ? NF_HOOK+0x9a/0x450 [ 1799.222170][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1799.222189][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1799.222207][ C0] ? ip6_rcv_finish_core+0x1fb/0x410 [ 1799.222227][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1799.222244][ C0] NF_HOOK+0x3a4/0x450 [ 1799.222260][ C0] ? skb_orphan+0xae/0xd0 [ 1799.222278][ C0] ? NF_HOOK+0x9a/0x450 [ 1799.222295][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1799.222313][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1799.222333][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1799.222350][ C0] __netif_receive_skb+0x1ea/0x650 [ 1799.222370][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1799.222387][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 1799.222404][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1799.222421][ C0] ? __pfx_lock_release+0x10/0x10 [ 1799.222438][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1799.222463][ C0] process_backlog+0x662/0x15b0 [ 1799.222485][ C0] ? process_backlog+0x33b/0x15b0 [ 1799.222507][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1799.222526][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1799.222544][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1799.222563][ C0] __napi_poll+0xcb/0x490 [ 1799.222583][ C0] net_rx_action+0x89b/0x1240 [ 1799.222612][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1799.222633][ C0] ? rcu_qs+0xf1/0x190 [ 1799.222658][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1799.222679][ C0] handle_softirqs+0x2d4/0x9b0 [ 1799.222704][ C0] ? run_ksoftirqd+0xca/0x130 [ 1799.222721][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1799.222745][ C0] run_ksoftirqd+0xca/0x130 [ 1799.222759][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1799.222774][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 1799.222791][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 1799.222806][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 1799.222826][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 1799.222847][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 1799.222868][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1799.222882][ C0] smpboot_thread_fn+0x544/0xa30 [ 1799.222908][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 1799.222933][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1799.222954][ C0] kthread+0x2f0/0x390 [ 1799.222971][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1799.222991][ C0] ? __pfx_kthread+0x10/0x10 [ 1799.223009][ C0] ret_from_fork+0x4b/0x80 [ 1799.223023][ C0] ? __pfx_kthread+0x10/0x10 [ 1799.223040][ C0] ret_from_fork_asm+0x1a/0x30 [ 1799.223068][ C0] [ 1799.859610][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1799.866511][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 1799.877038][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1799.887130][ T30] Call Trace: [ 1799.890427][ T30] [ 1799.893377][ T30] dump_stack_lvl+0x241/0x360 [ 1799.898085][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1799.903310][ T30] ? __pfx__printk+0x10/0x10 [ 1799.907919][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1799.913926][ T30] ? vscnprintf+0x5d/0x90 [ 1799.918280][ T30] panic+0x349/0x880 [ 1799.922199][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1799.928379][ T30] ? __pfx_panic+0x10/0x10 [ 1799.932816][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1799.938216][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1799.943784][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1799.949181][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1799.955359][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1799.961538][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1799.967723][ T30] watchdog+0x1035/0x1040 [ 1799.972079][ T30] ? watchdog+0x1ea/0x1040 [ 1799.976522][ T30] ? __pfx_watchdog+0x10/0x10 [ 1799.981224][ T30] kthread+0x2f0/0x390 [ 1799.985314][ T30] ? __pfx_watchdog+0x10/0x10 [ 1799.990026][ T30] ? __pfx_kthread+0x10/0x10 [ 1799.994653][ T30] ret_from_fork+0x4b/0x80 [ 1799.999100][ T30] ? __pfx_kthread+0x10/0x10 [ 1800.003715][ T30] ret_from_fork_asm+0x1a/0x30 [ 1800.008525][ T30] [ 1800.011916][ T30] Kernel Offset: disabled [ 1800.016266][ T30] Rebooting in 86400 seconds..