last executing test programs: 6m31.993799563s ago: executing program 32 (id=32): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) prlimit64(r0, 0xe, &(0x7f0000000000)={0x8, 0x102008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = semget(0x1, 0x0, 0x3c5) semctl$SETVAL(r1, 0x0, 0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000001e80), 0x0, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000700", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 5m10.034744874s ago: executing program 33 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0xfa16ea58c3ba32e1}) r1 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008600)={0x2020, 0x0, 0x0}, 0x204b) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) dup3(r5, r2, 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff000) fsmount(r1, 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000680)={0x1, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0x1}]}) 5m4.386230733s ago: executing program 34 (id=296): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_clone(0x30929800, &(0x7f0000000080)="d3c8ad1dac85c999761e70c8cf513ed413b406efa43a0148521ae664643474216126900e6b2c6912f9c4b92b88e55c75f66fe80fdc67fe4b045eb9f81ae2ca7d7ec23588db6f5fca7ab77ea967025dce59b9a9962342a4d198708e85fba8575055441e", 0x63, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)="945f17332d560208bd4ae667f691d8f9bee12cc531025029ed7233f5e61e105d4f75f4622297d22ca18c3cdd9e494ae8fc30e236f62ce741b3c94f47a1ed9c868af38d1dd855651ed68449d058b3ce0497c142") syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x60, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m49.784754455s ago: executing program 35 (id=335): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001100)="877d4d2d", 0x4}], 0x1}, 0x0) unshare(0x6060400) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/148, 0x94}], 0x1, 0xd0d, 0x0, 0x0) 4m49.729459576s ago: executing program 36 (id=334): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1, 0x3, 0x0, 0x8, 0x1, 0x200000000}, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) 4m47.149922559s ago: executing program 37 (id=340): clock_adjtime(0x0, &(0x7f0000000000)={0x7fff, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x29e9, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 3m54.890681946s ago: executing program 38 (id=453): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000015000103000000000000000005"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) r2 = syz_io_uring_setup(0xb62, &(0x7f00000000c0)={0x0, 0x5c6, 0x800, 0x1, 0x201}, &(0x7f0000000040)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x14, 0x4007, @fd, 0x6, &(0x7f0000000680)=[{0x0}, {0xfffffffffffffffd}], 0x2, 0x1, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3m50.989252055s ago: executing program 39 (id=463): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x6000, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x8, 0x7ffd}, {0x6, 0x3}], r1}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @local, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x1}}, {@llc={0x4, {@snap={0xab, 0xaa, "cc", "6c9f3a", 0x16, "6db01fd0a4a44587c59df38580546e8311a020b0747fa51de1767a2c548707f865f3d6f1d1ccf49a87e8e21b3362d070622530c7c17f41f56ab5a9858fea837cdec93b993de1e2f9a6da0fa353131f25"}}}}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac14142705"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2m38.734766725s ago: executing program 40 (id=663): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000800c678000000000000", @ANYRES32, @ANYBLOB="0000000000f8ffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$vim2m(&(0x7f0000001040), 0x40009, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7e, 0x0, 0x34324152, 0x6, 0x6, [{0x0, 0xf}, {0x6}, {}, {}, {}, {}, {0x0, 0x800}], 0xf, 0x0, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x3, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x4000)=nil, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x44084) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0xffe0}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 2m33.565550684s ago: executing program 41 (id=677): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42400, 0xe9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'geneve1\x00', 0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a5102, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x44887, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001a80)={0x0, &(0x7f00000002c0)}) r3 = socket$kcm(0x29, 0x2, 0x0) sendto(r1, &(0x7f0000000300)="eced01ae97daad1c2fc6dad0d186d8c39dee6100c2b4ba1db114573ee45542e94ef580633d76c0ce502002da8fc066f215e9ca7fa6737837c6a7eba6166ada67e5aca8ad2c1a8b54a2c52a9b0f16c272b12ad985c12f6f97a1e517bfd35c", 0x5e, 0xc0, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1\x00'}}, 0x80) sendmsg$kcm(r3, 0x0, 0x840) pivot_root(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) 2m29.719992906s ago: executing program 42 (id=690): getsockopt(0xffffffffffffffff, 0x1, 0xfffffffa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x5ce0}}, './file0\x00'}) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008045}, 0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000001c0), 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000140)=0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, 0x0) 2m29.709752859s ago: executing program 8 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2m29.437714958s ago: executing program 8 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f000001f9c0)={0x2, {0x8000, 0x200, 0x87, 0x8}}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000000c0)={0x1, 0x103, 0x0, {0x9, 0x0, 0x7, 0xfffffff9}}) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000001700)=""/259, 0x103}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 2m29.162456833s ago: executing program 8 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @private=0x3}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x78}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="000087dd0003110004"], 0x7a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x38}}, 0x0) 2m28.491251235s ago: executing program 8 (id=695): unshare(0x22020200) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5484}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) epoll_create1(0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x821c10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) 2m27.480469923s ago: executing program 8 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x14) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000240)={0xfff, 0x101, 0x1}) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x2f) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000240)={0x0, 0x40, 0x4, {0x2, @sliced={0x3d, [0x2, 0x1, 0xd, 0xff, 0x100, 0xd, 0xb71, 0x9, 0x1, 0x0, 0x17, 0x1, 0xffff, 0x5, 0xe, 0x1, 0x6d8, 0x2, 0x4, 0x9385, 0x6, 0x3ff, 0x8, 0xc, 0xcb, 0x4, 0x4aa9, 0x8, 0xb99b, 0x3, 0x5, 0x8, 0xfff8, 0xa2, 0x5, 0x7fff, 0xff, 0x6, 0x6, 0x7fff, 0x1, 0x6, 0xff2f, 0xae, 0x8, 0x10, 0x2], 0x9}}}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc0585609, &(0x7f00000004c0)=@multiplanar_fd={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "708657ab"}, 0x0, 0x4, {0x0}}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xfd, 0x0, @loopback}, 0x1c) 2m27.160682836s ago: executing program 8 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000040)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x200}, 0x9, 0x3, 0xe1, 0x2, 0x2, 'syz0\x00', "2b10855f423ab2a8f90dfd397c93c4d73b1d011e8000cf1b2c1d395e2561afab", "7464edc9bceab2e45c215a5ec17cd090f8eed6d9efc9072ac137e70b4b0401e5", [{0xffff, 0x1, {0x0, 0x10000}}, {0x14, 0x1, {0x2, 0x80000000}}, {0x9a6c, 0x2, {0x1, 0x8}}, {0x1f1, 0x7, {0x1, 0xc}}, {0x6, 0xb4, {0x1, 0xba}}, {0x9, 0x0, {0x2, 0x7}}, {0x0, 0x3, {0x3, 0x3}}, {0x6, 0x8, {0x3}}, {0x6, 0xffff, {0x0, 0x1}}, {0x9, 0x2, {0x2, 0x3}}, {0x0, 0x9, {0x2, 0x7}}, {0x8175, 0x101, {0x0, 0x1000}}, {0x81, 0x101, {0x1, 0xe5fc}}, {0x0, 0x8, {0x2, 0xf8}}, {0x800, 0x8, {0x2, 0xf}}, {0x1, 0x1, {0x3, 0x4}}, {0x7fff, 0xffff, {0x3, 0x9}}, {0x9, 0x6, {0x1, 0x1000}}, {0x1, 0x8001, {0x1, 0xc3b9}}, {0x200, 0x5, {0x3, 0x48}}, {0x7, 0x5, {0x2, 0xfffffe01}}, {0xb, 0x9, {0x3, 0x8}}, {0x2, 0x3f, {0x2, 0x401}}, {0x4, 0x4, {0x1, 0xffff5a72}}, {0x6, 0x6, {0x1, 0x4}}, {0x1, 0x6, {0x3, 0x9}}, {0x1006, 0x2, {0x1, 0x1}}, {0xfba8, 0x7, {0x0, 0x8f34}}, {0x0, 0x101, {0xe209f0c9d8e160bf, 0x1}}, {0x6af, 0x0, {0x2, 0xfffffff7}}, {0x1, 0x7, {0x3, 0x5e8}}, {0x1, 0x6, {0x3, 0xc}}, {0x401, 0x2, {0x2, 0x64e}}, {0x6, 0xad, {0x2, 0x101}}, {0x1, 0xe, {0x1, 0x1}}, {0x1, 0x5, {0x3, 0x6}}, {0xf800, 0x0, {0x1, 0x80}}, {0x21, 0x6, {0x0, 0xffffff6e}}, {0x836e, 0x3, {0x1, 0xffffffff}}, {0x4, 0x8, {0x2, 0x5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x44810) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {r3, 0x0}}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode\\00000000000000000060000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303030302c626c6b73697a653d3078303030303030303030303030303630302c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030316330302c73796e632c736d61636b6673726f6f743d8028b8275c5e2a212c7365636c6162656c2c00"]) 2m26.919340321s ago: executing program 43 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000040)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x200}, 0x9, 0x3, 0xe1, 0x2, 0x2, 'syz0\x00', "2b10855f423ab2a8f90dfd397c93c4d73b1d011e8000cf1b2c1d395e2561afab", "7464edc9bceab2e45c215a5ec17cd090f8eed6d9efc9072ac137e70b4b0401e5", [{0xffff, 0x1, {0x0, 0x10000}}, {0x14, 0x1, {0x2, 0x80000000}}, {0x9a6c, 0x2, {0x1, 0x8}}, {0x1f1, 0x7, {0x1, 0xc}}, {0x6, 0xb4, {0x1, 0xba}}, {0x9, 0x0, {0x2, 0x7}}, {0x0, 0x3, {0x3, 0x3}}, {0x6, 0x8, {0x3}}, {0x6, 0xffff, {0x0, 0x1}}, {0x9, 0x2, {0x2, 0x3}}, {0x0, 0x9, {0x2, 0x7}}, {0x8175, 0x101, {0x0, 0x1000}}, {0x81, 0x101, {0x1, 0xe5fc}}, {0x0, 0x8, {0x2, 0xf8}}, {0x800, 0x8, {0x2, 0xf}}, {0x1, 0x1, {0x3, 0x4}}, {0x7fff, 0xffff, {0x3, 0x9}}, {0x9, 0x6, {0x1, 0x1000}}, {0x1, 0x8001, {0x1, 0xc3b9}}, {0x200, 0x5, {0x3, 0x48}}, {0x7, 0x5, {0x2, 0xfffffe01}}, {0xb, 0x9, {0x3, 0x8}}, {0x2, 0x3f, {0x2, 0x401}}, {0x4, 0x4, {0x1, 0xffff5a72}}, {0x6, 0x6, {0x1, 0x4}}, {0x1, 0x6, {0x3, 0x9}}, {0x1006, 0x2, {0x1, 0x1}}, {0xfba8, 0x7, {0x0, 0x8f34}}, {0x0, 0x101, {0xe209f0c9d8e160bf, 0x1}}, {0x6af, 0x0, {0x2, 0xfffffff7}}, {0x1, 0x7, {0x3, 0x5e8}}, {0x1, 0x6, {0x3, 0xc}}, {0x401, 0x2, {0x2, 0x64e}}, {0x6, 0xad, {0x2, 0x101}}, {0x1, 0xe, {0x1, 0x1}}, {0x1, 0x5, {0x3, 0x6}}, {0xf800, 0x0, {0x1, 0x80}}, {0x21, 0x6, {0x0, 0xffffff6e}}, {0x836e, 0x3, {0x1, 0xffffffff}}, {0x4, 0x8, {0x2, 0x5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x44810) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {r3, 0x0}}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode\\00000000000000000060000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303030302c626c6b73697a653d3078303030303030303030303030303630302c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030316330302c73796e632c736d61636b6673726f6f743d8028b8275c5e2a212c7365636c6162656c2c00"]) 2m1.834486901s ago: executing program 2 (id=744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x48}}, 0x0) 1m59.914468318s ago: executing program 2 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$NFT_BATCH(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="017900000000000000250c00010008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000800370000000000050008", @ANYRES64=r10, @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x4014) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 1m59.864625371s ago: executing program 0 (id=750): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x52) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./file1\x00', 0x400017e) r1 = io_uring_setup(0x810, &(0x7f00000004c0)={0x0, 0xbb73, 0x80, 0x2, 0x245}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000600)="adaafca4560fae9de072eaf9fa36f09f000001006dcd4b0900000000000000004c90ffffacc70328c8c1683afea8481c7dffbc1c5222c8638000e36165ee58d58b5a9837888f9ea958669cdf68942ed49400155bb626a44101fb5427812a7d1d5f61910b9e5d38ebdc994609ccf9f68e341c16e17a3eb023a12be86a0b49f9abc7eb09180fb8b39c5d124b12033521beab7456d52c94d2d938f8af9a1d9955e02d76c76a40faad3ac238f59e4181346352df62cec4ff6c0bb81ca7a3fb6bd17d81011c9e1d07e0a76f18e1bdffffffff98", 0xd1) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936", 0x18}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) recvmmsg$unix(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000480)=""/7, 0x7}, {&(0x7f0000001400)=""/234, 0xea}], 0x2}}], 0x1, 0x2000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400000002"], 0x48) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r7, &(0x7f0000000780)={'#! ', './file0', [{0x20, '\t0\xe5\xb4>h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\x00\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd9\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, '\xa4\xdfy\xf5Y\xbf\xd9i@8\\\x87h\xa6\xa0\xa43\x84\xe7\xd5\x98\xe8\x01\xd3\xf0\xc72\xdf\xfb\x00\xfd\xcd\xf2q\x84\xcb-\xf3\x92\x12\xef^~v\x10/X\x1e\xc3\xb1T\xf4\xd0m|\xabr\xc7L\x9b3\xbeCJ\xad!\xb2\xb5g\x7f\xe9W\a\x00\x03=q\x8a\x83|\\w\xe1\xf3\xf1\xe8\x83\xef\xe2\x8bU\xebG4<\x1b\a57<;\xefm:?\x8e\x16\tu\xd5=\xc6P5\xd7\xeci\xcaI\x15\x00]\xc6%\x94&9\xac\xa9\xe9k\x99qc2\xc6V6\x1e\x1c\xeb\x9e\xc78\xb4y+\x85\xc4\xfa.\x15\xe4\x11\xa2\x92\t\xde\xa9\xdc\xe1\xfd\x98\xd2Ja\'r4\xe3sFv\x02\xa6\x8exO\xd0D\x8ea\xc3g\xe5V|@1\x15H4(\xb8E\xa4\xa9\x8bp:\x82k/.:\xf6\x003G(\xd4\xfc\xa0\x01\xe3Q\x805?\br\xc2\x96(y\x8c\x95\xf2Rx\xca\x06\xea\xf43\xf2/8L\xd3u\x87m\x96\xfc\x9cU]\xffiN\x14\xe7-{\xea\x9f\'D\xc0\xeeqA\x1a\xed\x8d\xc8\xad\xcdZS\x1b\xb6{\xfa\xa8\x84\nd=\x0e\x8fc9\xf0\x7fK\xd7\b\x86r\xac\xaf\xd0\xb6^y\xc5\x03c\xc22\xa9R\x90\x9e\xfc\xce\x957O\x06]\xdcZ\x17\xb3\x1bb\xc9Dm\xa2\xd3\x91'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000240)=0x2, &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000240)}, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) close(r10) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) 1m58.881062145s ago: executing program 2 (id=751): r0 = inotify_init() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)) landlock_create_ruleset(&(0x7f0000000040)={0x801, 0x0, 0x1}, 0x18, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000380)=0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40048c7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000127bd7000fbdbdf255200000008000300", @ANYRES32=r7, @ANYBLOB="0a160600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x1) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18400700000000000000ffffffff850000005f007621b48a216427ea00e19400000000007407864606c1fae3f0089689d5f2a9afd5dea6603da7a9b927022c05aa5e83133c26cc235adcfbf117c953d2f35177bfc64bd1bc4f22a7c783852398c696df6760d9163811cdb93f0ea806589898145ee0565cded34d83fb1a41b9534ba8e1fa1493ea920bd867f4783910e5b65d6439d7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m58.3225288s ago: executing program 0 (id=754): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000540)=[{{0x1, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x3, 0x1}, {0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r5 = syz_open_pts(r3, 0x541601) syz_open_pts(r5, 0x28000) r6 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}) setns(r7, 0x24020000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000180)="a3", 0xfffff, 0xfffffffffffffffc) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) waitid(0x2, r8, 0x0, 0x4, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000900)={0xffffffffffffffff, 0x4, 0x2}) 1m57.467357727s ago: executing program 2 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002df44ea231414aa00000000000000001400020002000000e000000200000000000000000d0001005f0a703a73"], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f0000001200)='./file0/file0\x00', 0x0, 0x84000, 0x0) 1m56.15014055s ago: executing program 2 (id=763): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x80) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x6, 0xb9, {0xb9, 0x7, "382908172f84c0cb016b325e223f37542d26907abceb3e2e44d83ba30749d119c947612bb5313fa521941450d8d5d68f4ba34a0fde32687571cbf8fa1744ff48eea76e9fe36c7af42d99d20d10298da73dfa51e019fbb70a71d0caf8b6454fe47dd3cc3476aa111e08a7997471cee4a0d21cf5d4805af14a2d39056610f1bd0828c6ca3a5c9f93fedfec1de6b5b423ec97cfd70b13fad6b88044b0bf3cc1619ffb82d54d7356badb723c7e32078990caf1b2cd64423cb7"}}, 0x0}, 0x0) 1m56.14972634s ago: executing program 0 (id=764): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) dup(r6) ioctl$TCSETSW2(r5, 0x5453, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x8000000, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r8 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x26d, 0x11900, 0x0, 0x1f5}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) close_range(r0, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x109, 0x8, &(0x7f0000000340)="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", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m54.527128633s ago: executing program 0 (id=767): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getrlimit(0xf, &(0x7f0000000180)) utime(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000001480)={0x2, 0x0, @pic={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfd}}) io_uring_setup(0x4931, &(0x7f00000003c0)={0x0, 0xefb7, 0x0, 0x2, 0xa5, 0x0, r4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00U\n\x03\v`\x03,k\x1c\x14\x1fl\x15s\x90\x03\x89\x8e\x17M\xdf\x8b\xce\xb2{\x04Nv(y?\x8d\xabQ\x92\x17rRs\x96\x12\x9cM_\ai\xb7\xc3\xa1\a\x13\xcc\x7fV\xf2\x9fx\xb0\x9fF{\xfa\xb8\x18g\x93*/(\x92#Dn&\xa3\xe2\x85\x8c\xf8\x80\xc5\xbbl\xab\xca\xe40xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000080)={0x2, 0x0, @pic={0x10, 0xb, 0x5, 0x2f, 0x8, 0x4, 0x1, 0x1, 0x3, 0xfc, 0x8, 0x3, 0xfb, 0x8, 0x6, 0xa0}}) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, &(0x7f0000000200)) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb81001800b127e774deaafb0818e628000000020000000800"], &(0x7f0000001f80)=""/229, 0x1a, 0xe5, 0x2, 0x0, 0x0, @void, @value}, 0x28) socket$phonet_pipe(0x23, 0x5, 0x2) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f00006ac000/0x4000)=nil, 0x4000, 0x2, 0x30, r6, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f00000004c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x11, 0x6000, @fd=r7, 0x9, 0x0, 0x0, 0x3, 0x0, {0x0, r10}}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2180000bbbbbbbbbbbb0800454000380000004400019078e0000001ac1414aa030590781200183f250000000000000000890000710000017f00000100186371ae9b1c03"], 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) 1m52.427266363s ago: executing program 0 (id=774): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x2c02, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) setxattr$security_evm(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380), &(0x7f0000000180)=ANY=[@ANYBLOB="000018000000000000"], 0x9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r4, 0x8970, &(0x7f0000000680)={'veth0_to_bridge\x00'}) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f0000000200)='./bus\x00', &(0x7f0000000000), &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x2, 0x0) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000500)={0x0, 0x1ffffa, 0x10100, 0x0, 0x3b7, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040), 0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000480)="6ca59055fbc83d9d1be3421f1ce3039e71f81576b505118d6a468a689493db319d714cbbc9424ad8fe5517a08953115a0cfe5786f419ee00117098fe3f3dad2acc"}, {&(0x7f0000000580)="e0ef54f6a5b9ac9d0392cea6225200e90c8264f8dfcbade44e7e234298a7a39f8b3d1314c8b7074ba193a42d1dbe1ffb5234020283b2bc2e6ae3a8c65198872aaf71e7b3017e7958182b9b2f0b356a2e6d23c8bb39c02d40861a8e395980bc1a7448789f084c2fa443f6756ba1c2378f043e2b57eeff6e51ce88421536277eb4e44300ce45a6ff7152f46f016fc5c99ce26d32dfbdb36309fe8a8276295090ad3b1f4f01b63e6a023076e5eb911fb2786b7f465f0eb3cabe1761c0c9fe93f1b08493f66e2b7aedbd23734dfe6397dae4420a06b7b79ad38231c56b7d43a71958bcf9829ea53b4f9449eee72b5db134aea3d2616d3cf74420cb055b3bb89901"}], 0x101f) 1m51.612529878s ago: executing program 45 (id=774): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x2c02, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) setxattr$security_evm(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380), &(0x7f0000000180)=ANY=[@ANYBLOB="000018000000000000"], 0x9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r4, 0x8970, &(0x7f0000000680)={'veth0_to_bridge\x00'}) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f0000000200)='./bus\x00', &(0x7f0000000000), &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x2, 0x0) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000500)={0x0, 0x1ffffa, 0x10100, 0x0, 0x3b7, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040), 0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000480)="6ca59055fbc83d9d1be3421f1ce3039e71f81576b505118d6a468a689493db319d714cbbc9424ad8fe5517a08953115a0cfe5786f419ee00117098fe3f3dad2acc"}, {&(0x7f0000000580)="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"}], 0x101f) 1m46.894397321s ago: executing program 7 (id=785): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x41, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) chdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r6}, 0x10) 1m39.682210501s ago: executing program 7 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00', r3}, 0x18) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000050110c00000000008510000002000000850000000500000095000000000000009500a505000000003ae8633ddd8dcee12a8af778a01aad5559906c9a79d4f8ad11b18855a006a80dbbe6c19d37b07f7674b96e32b4a6b1d122c5f1d6db76ba024285600fa5119b0310a47d3daa8a38490886d1f3c3ad8ffe096b7b07fa89197e7a379b869144e12174b639e716e721df57e9960a8816fdd7"], &(0x7f0000000080)='GPL\x00', 0xa, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x10}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 1m39.392096196s ago: executing program 7 (id=804): socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="01002ebd7000ffdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="08005a800400018080005a802800038005000600020000000500040000000000040002000500040002000000050006000200000054000222"], 0xa4}, 0x1, 0x0, 0x0, 0x20}, 0x20000040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x30d402, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x40, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$unix(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000140)='>', 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) r11 = creat(0x0, 0x0) close(r11) 1m38.258500087s ago: executing program 7 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="b401000002010300000000000000000002000004300004802c000380080003400000000908000340413919c8050001000b00000005000100020000000500010000000000500002802c0001"], 0x1b4}, 0x1, 0x0, 0x0, 0x22008061}, 0x4c084) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xfffffff7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801ff7f000000000000000000000000850000930c770b9a006d000000950000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = msgget$private(0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x2000, 0x800) msgsnd(r4, 0x0, 0x27, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) setpgid(0x0, r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 1m36.913721441s ago: executing program 7 (id=811): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xb, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r5}, 0x38) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000008, 0x810, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m36.026459879s ago: executing program 7 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000240)=""/115, 0x73}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280", @ANYRES16, @ANYRES8], 0x76}}, 0xc000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m35.611306658s ago: executing program 46 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000240)=""/115, 0x73}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280", @ANYRES16, @ANYRES8], 0x76}}, 0xc000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 44.319854114s ago: executing program 5 (id=939): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000100df01000073797a3100000000"], 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500090000000000050020000100000005"], 0x7c}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) r4 = userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x20, 0x6040000}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000100)=""/119) 43.958863985s ago: executing program 5 (id=941): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffab, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x237, &(0x7f0000000100)={0x0, 0x2ebcc, 0x1, 0x1, 0x24e}, 0x0, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) inotify_init1(0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200000d4, 0x0, 0x0) 42.9855913s ago: executing program 5 (id=943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa}, @generic={0x65, 0x0, 0x0, 0x0, 0x3}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 42.787488797s ago: executing program 5 (id=944): unshare(0x22020200) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5484}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) epoll_create1(0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x821c10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) 41.648012099s ago: executing program 5 (id=945): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, 0x0) (fail_nth: 3) 40.711180685s ago: executing program 5 (id=949): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) unshare(0x22020600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a8, 0x280, 0x370, 0x280, 0x0, 0xc0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x10}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x6, "3685"}}, @common=@set={{0x40}, {{0x4, [0x2, 0x2, 0x4, 0x3, 0x6], 0x2, 0x2}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3e}, @multicast1, 0xcca0bfb3759ce05e, 0x0, 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x11, 0x3, 0x1}, 0x0, 0xb8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x5}, {0x2, 0x3, 0x3}, {0x2, 0x6, 0x7}, 0xffffffff, 0x3}}}, {{@ip={@broadcast, @local, 0x0, 0xff000000, 'dummy0\x00', 'lo\x00', {}, {}, 0xc, 0x3, 0x10}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x9, @local, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1900000019000100000000000000001e80"], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r7, 0x5603, 0x0) 39.512385874s ago: executing program 47 (id=949): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) unshare(0x22020600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a8, 0x280, 0x370, 0x280, 0x0, 0xc0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x10}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x6, "3685"}}, @common=@set={{0x40}, {{0x4, [0x2, 0x2, 0x4, 0x3, 0x6], 0x2, 0x2}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3e}, @multicast1, 0xcca0bfb3759ce05e, 0x0, 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x11, 0x3, 0x1}, 0x0, 0xb8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x5}, {0x2, 0x3, 0x3}, {0x2, 0x6, 0x7}, 0xffffffff, 0x3}}}, {{@ip={@broadcast, @local, 0x0, 0xff000000, 'dummy0\x00', 'lo\x00', {}, {}, 0xc, 0x3, 0x10}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x9, @local, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1900000019000100000000000000001e80"], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r7, 0x5603, 0x0) 11.94242174s ago: executing program 1 (id=1038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x78bc, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x17, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x2}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x4203, r7, 0x9, &(0x7f0000000180)={0x35, 0x80, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES64], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYRES64=r7, @ANYRES32=r8, @ANYRES8=0x0], 0x64}}, 0x0) 10.756540923s ago: executing program 4 (id=1042): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socketpair(0xb249e02fdeed9596, 0x801, 0x10, &(0x7f0000000500)) syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) chmod(&(0x7f0000000700)='./file1\x00', 0x141) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000005c0)={0x1, 0x0, &(0x7f00000004c0)=[0x0]}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x13, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000600)={r2}) 10.74706659s ago: executing program 1 (id=1043): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001800)=ANY=[@ANYRESOCT=r1, @ANYBLOB="07fe22b1b52ae8a9869266c94fe2a6a5bc81a4e672f148842ae075fe9ea6685004fa2fbbb0b1e86692c5d83fc0ab86280be91a0f3dbaaf3b4bb961063aa63fda62d901c8332b61ba666db73d8d619a7ff9e7f035210e92ef2066fc4785e9973be633c1f41ec6408a540c186395f6f165686ce18467cc6c9b223d81361444239a573fdb", @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="ee2b3bb44c59a51e23767f67a8ab37a751bca347c2e8b9d3b0934f69fe699c95d9728525afc7a5db6f98080bf2c94ab22d523e15fd3dbfa6792c0425e33b6d82b4f499557d9a85ee424661f16445faee0da9dd3ae3fb555d8ccd4590b9ddda6811407ae59ff4be93d3694c"]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="42000006003b565dd4637afd217483360bab000300000000", @ANYBLOB="10000000", @ANYRES32=0x0], 0x2c, 0x1) r3 = accept$nfc_llcp(r2, &(0x7f0000000280), &(0x7f0000000100)=0x60) syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x2) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) move_pages(0x0, 0x1, &(0x7f0000006580)=[&(0x7f0000ffa000/0x4000)=nil], 0x0, &(0x7f0000000080), 0x0) connect$nfc_llcp(r4, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x5, "5349eb85a72c654a9d9926025c42c7e3ed7a2c5e2deca6fc0a314f20d9026e9ed55797a9382cf39613b5d6896d479f4d7bc1f3d881f1431ff638427f4fe72d"}, 0x60) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000070000001c00018005000200010000000600050000000300000006001a000000"], 0x30}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) readv(r8, &(0x7f00000016c0)=[{&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000340)=""/48, 0x30}], 0x5) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001b80)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r8, @ANYBLOB="5337bdaac18bb8b9597277484580525ba1094b21095aa6aaf62c26590b9e3ed8787e9aedc30b46db455a435bb47030acc4a9aadfb43177b9fce53254476d229c7d295ae8d79b5b09ae300a53112ba7ee6d9f3bd17de901d43142b0f80433c113286fe322", @ANYBLOB="09497a93a4ae43bc51a21399b9097e4713a20c46a4c8d3f423e4dd1360d71a6ed7ac84cde94b8ecc03c0633301b796172a07afa32da46505c5fbff4e3c8db7fb2a5243c803baeea5cc28b136d4206779d484ab4b2e644ff329600dbbdc05204951de8816026911968a188ccaa8a9c4a945a9a91be763878ec924729eecddf58dc37e376278aa9cfecf2e9eda49dbc44bb11a605a47161ab29641843b3df6421e8d1265f6a1bff14c550fb66b1f95701b86736e7dd5123970c2ab6402a93e10a9369a29f6f8bf9d584e5fb507ef387ce7ec3258228f455ca29562acf3d915b36467d45d8ffbb97b429b4cd0683f4306405681c7f6", @ANYRESDEC=r2, @ANYRES32]) read$FUSE(r7, 0x0, 0x0) 10.370561313s ago: executing program 4 (id=1045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x1c, r1, 0x419, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0xb}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000000000)={0xffffffffffff8000, 0x10000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x6, 0x7, 0x7b, 0x401, 0x6, 0x800}) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 9.525930707s ago: executing program 1 (id=1048): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = userfaultfd(0x801) close_range(r0, r1, 0x2) pread64(r1, 0x0, 0x0, 0xa2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) socket$inet(0x2, 0x4, 0x25c1) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) 8.804227481s ago: executing program 4 (id=1050): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x7000000, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 8.635040323s ago: executing program 3 (id=1051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x170) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 8.567305653s ago: executing program 1 (id=1053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x170) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000480)=0x7) r3 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = dup3(r3, r3, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000100)={0x5, "0d478848dba056cbea84e6555f70e31526e70aae634b74f79a65eabc5e92d251", 0x3, 0x673d, 0x1, 0x400, 0x804, 0x4}) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="5a469ea902e03a06f63fbfcce93990a08641cef6220f7044f150f3008de051be707a2903bfa6ea6539a33af6c333b5e89c85893edf0e765a4efad7ee6cc9830600ff50c869228de5c161b2c5d217885660ba7ae8fd565a06a031c96a02445236f0f034ef12f38f3b81e10d0c84f3141057213d9633b23d584ac99949555e3e6ac3876e600aec53fb39618e2f80c8c0617a339773cc04f4702f2625dc9619e39f4ee660b898f17f30ee4f64c9543f80e6157b61", 0xb3}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}, 0x4) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r6, 0x1) connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 7.530316851s ago: executing program 1 (id=1054): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x1812, r0, 0x184ac000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000780), 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) fcntl$getownex(r1, 0x10, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0xde8, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) getpgrp(0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x7, 0xb0, &(0x7f00000003c0)=""/176, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e40040100", @ANYRES32, @ANYBLOB="ac1900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000000000000f00"/24, @ANYRES32=r5, @ANYBLOB], 0x50) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r4, r6}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000030bbb40fa074708e8600102030109"], 0x0) r8 = syz_io_uring_setup(0x4f6, &(0x7f0000000300)={0x0, 0x8c84, 0x8, 0x0, 0x332, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000000)=[0x8, 0x5], 0x2) 6.919832119s ago: executing program 3 (id=1056): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x180) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r2, 0xe701ac47a3d23ecd}, 0x14}}, 0x0) r3 = dup(0xffffffffffffffff) symlink(0x0, &(0x7f00000017c0)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x9) write$P9_RLERRORu(r3, 0x0, 0x53) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0xfffffffa, @mcast2}, r5}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0xd, r5, 0x0, 0x0, 0x1}}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80000000001050500000000000000000a000000240002801400018008000100ac1e01018f0002000a0101020c00028005000100000000003c00018005000100000000002c00018014000300fc7f000000000000000000000000000014000400ff02000000000000000000000000000108000740009245254fd74d63996a2c84114d0000004c000e802c00018014000300fe8000000000000000000000000000aa14000400ff0200000000000000000000000000010c000280050001000c0000000600034000000000060003400003000000000000"], 0xc8}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x1, 0x2}, 0x10) socket$isdn(0x22, 0x3, 0x11) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000200)=0x8) sendmsg$nl_route(r0, 0x0, 0x4000000) 6.717417383s ago: executing program 3 (id=1058): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file2\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6.471930396s ago: executing program 3 (id=1061): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ppoll(&(0x7f0000000940)=[{r0}], 0x1, &(0x7f0000000980)={0x0, 0x3938700}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000002d00)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xe000, 0xf1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x50007a2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x450101, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @empty}, {0x1}, 0x35, {0x2, 0x4e20, @local}, 'vlan1\x00'}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000003010000000000000001000000000000000000000076"]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000b05000100070000000b00020073797a31000000000c000780080013000000000005000500f0ffffff040004000100000016000300686173683a6e6581a75f4575c69cee6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @hci={0x1f, 0x3, 0x4}, @in={0x2, 0x4e23, @private=0xa010101}, @rc={0x1f, @any, 0x42}, 0xffff, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000140)='team_slave_0\x00', 0x9, 0x2}) getsockopt$IPT_SO_GET_INFO(r10, 0x0, 0x41, 0x0, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x42474752, 0x0, @stepwise}) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x30884d0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[], 0x0) r11 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c100, 0x0) accept4$alg(r11, 0x0, 0x0, 0x80800) 6.250415078s ago: executing program 4 (id=1062): unshare(0x22020200) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) epoll_create1(0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x821c10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) 5.981497131s ago: executing program 3 (id=1064): unshare(0x22020200) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) epoll_create1(0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x821c10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) 5.108071656s ago: executing program 6 (id=1065): socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="059f0d39", 0x4, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67cbd2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b9ab7ab90e2897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x3b9, 0xbcff, 0x0, 0x0) writev(r2, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40100c1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x3a, 0x39, 0x0, 0x18) read$FUSE(r3, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000220000000400"/28], 0x50) r4 = creat(&(0x7f0000000240)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[], 0x69) 5.069589591s ago: executing program 4 (id=1066): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xac) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x300000000000000, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='dyn']) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 4.898520771s ago: executing program 3 (id=1067): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f00003e8000/0x1000)=nil, 0x4000) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000048001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x8010500c, &(0x7f0000000100)) bind$tipc(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x10000010}) 4.807737436s ago: executing program 6 (id=1068): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, r0, 0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5cac, r0, &(0x7f0000000200)="43fa7b8775bf68a6fda9aa61292f7201d99384d590de1c16447a8ce9aedbbea7eda9cab74530fd1bb409ce5260c178eb13ddf527de8d25f5cea124cdc1c648d3d36f20c53ef35603e40e47f0bc11482f85d7f46a80f04e17272b3c02457d57feb252669b7cfc99a704466a7495bfca46b2ad64ae0de2ed8c718d2ffb89c4a38e5a05fe543e066ebf224e5e7e09fa3593a962c32c9046975ba0cd927b68f8b1297502997f46c63799ed75b6803ea824d4764f849417bf7d04ee48edc5be7382e335dcc4810450029168c016226a631c37984d23b6f3b9", 0xd6, 0x2, 0x0, 0x0, r0}]) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x78) sendfile(r4, r5, &(0x7f00000001c0), 0x10001) fcntl$addseals(r5, 0x409, 0x8) fallocate(r5, 0x3, 0x0, 0x3) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) 4.425852421s ago: executing program 6 (id=1069): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000007000015"], 0x24}}, 0x0) 4.397757718s ago: executing program 4 (id=1070): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket(0x11, 0x0, 0x4cd1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r1, 0x1ff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000700)="ab12bb6929ab1095cfd2d48c5915d65c5958fd4b334ecfcf7d3951358f037de295949345fcc993bda36a12ec6446582a02510df8a7df07d2e7308cecee9a04", 0x3f, 0x44, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000040), 0xb8a, 0x34a142) writev(r5, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="5b84ce532198a9", 0x7}], 0x2) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000200)={{&(0x7f000016d000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) 4.39583295s ago: executing program 1 (id=1071): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x52, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x1, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xe77e, 0x9, 0x4, 0x7}, [@obex={0x5, 0x24, 0x15, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x6, 0x41}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x2bf0cbb900da2f51, 0x80, 0x1, 0x4, 0x10}, 0x22, &(0x7f0000000600)={0x5, 0xf, 0x22, 0x3, [@ptm_cap={0x3}, @generic={0x10, 0x10, 0x0, "f621f1fbdff614a84146351745"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xbb, 0x9, 0x8}]}, 0x7, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x4001}}, {0x94, &(0x7f0000000680)=@string={0x94, 0x3, "41dfc67e582c7136dc4cb3604fa39e7c947d1aedf72dc094ca7af8cd6335742d3fccbe9f40ccf54dd611f904b9139ac36086abfe6a72b9434e26397c6da0541f25e30d0792d1f2b5bebe30a686c008097fa1a325fc9523ce9483cb34b682be08fd79116402982077f3993ab1c48348cdea33fb3c0361cb32b56b4f0d5d551ded2952c9ea83e89a3391f4245d5ef863d4b620"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x100a}}, {0xad, &(0x7f00000008c0)=@string={0xad, 0x3, "b3973f28063889b1e0c36f5b8830e82042dc1bc2fc9519fd9183b67fef315df650aca63ce77ddfc3b90d8b6cd1dc050f3b23a6e3e7a36b86d97416423b9e2c2e6dbbff5a41d3f43d7bea108f1ec9b01df3b2984e4e9672d2bfbd3cb7fb06b140722ae4a7cb32ced1755540e105dfb4d21811f79c2b09b49175ca3330bb577364acd8541e8b67f1446ee2fdcb6c5817065b0c2b0b729563bd18b7313549494ed1049d91640ae395000c1166"}}, {0x72, &(0x7f0000000980)=@string={0x72, 0x3, "33cd77ce783d5536ab4659265d4ac08c199c5a3d8b1fa27ad35d2dfd638e6e2a28512b5d67c4183ae6ea4cf4a8ecc7569b667277fcb7de577875fb3fb12bb934c26cca7d5821244ccea4d9913d5021d5c66201a415a4d4faec8d348e1bc1e0d30be9694a8852738e41372fae52aac21e"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x90) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_netlabel(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='000'], 0x62) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000bc0)={0x14, &(0x7f0000000b00)={0x20, 0xf, 0x3d, {0x3d, 0x11, "ca276d5009bea97ed8899034d584abe30e32e8970affc939b711694700292c3f2579642b11250c150b0e9c97b2d6a85b97dafd626158178ed7e9b8"}}, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000c00)={0x40, 0xd, 0xe, "d2d350993d87e6f1153b84e7ff8f"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000cc0)={0x20, 0x80, 0x1c, {0x7ff, 0x2, 0x7ff, 0xfff, 0x1, 0x101, 0xa, 0x0, 0x2, 0x4, 0x9, 0x46d8}}, &(0x7f0000000d00)={0x20, 0x85, 0x4}, &(0x7f0000000d40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d80)={0x20, 0x87, 0x2, 0x1027}, &(0x7f0000000dc0)={0x20, 0x89, 0x2, 0x1}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d706f6c3d696ed5f3653d7374617469633a382d370a"]) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="200b570000005722567d7b785de61f2ebdd3ef23f1b474bb5cadbe0391ff9260fa1bd480a8060a95fbffbc5e8b9eba6f165f9f1af26e9bb6d4a14f3440ebd60701002351e2ee7a40b4d8884cc58eacf1a5ff9ee59729d324e9bafe89eb405c758a18"], &(0x7f00000001c0)=ANY=[@ANYBLOB="fc0300000004031d0400"]}, &(0x7f0000000500)={0x34, &(0x7f0000000240)={0x0, 0xd, 0x40, "5cb15cece1c347cf0022ee1f1fb63e01b320019ec32b1596717dea80c322a3b8709f9e887b9f30750f1ae80e56e02b0d787d642e8a3e10a2fed9aff6f28d1155"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x102, {0x100, "f6acacf58c3b93d9196a854b8cc7879d971f8cbade7bf3759ede7a0427e5e41446715ccc933a20cee46488e3079a8766b72c1f926bbc341dea17a502f9bd40295ac3c0cdb234b220cb62353ae54c20aa804d2209e0ab1e6f2d76e4eaf536852c32de0a9e8bb23e962b95edc6b270a7e35f6e01f46815e99b0224e29fc3e7b7bdcf3ff2f22be5d6752144127fc31be4fc096bf8c8805710b9a60a2dc62ef48d33767963acb3429c3bc4433cdc651515e04c1942c42ab2d0e25d5b5028317c162e153f2c2b8b22b985fa3107b982c8fab7308637ded7948db57657e89d4241e1e62e584d4c214d2a750e4728f17c4c2d2ca4b60161b49cbd84188e08d49ce371d6"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x10}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.420165562s ago: executing program 48 (id=1070): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket(0x11, 0x0, 0x4cd1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r1, 0x1ff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000700)="ab12bb6929ab1095cfd2d48c5915d65c5958fd4b334ecfcf7d3951358f037de295949345fcc993bda36a12ec6446582a02510df8a7df07d2e7308cecee9a04", 0x3f, 0x44, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000040), 0xb8a, 0x34a142) writev(r5, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="5b84ce532198a9", 0x7}], 0x2) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000200)={{&(0x7f000016d000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) 3.378270783s ago: executing program 6 (id=1073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) unshare(0x2000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x700000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x20) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400) 3.377782772s ago: executing program 9 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0, 0xc0000) fcntl$getflags(r3, 0x3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x42}, 0x10) 2.166165204s ago: executing program 9 (id=1075): openat$sndseq(0xffffffffffffff9c, &(0x7f0000004440), 0x22b41) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0xa00000000000000, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.968990724s ago: executing program 9 (id=1076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$rtc(&(0x7f00000003c0), 0x0, 0x101000) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x6) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000ff"], 0x10, 0x500}}], 0x1, 0x40058) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000001000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.738319095s ago: executing program 9 (id=1077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r7, 0x7, "d63836", "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"}}, 0x110) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r8, 0x1) r9 = accept$netrom(r1, 0x0, 0x0) bind$netrom(r9, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) preadv(0xffffffffffffffff, &(0x7f0000002800)=[{&(0x7f00000023c0)=""/203, 0xcb}], 0x1, 0x7, 0x7fff) 1.091942045s ago: executing program 6 (id=1078): socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="059f0d39", 0x4, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="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", 0x3b9, 0xbcff, 0x0, 0x0) writev(r2, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40100c1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x3a, 0x39, 0x0, 0x18) read$FUSE(r3, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000220000000400"/28], 0x50) r4 = creat(&(0x7f0000000240)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[], 0x69) 766.062913ms ago: executing program 9 (id=1079): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f1ff0000000071103300000000001d300500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.257001ms ago: executing program 9 (id=1080): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095c1332ff25852df7282f000000000000000510bbda9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@initdev, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x8000, 0x8, 0x2, 0x2, {{0x1c, 0x4, 0x1, 0x3d, 0x70, 0x65, 0x0, 0x8, 0xa, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}, {[@noop, @cipso={0x86, 0x21, 0x3, [{0x6, 0xc, "adee1e259b4777c48415"}, {0x7, 0xf, "6aa6802df5cf13f17e0b1368a8"}]}, @timestamp={0x44, 0x8, 0x25, 0x0, 0x2, [0x9]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x72, 0x3, 0x3, [{@remote, 0x986}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x9}, {@multicast1, 0x89ac}]}, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0x5, [{@multicast2, 0x1}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa8, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008085}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r8, 0x400, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) socket$inet6(0xa, 0x6, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r9, 0x4b2f, 0xb) 0s ago: executing program 6 (id=1081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f00000007c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc8, &(0x7f0000000600)=""/200, 0x0, 0x21, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980)="c80a6c0fea2a280b34451e267a7fdae57aabe3b3a314227ad412ae4281371d541edd8dfc723d411f261a2c7bb2bbaa417b795748be3b397ae94a73835a9cccfc1a", 0x41) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="b68c9b8a826d11e7ab302f49d0bbc5f3c0665e836c8d221f065b5c20f33fc05491277db0d13c8211b5d1ca10ca680d8c30d4e502488d0be170bc7e9f0cdf8d814fab4e306355c3bb12f6d242581e1073047a66266b346f4b510d27612cb6bad105d8b95ca1dd202672d1b26dfed00304000000178ba12913ac463c0069760502afac448d2b5a7579b0318b19702fc8d43fb8cc5b84de46a0ef00006319d4eb88c2ca3d7cab815eb9c1a4e57c8d54f8f9231125e1ca06db", 0xb7}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYBLOB="26000020000000000000ecbe", @ANYRESOCT=r4, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x9928, 0x7}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f00000000c0)={0x32b, @time={0x6, 0x5}}) bind$rxrpc(0xffffffffffffffff, &(0x7f00000002c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001f80)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) syz_usb_connect(0x4, 0x460, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000f40)={0x0, 0x2000000}) kernel console output (not intermixed with test programs): 0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.372109][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.424635][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.435487][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.499726][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.535879][ T5831] Bluetooth: hci1: command tx timeout [ 323.683469][ T9485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.696'. [ 323.710498][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.745921][ T9485] netlink: 'syz.2.696': attribute type 10 has an invalid length. [ 323.777784][ T5831] Bluetooth: hci4: command tx timeout [ 323.785142][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.802055][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 323.822345][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.829860][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.852885][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.860094][ T9485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.868459][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.875613][ T9485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.898406][ T9485] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 324.004295][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.032966][ T9487] bridge_slave_1: left allmulticast mode [ 324.045702][ T9487] bridge_slave_1: left promiscuous mode [ 324.053060][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.078778][ T9487] bridge_slave_0: left allmulticast mode [ 324.084586][ T9487] bridge_slave_0: left promiscuous mode [ 324.090841][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.132360][ T9487] bond0: (slave bridge0): Releasing backup interface [ 324.363487][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.397420][ T9397] team0: Port device team_slave_0 added [ 324.412153][ T9339] hsr_slave_0: entered promiscuous mode [ 324.420853][ T9339] hsr_slave_1: entered promiscuous mode [ 324.428512][ T9339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.436644][ T9339] Cannot create hsr debugfs directory [ 324.561250][ T9397] team0: Port device team_slave_1 added [ 324.776957][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.817294][ T5831] Bluetooth: hci2: command tx timeout [ 324.901573][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.924137][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.934198][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.970948][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.022871][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.037521][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.074597][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.153110][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.162946][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.171518][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.182091][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.191014][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 325.200693][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.264974][ T9397] hsr_slave_0: entered promiscuous mode [ 325.272029][ T9397] hsr_slave_1: entered promiscuous mode [ 325.280449][ T9397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.288336][ T9397] Cannot create hsr debugfs directory [ 325.355224][ T9458] chnl_net:caif_netlink_parms(): no params data found [ 325.418613][ T68] bridge_slave_1: left allmulticast mode [ 325.424279][ T68] bridge_slave_1: left promiscuous mode [ 325.430506][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.506231][ T68] bridge_slave_0: left allmulticast mode [ 325.511928][ T68] bridge_slave_0: left promiscuous mode [ 325.524557][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.549569][ T68] bridge_slave_1: left allmulticast mode [ 325.555223][ T68] bridge_slave_1: left promiscuous mode [ 325.566283][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.577701][ T68] bridge_slave_0: left allmulticast mode [ 325.583382][ T68] bridge_slave_0: left promiscuous mode [ 325.589364][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.685682][ T5829] Bluetooth: hci1: command tx timeout [ 326.039924][ T9528] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 326.911080][ T5829] Bluetooth: hci2: command tx timeout [ 326.965102][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.978793][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.990329][ T68] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 326.998910][ T68] bond0 (unregistering): Released all slaves [ 327.127383][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.137830][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.148575][ T68] bond0 (unregistering): Released all slaves [ 327.194098][ T9528] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 327.234649][ T5829] Bluetooth: hci3: command tx timeout [ 327.448977][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.456735][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.464039][ T9458] bridge_slave_0: entered allmulticast mode [ 327.471229][ T9458] bridge_slave_0: entered promiscuous mode [ 327.547026][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.562414][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.570113][ T9458] bridge_slave_1: entered allmulticast mode [ 327.577219][ T9458] bridge_slave_1: entered promiscuous mode [ 327.698951][ T5829] Bluetooth: hci1: command tx timeout [ 327.704838][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.775348][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.868002][ T9458] team0: Port device team_slave_0 added [ 327.963948][ T9458] team0: Port device team_slave_1 added [ 327.994486][ T68] hsr_slave_0: left promiscuous mode [ 328.004190][ T68] hsr_slave_1: left promiscuous mode [ 328.010086][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.017580][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.025140][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.032624][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.043649][ T68] hsr_slave_0: left promiscuous mode [ 328.049516][ T68] hsr_slave_1: left promiscuous mode [ 328.055159][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.062698][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.070366][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.078289][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.103830][ T68] veth1_macvtap: left promiscuous mode [ 328.109491][ T68] veth0_macvtap: left promiscuous mode [ 328.115035][ T68] veth1_vlan: left promiscuous mode [ 328.120345][ T68] veth0_vlan: left promiscuous mode [ 328.126753][ T68] veth1_macvtap: left promiscuous mode [ 328.132290][ T68] veth0_macvtap: left promiscuous mode [ 328.137986][ T68] veth1_vlan: left promiscuous mode [ 328.143249][ T68] veth0_vlan: left promiscuous mode [ 328.977159][ T5829] Bluetooth: hci2: command tx timeout [ 329.298086][ T5829] Bluetooth: hci3: command tx timeout [ 329.385725][ T68] team0 (unregistering): Port device team_slave_1 removed [ 329.434510][ T68] team0 (unregistering): Port device team_slave_0 removed [ 329.835742][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.842727][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.869351][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.886186][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.893617][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.921585][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.977934][ T9521] chnl_net:caif_netlink_parms(): no params data found [ 330.325383][ T9458] hsr_slave_0: entered promiscuous mode [ 330.333604][ T9458] hsr_slave_1: entered promiscuous mode [ 330.550249][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.557535][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.564728][ T9521] bridge_slave_0: entered allmulticast mode [ 330.579239][ T9521] bridge_slave_0: entered promiscuous mode [ 330.684202][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.719512][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.732934][ T9521] bridge_slave_1: entered allmulticast mode [ 330.745339][ T9521] bridge_slave_1: entered promiscuous mode [ 331.112464][ T5829] Bluetooth: hci2: command tx timeout [ 331.306997][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.319039][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.376103][ T5829] Bluetooth: hci3: command tx timeout [ 331.409914][ T9521] team0: Port device team_slave_0 added [ 331.433133][ T9521] team0: Port device team_slave_1 added [ 331.483002][ T9397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 331.492050][ T9397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.510002][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.521644][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.552330][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.577647][ T9397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 331.594240][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.604299][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.630648][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.678112][ T9397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.719776][ T68] IPVS: stop unused estimator thread 0... [ 331.730336][ T9521] hsr_slave_0: entered promiscuous mode [ 331.737099][ T9521] hsr_slave_1: entered promiscuous mode [ 331.743395][ T9521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.751430][ T9521] Cannot create hsr debugfs directory [ 331.763232][ T9558] batadv_slave_1: entered promiscuous mode [ 331.881036][ T9339] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.897013][ T9557] batadv_slave_1: left promiscuous mode [ 331.902952][ T9339] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.101965][ T9339] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.121565][ T9339] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.254981][ T68] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.361845][ T68] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.457105][ T68] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.553661][ T68] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.569609][ T9458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 332.604412][ T9458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 332.625042][ T9458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 332.665296][ T9458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 332.681636][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.694687][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.802032][ T9339] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.862725][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.886093][ T68] bridge_slave_1: left allmulticast mode [ 332.892208][ T68] bridge_slave_1: left promiscuous mode [ 332.916313][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.940922][ T68] bridge_slave_0: left allmulticast mode [ 332.946898][ T68] bridge_slave_0: left promiscuous mode [ 332.952618][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.298124][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.308957][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.319352][ T68] bond0 (unregistering): Released all slaves [ 333.336129][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.343221][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.354190][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.361337][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.466117][ T5829] Bluetooth: hci3: command tx timeout [ 333.473407][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.480580][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.647682][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.654790][ T7851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.218592][ T9521] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 334.304242][ T68] hsr_slave_0: left promiscuous mode [ 334.314756][ T68] hsr_slave_1: left promiscuous mode [ 334.321444][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.329419][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.337528][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.344937][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.363921][ T68] veth1_macvtap: left promiscuous mode [ 334.369548][ T68] veth0_macvtap: left promiscuous mode [ 334.375160][ T68] veth1_vlan: left promiscuous mode [ 334.380714][ T68] veth0_vlan: left promiscuous mode [ 334.790159][ T68] team0 (unregistering): Port device team_slave_1 removed [ 334.840762][ T68] team0 (unregistering): Port device team_slave_0 removed [ 335.253036][ T9397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.278112][ T9521] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 335.288289][ T9521] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 335.336120][ T9521] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 335.462942][ T9458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.542647][ T9458] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.591902][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.599055][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.643125][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.650337][ T6197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.728758][ T9339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.834741][ T9397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.844902][ T9585] IPVS: length: 24 != 937426968 [ 335.852756][ T9585] FAULT_INJECTION: forcing a failure. [ 335.852756][ T9585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.886056][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.2.712 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 335.886081][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 335.886092][ T9585] Call Trace: [ 335.886098][ T9585] [ 335.886105][ T9585] dump_stack_lvl+0x241/0x360 [ 335.886131][ T9585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.886157][ T9585] ? __pfx__printk+0x10/0x10 [ 335.886185][ T9585] ? snprintf+0xda/0x120 [ 335.886208][ T9585] should_fail_ex+0x40a/0x550 [ 335.886234][ T9585] _copy_to_user+0x31/0xb0 [ 335.886255][ T9585] simple_read_from_buffer+0xca/0x150 [ 335.886281][ T9585] proc_fail_nth_read+0x1e9/0x250 [ 335.886306][ T9585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.886331][ T9585] ? rw_verify_area+0x243/0x630 [ 335.886349][ T9585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.886372][ T9585] vfs_read+0x1f8/0xb40 [ 335.886391][ T9585] ? fdget_pos+0x254/0x320 [ 335.886407][ T9585] ? __pfx___mutex_lock+0x10/0x10 [ 335.886427][ T9585] ? __pfx_vfs_read+0x10/0x10 [ 335.886448][ T9585] ? __fget_files+0x2a/0x410 [ 335.886465][ T9585] ? __fget_files+0x395/0x410 [ 335.886480][ T9585] ? __fget_files+0x2a/0x410 [ 335.886504][ T9585] ksys_read+0x18f/0x2b0 [ 335.886525][ T9585] ? __pfx_ksys_read+0x10/0x10 [ 335.886544][ T9585] ? do_syscall_64+0x100/0x230 [ 335.886564][ T9585] ? do_syscall_64+0xb6/0x230 [ 335.886583][ T9585] do_syscall_64+0xf3/0x230 [ 335.886599][ T9585] ? clear_bhb_loop+0x35/0x90 [ 335.886621][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.886639][ T9585] RIP: 0033:0x7f037ff8b7fc [ 335.886654][ T9585] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.886667][ T9585] RSP: 002b:00007f0380ea7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.886685][ T9585] RAX: ffffffffffffffda RBX: 00007f03801a5fa0 RCX: 00007f037ff8b7fc [ 335.886697][ T9585] RDX: 000000000000000f RSI: 00007f0380ea70a0 RDI: 0000000000000008 [ 335.886708][ T9585] RBP: 00007f0380ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.886719][ T9585] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.886729][ T9585] R13: 0000000000000000 R14: 00007f03801a5fa0 R15: 00007fff07d3a018 [ 335.886756][ T9585] [ 335.891871][ T9458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.149844][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.168289][ T9521] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.201456][ T9521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.212519][ T9521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.323014][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.330205][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.362075][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.369248][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.733023][ T9339] veth0_vlan: entered promiscuous mode [ 336.762030][ T68] IPVS: stop unused estimator thread 0... [ 336.871453][ T9397] veth0_vlan: entered promiscuous mode [ 336.901562][ T9339] veth1_vlan: entered promiscuous mode [ 336.929518][ T9397] veth1_vlan: entered promiscuous mode [ 336.990529][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.071638][ T9339] veth0_macvtap: entered promiscuous mode [ 337.106766][ T9397] veth0_macvtap: entered promiscuous mode [ 337.119363][ T9339] veth1_macvtap: entered promiscuous mode [ 337.150568][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.176325][ T9397] veth1_macvtap: entered promiscuous mode [ 337.193214][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.215179][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.233923][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.246610][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.257549][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.269508][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.304066][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.335155][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.355917][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.384091][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.404145][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.462268][ T9339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.471296][ T9339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.485487][ T9339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.494217][ T9339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.770131][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.791410][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.801896][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.818368][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.832969][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.874497][ T9397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.889623][ T9397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.900226][ T9397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.914408][ T9397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.099443][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.108010][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.123256][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.131041][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.187832][ T9458] veth0_vlan: entered promiscuous mode [ 338.219381][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.242022][ T9458] veth1_vlan: entered promiscuous mode [ 338.297332][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 338.300876][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.321406][ T9521] veth0_vlan: entered promiscuous mode [ 338.767886][ T9521] veth1_vlan: entered promiscuous mode [ 338.801119][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.841430][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.843368][ T9458] veth0_macvtap: entered promiscuous mode [ 338.861864][ T9458] veth1_macvtap: entered promiscuous mode [ 338.883718][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.913283][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.925983][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.936406][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.947306][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.958107][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.958813][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.973890][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.992422][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.004186][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.035186][ T9521] veth0_macvtap: entered promiscuous mode [ 339.067733][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.083618][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.094490][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.112927][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.123762][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.134658][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.147065][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.166049][ T9521] veth1_macvtap: entered promiscuous mode [ 339.323490][ T9458] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.355845][ T9458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.443077][ T9636] Invalid option length (155) for dns_resolver key [ 339.537916][ T9458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.613833][ T9458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.997852][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.025069][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.060117][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.081255][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.091546][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.144469][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.171272][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 340.175886][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.193918][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.216581][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.289269][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.315879][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.345487][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.384713][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.402564][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.435363][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.457613][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.471078][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.722340][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.847225][ T9521] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.905478][ T9521] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.955513][ T9521] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.012647][ T9521] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.145218][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.234147][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.883636][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.883665][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.942618][ T7851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.943793][ T7851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.039316][ T7851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.039341][ T7851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.347921][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 342.991494][ T9653] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 343.079088][ T9677] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 343.123156][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.7.700'. [ 343.123195][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.7.700'. [ 343.126949][ T9672] dummy0: entered promiscuous mode [ 343.127588][ T9672] team0: entered promiscuous mode [ 343.127602][ T9672] team_slave_0: entered promiscuous mode [ 343.127779][ T9672] team_slave_1: entered promiscuous mode [ 343.245569][ T51] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 343.525977][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 343.569626][ T9689] Invalid option length (155) for dns_resolver key [ 344.227898][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.227938][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.227972][ T51] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.227994][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.236195][ T51] usb 3-1: config 0 descriptor?? [ 344.237599][ T51] hub 3-1:0.0: USB hub found [ 348.070047][ T51] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 348.104248][ T51] usbhid 3-1:0.0: can't add hid device: -71 [ 348.131498][ T51] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 348.206460][ T51] usb 3-1: USB disconnect, device number 21 [ 348.957946][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.739'. [ 349.005748][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 349.459804][ T5873] kernel write not supported for file /snd/seq (pid: 5873 comm: kworker/1:5) [ 349.495686][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 349.502907][ T8] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 349.513847][ T8] usb 2-1: config 0 has no interface number 0 [ 349.531114][ T8] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 349.988870][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.455501][ T8] usb 2-1: Product: syz [ 350.485494][ T8] usb 2-1: Manufacturer: syz [ 350.515492][ T8] usb 2-1: SerialNumber: syz [ 350.538462][ T8] usb 2-1: config 0 descriptor?? [ 350.598717][ T9755] geneve2: entered promiscuous mode [ 350.710855][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 350.718181][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 351.735789][ T29] audit: type=1800 audit(1739618465.184:85): pid=9768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.745" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 351.793651][ T9758] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 351.798879][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 351.823017][ T9759] ceph: No mds server is up or the cluster is laggy [ 351.832095][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 351.889694][ T5927] usb 2-1: USB disconnect, device number 9 [ 352.235478][ T9779] netlink: 'syz.7.747': attribute type 9 has an invalid length. [ 352.243457][ T9779] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.747'. [ 352.341060][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 353.464880][ T9787] overlayfs: missing 'lowerdir' [ 353.624972][ T9795] overlayfs: workdir and upperdir must be separate subtrees [ 353.752615][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 354.155999][ T9804] xt_CT: No such helper "snmp_trap" [ 354.608790][ T9824] netlink: 60 bytes leftover after parsing attributes in process `syz.5.758'. [ 354.626740][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.758'. [ 355.286307][ T29] audit: type=1326 audit(1739618468.484:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abaf8cde9 code=0x7ffc0000 [ 355.355566][ T29] audit: type=1326 audit(1739618468.484:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5abaf8cde9 code=0x7ffc0000 [ 355.415553][ T9827] tipc: Enabling of bearer <_ [ 355.415553][ T9827] p:s> rejected, media not registered [ 355.464088][ T29] audit: type=1326 audit(1739618468.484:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abaf8cde9 code=0x7ffc0000 [ 355.485445][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.506472][ T9836] netlink: 'syz.7.761': attribute type 6 has an invalid length. [ 355.588260][ T29] audit: type=1326 audit(1739618468.484:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5abaf8cde9 code=0x7ffc0000 [ 355.742538][ T9840] Can't find a SQUASHFS superblock on nullb0 [ 355.771993][ T9840] netlink: 'syz.7.761': attribute type 10 has an invalid length. [ 355.788888][ T9840] netlink: 40 bytes leftover after parsing attributes in process `syz.7.761'. [ 355.898791][ T9840] bridge0: port 3(macvlan1) entered blocking state [ 355.934892][ T29] audit: type=1326 audit(1739618468.484:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abaf8cde9 code=0x7ffc0000 [ 356.018179][ T9840] bridge0: port 3(macvlan1) entered disabled state [ 356.027585][ T9840] macvlan1: entered allmulticast mode [ 356.033079][ T9840] veth1_vlan: entered allmulticast mode [ 356.139314][ T9840] macvlan1: entered promiscuous mode [ 356.158803][ T9840] bridge0: port 3(macvlan1) entered blocking state [ 356.165483][ T9840] bridge0: port 3(macvlan1) entered forwarding state [ 356.175349][ T29] audit: type=1326 audit(1739618468.494:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5abaf8cde9 code=0x7ffc0000 [ 356.257609][ T29] audit: type=1326 audit(1739618468.504:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abaf8cde9 code=0x7ffc0000 [ 356.381800][ T29] audit: type=1326 audit(1739618468.504:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9817 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abaf8cde9 code=0x7ffc0000 [ 357.176054][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'. [ 357.445545][ T5927] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 357.799135][ T9863] netlink: 80 bytes leftover after parsing attributes in process `syz.0.767'. [ 358.469507][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 358.862493][ T5927] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 358.874675][ T5927] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 358.981287][ T29] audit: type=1326 audit(1739618472.844:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9862 comm="syz.1.769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc22eb8cde9 code=0x0 [ 359.007075][ T5927] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.037206][ T5927] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 359.046408][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.060270][ T5927] usb 6-1: Product: syz [ 359.064468][ T5927] usb 6-1: Manufacturer: syz [ 359.073937][ T5927] usb 6-1: SerialNumber: syz [ 359.103325][ T5927] usb 6-1: config 0 descriptor?? [ 359.145324][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.372596][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.402022][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.772'. [ 359.725822][ T5927] usb 6-1: USB disconnect, device number 12 [ 360.028529][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.128950][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.575857][ T5872] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 360.825673][ T5872] usb 8-1: Using ep0 maxpacket: 32 [ 360.923719][ T5872] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 361.061777][ T5872] usb 8-1: config 0 has no interface number 0 [ 361.178507][ T5872] usb 8-1: config 0 interface 12 has no altsetting 0 [ 361.227053][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.245362][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.257374][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.265182][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.273374][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 361.280740][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.292508][ T5872] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 361.326438][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.341276][ T5872] usb 8-1: Product: syz [ 361.345644][ T5872] usb 8-1: Manufacturer: syz [ 361.350260][ T5872] usb 8-1: SerialNumber: syz [ 361.479111][ T5872] usb 8-1: config 0 descriptor?? [ 361.698413][ T29] audit: type=1326 audit(1739618475.564:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22eb8cde9 code=0x7ffc0000 [ 361.758644][ T29] audit: type=1326 audit(1739618475.564:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22eb8cde9 code=0x7ffc0000 [ 361.793520][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 361.796583][ T9916] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.811597][ T29] audit: type=1326 audit(1739618475.564:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc22eb8b750 code=0x7ffc0000 [ 361.857535][ T29] audit: type=1326 audit(1739618475.564:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22eb8cde9 code=0x7ffc0000 [ 361.881547][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.893457][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.902381][ T29] audit: type=1326 audit(1739618475.564:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22eb8cde9 code=0x7ffc0000 [ 361.922224][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.952600][ T29] audit: type=1326 audit(1739618475.584:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc22eb8cde9 code=0x7ffc0000 [ 361.977584][ T8] usb 6-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 361.977702][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.002994][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 362.011375][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.014006][ T8] usb 6-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 362.039780][ T29] audit: type=1326 audit(1739618475.584:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc22eb8cde9 code=0x7ffc0000 [ 362.063959][ T29] audit: type=1326 audit(1739618475.584:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc22eb8cde9 code=0x7ffc0000 [ 362.088092][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.101282][ T29] audit: type=1326 audit(1739618475.584:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9914 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc22eb8cde9 code=0x7ffc0000 [ 362.132857][ T8] usb 6-1: Product: syz [ 362.143186][ T8] usb 6-1: Manufacturer: syz [ 362.153164][ T8] usb 6-1: SerialNumber: syz [ 362.378972][ T5872] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 362.394362][ T5872] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 362.410283][ T5872] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 362.440728][ T5872] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 362.459170][ T8] qmi_wwan 6-1:1.0: skipping garbage [ 362.479785][ T8] qmi_wwan 6-1:1.0: probe with driver qmi_wwan failed with error -22 [ 362.662492][ T5872] usb 8-1: USB disconnect, device number 6 [ 362.684881][ T8] usb 6-1: USB disconnect, device number 13 [ 362.782932][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 363.376946][ T5829] Bluetooth: hci0: command tx timeout [ 363.956279][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.7.784'. [ 364.139176][ T5829] Bluetooth: hci1: command tx timeout [ 364.726741][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.744725][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.759153][ T68] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 364.776304][ T68] bond0 (unregistering): Released all slaves [ 364.796620][ T9949] tipc: Invalid UDP bearer configuration [ 364.796648][ T9949] tipc: Enabling of bearer rejected, failed to enable media [ 365.097883][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.785'. [ 365.455917][ T5829] Bluetooth: hci0: command tx timeout [ 365.701046][ T9981] netlink: 56 bytes leftover after parsing attributes in process `syz.5.789'. [ 365.788503][ T68] hsr_slave_0: left promiscuous mode [ 365.797112][ T68] hsr_slave_1: left promiscuous mode [ 365.803058][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.811557][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.819797][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.841367][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.891794][ T68] veth1_macvtap: left promiscuous mode [ 365.905618][ T68] veth0_macvtap: left promiscuous mode [ 365.912535][ T68] veth1_vlan: left promiscuous mode [ 365.920561][ T68] veth0_vlan: left promiscuous mode [ 366.176806][ T5829] Bluetooth: hci1: command tx timeout [ 367.595654][ T5829] Bluetooth: hci0: command tx timeout [ 368.290070][ T5829] Bluetooth: hci1: command tx timeout [ 369.321510][ T68] team0 (unregistering): Port device team_slave_1 removed [ 369.436088][ T68] team0 (unregistering): Port device team_slave_0 removed [ 369.714213][ T5829] Bluetooth: hci0: command tx timeout [ 370.418208][ T5829] Bluetooth: hci1: command tx timeout [ 372.386232][T10104] netlink: 'syz.5.802': attribute type 10 has an invalid length. [ 372.446309][T10104] macvlan0: entered promiscuous mode [ 372.452140][T10104] macvlan0: entered allmulticast mode [ 372.491389][T10104] veth1_vlan: entered allmulticast mode [ 372.511354][T10104] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 372.568118][T10111] sp0: Synchronizing with TNC [ 372.669666][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 373.088304][ T5927] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 373.151817][ T9920] chnl_net:caif_netlink_parms(): no params data found [ 373.319706][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 373.343785][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.369763][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 373.393677][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.411769][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 373.432628][ T9900] bridge_slave_0: entered allmulticast mode [ 373.473266][ T5927] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 373.485010][ T9900] bridge_slave_0: entered promiscuous mode [ 373.489788][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.495619][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.516820][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.525520][ T5927] usb 6-1: Product: syz [ 373.530940][ T5927] usb 6-1: Manufacturer: syz [ 373.543915][ T5927] usb 6-1: SerialNumber: syz [ 373.572525][ T9900] bridge_slave_1: entered allmulticast mode [ 373.575177][ T5927] usb 6-1: config 0 descriptor?? [ 373.596767][ T5927] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 373.605837][ T9900] bridge_slave_1: entered promiscuous mode [ 373.631744][ T5927] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 373.687450][T10145] netlink: 288 bytes leftover after parsing attributes in process `syz.7.808'. [ 373.735657][T10145] netlink: 32 bytes leftover after parsing attributes in process `syz.7.808'. [ 373.912849][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.925810][T10145] netlink: 40 bytes leftover after parsing attributes in process `syz.7.808'. [ 374.036740][ T5927] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 374.044694][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.530337][T10157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.704952][ T5927] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 374.721265][ T5927] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 374.743191][ T5927] em28xx 6-1:0.0: No AC97 audio processor [ 374.761795][ T5927] usb 6-1: USB disconnect, device number 14 [ 374.779381][ T5927] em28xx 6-1:0.0: Disconnecting em28xx [ 374.788923][ T5927] em28xx 6-1:0.0: Freeing device [ 374.853927][ T9900] team0: Port device team_slave_0 added [ 374.890119][T10162] 9pnet_fd: Insufficient options for proto=fd [ 374.900187][T10164] 9pnet_fd: Insufficient options for proto=fd [ 375.491494][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.598750][ T9900] team0: Port device team_slave_1 added [ 375.622348][T10179] x_tables: duplicate underflow at hook 3 [ 375.848816][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.910952][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.955454][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.015758][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.043808][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.065468][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.135618][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.156477][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.163673][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.192955][ T9920] bridge_slave_0: entered allmulticast mode [ 376.202519][ T9920] bridge_slave_0: entered promiscuous mode [ 376.233611][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.261651][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.480990][ T9920] bridge_slave_1: entered allmulticast mode [ 376.498622][ T9920] bridge_slave_1: entered promiscuous mode [ 376.515562][ T5927] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 376.548985][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.821069][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.232361][ T68] bridge_slave_1: left allmulticast mode [ 377.238215][ T68] bridge_slave_1: left promiscuous mode [ 377.243910][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.340889][ T68] bridge_slave_0: left allmulticast mode [ 377.346958][ T5927] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 377.374748][ T68] bridge_slave_0: left promiscuous mode [ 377.377363][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.387019][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.446830][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.458094][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.466584][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.477212][ T5927] usb 6-1: config 0 descriptor?? [ 377.487384][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.497032][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 377.513105][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.635809][ T7613] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 377.808121][ T7613] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.824061][ T7613] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.837682][ T7613] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 377.853925][ T7613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.862308][ T7613] usb 2-1: SerialNumber: syz [ 377.893901][ T5927] [drm:udl_init] *ERROR* Selecting channel failed [ 377.935069][ T5927] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 377.955821][ T5927] [drm] Initialized udl on minor 2 [ 377.985596][ T5927] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 378.046027][ T5927] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 378.064778][ T978] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 378.083113][ T5927] usb 6-1: USB disconnect, device number 15 [ 378.112073][ T978] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 378.206814][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.247358][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.269060][ T68] bond0 (unregistering): Released all slaves [ 378.653314][ T9920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.744783][ T9920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.795830][ T9900] hsr_slave_0: entered promiscuous mode [ 378.803796][ T9900] hsr_slave_1: entered promiscuous mode [ 378.810840][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.821774][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.821900][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.836192][ T9900] Cannot create hsr debugfs directory [ 378.886968][ T9920] team0: Port device team_slave_0 added [ 378.933023][ T9920] team0: Port device team_slave_1 added [ 379.044685][ T68] hsr_slave_0: left promiscuous mode [ 379.051240][ T68] hsr_slave_1: left promiscuous mode [ 379.058145][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.067499][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.075834][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.083490][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.094717][T10249] 9pnet_fd: Insufficient options for proto=fd [ 379.116957][ T68] veth1_macvtap: left promiscuous mode [ 379.122493][ T68] veth0_macvtap: left promiscuous mode [ 379.129000][ T68] veth1_vlan: left promiscuous mode [ 379.134308][ T68] veth0_vlan: left promiscuous mode [ 379.202204][ T7613] usb 2-1: 0:2 : does not exist [ 379.252714][ T7613] usb 2-1: USB disconnect, device number 10 [ 379.615973][ T5829] Bluetooth: hci3: command tx timeout [ 380.512370][ T68] team0 (unregistering): Port device team_slave_1 removed [ 380.554563][ T68] team0 (unregistering): Port device team_slave_0 removed [ 380.993069][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.000273][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.027523][ T9920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.040415][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.047455][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.073501][ T9920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.089177][T10247] netlink: 48 bytes leftover after parsing attributes in process `syz.5.821'. [ 381.252317][T10258] 9pnet_fd: Insufficient options for proto=fd [ 381.341774][ T9920] hsr_slave_0: entered promiscuous mode [ 381.376464][ T9920] hsr_slave_1: entered promiscuous mode [ 381.382944][ T9920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.405861][ T9920] Cannot create hsr debugfs directory [ 381.595775][ T5927] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 381.830865][ T5829] Bluetooth: hci3: command tx timeout [ 382.301958][T10209] chnl_net:caif_netlink_parms(): no params data found [ 382.436416][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 382.470028][ T5927] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 382.480026][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.543441][ T5927] usb 2-1: Product: syz [ 382.569146][ T5927] usb 2-1: Manufacturer: syz [ 382.587266][ T5927] usb 2-1: SerialNumber: syz [ 382.654608][ T5927] usb 2-1: config 0 descriptor?? [ 383.070636][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 383.196091][T10209] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.213316][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.224162][T10209] bridge_slave_0: entered allmulticast mode [ 383.240408][T10209] bridge_slave_0: entered promiscuous mode [ 383.263185][T10209] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.278263][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.293176][T10209] bridge_slave_1: entered allmulticast mode [ 383.304103][T10209] bridge_slave_1: entered promiscuous mode [ 383.400780][ T68] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.590152][ T68] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.633919][T10209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.678998][T10209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.747986][ T68] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.777397][ T5927] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 383.855710][ T5829] Bluetooth: hci3: command tx timeout [ 383.863184][ T68] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.893320][T10209] team0: Port device team_slave_0 added [ 383.944539][T10209] team0: Port device team_slave_1 added [ 383.997476][ T9900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.018175][ T9900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.162639][ T9900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.530994][T10209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.549324][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.677448][T10209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.729033][ T9900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.906241][T10209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.913233][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.023750][ T978] usb 2-1: USB disconnect, device number 11 [ 385.049207][T10209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.704343][ T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 385.758985][T10209] hsr_slave_0: entered promiscuous mode [ 385.778337][T10209] hsr_slave_1: entered promiscuous mode [ 385.805800][T10209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.820618][T10209] Cannot create hsr debugfs directory [ 385.899382][ T51] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 385.930976][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.939318][ T5829] Bluetooth: hci3: command tx timeout [ 385.947289][ T51] usb 2-1: Product: syz [ 385.951577][ T51] usb 2-1: Manufacturer: syz [ 385.956742][ T51] usb 2-1: SerialNumber: syz [ 385.968271][ T51] usb 2-1: config 0 descriptor?? [ 386.109744][ T68] macvlan1: left allmulticast mode [ 386.114917][ T68] veth1_vlan: left allmulticast mode [ 386.141062][ T68] macvlan1: left promiscuous mode [ 386.155699][ T68] bridge0: port 3(macvlan1) entered disabled state [ 386.177491][ T51] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 386.185943][ T68] bridge_slave_1: left allmulticast mode [ 386.191624][ T68] bridge_slave_1: left promiscuous mode [ 386.194433][ T51] f81604 2-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 386.205671][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.215172][ T51] f81604 2-1:0.0: probe with driver f81604 failed with error -121 [ 386.221741][ T68] bridge_slave_0: left allmulticast mode [ 386.229697][ T5927] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 386.245582][ T68] bridge_slave_0: left promiscuous mode [ 386.251380][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.381441][ T58] usb 2-1: USB disconnect, device number 12 [ 386.417360][ T5927] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.438778][ T5927] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 386.468861][ T5927] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 386.499209][ T5927] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.524465][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 386.547157][ T5927] usb 6-1: Product: syz [ 386.551377][ T5927] usb 6-1: Manufacturer: syz [ 386.568355][ T5927] usb 6-1: SerialNumber: syz [ 386.577681][ T5927] cdc_mbim 6-1:1.0: skipping garbage [ 386.770130][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.784924][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.799298][ T68] bond0 (unregistering): Released all slaves [ 386.849850][T10345] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 387.206817][ T9920] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 387.220629][ T9920] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 387.237977][ T9920] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 387.307270][ T9920] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 387.365004][ T68] dummy0: left promiscuous mode [ 387.372457][ T68] team0: left promiscuous mode [ 387.386602][ T68] team_slave_0: left promiscuous mode [ 387.395180][ T68] team_slave_1: left promiscuous mode [ 387.407026][ T68] hsr_slave_0: left promiscuous mode [ 387.413093][ T68] hsr_slave_1: left promiscuous mode [ 387.419623][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.427570][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.435546][ T978] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 387.436018][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.450984][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.474839][ T68] veth1_macvtap: left promiscuous mode [ 387.480493][ T68] veth0_macvtap: left promiscuous mode [ 387.488641][ T68] veth1_vlan: left promiscuous mode [ 387.493962][ T68] veth0_vlan: left promiscuous mode [ 387.494228][T10330] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 387.598106][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 387.636272][ T978] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 387.655450][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.686728][ T978] usb 2-1: config 0 descriptor?? [ 387.708283][ T978] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 387.721104][ T5927] cdc_mbim 6-1:1.0: failed to get mac address [ 387.741141][ T5927] cdc_mbim 6-1:1.0: bind() failure [ 387.761305][ T5927] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 387.792950][ T5927] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 387.822338][ T5927] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 387.835320][ T5927] usb 6-1: USB disconnect, device number 16 [ 388.304975][T10356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.315996][T10356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.189308][ T68] team0 (unregistering): Port device team_slave_1 removed [ 389.310297][ T68] team0 (unregistering): Port device team_slave_0 removed [ 390.310407][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.407103][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.285992][ T978] usb 2-1: USB disconnect, device number 13 [ 391.472881][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.480077][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.537320][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.544467][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.604325][T10445] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 391.685504][ T5874] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 391.708005][ T9920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.821507][ T9920] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.874585][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.892192][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.916709][ T5874] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 391.936218][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.943351][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.952860][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.990732][ T5874] usb 6-1: config 0 descriptor?? [ 392.011819][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.019020][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.188643][T10209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.231093][T10209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.276034][T10209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.306852][T10209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.449506][ T5874] cp2112 0003:10C4:EA90.0009: item fetching failed at offset 5/7 [ 392.472450][ T5874] cp2112 0003:10C4:EA90.0009: parse failed [ 392.504497][ T5874] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -22 [ 392.567529][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.598676][T10209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.619063][ T9920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.644575][T10209] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.669620][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.676803][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.777677][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.784793][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.898751][ T9900] veth0_vlan: entered promiscuous mode [ 392.930531][ T9900] veth1_vlan: entered promiscuous mode [ 392.961291][T10209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.101511][ T9900] veth0_macvtap: entered promiscuous mode [ 393.133181][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 393.154709][ T9900] veth1_macvtap: entered promiscuous mode [ 393.267253][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.282650][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.293969][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.308958][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.328351][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.550233][ T9920] veth0_vlan: entered promiscuous mode [ 393.609346][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.695064][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.782501][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.878871][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.935051][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.979025][ T9920] veth1_vlan: entered promiscuous mode [ 394.001019][ T9900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.018958][ T9900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.041188][ T9900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.051075][ T9900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.130524][T10209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.251357][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.275788][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.290491][ T9920] veth0_macvtap: entered promiscuous mode [ 394.324453][ T9920] veth1_macvtap: entered promiscuous mode [ 394.381290][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.416537][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.444053][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.474375][ T8] usb 6-1: USB disconnect, device number 17 [ 394.481133][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.505816][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.529499][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.561672][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.598212][ T7851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.623309][ T7851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.639904][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.665509][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.685711][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.712560][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.740853][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.754387][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.766236][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.776307][T10521] tipc: Invalid UDP bearer configuration [ 394.776345][T10521] tipc: Enabling of bearer rejected, failed to enable media [ 394.832131][ T9920] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.881529][ T9920] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.895855][ T9920] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.914408][ T9920] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.003874][T10209] veth0_vlan: entered promiscuous mode [ 395.084597][T10209] veth1_vlan: entered promiscuous mode [ 395.247571][T10209] veth0_macvtap: entered promiscuous mode [ 395.264032][T10209] veth1_macvtap: entered promiscuous mode [ 395.674394][T10552] netlink: 60 bytes leftover after parsing attributes in process `syz.3.771'. [ 396.295953][ T5870] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 396.360721][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.416807][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.432961][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.455348][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.478316][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.510111][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.536686][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.557871][ T5870] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 396.580073][ T5870] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 396.592647][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.629201][T10209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.636760][ T5870] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 396.658960][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.678995][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.710579][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.729332][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.751728][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.769631][T10542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 396.784186][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.797602][ T5870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.814078][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.830481][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.884028][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.895128][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.914255][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 396.920689][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 396.926777][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.062710][T10209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.088268][T10209] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.169776][T10209] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.105654][T10566] ceph: No mds server is up or the cluster is laggy [ 398.112993][ T25] libceph: connect (1)[c::]:6789 error -101 [ 398.133976][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 398.395986][T10209] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.481927][T10209] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.752498][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.784378][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.820793][ T8] usb 2-1: USB disconnect, device number 14 [ 398.996985][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.004859][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.147673][ T6077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.155677][T10585] netlink: 'syz.9.775': attribute type 10 has an invalid length. [ 399.174674][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.175498][T10585] macvlan0: entered promiscuous mode [ 399.208312][T10585] macvlan0: entered allmulticast mode [ 399.286943][T10585] veth1_vlan: entered allmulticast mode [ 399.348951][T10585] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 399.525283][T10590] xt_hashlimit: max too large, truncated to 1048576 [ 399.533453][T10590] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 400.046752][T10595] netlink: 'syz.5.856': attribute type 10 has an invalid length. [ 400.076173][T10595] netlink: 40 bytes leftover after parsing attributes in process `syz.5.856'. [ 400.113984][T10595] bridge0: port 3(macvlan1) entered blocking state [ 400.155941][T10595] bridge0: port 3(macvlan1) entered disabled state [ 400.241500][T10595] macvlan1: entered allmulticast mode [ 400.304115][T10595] macvlan1: entered promiscuous mode [ 400.338938][T10595] bridge0: port 3(macvlan1) entered blocking state [ 400.356103][T10595] bridge0: port 3(macvlan1) entered forwarding state [ 401.570795][T10626] FAULT_INJECTION: forcing a failure. [ 401.570795][T10626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.586406][T10626] CPU: 0 UID: 0 PID: 10626 Comm: syz.5.863 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 401.586430][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 401.586445][T10626] Call Trace: [ 401.586451][T10626] [ 401.586458][T10626] dump_stack_lvl+0x241/0x360 [ 401.586482][T10626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.586516][T10626] should_fail_ex+0x40a/0x550 [ 401.586541][T10626] _copy_from_user+0x2d/0xb0 [ 401.586560][T10626] kstrtouint_from_user+0xc6/0x190 [ 401.586586][T10626] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 401.586611][T10626] ? exc_double_fault+0xc0/0x1b0 [ 401.586630][T10626] ? preempt_schedule_common+0x84/0xd0 [ 401.586647][T10626] ? preempt_schedule+0xe1/0xf0 [ 401.586663][T10626] ? __pfx_preempt_schedule+0x10/0x10 [ 401.586685][T10626] proc_fail_nth_write+0xaa/0x2d0 [ 401.586711][T10626] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 401.586732][T10626] ? preempt_schedule_thunk+0x1a/0x30 [ 401.586752][T10626] ? sb_start_write+0x107/0x1c0 [ 401.586771][T10626] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 401.586796][T10626] vfs_write+0x29f/0xd10 [ 401.586817][T10626] ? fdget_pos+0x254/0x320 [ 401.586837][T10626] ? __pfx_vfs_write+0x10/0x10 [ 401.586859][T10626] ? __rcu_read_unlock+0xa1/0x110 [ 401.586878][T10626] ? __fget_files+0x2a/0x410 [ 401.586895][T10626] ? __fget_files+0x395/0x410 [ 401.586910][T10626] ? __fget_files+0x2a/0x410 [ 401.586934][T10626] ksys_write+0x18f/0x2b0 [ 401.586956][T10626] ? __pfx_ksys_write+0x10/0x10 [ 401.586986][T10626] do_syscall_64+0xf3/0x230 [ 401.587004][T10626] ? clear_bhb_loop+0x35/0x90 [ 401.587027][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.587047][T10626] RIP: 0033:0x7f5abaf8b89f [ 401.587062][T10626] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 401.587077][T10626] RSP: 002b:00007f5ab8df6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 401.587095][T10626] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5abaf8b89f [ 401.587106][T10626] RDX: 0000000000000001 RSI: 00007f5ab8df60a0 RDI: 0000000000000005 [ 401.587116][T10626] RBP: 00007f5ab8df6090 R08: 0000000000000000 R09: 0000000000000000 [ 401.587132][T10626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 401.587141][T10626] R13: 0000000000000000 R14: 00007f5abb1a6160 R15: 00007fff9c8a0c38 [ 401.587164][T10626] [ 402.104716][T10623] Process accounting resumed [ 403.576148][T10657] 9pnet_fd: Insufficient options for proto=fd [ 403.598747][T10654] netlink: 48 bytes leftover after parsing attributes in process `syz.5.869'. [ 403.791620][T10662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.595523][ T978] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 404.746114][ T978] usb 10-1: Using ep0 maxpacket: 32 [ 404.785497][ T978] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 404.841214][ T978] usb 10-1: config 0 has no interface number 0 [ 404.857442][ T978] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 404.912048][ T978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.944114][ T978] usb 10-1: Product: syz [ 404.965327][ T978] usb 10-1: Manufacturer: syz [ 404.981550][ T978] usb 10-1: SerialNumber: syz [ 405.020512][ T978] usb 10-1: config 0 descriptor?? [ 405.135654][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 405.139639][ T978] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 405.349203][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 405.353376][T10691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.877'. [ 405.680720][ T978] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 405.707668][ T978] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 405.729202][ T25] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 405.745525][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.784124][ T25] usb 5-1: Product: syz [ 405.809291][ T25] usb 5-1: Manufacturer: syz [ 405.813954][ T25] usb 5-1: SerialNumber: syz [ 405.881809][ T25] usb 5-1: config 0 descriptor?? [ 405.934583][ T25] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 405.995545][ T25] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 406.984268][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 406.993380][ T978] usb 10-1: USB disconnect, device number 12 [ 407.018409][ T978] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 407.065371][ T978] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 407.126279][ T978] quatech2 10-1:0.51: device disconnected [ 408.173955][T10726] netlink: 48 bytes leftover after parsing attributes in process `syz.9.884'. [ 408.559741][ T5822] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 408.795483][ T978] usb 5-1: USB disconnect, device number 8 [ 408.869415][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 408.918697][ T5822] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 408.936378][ T5822] usb 4-1: config 0 has no interface number 0 [ 408.967705][ T5822] usb 4-1: config 0 interface 184 has no altsetting 0 [ 409.572681][ T5822] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.260722][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.390725][ T5822] usb 4-1: Product: syz [ 410.395544][ T5822] usb 4-1: Manufacturer: syz [ 410.429522][ T5822] usb 4-1: SerialNumber: syz [ 410.466031][ T5822] usb 4-1: config 0 descriptor?? [ 410.531448][ T5822] smsc75xx v1.0.0 [ 411.071672][ T5822] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 411.120783][ T5822] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 411.174512][ T5822] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 411.231899][ T5822] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 411.259712][ T5822] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 411.290017][ T5822] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 411.365922][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 411.822451][T10769] syz.3.892: attempt to access beyond end of device [ 411.822451][T10769] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 411.839799][T10769] VFS: unable to read V7 FS superblock on device nbd3. [ 411.846968][T10769] VFS: could not find a valid V7 on nbd3. [ 411.903538][ T5822] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 411.981508][ T5822] usb 4-1: USB disconnect, device number 7 [ 414.738008][T10791] netlink: 'syz.3.895': attribute type 8 has an invalid length. [ 415.371529][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 415.371550][ T29] audit: type=1800 audit(1739618785.169:162): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.897" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 417.829157][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 420.990512][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 421.177951][T10850] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 422.576750][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 423.182918][ T8] usb 4-1: device descriptor read/64, error -71 [ 423.712111][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 424.075966][ T8] usb 4-1: device descriptor read/64, error -71 [ 424.184985][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'. [ 424.201966][ T8] usb usb4-port1: attempt power cycle [ 424.260253][T10906] FAULT_INJECTION: forcing a failure. [ 424.260253][T10906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.415581][T10906] CPU: 1 UID: 0 PID: 10906 Comm: syz.9.921 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 424.415607][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 424.415616][T10906] Call Trace: [ 424.415621][T10906] [ 424.415629][T10906] dump_stack_lvl+0x241/0x360 [ 424.415652][T10906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.415667][T10906] ? __pfx__printk+0x10/0x10 [ 424.415689][T10906] ? __pfx_lock_release+0x10/0x10 [ 424.415715][T10906] should_fail_ex+0x40a/0x550 [ 424.415740][T10906] _copy_from_user+0x2d/0xb0 [ 424.415759][T10906] move_addr_to_kernel+0x82/0x150 [ 424.415778][T10906] copy_msghdr_from_user+0x43e/0x680 [ 424.415800][T10906] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 424.415812][T10906] ? __fget_files+0x2a/0x410 [ 424.415829][T10906] ? __fget_files+0x2a/0x410 [ 424.415850][T10906] __sys_sendmsg+0x209/0x350 [ 424.415876][T10906] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.415922][T10906] ? ksys_write+0x20d/0x2b0 [ 424.415949][T10906] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.415970][T10906] ? do_syscall_64+0x100/0x230 [ 424.415989][T10906] ? do_syscall_64+0xb6/0x230 [ 424.416007][T10906] do_syscall_64+0xf3/0x230 [ 424.416024][T10906] ? clear_bhb_loop+0x35/0x90 [ 424.416047][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.416066][T10906] RIP: 0033:0x7f038df8cde9 [ 424.416081][T10906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.416093][T10906] RSP: 002b:00007f038eea2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.416110][T10906] RAX: ffffffffffffffda RBX: 00007f038e1a5fa0 RCX: 00007f038df8cde9 [ 424.416120][T10906] RDX: 0000000000000000 RSI: 0000400000001180 RDI: 0000000000000003 [ 424.416130][T10906] RBP: 00007f038eea2090 R08: 0000000000000000 R09: 0000000000000000 [ 424.416139][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.416148][T10906] R13: 0000000000000000 R14: 00007f038e1a5fa0 R15: 00007ffca3501888 [ 424.416169][T10906] [ 424.937012][T10912] 9pnet_fd: Insufficient options for proto=fd [ 425.006847][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 425.045088][ T8] usb 4-1: device descriptor read/8, error -71 [ 425.295757][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 425.364568][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.9.925'. [ 425.697594][ T8] usb 4-1: device not accepting address 11, error -71 [ 425.925584][ T8] usb usb4-port1: unable to enumerate USB device [ 427.595533][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 427.608866][T10973] netlink: 'syz.9.938': attribute type 1 has an invalid length. [ 427.653811][T10973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.768586][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.780861][T10969] netlink: 48 bytes leftover after parsing attributes in process `syz.5.939'. [ 427.823818][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 427.831636][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.852354][ T58] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 427.874087][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.895351][ T58] usb 5-1: config 0 descriptor?? [ 427.995592][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 428.089678][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.520948][ T58] isku 0003:1E7D:319C.000A: unbalanced collection at end of report description [ 428.543376][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 428.562905][ T58] isku 0003:1E7D:319C.000A: parse failed [ 428.573308][ T25] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 428.588852][ T58] isku 0003:1E7D:319C.000A: probe with driver isku failed with error -22 [ 428.672597][ T25] usb 2-1: config 0 interface 0 has no altsetting 1 [ 428.694864][ T29] audit: type=1326 audit(1739618798.549:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 428.762580][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 428.820366][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.842394][ T29] audit: type=1326 audit(1739618798.589:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 428.861139][T10996] PKCS7: Unknown OID: [5] (bad) [ 428.869416][T10996] PKCS7: Only support pkcs7_signedData type [ 428.873665][ T25] usb 2-1: Product: syz [ 428.897983][ T25] usb 2-1: Manufacturer: syz [ 428.912700][ T25] usb 2-1: SerialNumber: syz [ 428.950803][ T25] usb 2-1: config 0 descriptor?? [ 428.958073][ T29] audit: type=1326 audit(1739618798.589:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 428.993342][ T29] audit: type=1326 audit(1739618798.589:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 429.016016][ T29] audit: type=1326 audit(1739618798.599:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 429.039366][ T29] audit: type=1326 audit(1739618798.599:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 429.069725][ T29] audit: type=1326 audit(1739618798.599:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 429.110123][ T29] audit: type=1326 audit(1739618798.599:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 430.052591][T10964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.079238][ T29] audit: type=1326 audit(1739618798.599:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 430.137494][T10964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.156806][ T29] audit: type=1326 audit(1739618798.599:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10994 comm="syz.9.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038df8cde9 code=0x7ffc0000 [ 430.250183][ T25] usb 2-1: USB disconnect, device number 15 [ 430.336278][ T58] usb 5-1: USB disconnect, device number 9 [ 431.302362][ T6197] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.083995][ T6197] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.287189][ T6197] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.594604][ T6197] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.975703][T11029] tipc: Invalid UDP bearer configuration [ 432.975731][T11029] tipc: Enabling of bearer rejected, failed to enable media [ 433.281628][ T6197] macvlan1: left allmulticast mode [ 433.404620][ T6197] macvlan1: left promiscuous mode [ 433.425881][ T6197] bridge0: port 3(macvlan1) entered disabled state [ 433.482025][ T6197] bridge_slave_1: left allmulticast mode [ 433.511852][ T6197] bridge_slave_1: left promiscuous mode [ 433.521056][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.665866][ T6197] bridge_slave_0: left allmulticast mode [ 433.679742][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.682343][ T6197] bridge_slave_0: left promiscuous mode [ 433.694639][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.702894][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.711358][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.736132][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.744806][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 433.752348][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.672655][T11054] netlink: 'syz.4.960': attribute type 1 has an invalid length. [ 434.696055][T11054] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.960'. [ 434.751363][T11056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.961'. [ 435.631505][ T7613] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 435.865537][ T5829] Bluetooth: hci2: command tx timeout [ 436.165478][ T7613] usb 2-1: Using ep0 maxpacket: 16 [ 436.180532][ T6197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.193124][ T7613] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.230278][ T6197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.241568][ T6197] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 436.263815][T11079] overlayfs: failed to clone upperpath [ 436.279810][ T7613] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.329202][ T7613] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.331905][ T6197] veth1_vlan: left allmulticast mode [ 436.339453][ T7613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.437288][ T7613] usb 2-1: Product: syz [ 436.441697][ T7613] usb 2-1: Manufacturer: syz [ 436.448979][ T7613] usb 2-1: SerialNumber: syz [ 436.484298][ T6197] bond0 (unregistering): Released all slaves [ 436.529579][T11074] tipc: Invalid UDP bearer configuration [ 436.529622][T11074] tipc: Enabling of bearer rejected, failed to enable media [ 436.742393][ T7613] usb 2-1: 0:2 : does not exist [ 436.792752][ T7613] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 436.856796][ T7613] usb 2-1: USB disconnect, device number 16 [ 437.584460][ T6197] hsr_slave_0: left promiscuous mode [ 437.592812][ T6197] hsr_slave_1: left promiscuous mode [ 437.606960][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.736068][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.760014][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.864024][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.874279][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.947626][ T6197] veth1_macvtap: left promiscuous mode [ 437.953566][ T5829] Bluetooth: hci2: command tx timeout [ 437.953665][ T6197] veth0_macvtap: left promiscuous mode [ 438.034452][ T6197] veth1_vlan: left promiscuous mode [ 438.044575][ T6197] veth0_vlan: left promiscuous mode [ 440.025574][ T5829] Bluetooth: hci2: command tx timeout [ 440.257294][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.455676][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.906492][ T6197] team0 (unregistering): Port device team_slave_1 removed [ 440.947001][ T6197] team0 (unregistering): Port device team_slave_0 removed [ 441.395177][T11085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.969'. [ 441.415140][T11100] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 441.429138][T11100] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 441.754181][T11039] chnl_net:caif_netlink_parms(): no params data found [ 441.933489][T11117] tipc: Invalid UDP bearer configuration [ 441.933520][T11117] tipc: Enabling of bearer rejected, failed to enable media [ 442.096364][ T978] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 442.104549][ T5831] Bluetooth: hci2: command tx timeout [ 442.234177][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.273112][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.284996][T11039] bridge_slave_0: entered allmulticast mode [ 442.312261][T11039] bridge_slave_0: entered promiscuous mode [ 442.313378][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.334311][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.343884][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.351456][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 442.356133][ T978] usb 5-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 442.371377][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.398960][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.399179][ T978] usb 5-1: config 0 descriptor?? [ 442.431908][T11039] bridge_slave_1: entered allmulticast mode [ 442.452869][T11039] bridge_slave_1: entered promiscuous mode [ 442.550819][T11039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.594180][T11039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.788515][T11039] team0: Port device team_slave_0 added [ 442.841380][T11039] team0: Port device team_slave_1 added [ 442.848015][ T978] wacom 0003:056A:0314.000B: collection stack underflow [ 442.869540][ T978] wacom 0003:056A:0314.000B: item 0 4 0 12 parsing failed [ 442.886489][ T978] wacom 0003:056A:0314.000B: parse failed [ 442.892499][ T978] wacom 0003:056A:0314.000B: probe with driver wacom failed with error -22 [ 443.000411][T11039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.014816][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.059288][T11039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.073348][T11119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 443.087799][ T978] usb 5-1: USB disconnect, device number 10 [ 443.112746][T11039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.891491][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.919239][T11039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.160168][T11135] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 444.233344][T11135] netlink: 'syz.3.980': attribute type 11 has an invalid length. [ 444.247113][T11039] hsr_slave_0: entered promiscuous mode [ 444.265015][T11135] netlink: 220 bytes leftover after parsing attributes in process `syz.3.980'. [ 444.278659][T11039] hsr_slave_1: entered promiscuous mode [ 444.707097][T11158] tmpfs: Bad value for 'mpol' [ 445.488714][T11039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 445.553261][T11039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 445.630003][T11039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 445.703504][T11039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 445.984222][T11039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.099754][T11039] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.169558][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.176795][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.270350][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.277513][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.297614][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 446.491499][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 446.503231][T11039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.526127][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.562576][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.589739][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.615581][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.658835][ T25] usb 2-1: Product: syz [ 446.663055][ T25] usb 2-1: Manufacturer: syz [ 446.692614][ T25] usb 2-1: SerialNumber: syz [ 447.396420][ T25] usb 2-1: 0:2 : does not exist [ 447.431226][ T25] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 447.513097][ T25] usb 2-1: USB disconnect, device number 17 [ 447.523445][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.994'. [ 447.656974][T11039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.926229][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.390031][T11235] openvswitch: netlink: IPv4 tunnel dst address is zero [ 449.402537][T11235] bridge_slave_0: left allmulticast mode [ 449.408586][T11235] bridge_slave_0: left promiscuous mode [ 449.414236][T11235] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.504765][T11235] bridge_slave_1: left allmulticast mode [ 449.512018][T11235] bridge_slave_1: left promiscuous mode [ 449.518117][T11235] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.570002][T11235] bond0: (slave bond_slave_0): Releasing backup interface [ 449.591408][T11235] bond0: (slave bond_slave_1): Releasing backup interface [ 449.618981][T11235] team0: Port device team_slave_0 removed [ 449.628431][T11235] team0: Port device team_slave_1 removed [ 449.634566][T11235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.642025][T11235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.650276][T11235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.657753][T11235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.667977][T11235] bond0: (slave macvlan0): Releasing backup interface [ 449.675795][T11235] veth1_vlan: left allmulticast mode [ 449.709281][T11244] futex_wake_op: syz.3.1000 tries to shift op by 36; fix this program [ 449.731906][T11235] syz.9.999 (11235) used greatest stack depth: 18072 bytes left [ 449.962070][T11255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.970760][T11039] veth0_vlan: entered promiscuous mode [ 449.984444][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.999390][T11255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.031258][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 450.044536][T11039] veth1_vlan: entered promiscuous mode [ 450.113525][T11264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.115956][ T7613] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 450.128574][T11255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.145202][T11039] veth0_macvtap: entered promiscuous mode [ 450.153860][T11255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.191937][T11039] veth1_macvtap: entered promiscuous mode [ 450.207871][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.219671][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.230476][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.264965][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.461367][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.472420][ T7613] usb 5-1: Using ep0 maxpacket: 16 [ 450.478050][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.489240][ T7613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.506451][T11039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.513875][ T7613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.603093][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.652982][ T7613] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 450.696911][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.712496][ T7613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.780777][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.818933][ T7613] usb 5-1: config 0 descriptor?? [ 450.898174][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.914818][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.930229][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.961607][T11039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.971713][T11271] netlink: 'syz.3.1008': attribute type 14 has an invalid length. [ 451.079362][T11273] vlan2: entered promiscuous mode [ 451.104526][T11273] vlan2: entered allmulticast mode [ 451.125548][T11273] hsr_slave_1: entered allmulticast mode [ 451.209605][T11039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.236337][T11039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.245149][T11039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.255532][T11039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.399141][T11285] Bluetooth: MGMT ver 1.23 [ 451.401645][ T7613] playstation 0003:054C:05C4.000C: invalid report_size 1159242995 [ 451.600659][ T799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.609401][ T7851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.619328][ T7613] playstation 0003:054C:05C4.000C: item 0 4 1 7 parsing failed [ 451.651771][ T7613] playstation 0003:054C:05C4.000C: Parse failed [ 451.658953][ T7851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.668270][ T799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.696213][ T7613] playstation 0003:054C:05C4.000C: probe with driver playstation failed with error -22 [ 452.516048][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 452.576534][ T5870] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 452.706308][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 452.739576][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.792585][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.828006][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.848023][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.872504][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 452.884174][ T5870] usb 4-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 452.904123][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.912540][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.923140][ T9] usb 2-1: config 0 descriptor?? [ 452.932044][ T5870] usb 4-1: config 0 descriptor?? [ 452.953210][ T9] hub 2-1:0.0: USB hub found [ 453.222075][ T9] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 453.544315][ T5870] wacom 0003:056A:00D7.000D: unknown main item tag 0x0 [ 453.562779][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 453.577516][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 453.597323][ T5870] wacom 0003:056A:00D7.000D: unknown main item tag 0x0 [ 453.613147][ T5870] wacom 0003:056A:00D7.000D: unknown main item tag 0x0 [ 453.622576][ T9] usb 2-1: USB disconnect, device number 18 [ 453.628743][ T5870] wacom 0003:056A:00D7.000D: unknown main item tag 0x0 [ 453.645185][ T5870] wacom 0003:056A:00D7.000D: unknown main item tag 0x0 [ 453.662365][ T5870] wacom 0003:056A:00D7.000D: Unknown device_type for 'HID 056a:00d7'. Assuming pen. [ 453.715635][ T5870] wacom 0003:056A:00D7.000D: hidraw0: USB HID vff.ff Device [HID 056a:00d7] on usb-dummy_hcd.3-1/input0 [ 453.753546][ T5870] input: Wacom BambooPT 2FG Small Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D7.000D/input/input21 [ 454.765787][ T5870] usb 4-1: USB disconnect, device number 12 [ 454.984635][ T7613] usb 5-1: USB disconnect, device number 11 [ 455.865595][ T7613] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 456.065579][ T7613] usb 5-1: device descriptor read/64, error -71 [ 456.335635][ T7613] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 456.383389][T11365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.433467][T11367] netlink: 'syz.9.1025': attribute type 1 has an invalid length. [ 456.485549][ T7613] usb 5-1: device descriptor read/64, error -71 [ 456.594115][T11367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.607838][ T7613] usb usb5-port1: attempt power cycle [ 456.688337][T11365] bond2: (slave gretap1): making interface the new active one [ 456.965721][T11365] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 456.982778][ T7613] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 457.046381][ T7613] usb 5-1: device descriptor read/8, error -71 [ 457.066834][T11383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.146307][T10327] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 457.326448][ T7613] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 457.368956][ T7613] usb 5-1: device descriptor read/8, error -71 [ 457.415521][T10327] usb 2-1: device descriptor read/64, error -71 [ 457.502160][ T7613] usb usb5-port1: unable to enumerate USB device [ 457.595773][T11399] loop6: detected capacity change from 0 to 524288000 [ 457.675493][T10327] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 457.735786][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 457.849037][T10327] usb 2-1: device descriptor read/64, error -71 [ 457.855785][ T5831] Bluetooth: hci2: command 0x0405 tx timeout [ 458.007729][T10327] usb usb2-port1: attempt power cycle [ 458.007867][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 458.029103][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 458.190173][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 458.201345][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 1024 [ 458.365988][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 458.416427][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 459.379472][T10327] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 459.469454][ T9] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 459.485458][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.501755][ T9] usb 7-1: Product: syz [ 459.513991][ T9] usb 7-1: Manufacturer: syz [ 459.524085][ T9] usb 7-1: SerialNumber: syz [ 459.531465][ T9] usb 7-1: config 0 descriptor?? [ 459.551890][T10327] usb 2-1: device descriptor read/8, error -71 [ 460.626387][ T9] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 460.632469][ T9] input input24: Device does not respond to id packet M [ 460.694118][ T9] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 460.710502][ T9] input input24: Device does not respond to id packet P [ 460.752895][ T9] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 460.775058][ T9] input input24: Device does not respond to id packet B [ 460.785230][ T9] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 460.792813][ T9] input input24: Device does not respond to id packet N [ 460.804829][ T9] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 460.815623][ T9] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 460.848043][ T9] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 460.875136][ T9] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 460.899043][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24 [ 460.974907][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 460.994321][ T9] usb 7-1: USB disconnect, device number 11 [ 461.000424][ C0] iforce 7-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 461.250190][T11466] fuse: Unknown parameter '00000000000000000000004"*詆fO⦥rH*uhP/f?( ' [ 461.409587][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 461.423983][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 461.490551][T11474] fuse: Unknown parameter '000000000000000000000120x000000000000000b' [ 461.508610][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 462.496822][T11486] ufs: You didn't specify the type of your ufs filesystem [ 462.496822][T11486] [ 462.496822][T11486] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 462.496822][T11486] [ 462.496822][T11486] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 462.540766][T11486] syz.3.1047: attempt to access beyond end of device [ 462.540766][T11486] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 463.224536][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 463.390173][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1052'. [ 464.238320][T11497] team0 (unregistering): Port device team_slave_0 removed [ 464.292854][T11497] team0 (unregistering): Port device team_slave_1 removed [ 464.982013][T11523] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1056'. [ 464.985900][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 465.004866][T11526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.064996][T11528] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1057'. [ 465.103753][T11528] team0: entered promiscuous mode [ 465.139768][T11528] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 465.154951][T11528] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 465.199988][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 465.234153][ T9] usb 2-1: can't read configurations, error -61 [ 465.236153][T11533] overlayfs: failed to resolve './file1': -2 [ 465.397037][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 465.680818][T11550] netlink: 'syz.3.1061': attribute type 4 has an invalid length. [ 465.768533][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 465.808850][ T9] usb 2-1: can't read configurations, error -61 [ 465.933725][ T9] usb usb2-port1: attempt power cycle [ 467.083866][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 467.095729][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.153896][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 467.166753][ T9] usb 2-1: can't read configurations, error -61 [ 467.301516][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.333649][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 467.623236][T11579] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1069'. [ 467.639956][ T9] usb 2-1: device not accepting address 26, error -71 [ 467.765220][ T9] usb usb2-port1: unable to enumerate USB device [ 468.092219][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.310118][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 468.337004][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.475713][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 468.497342][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 468.526628][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 468.567587][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 468.585417][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.614197][ T9] usb 2-1: Product: syz [ 468.624598][ T9] usb 2-1: Manufacturer: syz [ 468.651340][ T9] usb 2-1: SerialNumber: syz [ 468.662180][ T9] usb 2-1: config 0 descriptor?? [ 468.681554][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 468.698886][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 468.832032][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.845808][ T7613] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 468.849057][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.868928][ T35] bridge_slave_1: left allmulticast mode [ 468.870198][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.874594][ T35] bridge_slave_1: left promiscuous mode [ 468.874769][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.916534][T11577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.927031][T11577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.956085][T11596] Invalid option length (155) for dns_resolver key [ 469.037496][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.049811][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 469.058621][ T7613] usb 7-1: Using ep0 maxpacket: 16 [ 469.071163][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.274496][ T7613] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 469.655530][ T7613] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 469.664626][ T7613] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.673510][ T35] bridge_slave_0: left allmulticast mode [ 469.697859][ T7613] usb 7-1: config 0 descriptor?? [ 469.716266][ T35] bridge_slave_0: left promiscuous mode [ 469.722032][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.732464][ T7613] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input25 [ 469.918952][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.937692][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.951567][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.964171][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.977284][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 469.987826][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.698666][ T5181] bcm5974 7-1:0.0: could not read from device [ 470.727418][T11618] ALSA: seq fatal error: cannot create timer (-22) [ 470.801149][ T5181] bcm5974 7-1:0.0: could not read from device [ 470.953728][T11615] tmpfs: Bad value for 'mpol' [ 471.026799][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (92) [ 471.071636][ T5181] bcm5974 7-1:0.0: could not read from device [ 471.101732][ T7613] usb 7-1: USB disconnect, device number 12 [ 471.137449][ T5831] Bluetooth: hci0: command tx timeout [ 471.239321][ T9] em28xx 2-1:0.0: Config register raw data: 0x5c [ 471.756422][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 471.776315][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 471.833309][ T9] usb 2-1: USB disconnect, device number 27 [ 471.868754][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 471.922482][ T9] em28xx 2-1:0.0: Freeing device [ 472.095558][ T5831] Bluetooth: hci3: command tx timeout [ 472.321268][T11615] page: refcount:3 mapcount:1 mapping:ffff88802a6d0a28 index:0x0 pfn:0x4ff10 [ 472.331360][T11615] memcg:ffff888011d06000 [ 472.335613][T11615] aops:shmem_aops ino:492 [ 472.339940][T11615] flags: 0xfff0000002012d(locked|referenced|uptodate|lru|active|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 472.351320][T11615] raw: 00fff0000002012d ffff888030764058 ffffea0001fc0a08 ffff88802a6d0a28 [ 472.359932][T11615] raw: 0000000000000000 0000000000000000 0000000300000000 ffff888011d06000 [ 472.368510][T11615] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 472.375808][T11615] page_owner tracks the page as allocated [ 472.382694][T11615] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 11577, tgid 11576 (syz.1.1071), ts 469270160848, free_ts 468270038092 [ 472.400596][T11615] post_alloc_hook+0x1f4/0x240 [ 472.405366][T11615] get_page_from_freelist+0x3651/0x37a0 [ 472.410921][T11615] __alloc_frozen_pages_noprof+0x292/0x710 [ 472.417155][T11615] alloc_pages_mpol+0x311/0x660 [ 472.422003][T11615] folio_alloc_mpol_noprof+0x36/0x70 [ 472.427291][T11615] shmem_alloc_and_add_folio+0x4a0/0x1090 [ 472.433008][T11615] shmem_get_folio_gfp+0x621/0x1840 [ 472.438203][T11615] shmem_fault+0x220/0x5b0 [ 472.442767][T11615] __do_fault+0x135/0x390 [ 472.447114][T11615] __handle_mm_fault+0x4c44/0x70f0 [ 472.452233][T11615] handle_mm_fault+0x2c1/0x7e0 [ 472.457084][T11615] __get_user_pages+0x1a92/0x4140 [ 472.462112][T11615] populate_vma_page_range+0x264/0x330 [ 472.467590][T11615] __mm_populate+0x27a/0x460 [ 472.472191][T11615] vm_mmap_pgoff+0x303/0x430 [ 472.476778][T11615] do_syscall_64+0xf3/0x230 [ 472.481280][T11615] page last free pid 11582 tgid 11582 stack trace: [ 472.487770][T11615] free_unref_folios+0xe2f/0x18a0 [ 472.492792][T11615] folios_put_refs+0x76c/0x860 [ 472.497555][T11615] free_pages_and_swap_cache+0x2e5/0x690 [ 472.503186][T11615] tlb_flush_mmu+0x3a3/0x680 [ 472.507783][T11615] tlb_finish_mmu+0xd4/0x200 [ 472.512376][T11615] exit_mmap+0x52a/0xd40 [ 472.516712][T11615] __mmput+0x115/0x410 [ 472.520774][T11615] exit_mm+0x220/0x310 [ 472.525270][T11615] do_exit+0x9ad/0x28e0 [ 472.529429][T11615] do_group_exit+0x207/0x2c0 [ 472.534014][T11615] __x64_sys_exit_group+0x3f/0x40 [ 472.539039][T11615] x64_sys_call+0x26a8/0x26b0 [ 472.543712][T11615] do_syscall_64+0xf3/0x230 [ 472.548212][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.554202][T11615] ------------[ cut here ]------------ [ 472.559658][T11615] kernel BUG at mm/filemap.c:154! [ 472.564702][T11615] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 472.571625][T11615] CPU: 1 UID: 0 PID: 11615 Comm: syz.1.1071 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 472.582377][T11615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 472.592425][T11615] RIP: 0010:filemap_unaccount_folio+0x73d/0x7d0 [ 472.598661][T11615] Code: cd c7 ff 48 89 df 48 c7 c6 c0 d6 33 8c e8 1b 27 10 00 90 0f 0b e8 e3 cd c7 ff 48 89 df 48 c7 c6 a0 d5 33 8c e8 04 27 10 00 90 <0f> 0b e8 cc cd c7 ff 48 89 df 48 c7 c6 c0 d6 33 8c e8 ed 26 10 00 [ 472.618285][T11615] RSP: 0018:ffffc900056ef070 EFLAGS: 00010046 [ 472.624344][T11615] RAX: 428d8827cc524f00 RBX: ffffea00013fc400 RCX: ffffc900056eec03 [ 472.632305][T11615] RDX: 0000000000000002 RSI: ffffffff8c2ab6a0 RDI: ffffffff8c801880 [ 472.640263][T11615] RBP: 0000000000000000 R08: ffffffff903bb277 R09: 1ffffffff207764e [ 472.648237][T11615] R10: dffffc0000000000 R11: fffffbfff207764f R12: dffffc0000000000 [ 472.656212][T11615] R13: 1ffffd400027f881 R14: ffff88802a6d0a28 R15: ffffea00013fc408 [ 472.664180][T11615] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 472.673110][T11615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.679684][T11615] CR2: 00007f1cfacf1440 CR3: 000000000e938000 CR4: 00000000003526f0 [ 472.687648][T11615] DR0: 0000000000000002 DR1: ffffffffffffffff DR2: 0000000000010001 [ 472.695614][T11615] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.703579][T11615] Call Trace: [ 472.706883][T11615] [ 472.709804][T11615] ? __die_body+0x5f/0xb0 [ 472.714132][T11615] ? die+0x9e/0xc0 [ 472.717845][T11615] ? do_trap+0x15a/0x3a0 [ 472.722515][T11615] ? filemap_unaccount_folio+0x73d/0x7d0 [ 472.728146][T11615] ? do_error_trap+0x1dc/0x2c0 [ 472.732899][T11615] ? filemap_unaccount_folio+0x73d/0x7d0 [ 472.738523][T11615] ? __pfx_do_error_trap+0x10/0x10 [ 472.743630][T11615] ? report_bug+0x3cd/0x500 [ 472.748122][T11615] ? handle_invalid_op+0x34/0x40 [ 472.753049][T11615] ? filemap_unaccount_folio+0x73d/0x7d0 [ 472.758685][T11615] ? exc_invalid_op+0x38/0x50 [ 472.763357][T11615] ? asm_exc_invalid_op+0x1a/0x20 [ 472.768379][T11615] ? filemap_unaccount_folio+0x73d/0x7d0 [ 472.774001][T11615] __filemap_remove_folio+0xc7/0x670 [ 472.779278][T11615] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.784644][T11615] ? __pfx___filemap_remove_folio+0x10/0x10 [ 472.790526][T11615] ? _raw_spin_lock_irq+0xdf/0x120 [ 472.795645][T11615] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 472.801196][T11615] filemap_remove_folio+0xe1/0x1f0 [ 472.806300][T11615] truncate_inode_folio+0x5d/0x70 [ 472.811317][T11615] shmem_undo_range+0x44b/0x1820 [ 472.816249][T11615] ? validate_chain+0x11e/0x5920 [ 472.821184][T11615] ? __pfx_shmem_undo_range+0x10/0x10 [ 472.826556][T11615] ? __pfx_validate_chain+0x10/0x10 [ 472.831783][T11615] ? percpu_counter_add_batch+0xff/0x1f0 [ 472.837412][T11615] shmem_evict_inode+0x29b/0xa80 [ 472.842347][T11615] ? inode_wait_for_writeback+0x111/0x2a0 [ 472.848061][T11615] ? __pfx_shmem_evict_inode+0x10/0x10 [ 472.853518][T11615] ? do_raw_spin_unlock+0x13c/0x8b0 [ 472.858721][T11615] ? __pfx_shmem_evict_inode+0x10/0x10 [ 472.864177][T11615] evict+0x4e8/0x9a0 [ 472.868067][T11615] ? __pfx_evict+0x10/0x10 [ 472.872473][T11615] ? iput+0x713/0xa50 [ 472.876442][T11615] __dentry_kill+0x20d/0x630 [ 472.881020][T11615] ? dput+0x37/0x2b0 [ 472.884903][T11615] dput+0x19f/0x2b0 [ 472.888701][T11615] __fput+0x60b/0x9f0 [ 472.892673][T11615] task_work_run+0x24f/0x310 [ 472.897260][T11615] ? __pfx_task_work_run+0x10/0x10 [ 472.902363][T11615] ? switch_task_namespaces+0xe4/0x110 [ 472.907811][T11615] do_exit+0xa2a/0x28e0 [ 472.911964][T11615] ? __pfx_do_exit+0x10/0x10 [ 472.916542][T11615] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.921920][T11615] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.928436][T11615] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 472.934768][T11615] ? _raw_spin_lock_irq+0xdf/0x120 [ 472.939878][T11615] do_group_exit+0x207/0x2c0 [ 472.944458][T11615] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.949644][T11615] ? lockdep_hardirqs_on+0x99/0x150 [ 472.954922][T11615] get_signal+0x168c/0x1720 [ 472.959429][T11615] ? __pfx_get_signal+0x10/0x10 [ 472.964271][T11615] arch_do_signal_or_restart+0x96/0x860 [ 472.969810][T11615] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 472.975954][T11615] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.981935][T11615] ? syscall_exit_to_user_mode+0xa3/0x340 [ 472.987650][T11615] syscall_exit_to_user_mode+0xce/0x340 [ 472.993187][T11615] do_syscall_64+0x100/0x230 [ 472.997768][T11615] ? clear_bhb_loop+0x35/0x90 [ 473.002439][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.008323][T11615] RIP: 0033:0x7fc22eb8cde9 [ 473.012723][T11615] Code: Unable to access opcode bytes at 0x7fc22eb8cdbf. [ 473.019756][T11615] RSP: 002b:00007fc22fa950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 473.028157][T11615] RAX: fffffffffffffe00 RBX: 00007fc22eda6088 RCX: 00007fc22eb8cde9 [ 473.036116][T11615] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc22eda6088 [ 473.044073][T11615] RBP: 00007fc22eda6080 R08: 0000000000000000 R09: 0000000000000000 [ 473.052031][T11615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc22eda608c [ 473.060599][T11615] R13: 0000000000000000 R14: 00007ffea89d2e50 R15: 00007ffea89d2f38 [ 473.068568][T11615] [ 473.071574][T11615] Modules linked in: [ 473.075472][T11615] ---[ end trace 0000000000000000 ]--- [ 473.080910][T11615] RIP: 0010:filemap_unaccount_folio+0x73d/0x7d0 [ 473.087144][T11615] Code: cd c7 ff 48 89 df 48 c7 c6 c0 d6 33 8c e8 1b 27 10 00 90 0f 0b e8 e3 cd c7 ff 48 89 df 48 c7 c6 a0 d5 33 8c e8 04 27 10 00 90 <0f> 0b e8 cc cd c7 ff 48 89 df 48 c7 c6 c0 d6 33 8c e8 ed 26 10 00 [ 473.106738][T11615] RSP: 0018:ffffc900056ef070 EFLAGS: 00010046 [ 473.112798][T11615] RAX: 428d8827cc524f00 RBX: ffffea00013fc400 RCX: ffffc900056eec03 [ 473.120769][T11615] RDX: 0000000000000002 RSI: ffffffff8c2ab6a0 RDI: ffffffff8c801880 [ 473.128753][T11615] RBP: 0000000000000000 R08: ffffffff903bb277 R09: 1ffffffff207764e [ 473.136720][T11615] R10: dffffc0000000000 R11: fffffbfff207764f R12: dffffc0000000000 [ 473.144682][T11615] R13: 1ffffd400027f881 R14: ffff88802a6d0a28 R15: ffffea00013fc408 [ 473.152642][T11615] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 473.161560][T11615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.168133][T11615] CR2: 00007f1cfacf1440 CR3: 000000000e938000 CR4: 00000000003526f0 [ 473.176618][T11615] DR0: 0000000000000002 DR1: ffffffffffffffff DR2: 0000000000010001 [ 473.184577][T11615] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.192544][T11615] Kernel panic - not syncing: Fatal exception [ 473.198865][T11615] Kernel Offset: disabled [ 473.203184][T11615] Rebooting in 86400 seconds..