last executing test programs: 4.460395145s ago: executing program 0 (id=274): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0, 0x300}}, {{0x0, 0x0, 0x0}, 0x400800}], 0x4, 0x20000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) recvmmsg(r3, &(0x7f0000000b80), 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) 3.460255114s ago: executing program 0 (id=279): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x2c, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x1f}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) 2.340908043s ago: executing program 0 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xb45c, &(0x7f0000000100)) rt_sigqueueinfo(0xffffffffffffffff, 0x26, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r5, 0x0, 0x3f00) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x5, 0x1, 0x7, 0x40200, 0x1, 0x5, '\x00', r4, r5, 0x1, 0x5, 0x2, 0x6}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0xb, 0x80) poll(&(0x7f0000000380)=[{r9, 0x2010}], 0x1, 0xffffffec) ioctl$EVIOCREVOKE(r9, 0x40044591, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x24, r1, 0x1, 0x70bd26, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24d41b6036a153c7}, 0x4) 2.324735143s ago: executing program 3 (id=298): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0ee4ff00040000000800000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000018000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) open_by_handle_at(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/16], 0x40c41) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.199540311s ago: executing program 1 (id=301): openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = socket$inet(0x2, 0x5, 0x5) close(r5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRESOCT=r4, @ANYBLOB="00000000000000002d69000000000000000000001d03eea80af8e4754dacdf4158089db527c8e6a6e18d49a07b9b899ef645e4131364896c9ae1f22d79490d9ada0dff65900a242f3029a11b7a760c05960cc7be3d4131b45c7c04c3bf351c2b98d205b556c733c69e4daf0def8a0e897e2dc5cf06ba8e1d6b705339a0e7efcce4596904bfe4b3e8d44aefa2aca3d2908f34b55ee1d1fb77e3b2034e0e9b1c9fd3b9602f2e1947f052109bc9c218524074271b06d6bc209260b11bff568e46ae940e368a6736735f0512016f91520874f940e0f9f537535019da6380a9a56a28bb4f", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$midi(r6, &(0x7f00000001c0)=""/70, 0xffffffd8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) 2.120323922s ago: executing program 0 (id=302): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) setns(0xc9, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x88ca, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x11, 0x0, 0x0, 0x2}, 0x48) 2.119866387s ago: executing program 3 (id=303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000020000ff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r3, 0x25, 0x4, @void}, 0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002700)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001aff000004000000000000000a0000000000a5701d3409cf8bab1901", @ANYRES32=r6, @ANYBLOB="06001c004e200000"], 0x2c}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000002940)='./file0\x00', 0x0, 0x40, 0x0) stat(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002cc0)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000100)=0xe4) stat(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002ec0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000004f00)='./file0\x00', &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004fc0)='./file0\x00', &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f00000002c0)=0xfe) setuid(r14) lstat(&(0x7f0000005080)='./file0\x00', &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r16, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@fwd={0x0, 0x0, 0x0, 0x10, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) read$FUSE(r16, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r16, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x6, 0x3, 0x5, 0xfffffffffffffffc, 0xfffffffe, 0x100000, {0x0, 0x80000001, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x1004, 0x2000, 0x101, r17, r18, 0xf0ee, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005480)={0x0, 0x0, 0x0}, &(0x7f00000054c0)=0xc) getegid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000580)="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", 0x2000, &(0x7f0000007780)={&(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x1, 0x20000880, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21f}}, &(0x7f0000002600)={0x18, 0x0, 0xffffffffffffffff, {0x3}}, &(0x7f0000002640)={0x18, 0x0, 0x80, {0x3}}, &(0x7f0000002680)={0x18, 0xffffffffffffffda, 0x5, {0xfffffffa}}, &(0x7f00000026c0)={0x18, 0xfffffffffffffffe, 0x9, {0x3}}, &(0x7f0000002740)={0x28, 0x0, 0x20, {{0x2000000000008, 0x0, 0x0, r4}}}, &(0x7f0000002780)={0x60, 0x0, 0x0, {{0x7f, 0x6a7, 0xc47, 0x7c, 0x2, 0x2, 0x10001, 0x4}}}, &(0x7f0000002800)={0x18, 0x7710a8022cb6ef88, 0x800, {0x7}}, &(0x7f0000002840)={0x11, 0x7fffffffffffffff, 0x7, {'\x00'}}, &(0x7f0000002880)={0x20, 0xfffffffffffffffe, 0xd9c, {0x0, 0x12}}, &(0x7f00000028c0)={0x78, 0x0, 0xffffffff, {0x7, 0x9, 0x0, {0x5, 0x80000001, 0xfffffffffffffffa, 0x6, 0x1, 0x10, 0x0, 0x70a, 0x9, 0x8000, 0x1ff, r6, 0xee01, 0x0, 0x5}}}, &(0x7f0000002b40)={0x90, 0xfffffffffffffffe, 0xb, {0x1, 0x3, 0x1000, 0x9f, 0x3, 0x5, {0x6, 0x7, 0x5, 0xe98, 0xfffffffffffffff0, 0x1, 0x2, 0x1, 0x3332, 0xc000, 0xfffffff7, 0x0, r7, 0x2, 0x4}}}, &(0x7f0000002c00)={0xc0, 0x0, 0x0, [{0x0, 0x0, 0x9, 0x9, '/}+%))[($'}, {0x4, 0xfb, 0xb, 0x8, 'syzkaller1\x00'}, {0x0, 0x6, 0xd, 0x7fffffff, '/dev/net/tun\x00'}, {0x1, 0xfff, 0x3, 0x2, '$+\xce'}, {0x1, 0x800, 0x0, 0x8}]}, &(0x7f0000005140)={0x338, 0xfffffffffffffff5, 0x7f, [{{0x4, 0x2, 0xc, 0xfd, 0x3, 0xa929, {0x5, 0x6, 0x81, 0x14d7, 0x7, 0x0, 0x6, 0x86, 0x7a66, 0x8000, 0xfffffff7, r8, r9, 0xd9, 0x8}}, {0x2, 0xfffffffffffffe00, 0xb, 0x3, 'syzkaller1\x00'}}, {{0x4, 0x2, 0x6e, 0x5, 0x0, 0x8a, {0x5, 0x8000, 0x9a, 0x1, 0x9, 0x7fffffffffffffff, 0x5, 0x2, 0x80006, 0x8000, 0xde, 0xffffffffffffffff, r10, 0x1, 0x63178c16}}, {0x6, 0x9, 0xa, 0x7, 'syzkall\xe3\x9de'}}, {{0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x4, {0x0, 0x2, 0x9, 0x2, 0x806, 0x0, 0xfffffffd, 0x922, 0x3, 0x4000, 0x2, 0x0, r11, 0x2, 0x401}}, {0x4, 0x4, 0x0, 0x9}}, {{0x6, 0x2, 0x7, 0x5, 0x9, 0x6, {0x5, 0x0, 0x7fffffffffffffff, 0x8, 0x8000000000000000, 0x81, 0x2, 0xe, 0xc, 0x1000, 0x2, 0xee01, r12, 0x10000, 0x9}}, {0x2, 0xfffffffffffffff3, 0x0, 0x8c000000}}, {{0xfffffffffffffff4, 0x2, 0x7, 0x1, 0x851, 0x5, {0x0, 0xfffffffffffffffc, 0x6, 0x4, 0x2, 0x3, 0xe, 0x84, 0xa93d, 0xa000, 0x0, r14, r15, 0x5, 0x5}}, {0x3, 0x8, 0xb, 0x7, 'syzkaller1\x00'}}]}, &(0x7f0000005500)={0xa0, 0x0, 0xfff, {{0x5, 0x1, 0x80000000, 0x4, 0x1, 0x5, {0x1, 0x0, 0xb, 0xb48, 0x0, 0xe01f, 0xd, 0xff, 0x6, 0x4000, 0x5, r17, r19, 0x3, 0xa6d}}}}, &(0x7f00000055c0)={0x20, 0xfffffffffffffffe, 0x0, {0x9, 0x4, 0x0, 0x50}}, &(0x7f0000007640)={0x130, 0x0, 0x0, {0x1, 0x9adc, 0x0, '\x00', {0x4000, 0x8, 0x8, 0x0, 0x0, 0x0, 0xc000, '\x00', 0x4d2c, 0x101, 0x9, 0x7, {0x2, 0x1}, {0x800000, 0x96}, {0x3fffffffffc, 0x1}, {0x4}, 0x8, 0x3, 0xb22, 0xb}}}}) write$tun(r0, &(0x7f0000000300)=ANY=[], 0x15f) 2.119681442s ago: executing program 0 (id=304): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x4) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='o(m_', 0x4) socket$nl_generic(0x10, 0x3, 0x10) 2.035142754s ago: executing program 3 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000003000000", 0x6033) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000140), 0xffffffffffffff24}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.969422748s ago: executing program 2 (id=307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f00000029c0), 0x0, 0x404c0c4) 1.969033703s ago: executing program 3 (id=308): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000001c0100000100"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0xa, 0x6}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xb, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x4048055) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0f0000000000000001000085000000ae0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listns(&(0x7f0000000000)={0x20, 0xf4240, 0x9, 0x2000000, 0x0, 0x5}, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000240)={0x0, 0x5443, 0x1, 0x0, 0x800376}, 0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x40, 0x4004, @fd=r7, 0x8e9}) io_uring_enter(r7, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) 1.725673596s ago: executing program 2 (id=309): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) read$rfkill(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1.095582372s ago: executing program 1 (id=310): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setns(r1, 0x20000) 1.09535613s ago: executing program 2 (id=311): setns(0xc9, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x1003, 0xf9d, 0x3, {0xa, @raw_data="ba1460dfb29d225c2e04000000d728e6a0828a975fbe64af6af4383f3aa29fb3039b123338719932601c71ba5b6312fd1d4106445ba01c400f36cbe03032c44f1a77d43fa24c4230cfa0479310b2bccad58de125b708cee1a9cf615dbed612c53ab387d99c3138f884ce801538b19c2c373e936ff494907896ac2ea9f538ae95825a278eec6288b56871bbf37b7aa929c54a13e6060bf7015695eae1665572d40e8f71f79e0146ab6a27a22167004fcfc7d9545e010fbd9a078fe700"}, 0x8}) r0 = socket(0x18, 0x80000, 0x5) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bind$inet(r0, &(0x7f0000000000)={0x2a, 0x4e24, @private=0x1000000}, 0x10) 1.095088715s ago: executing program 2 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r6, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) close(r4) capset(0x0, &(0x7f0000000040)={0x240000, 0x200000, 0x4}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) write(r0, &(0x7f0000000100)="600000001000010001000000000000000000000003e7000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/96, 0x60) 1.036869109s ago: executing program 1 (id=313): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x484400, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) (async) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x10005c9, 0x0) (async) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x10005c9, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netstat\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netstat\x00') setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x26, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x11a, 0x26, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) 979.77084ms ago: executing program 3 (id=314): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xf000}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0x5, 0x1, {{0x0, 0x1a, 0x1}, {0x3, 0x4, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 891.123912ms ago: executing program 3 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x8) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="61202a0c00000000000000cdf04f9c114db4bcfb4d2bc5a27cf06337a610ce4fe8ab610c8c085dc10eb3893d9f7c"], 0x8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x6, 0x81}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f00000009c0)={0x2, 0x1, 0xc, 0x4, 0x7d, &(0x7f00000005c0)="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"}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB=', \a\x00', @ANYRES16=r7, @ANYBLOB="010128bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="050034000000000008000c0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) mkdir(&(0x7f0000001300)='./mnt\x00', 0x1ff) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) mount(0x0, &(0x7f0000001500)='./mnt\x00', &(0x7f0000001600)='nfs\x00', 0x0, &(0x7f0000001700)='port=2049,addr=127.0.0.1,vers=4.1,clientaddr=127.0.0.1\x00') fanotify_init(0xf00, 0x80000) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x300, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r7, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) read$FUSE(r10, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000003, {0x0, 0x1fffffffe, 0x40000a, 0x6, 0x8, 0xa, {0x1, 0x8010001, 0x4d0, 0x40d, 0xffff, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r12, r13, 0x200003d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r10, &(0x7f0000000180)={0x50, 0x0, r11, {0x7, 0x26, 0x7fff, 0x61001838, 0x0, 0xfffc, 0x48, 0x5d2186cc, 0x0, 0x0, 0x80, 0x10001}}, 0x50) 823.255554ms ago: executing program 1 (id=316): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 0x37, 0x2, {0x2, 0x800, 0xfff, r0, 0x8, '*q\xa1.^\xba$-'}}, 0x26) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) syz_open_dev$usbfs(0x0, 0x204, 0x2) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) (async, rerun: 32) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) recvmmsg(r3, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x3}}) syz_ublk_add_dev(r5, 0x0, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 481.476101ms ago: executing program 1 (id=317): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000700)="480f27c3c3a70bdb", 0x8, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 323.250059ms ago: executing program 2 (id=318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x4ba0884c, 0x200}]}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) 261.055073ms ago: executing program 2 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) unshare(0x42000000) unshare(0x22020400) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000180)={0x5, 0x0, [{0x2, 0x0, 0x0, 0xffffff01, 0x0, 0x4}, {0x80000019, 0x6, 0x6, 0xfffffffe, 0x0, 0x0, 0xd}, {0x5e2796afef1a2f31, 0xffffffff, 0x4, 0x3, 0x1, 0x80000001, 0xe}, {0x80000001, 0x4, 0x7, 0x1008, 0x56b7, 0x110, 0x3}, {0x80000000, 0x3, 0x2, 0x1, 0x10000, 0x1, 0x5}]}) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r8, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) 129.481346ms ago: executing program 1 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x87, @loopback, 0x4e21, 0x3, 'wrr\x00', 0xa, 0xffff, 0x3b}, 0x2c) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x68b6ea9042ff3741, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fb, 0x2800, 0x440, 0x3, 0xd, 0x2, {0x45, 0x80}, 0xcd, 0x3}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x40, r1, 0x903, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x4}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) shmat(0x0, 0x0, 0x8000) 0s ago: executing program 0 (id=321): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sco\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x16e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000001000000030000000000000202000000060000000000000b03000000003000d4263e8ccb8dcb14656a455c4f52518e53be07d12b2336"], &(0x7f0000000400)=""/240, 0x6f, 0xf0, 0x0, 0x8001}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x18, 0x2000000000000184, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x97, &(0x7f0000002380)=""/151, 0x41000, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e21, @empty}, 0x10) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r5, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYRESDEC]) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30895' (ED25519) to the list of known hosts. [ 42.774686][ T5702] cgroup: Unknown subsys name 'net' [ 42.923791][ T5702] cgroup: Unknown subsys name 'cpuset' [ 42.930165][ T5702] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.913297][ T5702] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.283981][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.293598][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.301802][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.303758][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.306332][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.309006][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.310556][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.312090][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.318112][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.323339][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.325467][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.335610][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.335749][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.349448][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.355860][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.360600][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.362193][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.367023][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.371826][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.376539][ T5754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.031238][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.034359][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.036748][ T5741] bridge_slave_0: entered allmulticast mode [ 49.041780][ T5741] bridge_slave_0: entered promiscuous mode [ 49.065898][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.068934][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.072013][ T5741] bridge_slave_1: entered allmulticast mode [ 49.075452][ T5741] bridge_slave_1: entered promiscuous mode [ 49.085619][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.088545][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.090798][ T5740] bridge_slave_0: entered allmulticast mode [ 49.093479][ T5740] bridge_slave_0: entered promiscuous mode [ 49.119682][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.122400][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.125907][ T5740] bridge_slave_1: entered allmulticast mode [ 49.133788][ T5740] bridge_slave_1: entered promiscuous mode [ 49.151666][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.157827][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.191517][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.194784][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.197225][ T5749] bridge_slave_0: entered allmulticast mode [ 49.200042][ T5749] bridge_slave_0: entered promiscuous mode [ 49.222930][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.234622][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.237908][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.242465][ T5749] bridge_slave_1: entered allmulticast mode [ 49.245977][ T5749] bridge_slave_1: entered promiscuous mode [ 49.259870][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.264751][ T5741] team0: Port device team_slave_0 added [ 49.269109][ T5741] team0: Port device team_slave_1 added [ 49.341924][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.346737][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.349385][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.358741][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.365142][ T5740] team0: Port device team_slave_0 added [ 49.368266][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.370957][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.373567][ T5750] bridge_slave_0: entered allmulticast mode [ 49.377168][ T5750] bridge_slave_0: entered promiscuous mode [ 49.381711][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.384248][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.387003][ T5750] bridge_slave_1: entered allmulticast mode [ 49.390530][ T5750] bridge_slave_1: entered promiscuous mode [ 49.394787][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.399262][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.401743][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.411610][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.423598][ T5740] team0: Port device team_slave_1 added [ 49.476086][ T5749] team0: Port device team_slave_0 added [ 49.491298][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.494937][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.497211][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.505424][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.511349][ T5749] team0: Port device team_slave_1 added [ 49.519528][ T5741] hsr_slave_0: entered promiscuous mode [ 49.522971][ T5741] hsr_slave_1: entered promiscuous mode [ 49.527362][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.532361][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.534692][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.544263][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.588652][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.591523][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.601944][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.628524][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.630763][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.638890][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.643533][ T5750] team0: Port device team_slave_0 added [ 49.670593][ T5750] team0: Port device team_slave_1 added [ 49.696046][ T5740] hsr_slave_0: entered promiscuous mode [ 49.698468][ T5740] hsr_slave_1: entered promiscuous mode [ 49.700621][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 49.702471][ T5740] Cannot create hsr debugfs directory [ 49.729769][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.732633][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.743149][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.757719][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.760513][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.770676][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.837113][ T5749] hsr_slave_0: entered promiscuous mode [ 49.840985][ T5749] hsr_slave_1: entered promiscuous mode [ 49.843559][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 49.845377][ T5749] Cannot create hsr debugfs directory [ 49.917252][ T5750] hsr_slave_0: entered promiscuous mode [ 49.921219][ T5750] hsr_slave_1: entered promiscuous mode [ 49.924218][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 49.926632][ T5750] Cannot create hsr debugfs directory [ 50.137562][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.145192][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.155671][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.160811][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.164002][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.170166][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.183358][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.190007][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.237079][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.243007][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.246221][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.251490][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.254966][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.260801][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.264174][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.271316][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.334636][ T5749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.342220][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.349658][ T5754] Bluetooth: hci0: command tx timeout [ 50.351762][ T5749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.357974][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.363819][ T5749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.370460][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.382589][ T5749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.388317][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.428646][ T5745] Bluetooth: hci1: command tx timeout [ 50.431334][ T64] Bluetooth: hci3: command tx timeout [ 50.433996][ T5754] Bluetooth: hci2: command tx timeout [ 50.454291][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.475963][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.482713][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.488482][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.492642][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.495539][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.500725][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.504205][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.510905][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.544518][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.560043][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.563051][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.585475][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.589480][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.592484][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.639933][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.649612][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.654241][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.656496][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.677330][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.680136][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.695684][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.723441][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.726243][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.738003][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.740642][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.771763][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.816457][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.824461][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.827268][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.842135][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.844492][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.038167][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.075440][ T5741] veth0_vlan: entered promiscuous mode [ 51.083166][ T5741] veth1_vlan: entered promiscuous mode [ 51.106478][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.110364][ T5741] veth0_macvtap: entered promiscuous mode [ 51.117175][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.121392][ T5741] veth1_macvtap: entered promiscuous mode [ 51.145104][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.159429][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.172759][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.187720][ T5749] veth0_vlan: entered promiscuous mode [ 51.199360][ T5740] veth0_vlan: entered promiscuous mode [ 51.220358][ T5749] veth1_vlan: entered promiscuous mode [ 51.228830][ T5740] veth1_vlan: entered promiscuous mode [ 51.266240][ T5750] veth0_vlan: entered promiscuous mode [ 51.269520][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.295882][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.297095][ T5749] veth0_macvtap: entered promiscuous mode [ 51.299715][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.307505][ T5750] veth1_vlan: entered promiscuous mode [ 51.316244][ T5749] veth1_macvtap: entered promiscuous mode [ 51.324387][ T5740] veth0_macvtap: entered promiscuous mode [ 51.334607][ T5740] veth1_macvtap: entered promiscuous mode [ 51.362032][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.364498][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.368321][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.373487][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.383782][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.395342][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.407624][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.414010][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.432329][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.437637][ T5750] veth0_macvtap: entered promiscuous mode [ 51.442403][ T5741] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.450541][ T5750] veth1_macvtap: entered promiscuous mode [ 51.452429][ T5741] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.457743][ T5741] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.471611][ T5741] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.490847][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.534895][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.540437][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.560604][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.565371][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.568007][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.971734][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.974142][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.037387][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.059102][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.068588][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.107036][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.117190][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.154647][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.158190][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.301500][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.310288][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.345152][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.429012][ T5745] Bluetooth: hci0: command tx timeout [ 52.518168][ T5745] Bluetooth: hci1: command tx timeout [ 52.519993][ T5745] Bluetooth: hci2: command tx timeout [ 52.522101][ T5754] Bluetooth: hci3: command tx timeout [ 52.587850][ T5903] process 'syz.1.2' launched '/dev/fd/8' with NULL argv: empty string added [ 52.598755][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607335][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.808866][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.813897][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.036572][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.041702][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.091726][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.096494][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.178569][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.186546][ T5914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 53.188779][ T5914] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 53.195238][ T5914] vhci_hcd vhci_hcd.0: Device attached [ 53.298821][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.301812][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.307134][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.315560][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.321856][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.327139][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.518429][ T29] usb 38-1: SetAddress Request (2) to port 0 [ 53.520518][ T29] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 54.508411][ T5745] Bluetooth: hci0: command tx timeout [ 54.589612][ T5745] Bluetooth: hci2: command tx timeout [ 54.594483][ T5745] Bluetooth: hci3: command tx timeout [ 54.598234][ T5754] Bluetooth: hci1: command tx timeout [ 54.647406][ T5915] vhci_hcd: connection reset by peer [ 54.658323][ T5818] vhci_hcd vhci_hcd.0: stop threads [ 54.660872][ T5818] vhci_hcd vhci_hcd.0: release socket [ 54.669241][ T5818] vhci_hcd vhci_hcd.0: disconnect device [ 54.985607][ T5933] Zero length message leads to an empty skb [ 55.032905][ T5941] overlayfs: failed to resolve './file0/file1': -2 [ 55.828878][ T5948] comedi comedi3: pcmda12: I/O base address not correctly aligned [ 56.070375][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.072865][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.106600][ T42] audit: type=1326 audit(1785580146.831:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 56.124197][ T42] audit: type=1326 audit(1785580146.831:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 56.152786][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.156257][ T42] audit: type=1326 audit(1785580146.831:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.16" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 56.159642][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.185049][ T42] audit: type=1326 audit(1785580146.831:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 56.209645][ T42] audit: type=1326 audit(1785580146.831:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.16" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 56.237747][ T42] audit: type=1326 audit(1785580146.831:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 56.278293][ T5818] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.287631][ T5818] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.297178][ T42] audit: type=1326 audit(1785580146.831:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 56.298097][ T5818] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.324699][ T5818] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.598141][ T5754] Bluetooth: hci0: command tx timeout [ 56.647869][ T5970] sit1: entered promiscuous mode [ 56.670765][ T5754] Bluetooth: hci2: command tx timeout [ 56.672545][ T5754] Bluetooth: hci1: command tx timeout [ 56.674317][ T5745] Bluetooth: hci3: command tx timeout [ 57.040708][ T5972] fuse: Bad value for 'fd' [ 57.722683][ T846] libceph: connect (1)[c::]:6789 error -101 [ 57.730715][ T846] libceph: mon0 (1)[c::]:6789 connect error [ 57.740807][ T846] libceph: connect (1)[c::]:6789 error -101 [ 57.744829][ T846] libceph: mon0 (1)[c::]:6789 connect error [ 57.753361][ T5992] ceph: No mds server is up or the cluster is laggy [ 57.974903][ T6010] warning: `syz.0.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.504533][ T5995] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 58.508145][ T846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.588610][ T29] usb 38-1: device descriptor read/8, error -110 [ 58.632839][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 58.668171][ T846] usb 8-1: Using ep0 maxpacket: 16 [ 58.673413][ T846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 58.682632][ T846] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 58.687055][ T846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.693035][ T846] usb 8-1: Product: syz [ 58.694315][ T846] usb 8-1: Manufacturer: syz [ 58.700725][ T846] usb 8-1: SerialNumber: syz [ 58.713339][ T846] usb 8-1: config 0 descriptor?? [ 58.741030][ T846] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 58.750686][ T846] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 58.757504][ T6032] syzkaller0: entered promiscuous mode [ 58.763254][ T6032] syzkaller0: entered allmulticast mode [ 59.000180][ T29] usb usb38-port1: attempt power cycle [ 59.409014][ T846] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 59.628219][ T5754] Bluetooth: hci3: command 0x0401 tx timeout [ 59.859816][ T846] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 59.865008][ T846] em28xx 8-1:0.0: board has no eeprom [ 59.999072][ T29] usb usb38-port1: unable to enumerate USB device [ 60.253368][ T6057] bridge0: port 3(erspan0) entered blocking state [ 60.256358][ T6057] bridge0: port 3(erspan0) entered disabled state [ 60.259613][ T6057] erspan0: entered allmulticast mode [ 60.262313][ T6057] erspan0: entered promiscuous mode [ 60.586940][ T5754] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 60.678101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.924198][ T6024] em28xx 8-1:0.0: reading from i2c device at 0x7c failed (error=-5) [ 60.978320][ T846] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 60.982391][ T846] em28xx 8-1:0.0: dvb set to bulk mode. [ 60.986607][ T10] em28xx 8-1:0.0: Binding DVB extension [ 61.021670][ T846] usb 8-1: USB disconnect, device number 2 [ 61.036285][ T846] em28xx 8-1:0.0: Disconnecting em28xx [ 61.050967][ T10] em28xx 8-1:0.0: Registering input extension [ 61.054120][ T846] em28xx 8-1:0.0: Closing input extension [ 61.073148][ T846] em28xx 8-1:0.0: Freeing device [ 61.229211][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 61.463407][ T6090] mmap: syz.1.41 (6090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.653764][ T5754] Bluetooth: hci2: ISO packet too small [ 61.737484][ T6101] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 61.821710][ T6110] comedi comedi2: pcl816: I/O base address not correctly aligned [ 61.834583][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 61.867751][ T6111] tipc: Enabling of bearer rejected, failed to enable media [ 61.972740][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.976363][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.979262][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.983511][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.986261][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.989285][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.992797][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.004775][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.008450][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.131572][ T6118] bpf: Bad value for 'mode' [ 62.152688][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'. [ 62.172110][ T6118] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 62.176529][ T6118] team0: Port device batadv1 added [ 62.467090][ T6130] netlink: 204 bytes leftover after parsing attributes in process `syz.1.53'. [ 62.536067][ T6124] usb 1-1: USB disconnect, device number 2 [ 62.822994][ T6156] gre1: entered allmulticast mode [ 62.834078][ T6158] capability: warning: `syz.2.61' uses deprecated v2 capabilities in a way that may be insecure [ 62.894069][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 62.908382][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.917454][ T6166] Cannot find add_set index 2 as target [ 62.937655][ T6163] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 62.942276][ T6163] overlayfs: overlapping lowerdir path [ 63.240537][ T6184] program syz.1.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.280821][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 63.285485][ T6193] bridge_slave_1: left allmulticast mode [ 63.287526][ T6193] bridge_slave_1: left promiscuous mode [ 63.291197][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.304073][ T6193] bridge_slave_0: left allmulticast mode [ 63.306196][ T6193] bridge_slave_0: left promiscuous mode [ 63.308915][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.400662][ T5904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.564896][ T5904] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 63.574458][ T5904] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 63.581447][ T5904] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 63.585381][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.590122][ T5904] usb 5-1: Product: syz [ 63.594101][ T5904] usb 5-1: Manufacturer: syz [ 63.596097][ T5904] usb 5-1: SerialNumber: syz [ 63.607804][ T5904] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 63.619571][ T5904] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 63.632279][ T5904] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 63.972966][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'. [ 63.990301][ T6204] ALSA: mixer_oss: invalid OSS volume 'thtool' [ 64.094558][ T6208] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 64.111787][ T6208] overlayfs: missing 'lowerdir' [ 64.487743][ T6229] cgroup: Name too long [ 64.728669][ T6231] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 64.733483][ T6231] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 66.028220][ T846] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 66.108373][ T6233] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 66.114727][ T6233] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 66.117542][ T6233] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 66.121016][ T6233] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 66.187784][ T846] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 66.191863][ T846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.195358][ T846] usb 6-1: Product: 혿凰픬ꔰ峃舊ꗍ휱腿鯍㠏觲⁥ﯟ撓㩳ꚹ倛篱 [ 66.201134][ T846] usb 6-1: Manufacturer: ⠗鼫껺ᦇ涣⏱迵䊏꠩ꔘ䮾 [ 66.205110][ T846] usb 6-1: SerialNumber: syz [ 66.227648][ T846] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 66.503044][ T846] usb 6-1: USB disconnect, device number 2 [ 66.900843][ T6250] 9p: Bad value for 'wfdno' [ 66.974478][ T6252] gfs2: not a GFS2 filesystem [ 67.068618][ T1482] net_ratelimit: 7 callbacks suppressed [ 67.068636][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.144569][ T846] usb 5-1: USB disconnect, device number 2 [ 67.157960][ T846] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 67.184099][ T846] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 67.200008][ T846] ti_usb_3410_5052 5-1:2.0: device disconnected [ 67.386836][ T6266] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 67.442469][ T6278] syzkaller0: entered promiscuous mode [ 67.444315][ T6278] syzkaller0: entered allmulticast mode [ 67.520199][ T6280] netlink: 72 bytes leftover after parsing attributes in process `syz.0.98'. [ 67.551666][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.658116][ T5814] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.668273][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.699881][ T42] audit: type=1326 audit(1785580157.428:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 67.705834][ T42] audit: type=1326 audit(1785580157.428:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 67.712466][ T42] audit: type=1326 audit(1785580157.428:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 67.721560][ T42] audit: type=1326 audit(1785580157.438:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 67.727891][ T42] audit: type=1326 audit(1785580157.438:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71a73eb code=0x7ffc0000 [ 67.734738][ T42] audit: type=1326 audit(1785580157.438:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 67.741622][ T42] audit: type=1326 audit(1785580157.448:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 67.747777][ T42] audit: type=1326 audit(1785580157.448:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 67.756616][ T42] audit: type=1326 audit(1785580157.448:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 67.763151][ T42] audit: type=1326 audit(1785580157.448:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.2.100" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3fec code=0x7ffc0000 [ 67.788217][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 67.820467][ T5814] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 26995, setting to 1024 [ 67.825189][ T5814] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 67.829070][ T5814] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.830090][ T60] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 67.836303][ T5814] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 67.844754][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 67.847307][ T5814] usb 6-1: Product: syz [ 67.847629][ T60] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 67.848996][ T5814] usb 6-1: Manufacturer: syz [ 67.855517][ T5814] usb 6-1: SerialNumber: syz [ 67.856659][ T60] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 67.860554][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.860695][ T6273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.866059][ T60] usb 8-1: Product: syz [ 67.867446][ T60] usb 8-1: Manufacturer: syz [ 67.869207][ T60] usb 8-1: SerialNumber: syz [ 67.887641][ T60] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 67.908023][ T60] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 67.926341][ T60] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 67.941302][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 67.952053][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 67.978563][ T24] usb 5-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 67.986836][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.997682][ T24] usb 5-1: Product: syz [ 68.005284][ T24] usb 5-1: Manufacturer: syz [ 68.006870][ T24] usb 5-1: SerialNumber: syz [ 68.080610][ T5814] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 68.093149][ T29] usb 8-1: USB disconnect, device number 3 [ 68.111085][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.114194][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 68.124966][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 68.132161][ T29] ti_usb_3410_5052 8-1:2.0: device disconnected [ 68.257225][ T6279] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 68.262187][ T6279] qnx6: wrong signature (magic) in superblock #1. [ 68.264853][ T6279] qnx6: unable to read the first superblock [ 68.280030][ T60] usb 6-1: USB disconnect, device number 3 [ 68.293477][ T60] usblp0: removed [ 68.456561][ T6302] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 68.459186][ T6302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.178261][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.242799][ T6316] Cannot find add_set index 0 as target [ 69.448715][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 69.451561][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 69.458674][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 69.461218][ T6316] ceph: No mds server is up or the cluster is laggy [ 69.463604][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 70.188371][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.448593][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.491845][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 70.511577][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.515683][ T24] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 70.525626][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.577683][ T24] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 70.589512][ T24] usb 5-1: USB disconnect, device number 3 [ 70.614604][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.636524][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.691757][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 70.694822][ T6343] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 70.705281][ T6341] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 70.707715][ T6341] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 70.716019][ T6343] macvlan2: entered promiscuous mode [ 70.717888][ T6343] macvlan2: entered allmulticast mode [ 70.843178][ T6350] netlink: 32 bytes leftover after parsing attributes in process `syz.0.117'. [ 70.911575][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.915298][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.919353][ T6351] bridge_slave_0: left allmulticast mode [ 70.921190][ T6351] bridge_slave_0: left promiscuous mode [ 70.923542][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.941528][ T6351] bridge_slave_1: left allmulticast mode [ 70.943890][ T6351] bridge_slave_1: left promiscuous mode [ 70.947060][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.991386][ T6351] bond0: (slave bond_slave_0): Releasing backup interface [ 71.006030][ T6351] bond0: (slave bond_slave_1): Releasing backup interface [ 71.026821][ T6351] team0: Port device team_slave_0 removed [ 71.038763][ T6351] team0: Port device team_slave_1 removed [ 71.044579][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.054920][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.080159][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.171731][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.192657][ T6351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.226514][ T6360] 2: renamed from team_slave_1 [ 71.239651][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.532152][ T5814] IPVS: starting estimator thread 0... [ 71.638210][ T6372] IPVS: using max 42 ests per chain, 100800 per kthread [ 72.195966][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.275041][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.281058][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.293802][ T6386] Need at least one configuration in g1. [ 72.296444][ T6386] udc dummy_udc.0: failed to start g1: -22 [ 72.299493][ T6386] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 72.309213][ T6386] UDC core: g1: couldn't find an available UDC or it's busy [ 72.445641][ T6391] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 73.308447][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.329109][ T1482] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.488095][ T1482] usb 7-1: Using ep0 maxpacket: 8 [ 73.492971][ T1482] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 73.496673][ T1482] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 73.502166][ T1482] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 73.505648][ T1482] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.509547][ T1482] usb 7-1: Product: syz [ 73.511525][ T1482] usb 7-1: Manufacturer: syz [ 73.513653][ T1482] usb 7-1: SerialNumber: syz [ 73.742548][ T1482] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 73.788546][ T1482] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 73.800890][ T1482] snd-usb-us122l 7-1:1.1: usb_set_interface error [ 73.804570][ T1482] snd-usb-us122l 7-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 73.827582][ T1482] usb 7-1: USB disconnect, device number 2 [ 73.837117][ T6414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'. [ 73.854852][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.883284][ T5754] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 73.889524][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 74.055406][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 74.315747][ T6438] 9p: Bad value for 'rfdno' [ 74.358806][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.658119][ T1482] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.791758][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 74.818550][ T1482] usb 5-1: Using ep0 maxpacket: 8 [ 74.826615][ T1482] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 74.831884][ T1482] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 74.837670][ T1482] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 74.846070][ T1482] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 74.849676][ T1482] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 74.852793][ T1482] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.856867][ T1482] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.859922][ T1482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.126365][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.132403][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.228337][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.280543][ T6450] Context (ID=0x0) not attached to queue pair (handle=0x4d4:0xffffffff) [ 75.363024][ T6454] kvm: user requested TSC rate below hardware speed [ 75.399800][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.402772][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.566599][ T6459] netlink: 168 bytes leftover after parsing attributes in process `syz.2.150'. [ 75.650822][ T1482] usb 5-1: usb_control_msg returned -71 [ 75.652636][ T1482] usbtmc 5-1:16.0: can't read capabilities [ 75.677673][ T1482] usb 5-1: USB disconnect, device number 4 [ 75.809430][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 75.958180][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 75.962238][ T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 75.965431][ T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 75.968903][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 75.972949][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.976808][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.981090][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.989067][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 75.993326][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.005689][ T9] usb 7-1: config 0 descriptor?? [ 76.220202][ T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 76.354179][ T1482] IPVS: starting estimator thread 0... [ 76.357805][ T6473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 76.361080][ T6473] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 76.439978][ T6474] IPVS: using max 42 ests per chain, 100800 per kthread [ 76.440995][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 76.528763][ T6475] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 76.612304][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.615864][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 76.620803][ T24] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 76.624676][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 76.629904][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 76.633627][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.636133][ T24] usb 5-1: Product: syz [ 76.637515][ T24] usb 5-1: Manufacturer: syz [ 76.639458][ T24] usb 5-1: SerialNumber: syz [ 76.649686][ T6471] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.872714][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 76.874871][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 76.881610][ T24] usb 5-1: USB disconnect, device number 5 [ 77.059077][ T1482] usb 7-1: USB disconnect, device number 3 [ 77.131681][ T1482] usblp0: removed [ 77.468633][ T1482] net_ratelimit: 1 callbacks suppressed [ 77.468646][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.591154][ T6499] netlink: 76 bytes leftover after parsing attributes in process `syz.0.163'. [ 77.609888][ T6503] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 77.638700][ T6503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.689724][ T6499] Trying to write to read-only block-device nullb0 [ 77.756298][ T6511] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.168'. [ 78.007445][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 78.188743][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 78.320585][ T6525] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 78.334987][ T6525] evm: overlay not supported [ 78.342840][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.348432][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 78.352985][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.356589][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.359782][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.362085][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 78.365491][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.375025][ T24] usb 6-1: config 0 descriptor?? [ 78.518719][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.535590][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 78.998583][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 79.002775][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 79.013829][ T24] usb 6-1: USB disconnect, device number 4 [ 79.214644][ T6554] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.184'. [ 79.517203][ T24] libceph: connect (1)[c::]:6789 error -101 [ 79.519934][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 79.558544][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.620050][ T6559] ceph: No mds server is up or the cluster is laggy [ 79.924507][ T6567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.928195][ T6567] IPv6: NLM_F_CREATE should be set when creating new route [ 80.189937][ T6581] e1000e 0000:00:02.0 eth1: removed PHC [ 80.331047][ T6581] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 80.446928][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 80.446986][ T42] audit: type=1326 audit(1785580170.168:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.1.195" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 80.509048][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.515581][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.558503][ T6587] net2280 0000:00:02.0: PLX NET228x/USB338x USB Peripheral Controller [ 80.562548][ T6587] net2280 0000:00:02.0: irq 30, pci mem ffffc90002e60000, chip rev 0000 [ 80.565895][ T6587] net2280 0000:00:02.0: version: 2005 Sept 27/v3.0; legacy mode [ 80.590040][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.875988][ T6617] tc_dump_action: action bad kind [ 81.045043][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 81.163520][ T41] cfg80211: failed to load regulatory.db [ 81.189023][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 81.199868][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.206944][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.214619][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.221582][ T50] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 81.224846][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.245496][ T50] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 81.261917][ T50] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.274132][ T50] usb 8-1: Manufacturer: syz [ 81.277901][ T50] usb 8-1: config 0 descriptor?? [ 81.282787][ T6641] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 81.284870][ T6641] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.320132][ T6649] ======================================================= [ 81.320132][ T6649] WARNING: The mand mount option has been deprecated and [ 81.320132][ T6649] and is ignored by this kernel. Remove the mand [ 81.320132][ T6649] option from the mount to silence this warning. [ 81.320132][ T6649] ======================================================= [ 81.342609][ T6641] vhci_hcd vhci_hcd.0: Device attached [ 81.397124][ T6641] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 81.610302][ T50] rc_core: IR keymap rc-hauppauge not found [ 81.612435][ T50] Registered IR keymap rc-empty [ 81.616379][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 81.624800][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 81.638281][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 81.640796][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.678334][ T1482] usb 38-1: SetAddress Request (6) to port 0 [ 81.684684][ T1482] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 81.691628][ T6661] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 81.701211][ T50] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 81.720480][ T50] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input6 [ 81.758654][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 81.765406][ T6664] input: syz1 as /devices/virtual/input/input7 [ 81.788722][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 81.799725][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.838238][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 81.884790][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 81.918919][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 81.960949][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 81.988218][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 82.018197][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 82.039388][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 82.070102][ T50] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 82.100618][ T50] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 82.106919][ T50] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 82.121205][ T50] usb 8-1: USB disconnect, device number 4 [ 82.192930][ T6645] vhci_hcd: connection reset by peer [ 82.200851][ T13] vhci_hcd vhci_hcd.0: stop threads [ 82.202998][ T13] vhci_hcd vhci_hcd.0: release socket [ 82.205313][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 82.429339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.669152][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.997821][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 83.078651][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.303683][ T6743] binder: 6742:6743 ioctl c00c6211 0 returned -14 [ 83.549270][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.667096][ T6753] usb_phy_generic pcspkr: dummy supplies not allowed for exclusive requests (id=vbus) [ 83.722598][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.480167][ T6776] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 84.748416][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.314396][ T6783] fuse: Bad value for 'group_id' [ 85.316352][ T6783] fuse: Bad value for 'group_id' [ 85.797648][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.532076][ T6810] capability: warning: `syz.1.240' uses 32-bit capabilities (legacy support in use) [ 86.588440][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.611609][ T6815] xt_time: unknown flags 0xf4 [ 86.614290][ T6815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 86.762753][ T1482] usb 38-1: device descriptor read/8, error -110 [ 86.829363][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.876692][ T6825] tipc: Started in network mode [ 86.878934][ T6825] tipc: Node identity ac14142f, cluster identity 4711 [ 86.882446][ T6825] tipc: New replicast peer: 172.20.20.170 [ 86.884578][ T6825] tipc: Enabled bearer , priority 10 [ 86.938801][ T5856] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 87.108334][ T5856] usb 7-1: config 0 has no interfaces? [ 87.113915][ T5856] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.116863][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.119502][ T5856] usb 7-1: Product: syz [ 87.120777][ T5856] usb 7-1: Manufacturer: syz [ 87.122215][ T5856] usb 7-1: SerialNumber: syz [ 87.125392][ T5856] usb 7-1: config 0 descriptor?? [ 87.169956][ T1482] usb usb38-port1: attempt power cycle [ 87.375069][ T5955] usb 7-1: USB disconnect, device number 4 [ 87.559628][ T6835] input: syz0 as /devices/virtual/input/input9 [ 87.640673][ T6832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.732292][ T1482] usb usb38-port1: unable to enumerate USB device [ 87.867865][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.889139][ T5856] tipc: Node number set to 2886997039 [ 87.969127][ T6850] vivid-001: disconnect [ 88.457991][ T6857] syzkaller0: entered promiscuous mode [ 88.460478][ T6857] syzkaller0: entered allmulticast mode [ 88.470352][ T6857] tipc: Started in network mode [ 88.472601][ T6857] tipc: Node identity 3abf53df0169, cluster identity 4711 [ 88.476021][ T6857] tipc: Enabled bearer , priority 0 [ 88.489810][ T6856] tipc: Resetting bearer [ 88.571344][ T6856] tipc: Disabling bearer [ 88.822097][ T6849] vivid-001: reconnect [ 88.823612][ T6864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.824077][ T6864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.824249][ T6864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.909694][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.223529][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 89.229175][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 89.411736][ T5818] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 89.420647][ T5818] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 89.425954][ T5818] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 89.430537][ T5818] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 89.627315][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.957345][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.433741][ T6930] udc usbip-vudc.0: UDC had already stopped [ 90.462767][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 90.627720][ T6942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.913357][ T6958] netlink: 'syz.2.287': attribute type 2 has an invalid length. [ 90.941628][ T6959] jfs: Unknown parameter 'grpquota' [ 90.980871][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.987059][ T5754] Bluetooth: hci2: command 0x2016 tx timeout [ 91.197483][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.225441][ T6978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.511201][ T6985] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 91.784381][ T7002] Illegal XDP return value 4278190082 on prog (id 33) dev syzkaller1, expect packet loss! [ 91.844065][ T7008] Bluetooth: MGMT ver 1.23 [ 92.279719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.504221][ T7026] erspan0: left allmulticast mode [ 92.505992][ T7026] erspan0: left promiscuous mode [ 92.509752][ T7026] bridge0: port 3(erspan0) entered disabled state [ 92.709882][ T7031] binder: 7030:7031 ioctl c00c6211 0 returned -14 [ 92.935809][ T7038] net_ratelimit: 2 callbacks suppressed [ 92.935820][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.941209][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.067408][ T5754] Bluetooth: hci2: command 0x2016 tx timeout [ 93.307501][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.893824][ T5750] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 93.905324][ T5750] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 94.004193][ T5750] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 94.009164][ T5750] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 94.012194][ T5750] CPU: 0 UID: 0 PID: 5750 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 94.016055][ T5750] Tainted: [L]=SOFTLOCKUP [ 94.017879][ T5750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.021755][ T5750] RIP: 0010:klist_put+0x4d/0x1d0 [ 94.023640][ T5750] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 10 0d [ 94.031355][ T5750] RSP: 0018:ffffc900042c7930 EFLAGS: 00010202 [ 94.033500][ T5750] RAX: dffffc0000000000 RBX: ffff88802ae92060 RCX: 0000000000000000 [ 94.036541][ T5750] RDX: 000000000000000b RSI: ffffffff8baee3a5 RDI: 0000000000000058 [ 94.039567][ T5750] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2209880 [ 94.042796][ T5750] R10: ffffffff9104c403 R11: 000000000000001e R12: 0000000000000000 [ 94.046057][ T5750] R13: 0000000000000001 R14: ffffffff9104c3c0 R15: dffffc0000000000 [ 94.049346][ T5750] FS: 0000000000000000(0000) GS:ffff888096be1000(0000) knlGS:0000000000000000 [ 94.052726][ T5750] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 94.055360][ T5750] CR2: 000000005797f1fc CR3: 000000004d1b3000 CR4: 0000000000352ef0 [ 94.058210][ T5750] Call Trace: [ 94.059678][ T5750] [ 94.060933][ T5750] klist_remove+0x14c/0x2e0 [ 94.062896][ T5750] ? __pfx_klist_remove+0x10/0x10 [ 94.065032][ T5750] ? __pfx_kobject_move+0x10/0x10 [ 94.067193][ T5750] ? kobject_put+0xb9/0x640 [ 94.069192][ T5750] device_move+0x12d/0x1140 [ 94.071207][ T5750] hci_conn_del_sysfs+0x86/0x1a0 [ 94.073336][ T5750] hci_conn_del+0x506/0x1180 [ 94.075313][ T5750] hci_conn_hash_flush+0x186/0x280 [ 94.077272][ T5750] hci_dev_close_sync+0x5cf/0x13c0 [ 94.079078][ T5750] ? find_held_lock+0x2b/0x80 [ 94.081012][ T5750] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 94.083339][ T5750] hci_dev_do_close+0x2e/0xb0 [ 94.085326][ T5750] hci_unregister_dev+0x23f/0x690 [ 94.087508][ T5750] vhci_release+0x17d/0x230 [ 94.089468][ T5750] ? __pfx_vhci_release+0x10/0x10 [ 94.091630][ T5750] __fput+0x3ff/0xb50 [ 94.093222][ T5750] task_work_run+0x150/0x240 [ 94.094807][ T5750] ? __pfx_task_work_run+0x10/0x10 [ 94.096983][ T5750] do_exit+0x951/0x2ae0 [ 94.098380][ T5750] ? do_raw_spin_lock+0x128/0x260 [ 94.100344][ T5750] ? __pfx_do_exit+0x10/0x10 [ 94.102271][ T5750] ? do_group_exit+0x1bd/0x2a0 [ 94.104298][ T5750] ? rcu_is_watching+0x12/0xc0 [ 94.105940][ T5750] do_group_exit+0xd5/0x2a0 [ 94.107561][ T5750] __ia32_sys_exit_group+0x3e/0x50 [ 94.109727][ T5750] ia32_sys_call+0x19ea/0x19f0 [ 94.111809][ T5750] __do_fast_syscall_32+0xe7/0x970 [ 94.113767][ T5750] ? lockdep_hardirqs_on+0x78/0x100 [ 94.115898][ T5750] do_fast_syscall_32+0x32/0x70 [ 94.117927][ T5750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.120487][ T5750] RIP: 0023:0xf70cefec [ 94.122049][ T5750] Code: Unable to access opcode bytes at 0xf70cefc2. [ 94.124807][ T5750] RSP: 002b:00000000ffecca2c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 94.128048][ T5750] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffeccb30 [ 94.130614][ T5750] RDX: 00000000f71f50b7 RSI: 00000000f749e300 RDI: 00000000f72d1615 [ 94.133126][ T5750] RBP: 00000000ffecca88 R08: 0000000000000000 R09: 0000000000000000 [ 94.135972][ T5750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 94.139278][ T5750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.142550][ T5750] [ 94.143899][ T5750] Modules linked in: [ 94.145889][ T5750] ---[ end trace 0000000000000000 ]--- [ 94.148843][ T5750] RIP: 0010:klist_put+0x4d/0x1d0 [ 94.150963][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.154448][ T5750] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 10 0d [ 94.163340][ T5750] RSP: 0018:ffffc900042c7930 EFLAGS: 00010202 [ 94.165640][ T5750] RAX: dffffc0000000000 RBX: ffff88802ae92060 RCX: 0000000000000000 [ 94.168445][ T5750] RDX: 000000000000000b RSI: ffffffff8baee3a5 RDI: 0000000000000058 [ 94.171017][ T5750] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2209880 [ 94.173804][ T5750] R10: ffffffff9104c403 R11: 000000000000001e R12: 0000000000000000 [ 94.176838][ T5750] R13: 0000000000000001 R14: ffffffff9104c3c0 R15: dffffc0000000000 [ 94.180053][ T5750] FS: 0000000000000000(0000) GS:ffff888096de1000(0000) knlGS:0000000000000000 [ 94.183638][ T5750] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 94.186068][ T5750] CR2: 00007ffc293bdfdc CR3: 0000000027303000 CR4: 0000000000352ef0 [ 94.189383][ T5750] Kernel panic - not syncing: Fatal exception [ 94.192565][ T5750] Kernel Offset: disabled [ 94.194291][ T5750] Rebooting in 86400 seconds..