last executing test programs: 32m51.731520478s ago: executing program 32 (id=42): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$tcp_mem(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="366667f30f011e0f22640fc77aeb0f06cb673e0f070f57df66b80500000066b9004000000f01c1f20f01439d0fc7b84992", 0x31}], 0x1, 0x44, 0x0, 0xfffffffffffffeb5) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0) 31m13.477027417s ago: executing program 33 (id=159): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(0xffffffffffffffff, &(0x7f00000050c0)='./file2\x00', 0x0, 0x0, 0x1100) add_key$keyring(0x0, &(0x7f0000001f40)={'syz', 0x2}, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "66aac1", 0x4, 0x73, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], "3648f7fd"}}}}}, 0x0) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x2) mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) 30m15.014915172s ago: executing program 34 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="87db2e85", @ANYRES16=0x0, @ANYBLOB="010080000000000000006600000008000300", @ANYRES32=r1, @ANYBLOB="08002600940900000800b7004e000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000280)=ANY=[]) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaa8aaaabb86dd000186dd06100004aaaaaaaaaabbfc000000000000000000000000000001aaaaaaaaaabbfe8000"/62], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@l={0x92, 0xe, 0xd0, 0x80, 0x0, 0x40}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x40020000) 24m57.009720963s ago: executing program 35 (id=617): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x0, 0x3bc}) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r5, r6, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000280)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) 19m20.547662399s ago: executing program 4 (id=1455): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x1ff, 0x10000, 0x3, 0x8800, 0x1, 0x17, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000380)}, 0x10) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000440), 0x1, 0x2) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) sendfile(r6, r1, 0x0, 0x2) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') socket(0x400000000010, 0x3, 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, r8) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@add_del={0x2, &(0x7f00000000c0)='wg2\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 19m17.67589457s ago: executing program 4 (id=1462): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20) unshare(0x28000600) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1229000, 0x800, 0x5, 0x2}, 0x20) 19m13.539793989s ago: executing program 4 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 19m13.251772445s ago: executing program 4 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), 0x86, r0}, 0x38) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000001040)={0x3, 0x10}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xeaa6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='\"\x00'/12, @ANYRES64=r7, @ANYBLOB="d670a951a7cbcbe824cf8bb2a6300dce02bdfd44125a132e496aef108c", @ANYRES32=r6], 0x20) write$char_usb(r8, &(0x7f0000000080)="e7ebb402072138b2d4b03150c549f49120c141c53be40c55f93ce7a9bb29e919d52f00a410d4239c7feca8e4b3354ac08592ddda5d41233b810601163507f697f3a5d8a2ab8e6c83ed6b5c7bb1669f5102b0fca3476a7b8b", 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 19m11.322155778s ago: executing program 4 (id=1483): signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) syz_io_uring_setup(0x112, &(0x7f00000000c0)={0x0, 0x9816, 0x0, 0xffffffff}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) fanotify_mark(0xffffffffffffffff, 0x4, 0x8000000, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000300)={0x1}, 0x8, 0x800) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, 0x0, 0x0, 0x44840) recvmsg$can_j1939(r4, 0x0, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac14"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 19m9.440751203s ago: executing program 4 (id=1488): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x801) close_range(r0, 0xffffffffffffffff, 0x0) 18m53.059974843s ago: executing program 36 (id=1488): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x801) close_range(r0, 0xffffffffffffffff, 0x0) 16m38.69417214s ago: executing program 6 (id=2296): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x461f, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 16m38.550833509s ago: executing program 6 (id=2298): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 16m33.946655622s ago: executing program 6 (id=2320): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r8 = dup(r7) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r8, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x307, 0x1, 0x2d, 0x9}, 0x9c) socket$xdp(0x2c, 0x3, 0x0) 16m32.327210178s ago: executing program 6 (id=2327): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 16m32.142649705s ago: executing program 6 (id=2330): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xfff, 0x0, 0x0, 0xa, 0x91, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000001300)=[{}]}) 16m30.708150863s ago: executing program 6 (id=2341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000340)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16m29.965084048s ago: executing program 37 (id=2341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000340)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m31.592088383s ago: executing program 7 (id=3050): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) write$sndseq(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) 14m28.210128918s ago: executing program 7 (id=3074): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [], {0x4, 0x4}, [], {0x10, 0x6}}, 0x24, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 14m27.821261995s ago: executing program 7 (id=3078): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x2) listen(r0, 0x80) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3a5) 14m27.493328359s ago: executing program 7 (id=3081): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 14m27.352671251s ago: executing program 7 (id=3085): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 14m26.903858882s ago: executing program 7 (id=3088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 14m26.613115283s ago: executing program 38 (id=3088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 8m54.055734118s ago: executing program 2 (id=3943): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x80000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x70, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x629}}]}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '}&\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bond\x00'}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x80}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8805}, 0x8000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') 8m52.497209694s ago: executing program 2 (id=3947): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000290005ac1414aa640101028677fffeffff000ce256b28c59881681fb520009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c84600000012c8f46976e79ea788f03d9d3205927e3d8606ff"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000540001000100000000000087ac0c8900", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) setns(0xffffffffffffffff, 0x24020000) 8m50.926688303s ago: executing program 2 (id=3950): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) clock_nanosleep(0xfa75360d476b8898, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, 0x0) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000009004"]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0xc0085508, &(0x7f0000000000)=0x3) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 8m45.276156779s ago: executing program 2 (id=3968): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role}]}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 8m43.075216255s ago: executing program 2 (id=3963): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x1, 0x1, 0xffffffffffffffff, 0x4}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x25daa903, 0xffffffffffffffff, r5, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50) chown(&(0x7f00000000c0)='./file0\x00', r4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x200}, &(0x7f0000000280)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "6d3cbbb62532c269dca454cb53b94ab848259001ac948c5fdb400a57c261c2288359c48f8d9c550fcf34d669d822bc6192565eb908c0134e07f3dd890ca33531", 0x40}, 0xfffffffffffffeb6, 0x0) 8m40.734617809s ago: executing program 2 (id=3971): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000280)={0x18, r4}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x9, 0x0, 0x0, 0x70}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r4, 0x0, 0x5, 0x4000000000002000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x22, 0x7, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1004000}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 8m24.641748017s ago: executing program 39 (id=3971): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000280)={0x18, r4}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x9, 0x0, 0x0, 0x70}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r4, 0x0, 0x5, 0x4000000000002000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x22, 0x7, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1004000}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1m30.844541206s ago: executing program 9 (id=5760): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x0, [0x0, 0x8, 0x9, 0x8, 0x9b0], [0x7fffffffffffffff, 0xeaf, 0x1f5, 0x3, 0x9, 0x7, 0x0, 0x8, 0x3, 0x8, 0x1, 0x0, 0x10, 0x6, 0x0, 0x4, 0x6, 0x9, 0x9, 0x9, 0x5, 0xffffffff7fffffff, 0xf, 0x8, 0x9, 0x76f, 0x1fffffffe0, 0x7, 0xa, 0xf, 0x6, 0x1, 0x80000001, 0x0, 0x88, 0x9, 0xdb, 0xfffffffffffffff4, 0xc25c, 0x7, 0x8, 0x8, 0x3, 0x4, 0x1, 0x9, 0x1, 0x9, 0x1, 0x117, 0x5, 0x8000000000000001, 0xfe, 0x4, 0x0, 0x3, 0x4, 0xb, 0xf, 0x0, 0x0, 0x8, 0x4, 0x5, 0x4, 0x2, 0xc66c, 0x9, 0x3, 0x10000, 0x8, 0x1, 0xc, 0x2, 0x8, 0x5, 0xa1, 0x6, 0x9, 0x6, 0x5, 0x2, 0x1, 0xffffffffbfd3f0e9, 0xffffffffd5f54280, 0x2, 0x5, 0x0, 0x0, 0xb7c, 0xffffffffffffff00, 0x96f0, 0x7ff, 0xe91, 0xb, 0x1, 0x8, 0x4, 0x5, 0x7fffffff, 0x1dee, 0x0, 0x8, 0x1, 0x4f48, 0xd, 0x80000000, 0x7fffffff, 0x100, 0x2, 0x3, 0xffff, 0x2, 0x8000000000000001, 0x7ff, 0x7, 0x0, 0x7, 0x1ac5cf3d, 0x7fffffffffffffff, 0xffffffff]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000180)={0x20003, 0x0, [0x1, 0xe0e0, 0x2, 0xc, 0x0, 0x7, 0x0, 0x8000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.736085396s ago: executing program 9 (id=5761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2cf2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a44", 0x6c}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000001c0)=""/36, 0x24}], 0x2}, 0xc3}], 0x1, 0x2003, 0x0) 1m29.669864648s ago: executing program 9 (id=5763): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x3a4, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x390, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x66c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x9c, 0x7, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7d8, 0x1, 0x7f}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, {0x44, 0x6, "1e476c6baf0460eda959c4932bcedb8702daced83843a3ef2ce3d4d105ecdaaff5be06e1f2129573bb1e63ade4737050ecb86917e899baf3fff7f49043f5c2dc"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x138, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x101, 0x0, 0x4, 0x7}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0x6, 0x8, 0xebc, 0xc}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xc4, 0x6, "ca37b2138fed351b866e789e3ddc118505b01b51a4aed041ed7972a793e78a82ccafa0ac4130b4dfb5fb173302788da9394c7097097ab7a55a0765f39ba8d0b4db292754343d59db4bf9c240ace92ab73876ef9d09626435329ccf3e182cda8f18f03782b8a02b85025f28d71066e2645b7a8c44ad798366a76ee2451d0ea4642637f652800f3371f48aeffbc8423e009ee41cab1a9accab24914eaa51072813b0a5b94f00e5662b7cc34d8ef867d994dda1801ed864faf50f080309e81c47a8"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x158, 0x19, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xda0, 0x5, 0x8, 0x8001, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x0, 0x2, 0xfffffffb, 0x10001}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4961}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe0e9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x60c}]}, {0xd9, 0x6, "a02d41bf811d9898d2e4f67314c7d7cbcb79fc17916c006262e13d129ee85ae9142b60821693cf9f394aa6cf75c3dac7c2471631fb5a518da27cb88848d7eec7d14e07edaa049bd759f03253d5f84e67f9ae89a961bc80bd8f6181c0954d464915325c72aee12c8e4618d8423f1da778757fd75258b1808d0db5f2475eebd57ebaa482dba9e01f11b6dfb87afa31f79fa7327a8f7748d35c1f368fbf25d1dc8f17fcf997ddd15b4d211b2af9305b3d49c99d41edf570d748dca93c53cd4e8226d40f4bc19d33af4ec46a4a725bc03c915b16700942"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m29.316885873s ago: executing program 9 (id=5765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x80805, 0x0) poll(&(0x7f0000000000)=[{r1, 0x9081}], 0x1, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd25, 0x5, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11dc606ae039eeda}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) link(0x0, &(0x7f0000000040)='./file0\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m27.27804037s ago: executing program 9 (id=5772): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f00000008c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m23.961484154s ago: executing program 9 (id=5778): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 1m7.228221235s ago: executing program 40 (id=5778): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 26.71720431s ago: executing program 0 (id=5883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 20.953571349s ago: executing program 0 (id=5898): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000640)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 19.153130363s ago: executing program 0 (id=5901): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 15.250288225s ago: executing program 8 (id=5909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[0x0, &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 13.489177814s ago: executing program 0 (id=5910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0x1, 0x1, "b0", '1)\n', 0x8809, "11234919"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x15) 13.441898322s ago: executing program 8 (id=5913): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) writev(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)="69fcc5d50c", 0x5}], 0x1) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x40045109, &(0x7f0000001280)) r5 = socket$kcm(0x29, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r0, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmmsg$inet_sctp(r7, &(0x7f0000008fc0)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002b40)="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", 0x3de}], 0x1, 0x0, 0x0, 0x20004050}], 0x1, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) 12.228071877s ago: executing program 8 (id=5915): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x88) gettid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 9.616043738s ago: executing program 0 (id=5918): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB='n'], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000180)=0x800005, 0x4) ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) close(r2) 9.37200038s ago: executing program 8 (id=5921): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17e6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010828bd7000fddbdf251000000005000f000400000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) 9.133783018s ago: executing program 3 (id=5922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002440)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x7, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x3, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x20000004, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffffd, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x6, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7ffe, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0x8b87, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x9, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x400c05d}, 0x0) 6.57048404s ago: executing program 3 (id=5925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 6.451037858s ago: executing program 1 (id=5926): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000500)={0xfffffff8, "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"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000740)={0xfdc9, 0xfffffffffffffffe, 0x0, [{0x4, 0xfff, 0x26, 0x8, '/dev_`f\x90~\xfd\xe9\x84\xf7/\x00\x00\x00h\x97=K\x0e\xb4\x95*E\x0e\n\x82H\x9425\xec6s\xda\x85'}, {0x6, 0xf, 0x7, 0x8, 'queue1\x00'}]}, 0x70) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 5.245493129s ago: executing program 1 (id=5927): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x3}}, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xf, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x4}, @printk={@x}, @exit]}, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x3e, &(0x7f0000000340)=""/62, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000900)=[r2, r3, r4, r5], &(0x7f0000000940)=[{0x5, 0x2, 0xe, 0x3}, {0x4, 0x4, 0x10, 0x1}, {0x1, 0x4, 0xb, 0x9}, {0x1, 0x3, 0x8, 0x63733dbf9d6934db}, {0x1, 0x2, 0x3, 0x7}, {0x5, 0x3, 0x2, 0x2}], 0x10, 0x2}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.153163116s ago: executing program 5 (id=5928): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)}], 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100037", @ANYBLOB="8b04040000000000300012800b0001006272696467650000200002800c002e00010000000100000005002500010000000500260001000000"], 0x50}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0}) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r3}}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r5, &(0x7f00000093c0)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 4.924537767s ago: executing program 3 (id=5929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x100) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x10000010}) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8}}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0xe}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8600, 0x40, 0x21}, 0x18) renameat(r3, 0x0, r6, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 4.782516701s ago: executing program 1 (id=5930): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 3.847078704s ago: executing program 5 (id=5931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r5, 0x0, 0x0) write$dsp(r5, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = getpid() syz_open_procfs(r6, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) 3.745123752s ago: executing program 3 (id=5932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r4, 0x10000000005, 0x0) r5 = timerfd_create(0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) 3.744542537s ago: executing program 1 (id=5933): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0xa, 0x20000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x8802) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x8, 0x1, 0xfffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f00000016c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.552652493s ago: executing program 3 (id=5934): setfsgid(0xee00) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) 2.492109282s ago: executing program 5 (id=5935): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mq_open(&(0x7f0000000040)='sched_switch\x00', 0x800, 0x80, &(0x7f00000002c0)={0x107d, 0xc, 0x80, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x800000, @empty}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, 0x0) 2.35427655s ago: executing program 8 (id=5936): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup(0xffffffffffffffff) r4 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsmount(r4, 0x0, 0xfe) getpriority(0x2, 0x0) 2.140189959s ago: executing program 0 (id=5937): r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f000001ea00), 0x0, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ftruncate(r4, 0x30) 2.016017984s ago: executing program 1 (id=5938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[0x0, &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1.276617705s ago: executing program 5 (id=5939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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", @ANYRES16=r3], 0x21c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xf, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x4}, @printk={@x}, @exit]}, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r1, 0xffffffffffffffff, r3, r4], 0x0, 0x10, 0x2}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000a80)="7ebf080b7909dd0f60cbb6ab6b0e9d9ad12c06aa39c861354b7fa89b5f34252eba64761c51d73139177ff555a0a7fe0e1e86b03377bd7f678dc631e59e01982a8820987b49d308d53f299af0453ce0b36d10e7", 0x53}, {0x0}, {0x0}], 0x3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 622.230148ms ago: executing program 8 (id=5940): bind$tipc(0xffffffffffffffff, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000070a01000000000000000000010000000900010073797a30000000000900020073"], 0xe8}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f00000003c0)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r4) 605.583206ms ago: executing program 1 (id=5941): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4048001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2000400) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xce}, 0x38) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)=""/33, 0x21}, 0x10}, {{&(0x7f0000002300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000029c0)}, 0xab2d}], 0x2, 0x2, &(0x7f0000004400)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x10, 0x40, 0x7ff, 0x2, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x64, 0x0, 0xd0, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x4, 0xb3, 0x1, 0x9}, @cipso={0x86, 0x6, 0x3}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000780)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000304fdfffffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="51f003000750050008001300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4040010) 364.308027ms ago: executing program 5 (id=5942): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0xbfa8be5ef523b773, 0x70bd25, 0x25dfdbfd}, 0xfffffe7f}, 0x1, 0x0, 0x0, 0xc010}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xfe00}]}}}]}, 0x40}}, 0x0) 181.227837ms ago: executing program 3 (id=5943): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x2a00) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2120}], 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r5, &(0x7f000000e280), 0x58a, 0x42, 0x0) 0s ago: executing program 5 (id=5944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r6, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): already. Interface lo may have been left with an inconsistent configuration, please check. [ 1387.047065][T19325] overlayfs: failed to get inode (-116) [ 1387.074746][T19325] overlayfs: failed to get inode (-116) [ 1387.093301][T19325] overlayfs: failed to get inode (-116) [ 1387.160474][T19325] overlayfs: failed to get inode (-116) [ 1387.434076][T19334] netlink: 'syz.2.3541': attribute type 1 has an invalid length. [ 1387.726649][T19344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3541'. [ 1387.780445][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1387.797811][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1387.956984][T19336] veth3: entered promiscuous mode [ 1388.046831][T19336] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1388.077422][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1388.153581][T19345] ceph: No mds server is up or the cluster is laggy [ 1388.388432][T19350] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1388.407024][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1391.282942][T19370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3548'. [ 1391.588412][T19361] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1392.439209][T19376] tipc: Started in network mode [ 1392.460838][T19376] tipc: Node identity 429dec87d511, cluster identity 4711 [ 1392.499281][T19376] tipc: Enabled bearer , priority 0 [ 1392.524685][T19378] syzkaller0: entered promiscuous mode [ 1392.565085][T19378] syzkaller0: entered allmulticast mode [ 1393.387315][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1393.951892][T17134] tipc: Node number set to 2542595207 [ 1394.034855][T19382] tipc: Resetting bearer [ 1395.220459][T19375] tipc: Resetting bearer [ 1395.545742][T19375] tipc: Disabling bearer [ 1399.823850][T19419] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1402.542470][T19444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3568'. [ 1402.830755][T19444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3568'. [ 1403.386999][T19440] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1404.678502][T19471] random: crng reseeded on system resumption [ 1407.204197][T19493] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1408.056250][ T5910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1408.970764][ T5910] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1409.068843][ T5910] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.240825][ T5910] usb 1-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1409.253062][T19519] tipc: Enabling of bearer rejected, failed to enable media [ 1409.602056][T19516] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1409.751317][T19527] overlayfs: failed to clone upperpath [ 1413.102630][T19541] delete_channel: no stack [ 1414.697965][ T5910] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a5.95 [ 1414.757768][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.994458][ T5910] usb 1-1: Product: syz [ 1415.017510][ T5944] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1415.650302][ T5910] usb 1-1: can't set config #66, error -32 [ 1415.956492][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 1416.536195][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1416.573335][ T5944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1416.598537][ T5944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1416.742106][ T5944] usb 3-1: string descriptor 0 read error: -71 [ 1416.776717][ T5944] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1416.822379][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.870789][ T5944] usb 3-1: config 0 descriptor?? [ 1416.882929][T19571] 9pnet_fd: Insufficient options for proto=fd [ 1416.891005][ T5944] usb 3-1: can't set config #0, error -71 [ 1416.908757][ T5944] usb 3-1: USB disconnect, device number 15 [ 1417.131942][ T9] usb 1-1: USB disconnect, device number 3 [ 1418.954218][T19588] overlayfs: failed to resolve './file1': -2 [ 1420.508430][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3609'. [ 1420.768933][T19594] overlayfs: failed to clone upperpath [ 1423.133504][T19625] vlan2: entered promiscuous mode [ 1423.138867][T19625] vlan2: entered allmulticast mode [ 1423.153441][T19628] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1423.153441][T19628] The task syz.9.3621 (19628) triggered the difference, watch for misbehavior. [ 1423.184695][T19625] hsr_slave_1: entered allmulticast mode [ 1423.333925][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3622'. [ 1428.081918][T19649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1429.409472][T19678] vlan2: entered promiscuous mode [ 1429.414652][T19678] bridge0: entered promiscuous mode [ 1433.075701][T19713] binder: 19712:19713 ioctl c0306201 0 returned -14 [ 1433.813457][T19729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1434.470784][T19734] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1434.482209][T19732] xt_socket: unknown flags 0x8 [ 1434.550322][T19734] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1434.582329][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'. [ 1434.592351][T19734] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1434.644568][T19734] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1434.686477][T19734] geneve2: entered allmulticast mode [ 1446.287661][T19814] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3667'. [ 1449.671676][T19852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3680'. [ 1452.048910][T19872] netlink: 'syz.3.3685': attribute type 15 has an invalid length. [ 1452.057019][T19872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3685'. [ 1452.423963][ T6030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.503218][ T6030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.854602][T19886] overlayfs: failed to clone upperpath [ 1456.732112][T19907] macvtap13: entered allmulticast mode [ 1459.042364][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1459.059750][T19926] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1459.100855][T19929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1463.765331][T19959] macvtap6: entered allmulticast mode [ 1464.769457][ T6030] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.957781][ T6030] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.189329][ T6030] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.473476][ T6030] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.864178][ T6030] bridge_slave_1: left allmulticast mode [ 1467.869911][ T6030] bridge_slave_1: left promiscuous mode [ 1467.884124][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.915197][ T6030] bridge_slave_0: left allmulticast mode [ 1467.921150][ T6030] bridge_slave_0: left promiscuous mode [ 1467.971464][T19987] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1468.145522][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.179884][ T30] audit: type=1326 audit(1752882119.367:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19995 comm="syz.8.3718" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe28618e9a9 code=0x0 [ 1475.284569][ T6030] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1476.447750][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.465116][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.500740][ T6030] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1476.532224][ T6030] bond0 (unregistering): Released all slaves [ 1476.737769][ T6030] bond1 (unregistering): Released all slaves [ 1476.764360][T20013] macvtap1: entered allmulticast mode [ 1476.770685][T20013] veth0_macvtap: entered allmulticast mode [ 1477.832613][ T6030] tipc: Left network mode [ 1483.184799][T20089] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3741'. [ 1484.852790][ T6030] hsr_slave_0: left promiscuous mode [ 1485.956816][ T6030] hsr_slave_1: left promiscuous mode [ 1489.424323][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.454460][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.483698][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.512593][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.799646][ T6030] veth0_macvtap: left allmulticast mode [ 1489.806193][ T6030] veth1_macvtap: left promiscuous mode [ 1489.812499][ T6030] veth0_macvtap: left promiscuous mode [ 1489.819696][ T6030] veth1_vlan: left promiscuous mode [ 1490.115834][ T6030] veth0_vlan: left promiscuous mode [ 1493.123185][T20141] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3753'. [ 1493.358466][T20144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3754'. [ 1494.014518][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 1494.704401][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3753'. [ 1494.714686][T20136] tipc: Started in network mode [ 1494.719710][T20136] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1494.727305][T20136] tipc: Enabled bearer , priority 10 [ 1494.735872][T20141] tipc: Resetting bearer [ 1494.812017][T20151] delete_channel: no stack [ 1494.868042][T20141] tipc: Disabling bearer [ 1495.195484][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3758'. [ 1495.690781][T20160] hsr_slave_0: left promiscuous mode [ 1496.373692][T20160] hsr_slave_1: left promiscuous mode [ 1497.545202][ T6030] IPVS: stop unused estimator thread 0... [ 1500.931660][T20206] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3770'. [ 1501.203251][T20210] fuse: Unknown parameter 'fm00000000000000000000' [ 1501.939891][T20216] syz.0.3772: attempt to access beyond end of device [ 1501.939891][T20216] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1501.953658][T20216] efs: cannot read volume header [ 1508.910476][T20266] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3786'. [ 1510.541052][T20282] overlayfs: failed to clone lowerpath [ 1511.968015][T20295] dvmrp8: entered allmulticast mode [ 1513.485085][ T30] audit: type=1326 audit(1752882161.329:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1513.577203][T20319] bridge_slave_1: left allmulticast mode [ 1513.582942][T20319] bridge_slave_1: left promiscuous mode [ 1513.588945][T20319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.163086][T20319] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1514.264706][ T30] audit: type=1326 audit(1752882161.329:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1514.348049][ T30] audit: type=1326 audit(1752882161.329:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1514.417124][ T30] audit: type=1326 audit(1752882161.338:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1514.662946][ T30] audit: type=1326 audit(1752882161.347:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1515.377290][ T30] audit: type=1326 audit(1752882161.946:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1515.749043][ T30] audit: type=1326 audit(1752882161.946:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1515.771294][ T30] audit: type=1326 audit(1752882161.946:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1515.824093][ T30] audit: type=1326 audit(1752882161.946:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1516.465362][ T30] audit: type=1326 audit(1752882161.955:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.9.3800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd018e9a9 code=0x7ffc0000 [ 1519.252652][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1519.252669][ T30] audit: type=1326 audit(1752882166.735:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1520.102310][ T30] audit: type=1326 audit(1752882166.735:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1520.147402][ T30] audit: type=1326 audit(1752882166.735:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1520.177766][ T30] audit: type=1326 audit(1752882166.735:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1520.216485][ T30] audit: type=1326 audit(1752882166.735:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1520.250365][ T30] audit: type=1326 audit(1752882166.735:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1520.275513][ T30] audit: type=1326 audit(1752882166.735:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1520.345386][ T30] audit: type=1326 audit(1752882166.735:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1520.436583][ T30] audit: type=1326 audit(1752882166.735:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1520.553353][ T30] audit: type=1326 audit(1752882166.735:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20342 comm="syz.3.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7fc00000 [ 1521.091983][T20360] macvtap7: entered allmulticast mode [ 1524.600865][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1525.469162][T20396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3819'. [ 1525.478531][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3819'. [ 1525.488128][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'. [ 1526.073605][T20404] lo speed is unknown, defaulting to 1000 [ 1526.079934][T20404] lo speed is unknown, defaulting to 1000 [ 1526.093252][T20404] lo speed is unknown, defaulting to 1000 [ 1526.239779][T20404] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1526.488633][T20404] lo speed is unknown, defaulting to 1000 [ 1526.512640][T20404] lo speed is unknown, defaulting to 1000 [ 1526.539177][T20404] lo speed is unknown, defaulting to 1000 [ 1526.564804][T20404] lo speed is unknown, defaulting to 1000 [ 1526.572568][T20404] lo speed is unknown, defaulting to 1000 [ 1528.192391][T20430] overlayfs: failed to clone upperpath [ 1529.707283][T20434] syz.0.3822: attempt to access beyond end of device [ 1529.707283][T20434] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1529.720855][T20434] FAT-fs (loop1): unable to read boot sector [ 1533.363439][T20466] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1533.371230][T20466] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1533.379584][T20466] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1533.387486][T20466] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1533.686817][T20472] overlayfs: failed to resolve './file1': -2 [ 1535.495574][T13715] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 1536.544347][T20492] overlayfs: failed to clone upperpath [ 1539.818149][T13715] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1539.827710][T13715] Bluetooth: hci3: Injecting HCI hardware error event [ 1539.838864][T18814] Bluetooth: hci3: hardware error 0x00 [ 1541.848267][T20544] overlayfs: failed to resolve './file0': -2 [ 1542.042724][T18814] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1542.318239][T20558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3860'. [ 1542.507685][T20556] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1544.962776][T20579] overlayfs: failed to resolve './file0': -2 [ 1545.428027][T20580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1546.354626][T20591] openvswitch: netlink: VXLAN extension message has 201 unknown bytes. [ 1547.842244][T20602] syz.8.3873: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1547.857287][T20602] CPU: 0 UID: 0 PID: 20602 Comm: syz.8.3873 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1547.857309][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1547.857319][T20602] Call Trace: [ 1547.857325][T20602] [ 1547.857332][T20602] dump_stack_lvl+0x189/0x250 [ 1547.857357][T20602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1547.857374][T20602] ? __pfx__printk+0x10/0x10 [ 1547.857395][T20602] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1547.857415][T20602] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1547.857435][T20602] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1547.857457][T20602] warn_alloc+0x214/0x310 [ 1547.857475][T20602] ? stack_depot_save_flags+0x40/0x900 [ 1547.857494][T20602] ? __pfx_warn_alloc+0x10/0x10 [ 1547.857519][T20602] ? kasan_save_track+0x4f/0x80 [ 1547.857543][T20602] ? xskq_create+0x56/0x170 [ 1547.857556][T20602] ? xsk_init_queue+0xb0/0x110 [ 1547.857577][T20602] ? xsk_setsockopt+0x43f/0x710 [ 1547.857598][T20602] ? do_sock_setsockopt+0x179/0x1b0 [ 1547.857619][T20602] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1547.857639][T20602] ? do_syscall_64+0xfa/0x3b0 [ 1547.857654][T20602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.857675][T20602] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1547.857716][T20602] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1547.857738][T20602] ? __kasan_kmalloc+0x93/0xb0 [ 1547.857755][T20602] vmalloc_user_noprof+0xad/0xf0 [ 1547.857771][T20602] ? xskq_create+0xbf/0x170 [ 1547.857786][T20602] xskq_create+0xbf/0x170 [ 1547.857802][T20602] xsk_init_queue+0xb0/0x110 [ 1547.857829][T20602] xsk_setsockopt+0x43f/0x710 [ 1547.857854][T20602] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1547.857879][T20602] ? __fget_files+0x2a/0x420 [ 1547.857898][T20602] ? __fget_files+0x2a/0x420 [ 1547.857914][T20602] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1547.857929][T20602] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1547.857953][T20602] do_sock_setsockopt+0x179/0x1b0 [ 1547.857978][T20602] __x64_sys_setsockopt+0x13f/0x1b0 [ 1547.858004][T20602] do_syscall_64+0xfa/0x3b0 [ 1547.858019][T20602] ? lockdep_hardirqs_on+0x9c/0x150 [ 1547.858034][T20602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.858048][T20602] ? clear_bhb_loop+0x60/0xb0 [ 1547.858067][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.858096][T20602] RIP: 0033:0x7fe28618e9a9 [ 1547.858110][T20602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.858124][T20602] RSP: 002b:00007fe286f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1547.858140][T20602] RAX: ffffffffffffffda RBX: 00007fe2863b5fa0 RCX: 00007fe28618e9a9 [ 1547.858151][T20602] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1547.858160][T20602] RBP: 00007fe286210ca1 R08: 0000000000000004 R09: 0000000000000000 [ 1547.858169][T20602] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1547.858178][T20602] R13: 0000000000000000 R14: 00007fe2863b5fa0 R15: 00007ffd601fc718 [ 1547.858202][T20602] [ 1547.858208][T20602] Mem-Info: [ 1548.158577][T20602] active_anon:12055 inactive_anon:13678 isolated_anon:0 [ 1548.158577][T20602] active_file:15616 inactive_file:44503 isolated_file:0 [ 1548.158577][T20602] unevictable:770 dirty:373 writeback:0 [ 1548.158577][T20602] slab_reclaimable:8077 slab_unreclaimable:109948 [ 1548.158577][T20602] mapped:31337 shmem:20830 pagetables:1211 [ 1548.158577][T20602] sec_pagetables:0 bounce:0 [ 1548.158577][T20602] kernel_misc_reclaimable:0 [ 1548.158577][T20602] free:1271161 free_pcp:12380 free_cma:0 [ 1548.205665][T20602] Node 0 active_anon:48220kB inactive_anon:54712kB active_file:62092kB inactive_file:178012kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:125200kB dirty:1492kB writeback:0kB shmem:81784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11864kB pagetables:4676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1548.239521][T20602] Node 1 active_anon:0kB inactive_anon:0kB active_file:372kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1548.271609][T20602] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.300692][T20602] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1548.306517][T20602] Node 0 DMA32 free:1175368kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48216kB inactive_anon:54672kB active_file:60320kB inactive_file:177944kB unevictable:1544kB writepending:1492kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:29608kB local_pcp:2200kB free_cma:0kB [ 1548.339313][T20602] lowmem_reserve[]: 0 0 1 1 1 [ 1548.344047][T20602] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 1548.373148][T20602] lowmem_reserve[]: 0 0 0 0 0 [ 1548.377908][T20602] Node 1 Normal free:3893908kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:372kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19900kB local_pcp:13520kB free_cma:0kB [ 1548.409405][T20602] lowmem_reserve[]: 0 0 0 0 0 [ 1548.414165][T20602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1548.426871][T20602] Node 0 DMA32: 1592*4kB (UM) 963*8kB (UME) 611*16kB (UME) 279*32kB (UME) 146*64kB (UME) 85*128kB (UME) 54*256kB (UME) 35*512kB (UME) 17*1024kB (UME) 6*2048kB (ME) 259*4096kB (UM) = 1175304kB [ 1548.445941][T20602] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1548.457954][T20602] Node 1 Normal: 2*4kB (U) 8*8kB (UE) 8*16kB (UME) 8*32kB (UE) 4*64kB (UE) 26*128kB (UME) 7*256kB (UME) 8*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3893960kB [ 1548.475365][T20602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.484952][T20602] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1548.494252][T20602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.503819][T20602] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1548.513161][T20602] 80946 total pagecache pages [ 1548.518141][T20602] 0 pages in swap cache [ 1548.522343][T20602] Free swap = 124996kB [ 1548.526592][T20602] Total swap = 124996kB [ 1548.530824][T20602] 2097051 pages RAM [ 1548.534648][T20602] 0 pages HighMem/MovableOnly [ 1548.539328][T20602] 424693 pages reserved [ 1548.543695][T20602] 0 pages cma reserved [ 1549.597724][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3878'. [ 1549.620971][T20521] IPVS: starting estimator thread 0... [ 1549.717373][T20618] IPVS: using max 27 ests per chain, 64800 per kthread [ 1549.812895][T20615] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1549.898005][T20624] vivid-001: disconnect [ 1550.762008][T20621] vivid-001: reconnect [ 1551.730003][T20645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1553.474279][T20665] overlay: ./file0 is not a directory [ 1556.252629][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1556.261643][T20674] IPVS: Unknown mcast interface: vcan0 [ 1556.509920][T20684] loop2: detected capacity change from 0 to 7 [ 1556.519089][T20684] loop2: p1 p4 [ 1556.522582][T20684] loop2: partition table partially beyond EOD, truncated [ 1556.530013][T20684] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1556.552026][T20682] overlayfs: failed to resolve './file0': -2 [ 1556.858637][T20692] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3898'. [ 1561.127802][T20731] openvswitch: netlink: VXLAN extension message has 198 unknown bytes. [ 1561.672374][T20724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1567.632956][T20784] hugetlbfs: syz.3.3920 (20784): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1568.572335][T20787] syz.0.3918 (20787): drop_caches: 2 [ 1568.595035][T20787] syz.0.3918 (20787): drop_caches: 2 [ 1570.192700][T20797] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1571.515605][T20821] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1572.633506][T20834] netlink: 'syz.3.3929': attribute type 5 has an invalid length. [ 1573.803519][T20839] veth0_to_team: entered promiscuous mode [ 1573.809442][T20839] veth0_to_team: entered allmulticast mode [ 1574.931804][T20845] netlink: 'syz.2.3933': attribute type 1 has an invalid length. [ 1576.678909][T20857] Invalid ELF header magic: != ELF [ 1577.417944][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1577.433798][T20857] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1577.460855][T20857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1577.864466][T20869] macvtap14: entered allmulticast mode [ 1579.355316][T20876] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1579.567571][T20874] overlayfs: failed to clone lowerpath [ 1580.388964][T20882] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3942'. [ 1581.137265][T20895] netlink: 'syz.8.3948': attribute type 21 has an invalid length. [ 1581.162919][T20895] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3948'. [ 1581.725278][T20901] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3947'. [ 1584.645968][T20910] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1584.740029][T20915] overlay: Unknown parameter '/' [ 1587.033420][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1587.498978][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3956'. [ 1590.288650][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1590.458074][T20959] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3961'. [ 1592.413602][T20976] macvtap15: entered allmulticast mode [ 1594.988828][T20996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1597.458048][T21009] kthread_run failed with err -4 [ 1598.561844][T21019] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3978'. [ 1601.662054][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1602.174598][T20996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1602.181967][T20996] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1602.824368][T20996] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1602.835733][T20996] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1603.800473][T21067] hub 1-0:1.0: USB hub found [ 1603.809865][T21067] hub 1-0:1.0: 1 port detected [ 1608.735582][T21087] bridge1: entered promiscuous mode [ 1608.740957][T21087] bridge1: entered allmulticast mode [ 1608.756607][T21087] team0: Port device bridge1 added [ 1614.378787][T21119] trusted_key: encrypted_key: insufficient parameters specified [ 1614.389330][T13715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1614.407088][T13715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1614.425813][T13715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1614.440663][T13715] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1614.450485][T13715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1614.463744][T18814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1614.471327][T18814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1614.478933][T18814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1614.487207][T18814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1614.496902][T18814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1615.074219][T21128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1615.593536][T21121] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1615.629791][T21116] lo speed is unknown, defaulting to 1000 [ 1616.001797][T21133] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4008'. [ 1616.012294][T21133] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4008'. [ 1616.481121][T21116] chnl_net:caif_netlink_parms(): no params data found [ 1616.596052][T21116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.606668][T21116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.614271][T21116] bridge_slave_0: entered allmulticast mode [ 1616.625885][T21116] bridge_slave_0: entered promiscuous mode [ 1616.635228][T21116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.643004][T21116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.650435][T21116] bridge_slave_1: entered allmulticast mode [ 1616.658609][T21116] bridge_slave_1: entered promiscuous mode [ 1616.695654][T21116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.712430][T21116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.797167][T18814] Bluetooth: hci5: command tx timeout [ 1616.978134][T21116] team0: Port device team_slave_0 added [ 1616.992419][T21116] team0: Port device team_slave_1 added [ 1617.766598][T21156] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1617.915048][T21164] netlink: 'syz.3.4019': attribute type 1 has an invalid length. [ 1617.926864][T21162] netlink: 'syz.8.4018': attribute type 20 has an invalid length. [ 1617.981267][T21166] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4020'. [ 1618.254264][T21166] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1618.298203][T21116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.924915][T21116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1618.951078][T21116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.965257][T21116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1618.973596][T21116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.014038][T18814] Bluetooth: hci5: command tx timeout [ 1619.029344][T21116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.376917][T21178] loop6: detected capacity change from 0 to 524287999 [ 1619.557837][ C1] blk_print_req_error: 37 callbacks suppressed [ 1619.557861][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1619.573802][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1619.583588][ C1] I/O error, dev loop6, sector 1170 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1619.593552][ C1] I/O error, dev loop6, sector 1170 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1619.603577][ C1] I/O error, dev loop6, sector 2370 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 1619.613377][ C1] I/O error, dev loop6, sector 2370 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 1619.623817][ C1] I/O error, dev loop6, sector 2378 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1619.633802][ C1] I/O error, dev loop6, sector 2378 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 1619.643856][ C1] I/O error, dev loop6, sector 4418 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 1619.653819][ C1] I/O error, dev loop6, sector 4418 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 1621.162168][T21187] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1621.170160][T21187] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1621.178458][T21187] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1621.186327][T21187] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1621.205168][T21116] hsr_slave_0: entered promiscuous mode [ 1621.217381][T21116] hsr_slave_1: entered promiscuous mode [ 1621.230623][T21116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1621.238460][T18814] Bluetooth: hci5: command tx timeout [ 1621.245834][T21116] Cannot create hsr debugfs directory [ 1621.726342][T21198] netlink: 'syz.9.4025': attribute type 7 has an invalid length. [ 1622.962540][T21203] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1624.102712][T18814] Bluetooth: hci5: command tx timeout [ 1624.361350][T21198] : entered promiscuous mode [ 1625.602181][T21219] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4030'. [ 1628.151566][T21235] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4034'. [ 1629.593458][T21238] bridge2: entered promiscuous mode [ 1629.598901][T21238] bridge2: entered allmulticast mode [ 1629.614224][T21238] team0: Port device bridge2 added [ 1630.381605][T21253] xt_hashlimit: size too large, truncated to 1048576 [ 1630.451847][T21255] netlink: 'syz.9.4041': attribute type 33 has an invalid length. [ 1630.505251][T21255] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4041'. [ 1632.074337][T21274] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1632.699302][T21273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1632.713338][T21273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1632.736133][T21273] bond0: (slave batadv0): Releasing backup interface [ 1633.313615][T21289] macvtap2: entered allmulticast mode [ 1635.461778][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4053'. [ 1637.838170][T21326] syz.0.4058: attempt to access beyond end of device [ 1637.838170][T21326] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1637.883767][T21326] (syz.0.4058,21326,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1637.891755][T21326] (syz.0.4058,21326,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1637.899616][T21326] (syz.0.4058,21326,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1637.909969][T21326] (syz.0.4058,21326,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1638.153749][T21327] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1638.213381][T21304] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1638.241004][T21304] team0 (unregistering): Port device team_slave_0 removed [ 1638.265764][T21304] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1638.282263][T21304] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1638.294020][T21304] team0 (unregistering): Port device team_slave_1 removed [ 1638.302592][T21304] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1638.317722][T21304] team0 (unregistering): Failed to send port change of device macvlan2 via netlink (err -105) [ 1638.328697][T21304] team0 (unregistering): Port device macvlan2 removed [ 1638.415288][T21116] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1638.678064][T21116] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1638.734018][T21116] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1638.957227][T21116] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1641.292802][T19220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.539103][T19220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1641.578926][T21344] macvtap3: entered allmulticast mode [ 1641.712571][T21353] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.4064'. [ 1642.176841][T19220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.187867][T19220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1644.232353][T21384] overlayfs: failed to clone lowerpath [ 1644.491958][T21388] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4073'. [ 1644.504157][T19220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.554307][T21391] 9pnet_fd: Insufficient options for proto=fd [ 1644.712240][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1645.350403][T19220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1645.476805][T19220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.491014][T19220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1645.695844][T21116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.452547][T21407] macvtap4: entered allmulticast mode [ 1646.842901][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1646.880354][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1647.266747][T21410] ceph: No mds server is up or the cluster is laggy [ 1647.351554][T21116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.869022][T21425] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1649.878597][T21425] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1649.888194][T21425] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1650.082447][T19215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.089660][T19215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.099275][T19215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.106463][T19215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.130268][T19220] bridge_slave_1: left allmulticast mode [ 1651.160740][T19220] bridge_slave_1: left promiscuous mode [ 1651.166576][T19220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.706017][T21440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4081'. [ 1652.855448][T19220] bridge_slave_0: left allmulticast mode [ 1652.871614][T19220] bridge_slave_0: left promiscuous mode [ 1652.892027][T19220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.017248][T19220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.029702][T19220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.043400][T19220] bond0 (unregistering): Released all slaves [ 1655.063730][T19220] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1655.078335][T19220] bond1 (unregistering): Released all slaves [ 1655.126547][T21456] bond_slave_0: entered promiscuous mode [ 1655.134283][T21456] bond_slave_1: entered promiscuous mode [ 1655.140309][T21456] macvlan2: entered promiscuous mode [ 1655.145832][T21456] bond0: entered promiscuous mode [ 1655.152752][T21456] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1655.347653][T21116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1655.358962][T21462] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1655.682789][T19220] tipc: Left network mode [ 1655.913934][T21469] macvtap8: entered allmulticast mode [ 1655.988475][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1656.258249][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4090'. [ 1656.944252][T21478] ipvlan2: entered promiscuous mode [ 1658.821162][T19220] hsr_slave_0: left promiscuous mode [ 1658.865914][T19220] hsr_slave_1: left promiscuous mode [ 1659.420215][T19220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.428413][T19220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.202714][T19220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.218031][T19220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.441924][T19220] veth0_macvtap: left allmulticast mode [ 1661.072955][T19220] veth1_macvtap: left promiscuous mode [ 1661.078593][T19220] veth0_macvtap: left promiscuous mode [ 1661.084377][T19220] veth1_vlan: left promiscuous mode [ 1661.089759][T19220] veth0_vlan: left promiscuous mode [ 1663.279004][T21521] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4100'. [ 1664.778842][T21504] lo speed is unknown, defaulting to 1000 [ 1665.073042][T21116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.073245][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1665.073262][ T30] audit: type=1804 audit(1752882303.135:268): pid=21526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.4101" name="file0" dev="tmpfs" ino=5181 res=1 errno=0 [ 1665.174407][T21527] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1666.264108][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4105'. [ 1666.273198][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4105'. [ 1666.295853][T21545] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4105'. [ 1666.867102][T21547] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1666.897221][T21547] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1666.934123][T21537] xt_TCPMSS: Only works on TCP SYN packets [ 1667.709720][T21532] Bluetooth: hci5: command 0x0405 tx timeout [ 1668.672004][T21564] new mount options do not match the existing superblock, will be ignored [ 1669.635541][T21567] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4110'. [ 1670.563222][T21580] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1670.594705][T21580] CIFS mount error: No usable UNC path provided in device string! [ 1670.594705][T21580] [ 1670.616118][T21580] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1670.678490][T21116] veth0_vlan: entered promiscuous mode [ 1670.702344][T21116] veth1_vlan: entered promiscuous mode [ 1670.745662][T21116] veth0_macvtap: entered promiscuous mode [ 1670.752510][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'. [ 1670.766343][T21116] veth1_macvtap: entered promiscuous mode [ 1670.801313][T21116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1670.824849][T21116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1670.855980][T21116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.866181][T21116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.895521][T21116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.918589][T21116] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.107624][T19207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.125582][T19207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.680982][T19220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.724014][T19220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.054570][T21605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4000'. [ 1673.530140][T21613] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1674.414888][ T30] audit: type=1800 audit(1752882311.835:269): pid=21617 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.4122" name="nullb0" dev="tmpfs" ino=2386 res=0 errno=0 [ 1674.462138][T21611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4120'. [ 1674.471263][T21611] tipc: Invalid UDP bearer configuration [ 1674.471313][T21611] tipc: Enabling of bearer rejected, failed to enable media [ 1676.585219][T21638] netlink: 'syz.3.4128': attribute type 10 has an invalid length. [ 1676.595915][T21638] IPVS: Error connecting to the multicast addr [ 1676.723943][T21646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1680.826987][T21668] netlink: 'syz.0.4136': attribute type 11 has an invalid length. [ 1683.698408][T21696] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4141'. [ 1689.788090][T21725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4147'. [ 1692.927750][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4150'. [ 1694.001496][T21746] ip6tnl1: entered promiscuous mode [ 1694.006912][T21746] ip6tnl1: entered allmulticast mode [ 1695.961568][T21758] batadv_slave_1: entered promiscuous mode [ 1696.359736][T21752] batadv_slave_1: left promiscuous mode [ 1697.051440][T21761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4158'. [ 1697.088286][T21761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4158'. [ 1697.134918][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4158'. [ 1697.168206][T21761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4158'. [ 1697.453867][T21761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4158'. [ 1699.199941][T21781] 9pnet_fd: Insufficient options for proto=fd [ 1703.311695][T21796] overlayfs: failed to clone upperpath [ 1704.613772][T21815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1707.468182][T21828] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4175'. [ 1708.965337][T21828] /dev/nullb0: Can't lookup blockdev [ 1710.215750][T21832] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4172'. [ 1713.057990][T20521] Process accounting resumed [ 1713.806142][T21854] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1713.812326][T21854] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1715.206969][T21851] Process accounting resumed [ 1716.715980][T21871] lo speed is unknown, defaulting to 1000 [ 1718.141522][T21887] No such timeout policy "syz1" [ 1719.114311][T21892] fuse: Unknown parameter '00000000000000000000' [ 1720.621744][T21901] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1721.660413][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1721.893178][T21923] netlink: 588 bytes leftover after parsing attributes in process `syz.5.4197'. [ 1723.309711][ T5963] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1724.051024][ T5963] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1724.299389][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.319908][ T5963] usb 6-1: config 0 has no interface number 0 [ 1724.350123][ T5963] usb 6-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1725.221085][T21934] veth1_macvtap: left promiscuous mode [ 1725.296340][ T5963] usb 6-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 1725.323626][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.343618][ T5963] usb 6-1: Product: syz [ 1725.506564][ T5963] usb 6-1: Manufacturer: syz [ 1725.511397][ T5963] usb 6-1: SerialNumber: syz [ 1725.528499][ T5963] usb 6-1: config 0 descriptor?? [ 1725.563758][ T5963] qmi_wwan 6-1:0.4: probe with driver qmi_wwan failed with error -22 [ 1726.628915][T21950] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4204'. [ 1727.043658][T20521] usb 6-1: USB disconnect, device number 2 [ 1736.817684][T22020] vxcan0: tx address claim with dest, not broadcast [ 1737.715912][T22023] lo speed is unknown, defaulting to 1000 [ 1741.502841][T22066] trusted_key: encrypted_key: insufficient parameters specified [ 1741.737484][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4230'. [ 1741.748337][T22067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.756211][T22067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.142729][T22073] [U] M٭Q& K4 [ 1742.393191][T22073] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 1747.275099][T21279] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1748.022627][T21279] usb 1-1: Using ep0 maxpacket: 8 [ 1748.888337][T21279] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1748.896493][T22122] geneve2: entered allmulticast mode [ 1748.896967][T21279] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1749.899049][T21279] usb 1-1: can't read configurations, error -71 [ 1750.767407][T22142] tmpfs: Unknown parameter 'quot' [ 1750.797654][T22142] lo speed is unknown, defaulting to 1000 [ 1750.803941][T22142] lo speed is unknown, defaulting to 1000 [ 1750.815743][T22142] lo speed is unknown, defaulting to 1000 [ 1750.961951][T22142] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1751.221117][T22142] lo speed is unknown, defaulting to 1000 [ 1751.246849][T22142] lo speed is unknown, defaulting to 1000 [ 1751.273409][T22142] lo speed is unknown, defaulting to 1000 [ 1751.281175][T22142] lo speed is unknown, defaulting to 1000 [ 1751.289255][T22142] lo speed is unknown, defaulting to 1000 [ 1751.666976][T22145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4247'. [ 1751.676239][T22145] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4247'. [ 1753.509345][T22155] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4250'. [ 1753.519243][T22155] unsupported nlmsg_type 40 [ 1754.475836][T22163] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4253'. [ 1755.009493][T22163] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1755.491468][T22175] netlink: 'syz.0.4254': attribute type 10 has an invalid length. [ 1755.937680][T22175] team0: Port device wlan1 added [ 1757.605311][T22183] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1759.343181][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4261'. [ 1760.409207][T22207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4260'. [ 1760.427426][T22207] netlink: 'syz.5.4260': attribute type 1 has an invalid length. [ 1760.435326][T22207] netlink: 'syz.5.4260': attribute type 4 has an invalid length. [ 1760.443418][T22207] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4260'. [ 1766.076675][T22241] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 1766.086249][T22241] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0 [ 1768.769376][T22246] nvme_fabrics: missing parameter 'transport=%s' [ 1768.874542][T22246] nvme_fabrics: missing parameter 'nqn=%s' [ 1769.357708][T22244] netlink: 'syz.0.4269': attribute type 1 has an invalid length. [ 1769.442583][T22244] netlink: 'syz.0.4269': attribute type 2 has an invalid length. [ 1769.929762][T22263] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1771.206700][T22274] bridge1: entered promiscuous mode [ 1771.212085][T22274] bridge1: entered allmulticast mode [ 1771.250725][T22274] team0: Port device bridge1 added [ 1773.404256][T20520] IPVS: starting estimator thread 0... [ 1773.610776][T22284] IPVS: using max 33 ests per chain, 79200 per kthread [ 1774.543083][T22292] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4281'. [ 1774.649703][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4280'. [ 1774.888233][ T30] audit: type=1326 audit(1752882664.867:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22287 comm="syz.3.4280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x0 [ 1782.634224][T22338] loop6: detected capacity change from 0 to 524287999 [ 1785.046360][T22350] new mount options do not match the existing superblock, will be ignored [ 1785.542114][T22359] netlink: 'syz.0.4296': attribute type 12 has an invalid length. [ 1787.510860][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1789.725473][T22366] Set syz1 is full, maxelem 65536 reached [ 1790.698095][T22386] overlay: Bad value for 'redirect_dir' [ 1790.705491][T22380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4301'. [ 1791.644657][T22380] veth0_macvtap (unregistering): left allmulticast mode [ 1792.328136][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4304'. [ 1801.232694][T22461] overlay: Unknown parameter '/' [ 1805.837353][T22484] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4326'. [ 1806.375224][ T1110] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1806.395222][ T1110] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1806.406517][ T5963] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1806.443494][T22494] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4329'. [ 1806.452835][ T5963] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1807.437223][ T5944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1809.356221][T22511] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1810.675167][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1810.984674][T22519] netlink: 'syz.8.4332': attribute type 6 has an invalid length. [ 1812.085381][T22523] lo speed is unknown, defaulting to 1000 [ 1812.093414][T22523] lo speed is unknown, defaulting to 1000 [ 1814.349667][T22546] macvtap16: entered allmulticast mode [ 1815.347627][T22548] 9pnet_virtio: no channels available for device syz [ 1818.800149][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1819.564436][T22562] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1821.550184][T22561] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4343'. [ 1821.871741][T22570] netlink: 'syz.5.4343': attribute type 10 has an invalid length. [ 1821.902931][T22570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1821.924171][T22570] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1822.349364][T22558] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4344'. [ 1823.878071][T22589] new mount options do not match the existing superblock, will be ignored [ 1823.900678][T22589] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1824.493563][ T30] audit: type=1326 audit(1752882710.534:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22574 comm="syz.3.4347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x0 [ 1827.641212][T22617] fuse: Unknown parameter '' [ 1828.824482][T22619] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4357'. [ 1828.833832][T22619] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4357'. [ 1828.846046][T22619] overlayfs: failed to clone upperpath [ 1829.196434][T22628] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4360'. [ 1829.206562][T22628] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4360'. [ 1829.218493][T22628] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4360'. [ 1830.786499][T22646] 9pnet_fd: Insufficient options for proto=fd [ 1834.209838][T22658] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1835.905039][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1836.278024][T22676] Set syz1 is full, maxelem 65536 reached [ 1836.711150][ T5944] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1836.789947][T22686] macvtap17: entered allmulticast mode [ 1837.241968][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 1837.257019][ T5944] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1837.278947][ T5944] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1837.292139][ T5944] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1837.307687][ T5944] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1837.321839][ T5944] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1837.334759][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.345862][ T5944] usb 6-1: Product: syz [ 1837.350314][ T5944] usb 6-1: Manufacturer: syz [ 1837.354941][ T5944] usb 6-1: SerialNumber: syz [ 1837.704194][ T5944] usb 6-1: USB disconnect, device number 3 [ 1840.448729][T22738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1840.458300][T22738] batadv_slave_0: entered promiscuous mode [ 1843.174048][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4392'. [ 1844.918837][T22787] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1844.925999][T22787] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1845.796638][T22799] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1845.992983][ T30] audit: type=1326 audit(1752883184.382:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22804 comm="syz.3.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1846.065797][ T30] audit: type=1326 audit(1752883184.382:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22804 comm="syz.3.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1846.122736][ T30] audit: type=1326 audit(1752883184.401:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22804 comm="syz.3.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1846.149842][ T30] audit: type=1326 audit(1752883184.401:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22804 comm="syz.3.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1846.171734][ T30] audit: type=1326 audit(1752883184.401:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22804 comm="syz.3.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1846.197655][T22807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1846.291270][T22813] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 1848.947542][ T5944] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1849.188665][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1849.332293][ T5963] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1849.745172][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1849.755781][ T5944] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.4d [ 1849.765324][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.777059][ T5944] usb 6-1: config 0 descriptor?? [ 1850.003744][ T5944] usb 6-1: string descriptor 0 read error: -71 [ 1850.013965][ T5944] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 1850.020593][ T5944] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1850.028345][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 1850.038580][ T5944] usb 6-1: USB disconnect, device number 4 [ 1850.044625][ T5963] usb 1-1: too many configurations: 29, using maximum allowed: 8 [ 1851.759639][ T5963] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 1851.767386][ T5963] usb 1-1: can't read configurations, error -71 [ 1853.618025][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.335120][ T5963] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1854.763174][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 1854.831992][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.922807][ T5963] usb 1-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1854.975157][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.142331][ T5963] usb 1-1: config 0 descriptor?? [ 1855.411501][T22936] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1856.291934][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1856.843564][ T5963] usbhid 1-1:0.0: can't add hid device: -71 [ 1856.917660][ T5963] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1857.013051][ T5963] usb 1-1: USB disconnect, device number 8 [ 1858.169682][T22942] sctp: [Deprecated]: syz.9.4473 (pid 22942) Use of int in max_burst socket option. [ 1858.169682][T22942] Use struct sctp_assoc_value instead [ 1858.608089][T22955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1859.837345][T22971] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1859.924483][T22983] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4492'. [ 1861.396943][T23011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1861.573944][T23008] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1861.626074][T23024] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1862.733255][T23055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1863.595235][T23069] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1865.611148][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1868.069574][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4570'. [ 1870.799167][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1871.635193][T23211] macvtap9: entered allmulticast mode [ 1874.308726][ T30] audit: type=1326 audit(1752883210.864:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1874.341754][ T30] audit: type=1326 audit(1752883210.864:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1874.409362][ T30] audit: type=1326 audit(1752883210.892:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1874.431256][ T30] audit: type=1326 audit(1752883210.892:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1874.453483][ T30] audit: type=1326 audit(1752883210.892:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1874.475489][ T30] audit: type=1326 audit(1752883210.901:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1874.498234][ T30] audit: type=1326 audit(1752883210.901:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1874.520181][ T30] audit: type=1326 audit(1752883210.901:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23269 comm="syz.3.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1875.552841][T23294] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1877.698300][T23337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1879.571407][T23360] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4639'. [ 1879.831925][T23365] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1880.749851][ T30] audit: type=1326 audit(1752883216.887:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.3.4661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x0 [ 1881.079057][T23414] netlink: 'syz.9.4663': attribute type 2 has an invalid length. [ 1881.103510][T23414] ave_0: entered promiscuous mode [ 1881.639436][T21279] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1881.810515][T21279] usb 6-1: Using ep0 maxpacket: 8 [ 1881.820298][T21279] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1881.840190][T21279] usb 6-1: config 0 has no interface number 0 [ 1881.857776][T21279] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1881.886421][T21279] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1881.911774][T21279] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1881.923162][T21279] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1881.941944][T21279] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1881.951634][T21279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.960525][T21279] usb 6-1: Product: syz [ 1881.964954][T21279] usb 6-1: Manufacturer: syz [ 1881.969588][T21279] usb 6-1: SerialNumber: syz [ 1881.977518][T21279] usb 6-1: config 0 descriptor?? [ 1882.219549][T21279] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1882.432600][ T5963] usb 6-1: USB disconnect, device number 5 [ 1882.603709][T23449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1883.083721][T23477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1883.200358][ T5963] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1883.427540][ T5963] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1883.456701][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.492376][ T5963] usb 1-1: config 0 has no interface number 0 [ 1883.498702][ T5963] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1883.526654][ T5963] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1883.595770][ T5963] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1883.604981][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.624728][ T5963] usb 1-1: Product: syz [ 1883.630866][ T5963] usb 1-1: Manufacturer: syz [ 1883.639016][ T5963] usb 1-1: SerialNumber: syz [ 1883.652492][ T5963] usb 1-1: config 0 descriptor?? [ 1883.839895][T23502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1884.151776][T20521] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1884.312143][T20521] usb 6-1: Using ep0 maxpacket: 16 [ 1884.324225][T20521] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1884.332263][T20521] usb 6-1: config 0 has no interface number 0 [ 1884.342650][T20521] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1884.356376][T20521] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1884.367504][ T30] audit: type=1326 audit(1752883220.274:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23527 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1884.367821][T20521] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1884.389558][T20521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.403347][ T30] audit: type=1326 audit(1752883220.274:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23527 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1884.415659][T20521] usb 6-1: config 0 descriptor?? [ 1884.429812][ T30] audit: type=1326 audit(1752883220.311:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23527 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1884.456664][ T30] audit: type=1326 audit(1752883220.311:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23527 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1884.480075][ T30] audit: type=1326 audit(1752883220.311:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23527 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1884.509295][ T30] audit: type=1326 audit(1752883220.339:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23527 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1884.532122][ T30] audit: type=1326 audit(1752883220.405:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23527 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1884.557629][ T30] audit: type=1326 audit(1752883220.405:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23527 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1884.583557][ T30] audit: type=1326 audit(1752883220.405:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23527 comm="syz.3.4720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1884.625445][ T5963] usb 1-1: USB disconnect, device number 9 [ 1885.108762][T20521] uclogic 0003:28BD:0071.0021: pen parameters not found [ 1885.132519][T20521] uclogic 0003:28BD:0071.0021: interface is invalid, ignoring [ 1885.356351][T20521] usb 6-1: USB disconnect, device number 6 [ 1886.247063][T20521] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1886.418025][T20521] usb 6-1: Using ep0 maxpacket: 16 [ 1886.425859][T20521] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1886.434414][T20521] usb 6-1: config 0 has no interface number 0 [ 1886.441144][T20521] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1886.458244][T20521] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1886.481135][T20521] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1886.492322][T20521] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1886.520512][T23585] netlink: 176 bytes leftover after parsing attributes in process `syz.9.4743'. [ 1886.530046][T23585] netlink: 176 bytes leftover after parsing attributes in process `syz.9.4743'. [ 1886.539199][T20521] usb 6-1: Product: syz [ 1886.539224][T20521] usb 6-1: SerialNumber: syz [ 1886.550936][T20521] usb 6-1: config 0 descriptor?? [ 1886.563498][T20521] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1886.592212][T20521] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input40 [ 1886.905906][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1886.906718][T21279] usb 6-1: USB disconnect, device number 7 [ 1886.913298][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1886.944272][T21279] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1887.641338][T23607] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1888.565971][T23623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1888.846500][T21279] kernel write not supported for file /video8 (pid: 21279 comm: kworker/0:2) [ 1888.861438][T21279] kernel write not supported for file /input/event2 (pid: 21279 comm: kworker/0:2) [ 1889.511830][T23673] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1889.945969][T20521] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1890.229816][T20521] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1890.245273][T20521] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1890.266073][T20521] usb 1-1: config 0 has no interface number 0 [ 1890.278891][T20521] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1890.324531][T20521] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1890.336810][T20521] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1890.396072][T20521] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1890.430761][T20521] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1890.440530][T20521] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1890.453909][T20521] usb 1-1: Product: syz [ 1890.464250][T20521] usb 1-1: SerialNumber: syz [ 1890.479112][T20521] usb 1-1: config 0 descriptor?? [ 1890.514861][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1890.676450][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1890.676480][ T30] audit: type=1326 audit(1752883679.178:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1890.738029][ T30] audit: type=1326 audit(1752883679.207:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1890.763270][ T30] audit: type=1326 audit(1752883679.207:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1890.808517][ T30] audit: type=1326 audit(1752883679.207:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1890.847673][ T30] audit: type=1326 audit(1752883679.207:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1890.878041][ T30] audit: type=1326 audit(1752883679.207:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1890.922992][ T30] audit: type=1326 audit(1752883679.207:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6097d85967 code=0x7ffc0000 [ 1890.925724][T20521] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input42 [ 1890.980110][ T30] audit: type=1326 audit(1752883679.207:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6097d2ab89 code=0x7ffc0000 [ 1891.003134][ T30] audit: type=1326 audit(1752883679.207:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1891.032291][ T30] audit: type=1326 audit(1752883679.207:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6097d85967 code=0x7ffc0000 [ 1891.244352][T20521] usb 1-1: USB disconnect, device number 10 [ 1893.275162][T23804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1893.321836][T23811] 9pnet_fd: Insufficient options for proto=fd [ 1893.631084][T23827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1893.918018][T20521] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1894.083244][T20521] usb 1-1: Using ep0 maxpacket: 32 [ 1894.109057][T20521] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1894.126048][T20521] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1894.149554][T20521] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1894.209824][T23857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1894.254765][T20521] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1894.274721][T20521] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1894.294605][T20521] usb 1-1: Product: syz [ 1894.298965][T20521] usb 1-1: Manufacturer: syz [ 1894.303588][T20521] usb 1-1: SerialNumber: syz [ 1894.317050][T20521] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input43 [ 1894.429552][T23867] sctp: [Deprecated]: syz.8.4867 (pid 23867) Use of int in max_burst socket option deprecated. [ 1894.429552][T23867] Use struct sctp_assoc_value instead [ 1894.551945][T20521] usb 1-1: USB disconnect, device number 11 [ 1894.558069][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1894.573417][T20521] appletouch 1-1:1.0: input: appletouch disconnected [ 1894.689544][T23878] tipc: Enabling of bearer rejected, failed to enable media [ 1895.152314][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1896.094986][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1896.109732][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1896.123168][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1896.132262][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.144353][T23888] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1896.278570][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1896.305185][T23922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1896.549662][ T9] usb 6-1: USB disconnect, device number 8 [ 1896.669253][T23937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1898.240424][T23961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1898.356067][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1898.356086][ T30] audit: type=1326 audit(1752883686.362:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23969 comm="syz.8.4911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe28618e9a9 code=0x0 [ 1899.393902][T24011] [U]  [ 1899.600668][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1899.729716][T20521] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1899.792318][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1899.808122][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1899.816563][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1899.826412][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1899.839343][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1899.850520][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1899.867347][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1899.876448][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.911479][T20521] usb 1-1: Using ep0 maxpacket: 16 [ 1899.971393][T20521] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1899.983822][T20521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.003217][T20521] usb 1-1: Product: syz [ 1900.013829][T20521] usb 1-1: Manufacturer: syz [ 1900.024140][T20521] usb 1-1: SerialNumber: syz [ 1900.040943][T20521] usb 1-1: config 0 descriptor?? [ 1900.079620][T20521] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 1900.123902][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 1900.148463][ T9] usbtmc 6-1:16.0: can't read capabilities [ 1900.372479][ T9] usb 1-1: USB disconnect, device number 12 [ 1900.437114][T24044] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1901.208113][T24059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1902.204378][T24095] binder: 24094:24095 ioctl c0306201 0 returned -14 [ 1902.585679][ T9] usb 6-1: USB disconnect, device number 9 [ 1906.436531][T24216] loop8: detected capacity change from 0 to 8 [ 1906.452318][T24216] Dev loop8: unable to read RDB block 8 [ 1906.546809][T24216] loop8: unable to read partition table [ 1906.758150][T24216] loop8: partition table beyond EOD, truncated [ 1906.766276][T24216] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1909.670414][T24276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1910.107758][T24296] Bluetooth: hci0: unsupported parameter 2327 [ 1910.125098][T24296] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1910.258636][T24302] netlink: 'syz.5.5055': attribute type 1 has an invalid length. [ 1910.265817][T24304] 9pnet: p9_errstr2errno: server reported unknown error t/event# [ 1910.371041][T24307] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1910.421134][T24307] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1910.447159][T24307] bond2: (slave vti0): making interface the new active one [ 1910.466511][T24307] bond2: (slave vti0): Enslaving as an active interface with an up link [ 1911.441501][T24322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1911.657292][T24331] syzkaller1: entered promiscuous mode [ 1911.677733][T24331] syzkaller1: entered allmulticast mode [ 1911.695291][T24334] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5066'. [ 1911.718777][T24334] batadv0: entered promiscuous mode [ 1911.909880][T21279] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1912.095852][T21279] usb 1-1: Using ep0 maxpacket: 32 [ 1912.551872][T24353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1912.613453][T21279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.789829][T21279] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1912.811586][T21279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.820151][T21279] usb 1-1: Product: syz [ 1912.828276][T21279] usb 1-1: Manufacturer: syz [ 1912.833340][T21279] usb 1-1: SerialNumber: syz [ 1912.835892][T24366] netlink: 'syz.3.5079': attribute type 4 has an invalid length. [ 1912.841629][T21279] usb 1-1: config 0 descriptor?? [ 1912.850881][T24366] netlink: 'syz.3.5079': attribute type 4 has an invalid length. [ 1912.871314][T21279] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1913.132097][T21279] gspca_sunplus: reg_r err -32 [ 1913.339692][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1913.529464][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1913.536948][ T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1913.552670][ T9] usb 6-1: config 0 has no interface number 0 [ 1913.558943][ T9] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1913.568808][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1913.579355][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.587759][ T9] usb 6-1: Product: syz [ 1913.592120][ T9] usb 6-1: Manufacturer: syz [ 1913.597288][ T9] usb 6-1: SerialNumber: syz [ 1913.607528][ T9] usb 6-1: config 0 descriptor?? [ 1914.320687][T21279] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1914.911470][ T9] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1914.919442][ T9] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1914.926849][ T9] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1914.935866][ T9] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1914.953491][ T9] usb 6-1: USB disconnect, device number 10 [ 1915.201351][T24423] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1915.442170][ T9] usb 1-1: USB disconnect, device number 13 [ 1918.602637][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1918.616328][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1918.626899][T24476] ceph: No mds server is up or the cluster is laggy [ 1918.699085][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.367460][T24523] sctp: [Deprecated]: syz.3.5136 (pid 24523) Use of int in max_burst socket option deprecated. [ 1920.367460][T24523] Use struct sctp_assoc_value instead [ 1921.312311][T20521] psmouse serio4: Failed to reset mouse on : -5 [ 1921.755729][T24560] bond0: (slave batadv0): Releasing backup interface [ 1921.772622][T24560] bridge_slave_1: left allmulticast mode [ 1921.778364][T24560] bridge_slave_1: left promiscuous mode [ 1921.803861][T24560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.820420][T24560] bond0: (slave bond_slave_0): Releasing backup interface [ 1921.833975][T24560] bond0: (slave bond_slave_1): Releasing backup interface [ 1921.843026][T24560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1922.908919][T24590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5164'. [ 1923.369418][T24609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1923.686642][T24622] 9pnet_fd: Insufficient options for proto=fd [ 1924.116689][T24628] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1924.388321][T24631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5182'. [ 1924.639090][ T30] audit: type=1800 audit(1752886881.958:311): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.5187" name="nullb0" dev="tmpfs" ino=2855 res=0 errno=0 [ 1925.184304][T24663] team0: Port device team_slave_0 removed [ 1925.385333][T20521] misc userio: Buffer overflowed, userio client isn't keeping up [ 1925.541654][T24676] lo speed is unknown, defaulting to 1000 [ 1925.553197][T24676] lo speed is unknown, defaulting to 1000 [ 1925.792795][T24673] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1927.140543][T20521] input: PS/2 Generic Mouse as /devices/serio4/input/input44 [ 1927.300457][T24706] overlayfs: failed to clone upperpath [ 1927.385352][T20521] psmouse serio4: Failed to enable mouse on [ 1928.625463][T24760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5231'. [ 1929.419878][T24791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1929.422018][T24789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1929.775392][T24799] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5246'. [ 1930.223965][T24824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1930.361200][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5257'. [ 1931.430128][T24863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1932.793904][T20521] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1932.967314][T20521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.978889][T20521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.996975][T20521] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1933.015905][T20521] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1933.050512][T20521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.072778][T20521] usb 6-1: config 0 descriptor?? [ 1933.280244][T24908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1933.677222][T20521] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 1933.788969][T20521] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1933.804497][T20521] usb 6-1: USB disconnect, device number 11 [ 1933.971232][T24916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1934.965925][T24941] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1935.412530][T24952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1936.131040][T24976] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1936.963453][T24980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1938.089406][T25012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5322'. [ 1938.238020][T25020] netlink: 'syz.3.5325': attribute type 1 has an invalid length. [ 1938.271538][T25020] bond3: entered promiscuous mode [ 1938.277164][T25020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1938.330460][T25020] bond3: (slave dummy0): making interface the new active one [ 1938.341004][T25020] dummy0: entered promiscuous mode [ 1938.348592][T25020] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1939.276671][T25038] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1939.583485][T25058] overlayfs: failed to clone upperpath [ 1941.656445][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1941.838233][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1941.855760][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1941.875600][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1941.893547][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1941.905273][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.917065][ T9] usb 1-1: config 0 descriptor?? [ 1942.507594][ T9] ft260 0003:0403:6030.0023: unknown main item tag 0x7 [ 1942.712342][ T9] ft260 0003:0403:6030.0023: chip code: 6424 8183 [ 1944.105011][ T9] ft260 0003:0403:6030.0023: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1944.265825][T25141] overlayfs: failed to clone upperpath [ 1944.310729][ T9] ft260 0003:0403:6030.0023: failed to retrieve status: -32, no wakeup [ 1944.371611][ T9] ft260 0003:0403:6030.0023: failed to retrieve status: -32 [ 1944.586467][T21279] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 1945.023962][ T5963] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1945.087797][T25151] overlayfs: failed to clone upperpath [ 1945.206047][ T5963] usb 6-1: Using ep0 maxpacket: 32 [ 1945.227427][ T5963] usb 6-1: too many configurations: 29, using maximum allowed: 8 [ 1945.243157][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.254369][ T5963] usb 6-1: config 0 has no interfaces? [ 1945.269109][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.297260][ T5963] usb 6-1: config 0 has no interfaces? [ 1945.313875][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.339066][ T5963] usb 6-1: config 0 has no interfaces? [ 1945.349602][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.380460][ T5963] usb 6-1: config 0 has no interfaces? [ 1945.389871][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.409311][ T5963] usb 6-1: config 0 has no interfaces? [ 1945.430987][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.451785][ T5963] usb 6-1: config 0 has no interfaces? [ 1945.463347][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.482261][ T5963] usb 6-1: config 0 has no interfaces? [ 1945.495602][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.516438][ T5963] usb 6-1: config 0 has no interfaces? [ 1945.528523][ T5963] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 1945.537780][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.545813][ T5963] usb 6-1: Product: syz [ 1945.559007][ T5963] usb 6-1: Manufacturer: syz [ 1945.564073][ T5963] usb 6-1: SerialNumber: syz [ 1945.571832][ T5963] usb 6-1: config 0 descriptor?? [ 1945.630815][ T9] usb 1-1: USB disconnect, device number 14 [ 1945.929780][T25169] lo speed is unknown, defaulting to 1000 [ 1946.040651][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5388'. [ 1946.061043][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1946.346980][T25169] lo speed is unknown, defaulting to 1000 [ 1946.638649][T25196] 9pnet_fd: Insufficient options for proto=fd [ 1947.247627][ T5963] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1947.564211][ T5963] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1947.572805][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1947.589119][ T5963] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1947.599201][ T5963] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1947.611618][ T5963] usb 1-1: Manufacturer: syz [ 1947.619150][ T5963] usb 1-1: config 0 descriptor?? [ 1947.709982][ T5963] rc_core: IR keymap rc-hauppauge not found [ 1947.715970][ T5963] Registered IR keymap rc-empty [ 1947.727147][ T5963] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1947.739889][ T5963] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input46 [ 1948.042523][ T9] usb 6-1: USB disconnect, device number 12 [ 1948.331075][T25232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1948.531449][ T5963] usb 1-1: USB disconnect, device number 15 [ 1949.033052][T20521] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1949.203935][T20521] usb 6-1: Using ep0 maxpacket: 16 [ 1949.211306][T20521] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1949.235222][T20521] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1949.256757][T20521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.279442][T20521] usb 6-1: config 0 descriptor?? [ 1949.290576][T20521] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input47 [ 1949.510210][ T5191] bcm5974 6-1:0.0: could not read from device [ 1949.607052][T20521] bcm5974 6-1:0.0: could not read from device [ 1949.710185][ T5191] bcm5974 6-1:0.0: could not read from device [ 1949.730695][T20521] input: failed to attach handler mousedev to device input47, error: -5 [ 1949.748169][ T5191] bcm5974 6-1:0.0: could not read from device [ 1949.757744][T20521] usb 6-1: USB disconnect, device number 13 [ 1949.812865][T25265] overlayfs: failed to clone upperpath [ 1950.059182][T21279] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1950.262267][T21279] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1950.282838][T21279] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1950.305320][T21279] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1950.314421][T21279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.356123][T25264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1950.371600][T21279] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1950.781691][T25296] 9pnet_fd: Insufficient options for proto=fd [ 1951.035135][T21279] usb 1-1: USB disconnect, device number 16 [ 1952.050067][T21279] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1952.095694][T25322] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1952.219616][T21279] usb 6-1: Using ep0 maxpacket: 16 [ 1952.227801][T21279] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1952.240749][T21279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1952.254610][T21279] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1952.264016][T21279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.272176][T21279] usb 6-1: Product: syz [ 1952.276458][T21279] usb 6-1: Manufacturer: syz [ 1952.281062][T21279] usb 6-1: SerialNumber: syz [ 1952.288216][T21279] usb 6-1: config 0 descriptor?? [ 1952.296420][T21279] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1952.322335][T21279] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1952.944448][T21279] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1952.953923][T21279] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1953.619233][T21279] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 1953.630233][T21279] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1953.821519][T21279] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1953.870362][T21279] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1953.905779][T21279] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1953.916705][T21279] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1953.932633][T21279] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1953.969636][T21279] usb 6-1: USB disconnect, device number 14 [ 1954.173188][T25363] overlayfs: failed to clone upperpath [ 1955.278345][T25376] netlink: 136 bytes leftover after parsing attributes in process `syz.8.5470'. [ 1955.455738][T25380] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1955.490177][T20521] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1955.531376][T25384] netlink: zone id is out of range [ 1955.537018][T25384] netlink: del zone limit has 4 unknown bytes [ 1955.673830][T20521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1955.688700][T20521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1955.699486][T20521] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1955.717472][T20521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.732482][T20521] usb 6-1: config 0 descriptor?? [ 1956.302560][ T5963] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 1956.486545][ T5963] usb 1-1: config 7 interface 0 has no altsetting 0 [ 1956.498684][ T5963] usb 1-1: string descriptor 0 read error: -22 [ 1956.524828][ T5963] usb 1-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 1956.545867][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.687679][T20521] hid-led 0003:27B8:01ED.0024: probe with driver hid-led failed with error -32 [ 1956.700570][T20521] usb 6-1: USB disconnect, device number 15 [ 1956.721858][ T5963] usb 1-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 1956.730865][ T5963] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1956.747877][ T5963] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 1956.756794][ T5963] usb 1-1: media controller created [ 1956.797326][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1957.207794][ T30] audit: type=1326 audit(1752888724.434:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25417 comm="syz.8.5485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe28618e9a9 code=0x0 [ 1957.297958][T25420] netlink: 'syz.9.5486': attribute type 4 has an invalid length. [ 1957.320665][T25420] netlink: 'syz.9.5486': attribute type 17 has an invalid length. [ 1957.334879][ T9] lo speed is unknown, defaulting to 1000 [ 1957.343057][ T9] syz0: Port: 1 Link ACTIVE [ 1957.455372][T21279] usb 1-1: USB disconnect, device number 17 [ 1963.589066][T25544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1964.204617][T25576] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 4, id = 0 [ 1965.842104][T25638] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5562'. [ 1966.024630][T25641] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5563'. [ 1966.034075][T25641] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1967.532117][T25670] netlink: 'syz.3.5572': attribute type 7 has an invalid length. [ 1967.632799][ T30] audit: type=1800 audit(1752888734.181:313): pid=25674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.5574" name="/" dev="9p" ino=2 res=0 errno=0 [ 1968.962828][T25689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1969.185277][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059510c00: rx timeout, send abort [ 1969.196368][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059510c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1970.574433][T25718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1971.981482][ T30] audit: type=1326 audit(1752889644.259:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25741 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1972.010996][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1972.017800][ T30] audit: type=1326 audit(1752889644.277:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25741 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1972.089293][ T30] audit: type=1326 audit(1752889644.277:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25741 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1972.122806][ T30] audit: type=1326 audit(1752889644.277:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25741 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1972.181421][T25748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1972.203335][ T30] audit: type=1326 audit(1752889644.277:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25741 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1972.275464][ T30] audit: type=1326 audit(1752889644.277:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25741 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1972.321340][ T30] audit: type=1326 audit(1752889644.277:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25741 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1972.369173][ T30] audit: type=1326 audit(1752889644.277:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25741 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6097d8e9a9 code=0x7ffc0000 [ 1972.514931][ T30] audit: type=1326 audit(1752889644.277:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25741 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6097d908c7 code=0x7ffc0000 [ 1973.141591][T25762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1973.363495][T25767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1973.471729][T25772] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1974.826291][T25792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1976.085411][T25804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1976.569884][T25822] overlayfs: failed to clone upperpath [ 1976.617270][T25824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1976.944296][T25834] ipip0: entered allmulticast mode [ 1978.087958][T25848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5636'. [ 1979.692919][T25862] siw: device registration error -23 [ 1982.604296][T25900] macsec1: entered promiscuous mode [ 1982.609875][T25900] bridge0: entered promiscuous mode [ 1982.616225][T25900] bridge0: port 3(macsec1) entered blocking state [ 1982.623226][T25900] bridge0: port 3(macsec1) entered disabled state [ 1982.629906][T25900] macsec1: entered allmulticast mode [ 1982.635482][T25900] bridge0: entered allmulticast mode [ 1982.718779][T25900] macsec1: left allmulticast mode [ 1982.724386][T25900] bridge0: left allmulticast mode [ 1982.776898][T25900] bridge0: left promiscuous mode [ 1982.979315][T25901] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1983.910933][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5654'. [ 1983.993777][T25915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1984.454745][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1984.893987][T25923] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1988.005292][T25954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1988.077201][T25957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1988.432601][T25962] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1989.907037][T25968] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5674'. [ 1989.920001][T25968] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5674'. [ 1992.926223][T25989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1994.827618][ T5963] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1994.970972][T20521] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1995.683631][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.756953][ T5963] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1995.782911][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.830738][T20521] usb 1-1: Using ep0 maxpacket: 8 [ 1995.861298][ T5963] usb 6-1: config 0 descriptor?? [ 1995.914271][ T5963] pwc: Askey VC010 type 2 USB webcam detected. [ 1996.066781][T20521] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1996.091173][T20521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.139661][T20521] usb 1-1: config 0 descriptor?? [ 1996.157174][ T5963] pwc: send_video_command error -71 [ 1996.166963][ T5963] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1996.175590][ T5963] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1996.232200][ T5963] usb 6-1: USB disconnect, device number 16 [ 1996.288202][T26025] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5691'. [ 1996.357531][T26027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1996.458957][T26030] netlink: 332 bytes leftover after parsing attributes in process `syz.8.5693'. [ 1996.628468][T20521] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1996.852464][ T5963] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1998.491637][ T5963] usb 6-1: device descriptor read/all, error -71 [ 1998.840245][T26050] overlay: Unknown parameter 'fowner<00000000000000000000' [ 2002.250932][T26072] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5705'. [ 2002.315035][T20521] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2002.325098][T20521] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2002.422970][T20521] asix 1-1:0.0: probe with driver asix failed with error -71 [ 2002.495636][T20521] usb 1-1: USB disconnect, device number 18 [ 2006.766946][T26109] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 2008.153467][T26112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2008.202803][T26107] netlink: 220 bytes leftover after parsing attributes in process `syz.8.5714'. [ 2015.657399][T26181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5735'. [ 2015.673397][T26181] bond0: entered promiscuous mode [ 2015.682431][T26181] bond_slave_0: entered promiscuous mode [ 2015.698379][T26181] bond_slave_1: entered promiscuous mode [ 2015.919681][T26181] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2016.000309][T26185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5736'. [ 2016.014388][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5736'. [ 2016.575355][T26181] bond0: left promiscuous mode [ 2016.758358][T26181] bond_slave_0: left promiscuous mode [ 2016.822483][T26181] bond_slave_1: left promiscuous mode [ 2017.198080][T26192] netlink: 'syz.5.5740': attribute type 10 has an invalid length. [ 2017.240493][T26192] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2017.355901][T26200] tipc: Started in network mode [ 2017.367218][T26200] tipc: Node identity 080211000001, cluster identity 4711 [ 2017.388831][T26200] tipc: Enabled bearer , priority 0 [ 2017.408826][T26200] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 2017.439240][T26200] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 2018.716105][T21279] tipc: Node number set to 134418688 [ 2018.822976][T26200] tipc: Resetting bearer [ 2023.943992][T26266] tipc: Enabling of bearer rejected, failed to enable media [ 2024.593005][T26276] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5765'. [ 2025.738542][T26276] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5765'. [ 2034.126262][T26349] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 2039.516483][T26372] vlan2: entered promiscuous mode [ 2039.522166][T26372] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2039.530238][T26372] vlan2: entered allmulticast mode [ 2040.764865][T26380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2043.670018][T26401] tipc: Enabling of bearer rejected, failed to enable media [ 2045.806859][T26418] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 2049.132176][T26444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2049.144081][T26444] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2049.152646][T26444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2049.160910][T26444] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2049.169605][T26444] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2049.846726][T26443] lo speed is unknown, defaulting to 1000 [ 2049.861217][T26443] lo speed is unknown, defaulting to 1000 [ 2050.065540][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2051.513070][T26444] Bluetooth: hci4: command tx timeout [ 2052.367519][T26443] chnl_net:caif_netlink_parms(): no params data found [ 2052.414853][T26468] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2052.424543][T26468] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2052.434435][T26468] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2052.642824][ T1147] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.765801][T26444] Bluetooth: hci4: command tx timeout [ 2053.954683][ T1147] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.875529][ T1147] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.994821][T26444] Bluetooth: hci4: command tx timeout [ 2056.159881][ T1147] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.426082][T26443] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.494898][T26500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5821'. [ 2056.509055][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5821'. [ 2057.043093][T26443] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.050444][T26443] bridge_slave_0: entered allmulticast mode [ 2057.108769][T26443] bridge_slave_0: entered promiscuous mode [ 2057.233649][T26443] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.291447][T26443] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.313819][T26443] bridge_slave_1: entered allmulticast mode [ 2057.497966][T26443] bridge_slave_1: entered promiscuous mode [ 2058.184090][T26444] Bluetooth: hci4: command tx timeout [ 2058.765548][T26443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2058.791256][T26509] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5824'. [ 2059.267851][T26443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2059.401784][ T1147] bridge_slave_1: left allmulticast mode [ 2059.408415][ T1147] bridge_slave_1: left promiscuous mode [ 2059.418226][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 2059.431444][ T1147] bridge_slave_0: left allmulticast mode [ 2059.441746][ T1147] bridge_slave_0: left promiscuous mode [ 2059.448037][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.186401][ T5963] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2065.482891][ T5963] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2065.522385][ T5963] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2065.550116][ T5963] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2065.559230][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.125549][T21279] usb 6-1: USB disconnect, device number 19 [ 2067.848571][ T1147] team0: Port device bridge2 removed [ 2069.108750][T26562] netlink: 'syz.5.5839': attribute type 1 has an invalid length. [ 2069.257840][T26564] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5839'. [ 2069.364815][ T1147] bond0 (unregistering): left promiscuous mode [ 2069.371413][ T1147] bond_slave_0: left promiscuous mode [ 2069.377105][ T1147] bond_slave_1: left promiscuous mode [ 2069.405382][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2069.416745][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2069.427085][ T1147] bond0 (unregistering): Released all slaves [ 2069.575128][ T1147] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 2069.585867][ T1147] bond1 (unregistering): Released all slaves [ 2069.600896][ T1147] bond2 (unregistering): Released all slaves [ 2069.627081][T26443] team0: Port device team_slave_0 added [ 2069.867558][T26563] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2069.889788][T26563] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2069.898763][T26563] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2069.907747][T26563] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2069.919987][T26563] bond3: (slave geneve2): making interface the new active one [ 2069.950201][T26563] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 2069.962269][T26564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2070.132792][T26443] team0: Port device team_slave_1 added [ 2070.857553][ T1147] : left promiscuous mode [ 2071.684269][ T1147] ave_0: left promiscuous mode [ 2071.986849][T26581] ALSA: mixer_oss: invalid OSS volume '' [ 2072.168487][T26585] netlink: 'syz.8.5845': attribute type 6 has an invalid length. [ 2072.233384][T26443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2072.240395][T26443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2072.266359][ C0] vkms_vblank_simulate: vblank timer overrun [ 2072.350108][T26443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2072.364434][T26443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2072.378467][T26443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2072.424267][T26443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2072.442751][T26591] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2073.506146][ T1147] tipc: Left network mode [ 2073.629828][T26443] hsr_slave_0: entered promiscuous mode [ 2073.635984][T26606] Invalid ELF header magic: != ELF [ 2074.074152][T26443] hsr_slave_1: entered promiscuous mode [ 2074.080615][T26443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2074.105204][T26443] Cannot create hsr debugfs directory [ 2076.192233][T26629] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5858'. [ 2077.174064][T26635] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2078.093805][ T1147] hsr_slave_0: left promiscuous mode [ 2078.100070][ T1147] hsr_slave_1: left promiscuous mode [ 2078.106590][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2078.749743][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2078.760131][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2078.878009][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2080.632832][ T1147] veth0_macvtap: left allmulticast mode [ 2080.652543][ T1147] veth1_macvtap: left promiscuous mode [ 2080.671686][ T1147] veth0_macvtap: left promiscuous mode [ 2080.867929][ T1147] veth1_vlan: left promiscuous mode [ 2080.873863][ T1147] veth0_vlan: left promiscuous mode [ 2082.969072][T26675] xt_CT: No such helper "pptp" [ 2085.507677][T26698] trusted_key: encrypted_key: insufficient parameters specified [ 2085.874434][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 2085.931127][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 2086.623859][T26589] lo speed is unknown, defaulting to 1000 [ 2086.655210][T26589] infiniband syz0: ib_query_port failed (-19) [ 2088.459707][T26443] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2088.560977][T26443] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2088.598007][T26724] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2088.674816][T26443] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2088.932683][T26443] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2090.425885][T26443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2090.463495][T26443] 8021q: adding VLAN 0 to HW filter on device team0 [ 2090.526796][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 2090.534057][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2090.589832][T19207] bridge0: port 2(bridge_slave_1) entered blocking state [ 2090.597150][T19207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2093.848016][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2095.196183][T26443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2095.354197][T26443] veth0_vlan: entered promiscuous mode [ 2096.052803][T26443] veth1_vlan: entered promiscuous mode [ 2096.161718][T26443] veth0_macvtap: entered promiscuous mode [ 2096.219520][T26443] veth1_macvtap: entered promiscuous mode [ 2096.253883][T26443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2096.749396][T26443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2096.762704][T26443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.773885][T26443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.783980][T26443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.794784][T26443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.077983][T26485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.085866][T26485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2097.310990][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.337349][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.670203][T26820] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 2100.871646][T26444] Bluetooth: hci1: command tx timeout [ 2101.310252][T26831] overlay: ./file0 is not a directory [ 2108.682657][T26896] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5928'. [ 2109.035065][T26904] overlayfs: missing 'lowerdir' [ 2109.144637][T26905] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2113.737174][T26959] pim6reg: entered allmulticast mode [ 2113.833165][T26960] [ 2113.835555][T26960] ====================================================== [ 2113.842583][T26960] WARNING: possible circular locking dependency detected [ 2113.849621][T26960] 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 Not tainted [ 2113.856735][T26960] ------------------------------------------------------ [ 2113.863756][T26960] syz.5.5944/26960 is trying to acquire lock: [ 2113.869888][T26960] ffff88806238b9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 2113.878304][T26960] [ 2113.878304][T26960] but task is already holding lock: [ 2113.885681][T26960] ffff888058d91868 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440 [ 2113.894945][T26960] [ 2113.894945][T26960] which lock already depends on the new lock. [ 2113.894945][T26960] [ 2113.905384][T26960] [ 2113.905384][T26960] the existing dependency chain (in reverse order) is: [ 2113.914419][T26960] [ 2113.914419][T26960] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 2113.921845][T26960] lock_acquire+0x120/0x360 [ 2113.926898][T26960] __mutex_lock+0x182/0xe80 [ 2113.931946][T26960] anon_pipe_write+0x16a/0x1360 [ 2113.937348][T26960] __kernel_write_iter+0x3e9/0x860 [ 2113.943017][T26960] __kernel_write+0xef/0x150 [ 2113.948157][T26960] autofs_notify_daemon+0x748/0xe50 [ 2113.953895][T26960] autofs_wait+0x11dc/0x1870 [ 2113.959030][T26960] autofs_do_expire_multi+0x5ca/0x9a0 [ 2113.964947][T26960] autofs_root_ioctl+0x46/0x60 [ 2113.970266][T26960] __se_sys_ioctl+0xf9/0x170 [ 2113.975412][T26960] do_syscall_64+0xfa/0x3b0 [ 2113.980456][T26960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2113.986893][T26960] [ 2113.986893][T26960] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 2113.994676][T26960] lock_acquire+0x120/0x360 [ 2113.999737][T26960] __mutex_lock+0x182/0xe80 [ 2114.004807][T26960] autofs_notify_daemon+0x735/0xe50 [ 2114.010548][T26960] autofs_wait+0x11dc/0x1870 [ 2114.015677][T26960] autofs_mount_wait+0x16b/0x330 [ 2114.021159][T26960] autofs_d_automount+0x393/0x720 [ 2114.026729][T26960] __traverse_mounts+0x305/0x5b0 [ 2114.032210][T26960] step_into+0x534/0xf30 [ 2114.037066][T26960] path_lookupat+0x163/0x430 [ 2114.042215][T26960] filename_lookup+0x212/0x570 [ 2114.047508][T26960] kern_path+0x35/0x50 [ 2114.052093][T26960] lookup_bdev+0xc0/0x280 [ 2114.056945][T26960] resume_store+0x169/0x460 [ 2114.061972][T26960] kernfs_fop_write_iter+0x375/0x4f0 [ 2114.067784][T26960] vfs_write+0x548/0xa90 [ 2114.072543][T26960] ksys_write+0x145/0x250 [ 2114.077479][T26960] do_syscall_64+0xfa/0x3b0 [ 2114.082530][T26960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2114.089292][T26960] [ 2114.089292][T26960] -> #1 (&of->mutex){+.+.}-{4:4}: [ 2114.096505][T26960] lock_acquire+0x120/0x360 [ 2114.101520][T26960] __mutex_lock+0x182/0xe80 [ 2114.106540][T26960] kernfs_seq_start+0x55/0x3c0 [ 2114.111860][T26960] seq_read_iter+0x3f2/0xe10 [ 2114.116974][T26960] copy_splice_read+0x552/0x9b0 [ 2114.122424][T26960] splice_direct_to_actor+0x4a9/0xcc0 [ 2114.128306][T26960] do_splice_direct+0x181/0x270 [ 2114.133668][T26960] do_sendfile+0x4da/0x7e0 [ 2114.138607][T26960] __se_sys_sendfile64+0x13e/0x190 [ 2114.144237][T26960] do_syscall_64+0xfa/0x3b0 [ 2114.149280][T26960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2114.155707][T26960] [ 2114.155707][T26960] -> #0 (&p->lock){+.+.}-{4:4}: [ 2114.162753][T26960] validate_chain+0xb9b/0x2140 [ 2114.168037][T26960] __lock_acquire+0xab9/0xd20 [ 2114.173228][T26960] lock_acquire+0x120/0x360 [ 2114.178258][T26960] __mutex_lock+0x182/0xe80 [ 2114.183284][T26960] seq_read_iter+0xb7/0xe10 [ 2114.188404][T26960] copy_splice_read+0x552/0x9b0 [ 2114.193773][T26960] splice_file_to_pipe+0x270/0x440 [ 2114.199536][T26960] do_sendfile+0x475/0x7e0 [ 2114.204913][T26960] __se_sys_sendfile64+0x13e/0x190 [ 2114.210547][T26960] do_syscall_64+0xfa/0x3b0 [ 2114.215685][T26960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2114.222099][T26960] [ 2114.222099][T26960] other info that might help us debug this: [ 2114.222099][T26960] [ 2114.232419][T26960] Chain exists of: [ 2114.232419][T26960] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 2114.232419][T26960] [ 2114.244682][T26960] Possible unsafe locking scenario: [ 2114.244682][T26960] [ 2114.252594][T26960] CPU0 CPU1 [ 2114.257968][T26960] ---- ---- [ 2114.263325][T26960] lock(&pipe->mutex); [ 2114.267486][T26960] lock(&sbi->pipe_mutex); [ 2114.274519][T26960] lock(&pipe->mutex); [ 2114.281189][T26960] lock(&p->lock); [ 2114.284998][T26960] [ 2114.284998][T26960] *** DEADLOCK *** [ 2114.284998][T26960] [ 2114.293136][T26960] 1 lock held by syz.5.5944/26960: [ 2114.298240][T26960] #0: ffff888058d91868 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440 [ 2114.307912][T26960] [ 2114.307912][T26960] stack backtrace: [ 2114.313795][T26960] CPU: 1 UID: 0 PID: 26960 Comm: syz.5.5944 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 2114.313813][T26960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2114.313822][T26960] Call Trace: [ 2114.313828][T26960] [ 2114.313835][T26960] dump_stack_lvl+0x189/0x250 [ 2114.313851][T26960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2114.313865][T26960] ? __pfx__printk+0x10/0x10 [ 2114.313882][T26960] ? print_lock_name+0xde/0x100 [ 2114.313897][T26960] print_circular_bug+0x2ee/0x310 [ 2114.313915][T26960] check_noncircular+0x134/0x160 [ 2114.313932][T26960] validate_chain+0xb9b/0x2140 [ 2114.313947][T26960] ? finish_task_switch+0x26b/0x950 [ 2114.313967][T26960] ? rcu_is_watching+0x15/0xb0 [ 2114.313980][T26960] ? look_up_lock_class+0x74/0x170 [ 2114.313993][T26960] ? register_lock_class+0x51/0x320 [ 2114.314015][T26960] __lock_acquire+0xab9/0xd20 [ 2114.314029][T26960] ? seq_read_iter+0xb7/0xe10 [ 2114.314046][T26960] lock_acquire+0x120/0x360 [ 2114.314057][T26960] ? seq_read_iter+0xb7/0xe10 [ 2114.314079][T26960] __mutex_lock+0x182/0xe80 [ 2114.314093][T26960] ? seq_read_iter+0xb7/0xe10 [ 2114.314113][T26960] ? rcu_is_watching+0x15/0xb0 [ 2114.314126][T26960] ? seq_read_iter+0xb7/0xe10 [ 2114.314142][T26960] ? trace_irq_disable+0x37/0x110 [ 2114.314160][T26960] ? __pfx___mutex_lock+0x10/0x10 [ 2114.314175][T26960] ? irqentry_exit+0x74/0x90 [ 2114.314187][T26960] ? lockdep_hardirqs_on+0x9c/0x150 [ 2114.314202][T26960] seq_read_iter+0xb7/0xe10 [ 2114.314223][T26960] ? kernfs_fop_read_iter+0x13f/0x640 [ 2114.314241][T26960] ? __asan_memset+0x22/0x50 [ 2114.314260][T26960] copy_splice_read+0x552/0x9b0 [ 2114.314271][T26960] ? trace_irq_disable+0x37/0x110 [ 2114.314292][T26960] ? __pfx_copy_splice_read+0x10/0x10 [ 2114.314303][T26960] ? irqentry_exit+0x74/0x90 [ 2114.314321][T26960] ? __pfx_copy_splice_read+0x10/0x10 [ 2114.314333][T26960] splice_file_to_pipe+0x270/0x440 [ 2114.314347][T26960] do_sendfile+0x475/0x7e0 [ 2114.314366][T26960] ? __pfx_do_sendfile+0x10/0x10 [ 2114.314380][T26960] ? preempt_schedule_irq+0xde/0x150 [ 2114.314393][T26960] ? __se_sys_futex+0x36f/0x400 [ 2114.314410][T26960] __se_sys_sendfile64+0x13e/0x190 [ 2114.314425][T26960] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 2114.314440][T26960] ? __secure_computing+0xe2/0x2a0 [ 2114.314456][T26960] do_syscall_64+0xfa/0x3b0 [ 2114.314470][T26960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2114.314483][T26960] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2114.314495][T26960] ? clear_bhb_loop+0x60/0xb0 [ 2114.314508][T26960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2114.314521][T26960] RIP: 0033:0x7f271178e9a9 [ 2114.314533][T26960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2114.314545][T26960] RSP: 002b:00007f271254a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2114.314559][T26960] RAX: ffffffffffffffda RBX: 00007f27119b6160 RCX: 00007f271178e9a9 [ 2114.314569][T26960] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 2114.314577][T26960] RBP: 00007f2711810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2114.314585][T26960] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2114.314593][T26960] R13: 0000000000000000 R14: 00007f27119b6160 R15: 00007fff6bdb7468 [ 2114.314608][T26960] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2115.757008][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2116.594134][T26314] bond0 (unregistering): Released all slaves [ 2116.604032][T26314] bond1 (unregistering): Released all slaves [ 2116.740963][T26314] bond2 (unregistering): Released all slaves [ 2116.870152][T26314] bond3 (unregistering): (slave dummy0): Releasing active interface [ 2116.879711][T26314] dummy0: left promiscuous mode [ 2116.885722][T26314] bond3 (unregistering): Released all slaves [ 2116.967524][T26314] : left promiscuous mode [ 2117.025723][T26314] tipc: Left network mode [ 2117.284457][T26314] hsr_slave_0: left promiscuous mode [ 2117.290322][T26314] hsr_slave_1: left promiscuous mode [ 2117.298314][T26314] pim6reg (unregistering): left allmulticast mode [ 2118.176445][T26314] IPVS: stop unused estimator thread 0... [ 2118.262246][T26314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.304018][T26314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.345877][T26314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.419981][T26314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.479849][T26314] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.526265][T26314] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.570456][T26314] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.633425][T26314] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.977344][T26314] bridge_slave_1: left allmulticast mode [ 2118.983152][T26314] bridge_slave_1: left promiscuous mode [ 2118.988861][T26314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2118.997106][T26314] bridge_slave_0: left allmulticast mode [ 2119.002912][T26314] bridge_slave_0: left promiscuous mode [ 2119.008588][T26314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2119.019234][T26314] bridge_slave_1: left allmulticast mode [ 2119.025331][T26314] bridge_slave_1: left promiscuous mode [ 2119.031016][T26314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2119.039714][T26314] bridge_slave_0: left allmulticast mode [ 2119.045386][T26314] bridge_slave_0: left promiscuous mode [ 2119.051266][T26314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2119.061630][T26314] bridge_slave_0: left allmulticast mode [ 2119.067563][T26314] bridge_slave_0: left promiscuous mode [ 2119.073234][T26314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2119.155357][T26314] dvmrp8 (unregistering): left allmulticast mode [ 2119.189164][T26314] team0: Port device geneve0 removed [ 2119.230657][T26314] team0: Port device bridge1 removed [ 2119.297468][T26314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2119.308566][T26314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2119.318031][T26314] bond0 (unregistering): Released all slaves [ 2119.405681][T26314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2119.418633][T26314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2119.428771][T26314] bond0 (unregistering): Released all slaves [ 2119.543245][T26314] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2119.554195][T26314] bond2 (unregistering): (slave gretap2): Releasing backup interface [ 2119.873846][T26314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2119.883612][T26314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2119.892907][T26314] bond0 (unregistering): Released all slaves [ 2120.018014][T26314] bond1 (unregistering): Released all slaves [ 2120.031595][T26314] bond2 (unregistering): (slave bond3): Releasing backup interface [ 2120.040383][T26314] bond2 (unregistering): Released all slaves [ 2120.166173][T26314] bond3 (unregistering): Released all slaves [ 2120.176121][T26314] bond4 (unregistering): Released all slaves [ 2121.923271][T26314] tipc: Left network mode [ 2121.966887][T26314] IPVS: stopping backup sync thread 25576 ... [ 2121.986984][T26314] team0: Port device wlan1 removed [ 2122.447907][T26314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2122.455391][T26314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2122.463184][T26314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2122.470746][T26314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2122.481726][T26314] hsr_slave_0: left promiscuous mode [ 2122.487448][T26314] hsr_slave_1: left promiscuous mode [ 2122.493189][T26314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2122.500996][T26314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2122.509338][T26314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2122.516846][T26314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2122.530475][T26314] hsr_slave_0: left promiscuous mode [ 2122.540792][T26314] veth1_vlan: left promiscuous mode [ 2122.546172][T26314] veth0_vlan: left promiscuous mode [ 2122.553248][T26314] veth1_macvtap: left promiscuous mode [ 2122.558754][T26314] veth0_macvtap: left promiscuous mode [ 2122.565041][T26314] veth1_vlan: left promiscuous mode [ 2122.570301][T26314] veth0_vlan: left promiscuous mode [ 2122.576344][T26314] veth0_macvtap: left allmulticast mode [ 2122.767501][T26314] team0 (unregistering): Port device team_slave_1 removed [ 2122.976500][T26314] team0 (unregistering): Port device team_slave_1 removed [ 2123.004152][T26314] team0 (unregistering): Port device team_slave_0 removed [ 2123.497785][T26314] team0 (unregistering): Port device team_slave_1 removed [ 2123.541212][T26314] team0 (unregistering): Port device team_slave_0 removed