last executing test programs: 24m51.909307731s ago: executing program 1 (id=910): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x8004, 0x0) 24m51.623242868s ago: executing program 1 (id=911): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x4b63, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x402100) 24m48.488058826s ago: executing program 1 (id=921): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x8004, 0x0) 24m47.954889074s ago: executing program 1 (id=922): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x6a6}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x18e88, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @value, @void, @value=r3}, 0x50) 24m46.302053362s ago: executing program 1 (id=931): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20008008000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001040)={0xf, 0x2, 0x0, "b427edec06e66b29a65eda7f0f6b00002f00", 0xb5315241}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$nci(r2, &(0x7f0000000180)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x5}, 0x4) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600330000000200000000000000000000000000000002000100000000000000000700000000030205000000000002000000ac140baa0000000000000000bf92e741fcc8bd51c4449d05340e11263da06accbe10fdb2df7ca8ae039f75c999886ff3fe4da82fe9147257315cf14e63eb85fc"], 0x50}, 0x1, 0x7}, 0x0) 24m45.977263373s ago: executing program 1 (id=932): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x8004, 0x0) 24m29.639884231s ago: executing program 32 (id=932): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x8004, 0x0) 24m10.661279463s ago: executing program 2 (id=1066): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000280)={0x11, 0x16, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x2f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000001afe4dff0000fdffffff06005900000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xa}]}, 0x40}}, 0x810) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x800, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x36) 24m10.43446975s ago: executing program 2 (id=1070): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$qrtrtun(r0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x128, 0x700001b, 0x148, 0x128, 0x148, 0x1e8, 0x206, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'sit0\x00'}, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket3={{0x28}, 0x1}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000020058000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002"], 0xa0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r6, 0xc0984124, 0x1000000000000) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0x2000, 0x17000, 0x8, 0x2000000}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x1, 0x803, 0x0) 24m10.006084714s ago: executing program 2 (id=1073): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x8001) recvmmsg$unix(r1, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001d40)=""/50, 0x32}], 0x1}}], 0x1, 0x20000020, 0x0) 24m9.06722283s ago: executing program 2 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000440)='e', 0x1001}], 0x1) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24m8.911451979s ago: executing program 2 (id=1081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000001c0)="0fb63eb583f3660fbae15c0f2391d05bf166b9800000c00f326635001000000f300f00a20f000fc771c6360f3226d9e5660f388080f756", 0x37}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x8}}}]}, 0x38}}, 0x20040080) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x20040054) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010600000000000000000900000024000480130001"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) 24m8.626060778s ago: executing program 2 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000300)={0x0, 0x6b9f, 0x80, 0x0, 0x289}, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 24m8.453098516s ago: executing program 33 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000300)={0x0, 0x6b9f, 0x80, 0x0, 0x289}, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2m45.070811037s ago: executing program 3 (id=4425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c000) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x4000, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 2m43.591867584s ago: executing program 3 (id=4429): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080000fc010000000000000000000000000001fe8000000000000000000000000000aa3200000000000002"], 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000180)=0x9, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000180)=0x9, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) (async) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r0, 0x52592a8c6d2c2fa5, &(0x7f0000000340)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x7, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x7, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)="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", 0xa94}], 0x1}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m41.423942815s ago: executing program 3 (id=4431): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f030e03e8aa121206001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r3, 0xf8, 0x1ff, 0x3}) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) 2m41.067920737s ago: executing program 3 (id=4434): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd2, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000740), 0xffffffffffffffbc) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val={0xe0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xa, 0x0, @opaque="1e9d"}}}}}}, 0x30) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4104aec6, &(0x7f0000000980)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x5}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4458c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONNECTINFO(r7, 0x40085511, &(0x7f00000022c0)) 2m38.115690047s ago: executing program 3 (id=4441): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001000)={{}, 0x0, 0x1e, @inherit={0x80, &(0x7f0000000300)={0x0, 0x7, 0x101, 0x5, {0x4, 0xfffffffffffffff9, 0xffffffffffffff80, 0x7fff, 0xfffffffffffffff7}, [0x401, 0x100000000, 0x9, 0x0, 0x3, 0x3, 0x1]}}, @subvolid=0x2}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000030c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x240, 0x108) r4 = io_uring_setup(0x863, &(0x7f0000000380)={0x0, 0x7, 0x2, 0x3, 0x22b}) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10f, 0xa, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c000200000000000000007b00000008002201710000009c0e3d0308009f00060000000800"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m34.918806296s ago: executing program 3 (id=4444): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$hidraw(0x0, 0x407, 0x200000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x17ddb1, 0xaba, 0x40000000, 0x10, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 2m19.714791474s ago: executing program 34 (id=4444): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$hidraw(0x0, 0x407, 0x200000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x17ddb1, 0xaba, 0x40000000, 0x10, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 22.351523758s ago: executing program 4 (id=4719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1420000002039ed548e400000000000000000040f3036dabe3222c1d97461cbea3b5abac34f9d523f9ff6615e8d348c8a0f5909e"], 0x14}}, 0x0) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x20007fffffff}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x0, 0x4}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c2a) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$netlink(0x10, 0x3, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0xffffffffffffffff}], 0x1, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000180)) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 17.474495177s ago: executing program 0 (id=4727): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/550, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) io_setup(0x9, &(0x7f0000000b80)=0x0) unshare(0x22020600) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000380)={0x40000000, 0x9, "11a6c077fdf8cd60365b1d6e7b2d77c0d06c972fa82f745c3278897768ff48de", 0x64, 0x7, 0x5, 0x1b0, 0x80000000, 0xffffff25, 0x200, 0x8, [0x0, 0xffff, 0x4, 0xfffffffa]}) syz_init_net_socket$ax25(0x3, 0xef6e3200a06c67a6, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) unshare(0x2040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 17.369536137s ago: executing program 4 (id=4729): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000001880), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0xfffffffffffffe16, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x480000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r3) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8102, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r9, 0xaea3) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9d8ae24c6d5a4c20, 0x100010, r4, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r10, 0x8, &(0x7f0000000340)=0x1000000002) recvmmsg(r12, &(0x7f0000004900)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001680)=""/241, 0xf1}, 0xc}, {{&(0x7f0000001c80)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001d00)=""/81, 0x51}, {&(0x7f0000001d80)=""/4073, 0xfe9}, {&(0x7f0000000440)=""/246, 0xf6}], 0x3, &(0x7f0000002ec0)=""/167, 0xa7}, 0xd}, {{&(0x7f0000002f80)=@phonet, 0x80, &(0x7f0000003280), 0x0, &(0x7f0000000640)=""/4096, 0x1000}, 0x5b1d}, {{&(0x7f0000001900)=@nfc_llcp, 0x80, &(0x7f0000004400)=[{&(0x7f0000001640)=""/46, 0x2e}, {&(0x7f0000004380)=""/70, 0x46}], 0x2, &(0x7f0000004440)=""/60, 0x3c}, 0xff}, {{&(0x7f00000044c0)=@isdn, 0x80, &(0x7f0000004540), 0x0, &(0x7f0000004580)=""/179, 0xb3}, 0xfffff800}, {{&(0x7f0000004640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001840)=[{&(0x7f00000046c0)=""/193, 0xc1}, {&(0x7f00000047c0)=""/142, 0x8e}, {&(0x7f0000004880)=""/35, 0x23}, {&(0x7f0000001780)=""/180, 0xb4}], 0x4}, 0x1}], 0x6, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$peeksig(0x4209, r13, &(0x7f0000000140)={0x0, 0x1}, 0x0) dup3(r5, r6, 0x80000) 14.85003308s ago: executing program 5 (id=4733): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a020400) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x1}, {0x9}, {0x1, 0x6}}}, 0x24}}, 0x40044) 14.674829437s ago: executing program 4 (id=4734): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a020400) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x1}, {0x9}, {0x1, 0x6}}}, 0x24}}, 0x40044) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000006680)) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x20040004) 13.097632617s ago: executing program 5 (id=4738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000005000000150000b900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"09025a26", 0x4, 0x3, 0xfc, 0x6, 0xfff, "e840fe213981327944dea0ab8de591", "ddf9e8f5", "84708d56", "b0ae9f2e", ["93a03a7ae19776071eebf3e2", "155199e846586bd6df78ec79", "69fe3745d21db04d44490f86", "4c95443ed5fb833211e14aa2"]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x6, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x3ff) dup3(0xffffffffffffffff, r6, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000020601"], 0x14}}, 0x0) 11.903612604s ago: executing program 7 (id=4739): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000240)=ANY=[], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000b, 0x4031, r0, 0x0) r4 = dup(r2) r5 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, 0xffffffffffffffff) dup2(0xffffffffffffffff, r1) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x100b) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="020010a96d11ff0f14002b802e000100", @ANYBLOB="64d14ea91807134b5e78a183415998774f1a087d2158f3180d19a8c78712d8b503b9a18dab2f1453b089c8774e39c4c9fc417fd18eecb0953638fc9420ff22d0cb0cced254e59a5568a9434cd2ef3b04ba8c6c02e8039e9c6d1b7511", @ANYBLOB="080003000200140008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 11.163622639s ago: executing program 5 (id=4740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000005000000150000b900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r6, r5, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000020601"], 0x14}}, 0x0) 9.990660969s ago: executing program 5 (id=4741): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r6) bind$inet6(r6, 0x0, 0x0) fanotify_init(0x4, 0x101801) creat(&(0x7f0000002440)='./file0\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000003c0)=0x100000001, 0x4) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) 9.920015583s ago: executing program 6 (id=4742): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000039"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000"], 0x34) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.564400669s ago: executing program 4 (id=4743): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a020400) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x1}, {0x9}, {0x1, 0x6}}}, 0x24}}, 0x40044) 9.330133411s ago: executing program 0 (id=4744): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000001880), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0xfffffffffffffe16, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x480000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r3) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8102, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r9, 0xaea3) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9d8ae24c6d5a4c20, 0x100010, r4, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r10, 0x8, &(0x7f0000000340)=0x1000000002) recvmmsg(r12, &(0x7f0000004900)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001680)=""/241, 0xf1}, 0xc}, {{&(0x7f0000001c80)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001d00)=""/81, 0x51}, {&(0x7f0000001d80)=""/4073, 0xfe9}, {&(0x7f0000000440)=""/246, 0xf6}], 0x3, &(0x7f0000002ec0)=""/167, 0xa7}, 0xd}, {{&(0x7f0000002f80)=@phonet, 0x80, &(0x7f0000003280), 0x0, &(0x7f0000000640)=""/4096, 0x1000}, 0x5b1d}, {{&(0x7f0000001900)=@nfc_llcp, 0x80, &(0x7f0000004400)=[{&(0x7f0000001640)=""/46, 0x2e}, {&(0x7f0000004380)=""/70, 0x46}], 0x2, &(0x7f0000004440)=""/60, 0x3c}, 0xff}, {{&(0x7f00000044c0)=@isdn, 0x80, &(0x7f0000004540), 0x0, &(0x7f0000004580)=""/179, 0xb3}, 0xfffff800}, {{&(0x7f0000004640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001840)=[{&(0x7f00000046c0)=""/193, 0xc1}, {&(0x7f00000047c0)=""/142, 0x8e}, {&(0x7f0000004880)=""/35, 0x23}, {&(0x7f0000001780)=""/180, 0xb4}], 0x4}, 0x1}], 0x6, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$peeksig(0x4209, r13, &(0x7f0000000140)={0x0, 0x1}, 0x0) dup3(r5, r6, 0x80000) 9.32984428s ago: executing program 6 (id=4745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.266776601s ago: executing program 7 (id=4746): syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="060001000a000000060001000a00000014000400fe8000000000000000000000000000370800060008000000060005004e21000008000700", @ANYRES32=0x0, @ANYBLOB="050005000200000038000680060001000a000000080006001900000008000300ac1e00011400040000000000000000000000ffff0a01010008000600040000000800040007000000050005000300000020000680140004002001000000000000000000000000000205"], 0xd4}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000340)=0x4, 0x12) write$UHID_CREATE(r9, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0xb, 0x1, 0x4, 0x3}}, 0x120) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r8, 0x10}, {r7, 0x40c}], 0x2, 0x0, 0x0, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x6, 0x8}) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) 8.186071239s ago: executing program 4 (id=4747): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}], &(0x7f0000000200)='GPL\x00', 0xc, 0x100b, &(0x7f0000002e80)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x5) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="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"], 0x184}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x3) 8.057801128s ago: executing program 7 (id=4748): syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="060001000a000000060001000a00000014000400fe8000000000000000000000000000370800060008000000060005004e21000008000700", @ANYRES32=0x0, @ANYBLOB="050005000200000038000680060001000a000000080006001900000008000300ac1e00011400040000000000000000000000ffff0a01010008000600040000000800040007000000050005000300000020000680140004002001000000000000000000000000000205"], 0xd4}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000340)=0x4, 0x12) write$UHID_CREATE(r9, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0xb, 0x1, 0x4, 0x3}}, 0x120) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) unshare(0x22020400) ppoll(&(0x7f0000000280)=[{r8, 0x10}, {r7, 0x40c}], 0x2, 0x0, 0x0, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x6, 0x8}) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) 7.836037855s ago: executing program 6 (id=4749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='filemap_set_wb_err\x00', r3, 0x0, 0x5}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20040400) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) 6.86618307s ago: executing program 0 (id=4750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000005000000150000b900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"09025a26", 0x4, 0x3, 0xfc, 0x6, 0xfff, "e840fe213981327944dea0ab8de591", "ddf9e8f5", "84708d56", "b0ae9f2e", ["93a03a7ae19776071eebf3e2", "155199e846586bd6df78ec79", "69fe3745d21db04d44490f86", "4c95443ed5fb833211e14aa2"]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r6, r5, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000020601"], 0x14}}, 0x0) getpid() 6.852877324s ago: executing program 7 (id=4751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='filemap_set_wb_err\x00', r3, 0x0, 0x5}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20040400) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, 0x0, 0x0, r7) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r4, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) 6.270747832s ago: executing program 6 (id=4752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000005000000150000b900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r6, r5, 0x0) getpid() 5.149362167s ago: executing program 7 (id=4753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000005000000150000b900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r6, r5, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000020601"], 0x14}}, 0x0) 4.950453446s ago: executing program 0 (id=4754): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x41) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095", @ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000340), 0x311200, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000400)={0x8, 0xee}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) setpriority(0x2, r5, 0x563) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') io_uring_setup(0x2361, &(0x7f0000000240)={0x0, 0xc3be, 0x20, 0x1, 0x13d}) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r7, 0xc6c3, 0x0) 4.750608991s ago: executing program 5 (id=4755): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x297}}}}}}, 0x0) 2.933280963s ago: executing program 7 (id=4756): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000240)=ANY=[], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000b, 0x4031, r0, 0x0) r4 = dup(r2) r5 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) dup2(0xffffffffffffffff, r1) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x100b) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$nl_route(r6, 0x0, 0x0) 2.663784598s ago: executing program 5 (id=4757): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/550, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) io_setup(0x9, &(0x7f0000000b80)=0x0) unshare(0x22020600) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000380)={0x40000000, 0x9, "11a6c077fdf8cd60365b1d6e7b2d77c0d06c972fa82f745c3278897768ff48de", 0x64, 0x7, 0x5, 0x1b0, 0x80000000, 0xffffff25, 0x200, 0x8, [0x0, 0xffff, 0x4, 0xfffffffa]}) syz_init_net_socket$ax25(0x3, 0xef6e3200a06c67a6, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) unshare(0x2040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.750354047s ago: executing program 6 (id=4758): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0xfffffffffffffffe) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x11) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='befs\x00', 0x8400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = dup(r0) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000300)={0x1, 0x1, 0xc, 0x0, 0x2, 0x100, 0x9, 0x30d1, 0x5, 0x3, 0x3, 0xa0e6, 0x6c, 0xc}) connect$inet(r6, &(0x7f0000000040)={0x27, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001050000000000000000ea0485000000d000000095", @ANYBLOB="15deb7990d6503f48c6821f730b3500b8ebaffee1cef73fe6d18eb9ec2e9e95f5a1dc6ba816caa88933fc91860249fccafdf769e318756667d4bad5b4a2650181eecfeb8ebb9182d73ac676b5b48a1c3ebe07d96ae04db94e49c9a0c7d64cb464bd5a55b70cd1ebc8a5e6518f7e91a5f89a4d48d78fac3678913b3af4c57fbfdbeb2c8b1c3071334f65aaa9c4457c0b2c57be6c1cc88e05086f3f1586f45e4c2ff4df5a086fd5ffe97309b24eb4d69fc1a292b68f7f1c6ff50105180ba735904c11126acfb5b1cf7aa08c8ce6e67cbdda7853109951dd639bc35e0d59706b4cd222b", @ANYRESHEX=r6, @ANYRESDEC=r0], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.732207194s ago: executing program 0 (id=4759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x3e8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 657.282164ms ago: executing program 6 (id=4760): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904000000aa75b796"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0xffffffffffffffd4, 0x3, 0x200a}}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000f00)={0x24, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0xd, 0x3, 0x2c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000e40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x22, @string={0x22, 0x3, "89fd598ce73c3ad7b425102707c1aa1090787d78bedb3f15854729b19acf7b7d"}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 656.901068ms ago: executing program 4 (id=4761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000"], 0x20}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=4762): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) writev(r0, &(0x7f0000002380)=[{&(0x7f0000002140)="58f1f091727e7c5c29e6d50c7d8dfc421b81aa554762e37255fd1fb3d3b23e4211a5a85d373e0f6a74ac8f3eb56dcc34a1f210110127973ceb3689dcb1cc40a9935bd7aa5d85213f86dc84ed624cc0ea765f24a313996ba6e2efb102145fbd2460cca25654ad2b0bbf4b5b634d27f2bdd32d8e0c89c554487988", 0x7a}], 0x1) kernel console output (not intermixed with test programs): k_parms(): no params data found [ 1245.513909][ T5827] Bluetooth: hci4: command tx timeout [ 1245.640478][T18258] xt_TCPMSS: Only works on TCP SYN packets [ 1246.594431][T18262] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1246.688880][ T7088] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.979309][ T7088] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.194804][T18232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.209285][T18232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.216542][T18232] bridge_slave_0: entered allmulticast mode [ 1247.223859][T18232] bridge_slave_0: entered promiscuous mode [ 1247.232057][T18232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.239350][T18232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.253095][T18232] bridge_slave_1: entered allmulticast mode [ 1247.276420][T18232] bridge_slave_1: entered promiscuous mode [ 1247.396242][T18232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.434805][T18232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.537885][ T5827] Bluetooth: hci4: command tx timeout [ 1247.552600][T18232] team0: Port device team_slave_0 added [ 1247.612753][T18232] team0: Port device team_slave_1 added [ 1247.732339][T18232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.763081][T18232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.059624][T18232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.363460][T18276] ceph: No mds server is up or the cluster is laggy [ 1249.547980][T18232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.554966][T18232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.634623][ T5827] Bluetooth: hci4: command tx timeout [ 1249.824666][T18297] netlink: 'syz.3.3511': attribute type 5 has an invalid length. [ 1249.875667][T18232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.918735][ T7088] erspan0: left allmulticast mode [ 1249.923799][ T7088] erspan0: left promiscuous mode [ 1250.082738][ T7088] bridge0: port 3(erspan0) entered disabled state [ 1250.239798][T18304] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3512'. [ 1250.758172][ T7088] bridge_slave_1: left allmulticast mode [ 1250.763859][ T7088] bridge_slave_1: left promiscuous mode [ 1250.806031][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.829619][ T7088] bridge_slave_0: left allmulticast mode [ 1250.835294][ T7088] bridge_slave_0: left promiscuous mode [ 1250.877480][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.425480][T18312] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3513'. [ 1251.707306][ T5827] Bluetooth: hci4: command tx timeout [ 1252.441592][T18320] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3518'. [ 1252.558194][ T7088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.581415][ T7088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.601242][ T7088] bond0 (unregistering): Released all slaves [ 1252.782138][T18232] hsr_slave_0: entered promiscuous mode [ 1252.820071][T18232] hsr_slave_1: entered promiscuous mode [ 1252.857862][T18232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1252.881372][T18232] Cannot create hsr debugfs directory [ 1254.539854][T18337] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3521'. [ 1254.625760][T18331] mkiss: ax0: crc mode is auto. [ 1255.532210][T18346] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3524'. [ 1256.088891][T18340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3523'. [ 1256.335234][ T7088] hsr_slave_0: left promiscuous mode [ 1256.357548][ T7088] hsr_slave_1: left promiscuous mode [ 1256.368053][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.375502][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.456902][ T7088] veth1_macvtap: left promiscuous mode [ 1256.462709][ T7088] veth0_macvtap: left promiscuous mode [ 1256.468929][ T7088] veth1_vlan: left promiscuous mode [ 1257.478677][T18363] netlink: 'syz.5.3530': attribute type 5 has an invalid length. [ 1257.575065][ T7088] team0 (unregistering): Port device team_slave_1 removed [ 1257.594266][T18366] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3528'. [ 1257.636432][ T7088] team0 (unregistering): Port device team_slave_0 removed [ 1260.347935][T18381] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3533'. [ 1260.460998][T18379] mkiss: ax0: crc mode is auto. [ 1262.674511][ T7088] IPVS: stop unused estimator thread 0... [ 1263.193305][T18232] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1263.256547][T18232] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1263.383821][T18232] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1263.448510][T18232] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1263.641133][T18232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.661901][T18232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.738220][T18232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1263.763980][T18232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.863230][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.870433][ T6108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.689796][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.696940][ T6108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.117627][T18232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.654112][T18429] mkiss: ax0: crc mode is auto. [ 1266.781975][T18429] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1267.297209][T18232] veth0_vlan: entered promiscuous mode [ 1267.331573][T18232] veth1_vlan: entered promiscuous mode [ 1268.084362][T18444] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3545'. [ 1268.271902][T18442] Falling back ldisc for ttyS3. [ 1268.484646][T18232] veth0_macvtap: entered promiscuous mode [ 1268.639311][T18232] veth1_macvtap: entered promiscuous mode [ 1268.658710][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.679106][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.725225][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.747115][T18449] netlink: 'syz.0.3547': attribute type 5 has an invalid length. [ 1268.832779][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.852077][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.890974][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.910539][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.052715][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1269.072171][T18451] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1269.081118][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1269.094714][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.245025][T18232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.300928][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.328317][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.349589][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.364680][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.375836][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.396095][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.406302][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.422960][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.449980][T18232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.513732][T18232] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.552589][T18232] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.579468][T18232] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.592960][T18232] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.902151][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.910970][T17308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.664338][T17308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.695504][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.944392][T18509] befs: (nbd3): No write support. Marking filesystem read-only [ 1275.952178][T18509] syz.3.3560: attempt to access beyond end of device [ 1275.952178][T18509] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1277.937496][T18526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3565'. [ 1281.412339][T18553] mkiss: ax0: crc mode is auto. [ 1281.586756][T18560] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.3568'. [ 1281.841803][T18563] xt_TCPMSS: Only works on TCP SYN packets [ 1285.993743][T18594] netlink: 'syz.0.3584': attribute type 5 has an invalid length. [ 1286.357873][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 1286.363934][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 1286.683685][T18595] ceph: No mds server is up or the cluster is laggy [ 1286.723357][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 1286.729881][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 1286.864721][T18606] befs: (nbd5): No write support. Marking filesystem read-only [ 1286.872785][T18606] syz.5.3587: attempt to access beyond end of device [ 1286.872785][T18606] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1287.211495][T18608] 9pnet_fd: Insufficient options for proto=fd [ 1287.452132][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 1287.669749][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 1287.942238][T18615] fuse: Bad value for 'fd' [ 1289.889773][T18627] syz_tun: entered allmulticast mode [ 1290.132711][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3591'. [ 1290.318696][T18621] syz_tun: left allmulticast mode [ 1290.788030][T18635] xt_TCPMSS: Only works on TCP SYN packets [ 1291.784491][T18630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1294.043488][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3596'. [ 1295.274315][T18664] fuse: Bad value for 'fd' [ 1297.256470][T18680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3605'. [ 1300.306475][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.318288][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.600898][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1300.609984][T18691] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1300.618980][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1303.540445][T18706] xt_TCPMSS: Only works on TCP SYN packets [ 1306.667386][T16754] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1306.868313][T16754] usb 6-1: Using ep0 maxpacket: 8 [ 1306.886897][T18747] syz_tun: entered allmulticast mode [ 1306.988894][T16754] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1306.997702][T16754] usb 6-1: config 7 has an invalid interface number: 67 but max is 0 [ 1307.005938][T16754] usb 6-1: config 7 has no interface number 0 [ 1307.972768][T16754] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1308.149515][T16754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.197302][T16754] usb 6-1: Product: syz [ 1308.207513][T16754] usb 6-1: Manufacturer: syz [ 1308.222224][T16754] usb 6-1: SerialNumber: syz [ 1309.386192][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3623'. [ 1309.470616][T18741] syz_tun: left allmulticast mode [ 1310.345801][T16754] usb 6-1: USB disconnect, device number 35 [ 1310.737668][T18771] xt_TCPMSS: Only works on TCP SYN packets [ 1311.061952][T18778] mkiss: ax0: crc mode is auto. [ 1311.251373][T18779] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3633'. [ 1312.777753][T18781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3635'. [ 1314.513435][T18800] mkiss: ax0: crc mode is auto. [ 1315.215265][T18800] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3638'. [ 1315.700404][T18806] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3642'. [ 1316.749304][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3643'. [ 1317.462586][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'. [ 1319.561646][T18811] block nbd6: shutting down sockets [ 1322.115591][T18853] mkiss: ax0: crc mode is auto. [ 1322.252452][T18853] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3655'. [ 1323.961452][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1324.687655][T18859] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3659'. [ 1324.740760][T18874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3663'. [ 1325.987381][ T5930] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1326.290770][T18890] befs: (nbd5): No write support. Marking filesystem read-only [ 1326.298955][T18890] syz.5.3666: attempt to access beyond end of device [ 1326.298955][T18890] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1326.312541][ T5930] usb 7-1: Using ep0 maxpacket: 8 [ 1327.235927][ T5930] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1327.251512][ T5930] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 1327.259805][ T5930] usb 7-1: config 7 has no interface number 0 [ 1327.269420][ T5930] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1327.300073][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.317732][ T5930] usb 7-1: Product: syz [ 1327.326318][ T5930] usb 7-1: Manufacturer: syz [ 1327.336385][ T5930] usb 7-1: SerialNumber: syz [ 1327.661826][T18870] block nbd3: shutting down sockets [ 1328.185950][ T5930] usb 7-1: USB disconnect, device number 6 [ 1328.402575][T18897] syz_tun: entered allmulticast mode [ 1328.554425][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1330.257529][T16754] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1330.570847][T16754] usb 4-1: Using ep0 maxpacket: 8 [ 1330.896278][T16754] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1330.913880][T16754] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1330.937685][T16754] usb 4-1: Product: syz [ 1330.941899][T16754] usb 4-1: Manufacturer: syz [ 1330.954866][T16754] usb 4-1: SerialNumber: syz [ 1330.961958][T16754] usb 4-1: config 0 descriptor?? [ 1330.969026][T16754] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1331.380059][T18921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3677'. [ 1331.540862][T16754] gspca_zc3xx: reg_w_i err -110 [ 1331.545809][T16754] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1332.164429][T16754] usb 4-1: USB disconnect, device number 59 [ 1332.663165][T18922] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3676'. [ 1332.946946][T18935] befs: (nbd5): No write support. Marking filesystem read-only [ 1332.954994][T18935] syz.5.3680: attempt to access beyond end of device [ 1332.954994][T18935] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1335.358556][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3681'. [ 1336.720506][T18960] syz_tun: entered allmulticast mode [ 1336.738277][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3685'. [ 1336.899892][T18948] block nbd5: shutting down sockets [ 1336.926522][T18955] syz_tun: left allmulticast mode [ 1337.441711][T18965] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3690'. [ 1339.648339][T18987] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3694'. [ 1339.787148][T12597] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1340.140781][T12597] usb 4-1: Using ep0 maxpacket: 8 [ 1340.186436][T12597] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1340.208504][T12597] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1340.216531][T12597] usb 4-1: Product: syz [ 1340.251288][T12597] usb 4-1: Manufacturer: syz [ 1340.266253][T12597] usb 4-1: SerialNumber: syz [ 1340.292195][T12597] usb 4-1: config 0 descriptor?? [ 1340.371667][T12597] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1340.505485][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1340.535544][T18993] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1340.612062][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1341.027998][T12597] gspca_zc3xx: reg_w_i err -110 [ 1341.028117][T12597] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1341.240449][T19001] mkiss: ax0: crc mode is auto. [ 1341.325541][T19002] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3695'. [ 1341.610693][T16754] usb 4-1: USB disconnect, device number 60 [ 1341.707590][T12597] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1341.887475][T12597] usb 6-1: Using ep0 maxpacket: 8 [ 1341.899369][T12597] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1341.917299][T12597] usb 6-1: config 7 has an invalid interface number: 67 but max is 0 [ 1341.928143][T12597] usb 6-1: config 7 has no interface number 0 [ 1341.947085][T12597] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1341.966516][T12597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.986753][T12597] usb 6-1: Product: syz [ 1341.996957][T12597] usb 6-1: Manufacturer: syz [ 1342.001798][T12597] usb 6-1: SerialNumber: syz [ 1343.203147][T19015] mkiss: ax0: crc mode is auto. [ 1343.235057][T12597] usb 6-1: USB disconnect, device number 36 [ 1343.265497][T19016] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3703'. [ 1344.593703][T19026] netlink: 'syz.4.3701': attribute type 5 has an invalid length. [ 1345.479917][T19035] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1345.493673][T19035] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1346.340940][T19030] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3706'. [ 1348.881574][T19059] mkiss: ax0: crc mode is auto. [ 1349.008048][T19060] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.3713'. [ 1349.819459][T19064] mkiss: ax0: crc mode is auto. [ 1349.876513][T19070] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3715'. [ 1351.197418][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1351.206442][T19076] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1351.215481][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1353.269427][T19082] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3721'. [ 1355.374379][T19106] ceph: No mds server is up or the cluster is laggy [ 1355.758261][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 1355.774725][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 1356.178669][T19113] mkiss: ax0: crc mode is auto. [ 1356.235600][T19114] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.3729'. [ 1357.697741][T19127] mkiss: ax0: crc mode is auto. [ 1357.795794][T19129] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3732'. [ 1357.889723][T19128] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3730'. [ 1358.443550][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3736'. [ 1360.025251][T19149] mkiss: ax0: crc mode is auto. [ 1360.121966][T19151] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3738'. [ 1360.991580][T19156] mkiss: ax0: crc mode is auto. [ 1361.039910][T19156] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3740'. [ 1361.378224][T19137] block nbd3: shutting down sockets [ 1362.147659][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.153989][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.327456][T19166] netlink: 'syz.5.3742': attribute type 5 has an invalid length. [ 1363.358436][T19178] mkiss: ax0: crc mode is auto. [ 1364.393445][T19183] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3743'. [ 1368.023776][T12597] libceph: connect (1)[c::]:6789 error -101 [ 1368.031833][T19204] ceph: No mds server is up or the cluster is laggy [ 1368.062206][T12597] libceph: mon0 (1)[c::]:6789 connect error [ 1368.856122][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 1369.767508][T19224] mkiss: ax0: crc mode is auto. [ 1369.966794][T19225] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3755'. [ 1371.407295][T19237] mkiss: ax0: crc mode is auto. [ 1371.471691][T19238] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3757'. [ 1375.089002][T19259] ceph: No mds server is up or the cluster is laggy [ 1376.498189][T16754] libceph: connect (1)[c::]:6789 error -101 [ 1376.504248][T16754] libceph: mon0 (1)[c::]:6789 connect error [ 1376.518126][T19269] ceph: No mds server is up or the cluster is laggy [ 1378.292905][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3766'. [ 1378.453759][T16754] libceph: connect (1)[c::]:6789 error -101 [ 1378.481044][T16754] libceph: mon0 (1)[c::]:6789 connect error [ 1379.220124][T12597] libceph: connect (1)[c::]:6789 error -101 [ 1379.226199][T12597] libceph: mon0 (1)[c::]:6789 connect error [ 1379.244059][T19289] ceph: No mds server is up or the cluster is laggy [ 1379.431856][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3771'. [ 1379.627803][T19279] block nbd4: shutting down sockets [ 1380.967798][T19304] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3774'. [ 1381.934950][T19314] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3778'. [ 1384.262723][T19333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3784'. [ 1385.758298][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'. [ 1386.935011][T19355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3790'. [ 1387.486167][T19358] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3789'. [ 1388.045503][T19344] block nbd0: shutting down sockets [ 1388.383926][T19365] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1390.272145][T19380] syz_tun: entered allmulticast mode [ 1390.679641][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3795'. [ 1390.801565][T19372] syz_tun: left allmulticast mode [ 1391.039789][T19391] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3798'. [ 1391.056528][T19391] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3798'. [ 1392.374930][T19389] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3799'. [ 1392.845839][T19401] netlink: 'syz.0.3803': attribute type 5 has an invalid length. [ 1393.578084][T19406] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3804'. [ 1394.041148][T19412] befs: (nbd0): No write support. Marking filesystem read-only [ 1394.050483][T19412] syz.0.3806: attempt to access beyond end of device [ 1394.050483][T19412] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1395.035945][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 1395.049751][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 1395.202368][T19418] ceph: No mds server is up or the cluster is laggy [ 1395.327896][T19426] mkiss: ax0: crc mode is auto. [ 1395.421752][T19400] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.3802'. [ 1395.640156][T19423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3808'. [ 1398.948315][T19442] netlink: 'syz.6.3813': attribute type 4 has an invalid length. [ 1400.417440][T19460] netlink: 'syz.6.3816': attribute type 5 has an invalid length. [ 1400.468437][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3817'. [ 1401.147312][ T5873] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1401.198877][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3819'. [ 1402.063222][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 1402.081686][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1402.096317][ T5873] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 1402.105505][ T5873] usb 4-1: config 7 has no interface number 0 [ 1402.191813][ T5873] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1402.215142][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.229601][ T5873] usb 4-1: Product: syz [ 1402.244152][ T5873] usb 4-1: Manufacturer: syz [ 1402.262934][ T5873] usb 4-1: SerialNumber: syz [ 1403.616834][T19486] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3825'. [ 1404.077722][T19471] block nbd6: shutting down sockets [ 1404.333645][ T5873] usb 4-1: USB disconnect, device number 61 [ 1406.078072][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3831'. [ 1406.358999][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 1406.471792][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 1406.907802][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 1406.913861][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 1406.921144][T19511] ceph: No mds server is up or the cluster is laggy [ 1407.731223][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 1407.738389][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 1407.999531][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 1408.036265][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 1408.261575][T19524] ceph: No mds server is up or the cluster is laggy [ 1409.467171][T19540] netlink: 'syz.0.3836': attribute type 5 has an invalid length. [ 1409.643088][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1411.798357][T19538] block nbd3: shutting down sockets [ 1412.164793][T19560] mkiss: ax0: crc mode is auto. [ 1412.190117][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3845'. [ 1413.320503][T19572] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3842'. [ 1414.700071][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 1415.533957][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 1415.710622][T19582] ceph: No mds server is up or the cluster is laggy [ 1417.489559][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3854'. [ 1420.694581][ T5828] block nbd5: Receive control failed (result -32) [ 1420.717727][T19609] block nbd5: shutting down sockets [ 1421.138093][T19636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3861'. [ 1421.923287][T19644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3863'. [ 1423.173373][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3866'. [ 1423.190798][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.197449][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.133836][T19669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1424.133950][T19669] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1424.134007][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1425.288717][T19671] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.3867'. [ 1426.584695][T19604] libceph: connect (1)[c::]:6789 error -101 [ 1426.591158][T19604] libceph: mon0 (1)[c::]:6789 connect error [ 1426.859000][T19604] libceph: connect (1)[c::]:6789 error -101 [ 1426.865373][T19604] libceph: mon0 (1)[c::]:6789 connect error [ 1427.160031][T19692] ax25_connect(): syz.4.3876 uses autobind, please contact jreuter@yaina.de [ 1427.379849][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1427.390737][T19685] ceph: No mds server is up or the cluster is laggy [ 1427.408530][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1428.210446][T19704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3877'. [ 1428.773321][T19715] netlink: 'syz.4.3881': attribute type 5 has an invalid length. [ 1429.374384][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1429.374402][ T30] audit: type=1326 audit(1741775949.916:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19706 comm="syz.0.3880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb49038d169 code=0x0 [ 1429.927332][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1429.936329][T19716] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1429.945392][T19716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1430.749252][T19699] block nbd5: shutting down sockets [ 1431.117596][T19604] libceph: connect (1)[c::]:6789 error -101 [ 1431.150431][T19604] libceph: mon0 (1)[c::]:6789 connect error [ 1431.563075][T19604] libceph: connect (1)[c::]:6789 error -101 [ 1431.597988][T19726] ceph: No mds server is up or the cluster is laggy [ 1431.615625][T19604] libceph: mon0 (1)[c::]:6789 connect error [ 1433.402752][T19750] ax25_connect(): syz.5.3890 uses autobind, please contact jreuter@yaina.de [ 1434.806429][T19754] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3893'. [ 1435.117673][T19758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3892'. [ 1435.539752][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1436.816328][T19763] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3895'. [ 1438.272826][T19779] netlink: 'syz.6.3896': attribute type 5 has an invalid length. [ 1438.978497][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3899'. [ 1440.397513][T19796] befs: (nbd6): No write support. Marking filesystem read-only [ 1440.407007][T19796] syz.6.3905: attempt to access beyond end of device [ 1440.407007][T19796] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1440.994551][T19780] block nbd4: shutting down sockets [ 1441.644297][T19809] mkiss: ax0: crc mode is auto. [ 1441.737251][T19810] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3906'. [ 1442.672850][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3907'. [ 1442.752674][T19817] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3910'. [ 1443.273572][T19829] netlink: 'syz.6.3912': attribute type 5 has an invalid length. [ 1443.609085][ T7087] kworker/u8:11 (7087) used greatest stack depth: 18192 bytes left [ 1444.364252][T19835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3914'. [ 1445.358654][T19840] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1445.714705][T19845] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3917'. [ 1445.741858][T19845] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3917'. [ 1448.318102][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3922'. [ 1448.930791][T19871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3924'. [ 1451.784097][T19881] befs: (nbd5): No write support. Marking filesystem read-only [ 1451.792170][T19881] syz.5.3925: attempt to access beyond end of device [ 1451.792170][T19881] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1451.852715][T19880] syz_tun: entered allmulticast mode [ 1451.898620][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1452.471311][T19876] syz_tun: left allmulticast mode [ 1454.439209][T19912] netlink: 'syz.6.3935': attribute type 5 has an invalid length. [ 1456.578571][T19927] mkiss: ax0: crc mode is auto. [ 1457.267339][T19930] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3940'. [ 1458.075707][T19928] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3941'. [ 1459.179402][T11869] libceph: connect (1)[c::]:6789 error -101 [ 1459.604468][T11869] libceph: mon0 (1)[c::]:6789 connect error [ 1459.877339][T19938] ceph: No mds server is up or the cluster is laggy [ 1459.925100][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3942'. [ 1459.989149][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1460.100317][T11869] libceph: connect (1)[c::]:6789 error -101 [ 1460.106362][T11869] libceph: mon0 (1)[c::]:6789 connect error [ 1460.108446][T19946] ceph: No mds server is up or the cluster is laggy [ 1460.119976][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1461.263999][T19940] block nbd3: shutting down sockets [ 1463.094162][T19975] mkiss: ax0: crc mode is auto. [ 1463.189432][T19976] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3951'. [ 1465.159006][T19985] mkiss: ax0: crc mode is auto. [ 1465.217041][T19985] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3954'. [ 1466.550715][T19997] mkiss: ax0: crc mode is auto. [ 1466.652767][T19998] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1467.217307][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1468.291351][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 1468.304011][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 1468.569434][T11869] libceph: connect (1)[c::]:6789 error -101 [ 1468.640674][T11869] libceph: mon0 (1)[c::]:6789 connect error [ 1468.819351][T20007] ceph: No mds server is up or the cluster is laggy [ 1469.303295][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3960'. [ 1470.440164][T20030] mkiss: ax0: crc mode is auto. [ 1470.502620][T20033] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.3965'. [ 1471.518351][T20018] block nbd5: shutting down sockets [ 1471.639104][T20044] mkiss: ax0: crc mode is auto. [ 1471.812046][T20045] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3968'. [ 1471.830632][T20043] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3966'. [ 1471.863357][T20037] mkiss: ax0: crc mode is auto. [ 1473.910566][T20055] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1475.183262][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3972'. [ 1476.599863][T20085] befs: (nbd3): No write support. Marking filesystem read-only [ 1476.608450][T20085] syz.3.3977: attempt to access beyond end of device [ 1476.608450][T20085] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1478.714027][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 1479.207371][T20097] mkiss: ax0: crc mode is auto. [ 1479.218010][T20097] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3980'. [ 1479.264676][T20096] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1480.747872][T20093] block nbd4: shutting down sockets [ 1481.754961][T20102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1484.213671][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3989'. [ 1484.222763][T20131] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3989'. [ 1484.231776][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3989'. [ 1484.708721][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.715044][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.520227][T20146] befs: (nbd5): No write support. Marking filesystem read-only [ 1486.530284][T20146] syz.5.3994: attempt to access beyond end of device [ 1486.530284][T20146] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1487.336302][T20148] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1488.999647][T20168] netlink: 'syz.5.3997': attribute type 5 has an invalid length. [ 1491.036587][T20175] mkiss: ax0: crc mode is auto. [ 1491.095475][T20177] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4000'. [ 1493.695365][T20209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1493.704419][T20209] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1493.713418][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1494.923733][T20222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4010'. [ 1494.932955][T20222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4010'. [ 1494.942129][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 1500.168378][T19604] libceph: connect (1)[c::]:6789 error -101 [ 1500.218712][T19604] libceph: mon0 (1)[c::]:6789 connect error [ 1500.489748][T19604] libceph: connect (1)[c::]:6789 error -101 [ 1500.822155][T19604] libceph: mon0 (1)[c::]:6789 connect error [ 1500.828356][T20264] ceph: No mds server is up or the cluster is laggy [ 1501.920285][T20278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4030'. [ 1501.942148][T20278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4030'. [ 1502.087251][T11869] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1502.467365][T11869] usb 5-1: Using ep0 maxpacket: 16 [ 1502.491591][T20288] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1503.184998][T11869] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 1503.197486][T11869] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1503.219724][T20272] input: syz1 as /devices/virtual/input/input38 [ 1503.350049][T20286] ax25_connect(): syz.6.4031 uses autobind, please contact jreuter@yaina.de [ 1503.426243][T11869] usb 5-1: string descriptor 0 read error: -71 [ 1503.465470][T11869] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1503.529006][T11869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.597432][T11869] usb 5-1: can't set config #1, error -71 [ 1503.622259][T11869] usb 5-1: USB disconnect, device number 56 [ 1505.194062][T20322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1505.203300][T20322] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1505.212395][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1507.500510][T20341] ax25_connect(): syz.4.4047 uses autobind, please contact jreuter@yaina.de [ 1509.244450][T20351] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4049'. [ 1509.412062][ T5871] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1509.741540][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1510.607213][ T5871] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1510.616309][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.842041][T20360] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4052'. [ 1510.857264][ T5871] usb 4-1: config 0 descriptor?? [ 1512.694621][T20386] mkiss: ax0: crc mode is auto. [ 1512.857777][T20388] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4057'. [ 1512.871057][T20389] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4058'. [ 1514.062509][T11869] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 1514.075565][T11869] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 1514.083250][T11869] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 1514.290680][T11869] hid-generic 0000:0004:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1516.257703][T20399] block device autoloading is deprecated and will be removed. [ 1517.289859][ T5873] usb 4-1: USB disconnect, device number 62 [ 1518.308559][T11869] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1518.467452][T11869] usb 6-1: Using ep0 maxpacket: 8 [ 1518.648878][T11869] usb 6-1: config 1 has an invalid interface number: 115 but max is 3 [ 1518.665676][T11869] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1518.677382][T11869] usb 6-1: config 1 has an invalid interface number: 79 but max is 3 [ 1518.685526][T11869] usb 6-1: config 1 has an invalid interface number: 173 but max is 3 [ 1518.693995][T11869] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1518.702785][T11869] usb 6-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 1518.713143][T11869] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 1518.734640][T11869] usb 6-1: config 1 has no interface number 0 [ 1518.740857][T11869] usb 6-1: config 1 has no interface number 1 [ 1518.746946][T11869] usb 6-1: config 1 has no interface number 2 [ 1518.942659][T20421] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.4069'. [ 1518.979724][T11869] usb 6-1: config 1 interface 115 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1519.003866][T11869] usb 6-1: config 1 interface 115 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1519.583182][T11869] usb 6-1: config 1 interface 115 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1519.685043][T20433] mkiss: ax0: crc mode is auto. [ 1519.789850][T20434] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4071'. [ 1519.983243][T11869] usb 6-1: config 1 interface 79 altsetting 9 endpoint 0xC has an invalid bInterval 218, changing to 11 [ 1519.994498][T11869] usb 6-1: config 1 interface 79 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 1520.005827][T11869] usb 6-1: config 1 interface 79 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1520.016773][T11869] usb 6-1: config 1 interface 79 altsetting 9 bulk endpoint 0xF has invalid maxpacket 32 [ 1520.026725][T11869] usb 6-1: config 1 interface 79 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1520.408611][T11869] usb 6-1: config 1 interface 79 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1520.733466][T11869] usb 6-1: config 1 interface 79 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 1521.001636][T11869] usb 6-1: config 1 interface 79 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1521.016278][T11869] usb 6-1: config 1 interface 173 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 1521.185050][T20435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4072'. [ 1521.194119][T11869] usb 6-1: config 1 interface 173 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1521.209552][T11869] usb 6-1: config 1 interface 115 has no altsetting 0 [ 1521.216944][T11869] usb 6-1: config 1 interface 79 has no altsetting 0 [ 1521.223745][T11869] usb 6-1: config 1 interface 173 has no altsetting 0 [ 1521.234932][T11869] usb 6-1: string descriptor 0 read error: -71 [ 1521.994926][T11869] usb 6-1: New USB device found, idVendor=0c88, idProduct=17da, bcdDevice=a2.08 [ 1522.010704][T11869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.037341][T11869] usb 6-1: can't set config #1, error -71 [ 1522.045717][T11869] usb 6-1: USB disconnect, device number 37 [ 1522.170717][T20453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4077'. [ 1523.329587][T20464] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.4081'. [ 1525.879824][T20496] mkiss: ax0: crc mode is auto. [ 1526.083297][T20497] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4089'. [ 1527.500875][T20500] mkiss: ax0: crc mode is auto. [ 1527.512126][T20490] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1527.535218][T20474] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4084'. [ 1527.559401][T20503] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4092'. [ 1527.929974][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1527.939177][T20505] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1527.948332][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1530.266346][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1530.272479][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1530.708532][T20530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4096'. [ 1531.069482][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1531.075550][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1531.098109][T20526] ceph: No mds server is up or the cluster is laggy [ 1531.945805][T20539] syz_tun: entered allmulticast mode [ 1532.157202][T20539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4103'. [ 1532.524352][T20547] mkiss: ax0: crc mode is auto. [ 1532.639331][T20548] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.4104'. [ 1533.398048][ T9373] syz_tun (unregistering): left allmulticast mode [ 1533.477942][T20536] syz_tun: left allmulticast mode [ 1533.499343][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1533.509465][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1533.520618][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1533.529343][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1533.538529][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1533.545827][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1533.741610][ T7090] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.549095][ T7090] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.701820][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4112'. [ 1535.627270][ T5828] Bluetooth: hci0: command tx timeout [ 1535.642869][ T7090] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.822875][T20579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1536.293227][ T7090] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.276465][T20567] block nbd6: shutting down sockets [ 1537.289064][T20555] chnl_net:caif_netlink_parms(): no params data found [ 1537.315786][ T7090] erspan0: left allmulticast mode [ 1537.380591][ T7090] erspan0: left promiscuous mode [ 1537.385729][ T7090] bridge0: port 3(erspan0) entered disabled state [ 1537.405927][ T7090] bridge_slave_1: left allmulticast mode [ 1537.414717][ T7090] bridge_slave_1: left promiscuous mode [ 1537.427414][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.444819][ T7090] bridge_slave_0: left allmulticast mode [ 1537.451099][ T7090] bridge_slave_0: left promiscuous mode [ 1537.456805][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.585158][ T5870] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1537.699480][ T5827] Bluetooth: hci0: command tx timeout [ 1537.741461][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 1537.761505][ T5870] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1537.775758][ T5870] usb 5-1: config 0 has no interface number 0 [ 1537.788888][ T5870] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.813611][ T5870] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.824366][ T5870] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1537.847702][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.865707][ T5870] usb 5-1: config 0 descriptor?? [ 1537.904047][ T7090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.914850][ T7090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.927064][ T7090] bond0 (unregistering): Released all slaves [ 1538.059194][T20599] netlink: 'syz.6.4122': attribute type 9 has an invalid length. [ 1538.074737][T20555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.108831][T20555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.117114][T20555] bridge_slave_0: entered allmulticast mode [ 1538.126477][T20555] bridge_slave_0: entered promiscuous mode [ 1538.134591][T20555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.142473][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.153223][T20555] bridge_slave_1: entered allmulticast mode [ 1538.178524][T20555] bridge_slave_1: entered promiscuous mode [ 1538.334502][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 1538.355632][T20555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.442937][T20555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.829098][ T5870] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0012/input/input39 [ 1538.920826][ T7090] hsr_slave_0: left promiscuous mode [ 1538.936588][ T7090] hsr_slave_1: left promiscuous mode [ 1538.942670][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1538.956836][ T5870] uclogic 0003:28BD:0094.0012: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 1538.973777][ T7090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.004586][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.024085][ T7090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.078186][ T7090] veth1_macvtap: left promiscuous mode [ 1539.084602][ T7090] veth0_macvtap: left promiscuous mode [ 1539.090552][ T7090] veth1_vlan: left promiscuous mode [ 1539.096054][ T7090] veth0_vlan: left promiscuous mode [ 1539.655694][ T7090] team0 (unregistering): Port device team_slave_1 removed [ 1539.709990][ T7090] team0 (unregistering): Port device team_slave_0 removed [ 1539.777304][ T5828] Bluetooth: hci0: command tx timeout [ 1541.003615][T20555] team0: Port device team_slave_0 added [ 1541.029418][T20555] team0: Port device team_slave_1 added [ 1541.117330][T20603] block nbd0: shutting down sockets [ 1541.144314][ T5869] usb 5-1: USB disconnect, device number 57 [ 1541.172793][T20555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.206869][T20555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.236675][T20621] fuse: Bad value for 'fd' [ 1541.246178][T20555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.261468][T20623] bridge0: port 3(syz_tun) entered blocking state [ 1541.276976][T20623] bridge0: port 3(syz_tun) entered disabled state [ 1541.306517][T20623] syz_tun: entered allmulticast mode [ 1541.322924][T20623] syz_tun: entered promiscuous mode [ 1541.330376][T20623] bridge0: port 3(syz_tun) entered blocking state [ 1541.337976][T20623] bridge0: port 3(syz_tun) entered forwarding state [ 1541.366651][T20555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.387270][T20555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.522417][T20555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.813171][T20634] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4131'. [ 1541.867388][ T5827] Bluetooth: hci0: command tx timeout [ 1541.893847][T20555] hsr_slave_0: entered promiscuous mode [ 1542.225775][T20555] hsr_slave_1: entered promiscuous mode [ 1542.732193][T20643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4135'. [ 1543.681836][ T7090] IPVS: stop unused estimator thread 0... [ 1544.968303][T20657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4139'. [ 1545.651817][T20555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1545.665614][T20555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1545.708469][T20555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1545.720214][T20555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1545.923709][T20555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.941486][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.947984][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.948947][T20555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.124856][T17308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.132032][T17308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.178286][T17308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.185452][T17308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1547.883369][T20555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.873971][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 1548.883256][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 1549.436470][T20693] mkiss: ax0: crc mode is auto. [ 1549.891047][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 1549.897235][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 1549.987491][T20695] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1550.137300][T20688] ceph: No mds server is up or the cluster is laggy [ 1550.577231][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1550.738401][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1552.178912][T20711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4151'. [ 1552.382752][T20555] veth0_vlan: entered promiscuous mode [ 1552.405914][T20555] veth1_vlan: entered promiscuous mode [ 1553.262029][T20555] veth0_macvtap: entered promiscuous mode [ 1553.290628][T20555] veth1_macvtap: entered promiscuous mode [ 1553.670097][T20555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.681046][T20555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.703191][T20555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.714295][T20555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.727327][T20555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.925187][T20555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.949315][T20555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.987301][T20555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.007109][T20555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.040223][T20555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.238559][T20555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.248475][T20555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.271820][T20555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.281879][T20555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.292547][T20555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.303067][T20555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.146758][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1555.166458][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1555.174718][T20555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.307597][T20734] ceph: No mds server is up or the cluster is laggy [ 1555.328382][T20555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.668771][T20742] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4158'. [ 1556.224813][T20555] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.251414][T20555] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.290774][T20555] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.312105][T20555] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.129743][T17308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.153988][T17308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.238125][T14883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.246898][T14883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.259208][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4163'. [ 1558.378289][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 1558.432183][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 1558.630916][T20769] ceph: No mds server is up or the cluster is laggy [ 1561.283127][T20795] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4171'. [ 1561.824080][T20802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4174'. [ 1561.833403][T20802] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4174'. [ 1561.842568][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4174'. [ 1564.402703][T20836] mkiss: ax0: crc mode is auto. [ 1564.410780][ T5871] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1565.726955][T20841] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4182'. [ 1566.387988][ T5871] usb 4-1: device descriptor read/all, error -71 [ 1567.180344][T20852] mkiss: ax0: crc mode is auto. [ 1567.229534][T20852] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4188'. [ 1568.024627][T20862] netlink: 'syz.0.4191': attribute type 7 has an invalid length. [ 1568.064654][T20862] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1568.074116][T20862] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1568.082951][T20862] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1568.091706][T20862] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.347443][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4195'. [ 1569.496881][T20880] FAULT_INJECTION: forcing a failure. [ 1569.496881][T20880] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.541857][T20880] CPU: 0 UID: 0 PID: 20880 Comm: syz.3.4197 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 1569.541883][T20880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1569.541895][T20880] Call Trace: [ 1569.541902][T20880] [ 1569.541910][T20880] dump_stack_lvl+0x241/0x360 [ 1569.541938][T20880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1569.541958][T20880] ? __pfx__printk+0x10/0x10 [ 1569.541987][T20880] ? __kmalloc_cache_noprof+0x48/0x390 [ 1569.542009][T20880] ? __pfx___might_resched+0x10/0x10 [ 1569.542030][T20880] ? arch_stack_walk+0xfd/0x150 [ 1569.542062][T20880] should_fail_ex+0x40a/0x550 [ 1569.542094][T20880] should_failslab+0xac/0x100 [ 1569.542126][T20880] __kmalloc_cache_noprof+0x70/0x390 [ 1569.542143][T20880] ? rtnl_newlink+0x147/0x1d30 [ 1569.542179][T20880] rtnl_newlink+0x147/0x1d30 [ 1569.542209][T20880] ? kasan_save_track+0x51/0x80 [ 1569.542233][T20880] ? kasan_save_free_info+0x40/0x50 [ 1569.542252][T20880] ? __kasan_slab_free+0x59/0x70 [ 1569.542276][T20880] ? kmem_cache_free+0x195/0x410 [ 1569.542295][T20880] ? __pfx_rtnl_newlink+0x10/0x10 [ 1569.542316][T20880] ? __netlink_deliver_tap+0x561/0x7f0 [ 1569.542338][T20880] ? __pfx_validate_chain+0x10/0x10 [ 1569.542355][T20880] ? __sock_sendmsg+0x221/0x270 [ 1569.542377][T20880] ? ____sys_sendmsg+0x53a/0x860 [ 1569.542398][T20880] ? __sys_sendmmsg+0x36a/0x720 [ 1569.542415][T20880] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 1569.542433][T20880] ? do_syscall_64+0xf3/0x230 [ 1569.542478][T20880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.542529][T20880] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1569.542563][T20880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1569.542603][T20880] ? mark_lock+0x9a/0x360 [ 1569.542639][T20880] ? __lock_acquire+0x1397/0x2100 [ 1569.542701][T20880] ? __pfx_lock_release+0x10/0x10 [ 1569.542733][T20880] ? cap_capable+0x139/0x450 [ 1569.542777][T20880] ? __pfx_rtnl_newlink+0x10/0x10 [ 1569.542812][T20880] rtnetlink_rcv_msg+0x791/0xcf0 [ 1569.542838][T20880] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1569.542871][T20880] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1569.542905][T20880] ? ref_tracker_free+0x643/0x7e0 [ 1569.542934][T20880] netlink_rcv_skb+0x206/0x480 [ 1569.542960][T20880] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1569.542990][T20880] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1569.543038][T20880] ? netlink_deliver_tap+0x2e/0x1b0 [ 1569.543067][T20880] netlink_unicast+0x7f6/0x990 [ 1569.543098][T20880] ? __pfx_netlink_unicast+0x10/0x10 [ 1569.543118][T20880] ? __virt_addr_valid+0x45f/0x530 [ 1569.543152][T20880] ? __phys_addr_symbol+0x2f/0x70 [ 1569.543190][T20880] ? __check_object_size+0x47a/0x730 [ 1569.543230][T20880] netlink_sendmsg+0x8de/0xcb0 [ 1569.543274][T20880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1569.543314][T20880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1569.543339][T20880] __sock_sendmsg+0x221/0x270 [ 1569.543370][T20880] ____sys_sendmsg+0x53a/0x860 [ 1569.543403][T20880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1569.543423][T20880] ? __fget_files+0x2a/0x410 [ 1569.543450][T20880] ? __fget_files+0x2a/0x410 [ 1569.543483][T20880] __sys_sendmmsg+0x36a/0x720 [ 1569.543518][T20880] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1569.543566][T20880] ? __pfx_lock_release+0x10/0x10 [ 1569.543593][T20880] ? kstrtouint_from_user+0x128/0x190 [ 1569.543651][T20880] ? ksys_write+0x22a/0x2b0 [ 1569.543675][T20880] ? __pfx_lock_release+0x10/0x10 [ 1569.543706][T20880] ? sb_end_write+0xe9/0x1c0 [ 1569.543726][T20880] ? vfs_write+0x7fa/0xd10 [ 1569.543752][T20880] ? __mutex_unlock_slowpath+0x227/0x800 [ 1569.543803][T20880] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1569.543833][T20880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1569.543860][T20880] ? do_syscall_64+0x100/0x230 [ 1569.543891][T20880] __x64_sys_sendmmsg+0xa0/0xb0 [ 1569.543913][T20880] do_syscall_64+0xf3/0x230 [ 1569.543940][T20880] ? clear_bhb_loop+0x35/0x90 [ 1569.543968][T20880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.543993][T20880] RIP: 0033:0x7f72afd8d169 [ 1569.544010][T20880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1569.544026][T20880] RSP: 002b:00007f72b0ca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1569.544046][T20880] RAX: ffffffffffffffda RBX: 00007f72affa5fa0 RCX: 00007f72afd8d169 [ 1569.544059][T20880] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000003 [ 1569.544072][T20880] RBP: 00007f72b0ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.544083][T20880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.544095][T20880] R13: 0000000000000000 R14: 00007f72affa5fa0 R15: 00007ffca1ddc7a8 [ 1569.544121][T20880] [ 1570.055617][T20886] befs: (nbd4): No write support. Marking filesystem read-only [ 1570.114973][T20886] syz.4.4196: attempt to access beyond end of device [ 1570.114973][T20886] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1570.586601][T20903] netlink: 'syz.6.4200': attribute type 5 has an invalid length. [ 1571.560013][T20910] mkiss: ax0: crc mode is auto. [ 1571.658919][T20912] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4203'. [ 1572.203455][T20913] overlayfs: conflicting options: metacopy=off,verity=on [ 1576.010953][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 1576.020992][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 1576.031543][T20953] ceph: No mds server is up or the cluster is laggy [ 1576.196132][ T5871] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1578.186872][T20531] libceph: connect (1)[c::]:6789 error -101 [ 1578.193516][T20531] libceph: mon0 (1)[c::]:6789 connect error [ 1578.220224][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 1578.248067][T20971] ceph: No mds server is up or the cluster is laggy [ 1578.302330][ T5871] usb 4-1: device descriptor read/all, error -71 [ 1578.460648][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 1578.466836][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 1578.725922][T20962] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4218'. [ 1579.284786][T20991] befs: (nbd3): No write support. Marking filesystem read-only [ 1579.343867][T20991] syz.3.4224: attempt to access beyond end of device [ 1579.343867][T20991] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1580.954798][T21008] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1582.203002][T21019] mkiss: ax0: crc mode is auto. [ 1582.272018][T21020] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4233'. [ 1583.445696][T21029] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4235'. [ 1587.281417][T21045] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1587.282381][T21046] ceph: No mds server is up or the cluster is laggy [ 1587.310611][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 1587.325170][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 1588.538665][T11869] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1588.738890][T11869] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 1588.811014][T11869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1588.966970][T11869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1588.980028][T11869] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1588.989321][T11869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.997378][T11869] usb 6-1: Product: syz [ 1589.001566][T11869] usb 6-1: Manufacturer: syz [ 1589.006194][T11869] usb 6-1: SerialNumber: syz [ 1589.013291][T11869] usb 6-1: config 0 descriptor?? [ 1590.097568][T21075] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1593.789937][T11869] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 1593.882608][T11869] usb 6-1: USB disconnect, device number 38 [ 1594.699364][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4257'. [ 1594.870660][ T30] audit: type=1326 audit(1741776115.416:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1594.927303][ T30] audit: type=1326 audit(1741776115.416:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1594.984531][ T30] audit: type=1326 audit(1741776115.416:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1595.254976][ T30] audit: type=1326 audit(1741776115.416:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1595.291322][ T30] audit: type=1326 audit(1741776115.416:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1595.317462][ T30] audit: type=1326 audit(1741776115.416:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1596.299236][ T30] audit: type=1326 audit(1741776115.416:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1596.321007][ T30] audit: type=1326 audit(1741776115.416:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1596.472041][T21120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4258'. [ 1596.481085][T21120] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4258'. [ 1596.490129][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4258'. [ 1597.227013][ T5871] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1597.235588][ T30] audit: type=1326 audit(1741776115.416:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1597.257796][ T30] audit: type=1326 audit(1741776115.416:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21109 comm="syz.4.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7ffc0000 [ 1597.436040][ T5871] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 1597.502937][ T5871] usb 5-1: config 0 has no interface number 0 [ 1598.029874][ T5871] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 1598.076444][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.141710][ T5871] usb 5-1: config 0 descriptor?? [ 1598.177067][ T5871] usb 5-1: can't set config #0, error -71 [ 1598.197549][T21133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1598.207096][ T5871] usb 5-1: USB disconnect, device number 58 [ 1598.357506][T21136] fuse: Unknown parameter 'use00000000000000000000' [ 1600.238942][T21160] mkiss: ax0: crc mode is auto. [ 1600.452550][T21162] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4268'. [ 1601.479073][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1601.572705][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1602.005265][T21171] ceph: No mds server is up or the cluster is laggy [ 1603.657303][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 1603.657321][ T30] audit: type=1326 audit(1741776124.196:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1603.666535][T21191] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1603.777953][T21193] netlink: 'syz.0.4271': attribute type 5 has an invalid length. [ 1603.897303][ T30] audit: type=1326 audit(1741776124.196:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1603.919723][ T30] audit: type=1326 audit(1741776124.196:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1604.178481][ T30] audit: type=1326 audit(1741776124.196:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1604.200227][ T30] audit: type=1326 audit(1741776124.196:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1604.480667][ T30] audit: type=1326 audit(1741776124.196:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1604.655156][ T30] audit: type=1326 audit(1741776124.196:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1604.825310][ T30] audit: type=1326 audit(1741776124.196:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1605.183611][ T30] audit: type=1326 audit(1741776124.196:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1605.263898][ T30] audit: type=1326 audit(1741776124.196:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21175 comm="syz.4.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1605.320442][T21204] FAULT_INJECTION: forcing a failure. [ 1605.320442][T21204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.333817][T21204] CPU: 0 UID: 0 PID: 21204 Comm: syz.3.4282 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 1605.333841][T21204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1605.333852][T21204] Call Trace: [ 1605.333859][T21204] [ 1605.333867][T21204] dump_stack_lvl+0x241/0x360 [ 1605.333892][T21204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1605.333911][T21204] ? __pfx__printk+0x10/0x10 [ 1605.333941][T21204] ? __pfx_lock_release+0x10/0x10 [ 1605.333969][T21204] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1605.334000][T21204] should_fail_ex+0x40a/0x550 [ 1605.334031][T21204] _copy_from_user+0x2d/0xb0 [ 1605.334057][T21204] copy_bpf_fprog_from_user+0x168/0x3f0 [ 1605.334090][T21204] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 1605.334129][T21204] sk_setsockopt+0x1053/0x3330 [ 1605.334167][T21204] ? __pfx_sk_setsockopt+0x10/0x10 [ 1605.334194][T21204] ? __pfx_lock_release+0x10/0x10 [ 1605.334217][T21204] ? kstrtouint_from_user+0x128/0x190 [ 1605.334247][T21204] ? mark_lock+0x9a/0x360 [ 1605.334290][T21204] udp_lib_setsockopt+0x112/0xb10 [ 1605.334316][T21204] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 1605.334345][T21204] udpv6_setsockopt+0x73/0xb0 [ 1605.334373][T21204] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 1605.334404][T21204] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1605.334430][T21204] do_sock_setsockopt+0x3af/0x720 [ 1605.334454][T21204] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1605.334478][T21204] ? __fget_files+0x395/0x410 [ 1605.334497][T21204] ? __fget_files+0x2a/0x410 [ 1605.334524][T21204] __x64_sys_setsockopt+0x1ee/0x280 [ 1605.334549][T21204] do_syscall_64+0xf3/0x230 [ 1605.334577][T21204] ? clear_bhb_loop+0x35/0x90 [ 1605.334606][T21204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.334631][T21204] RIP: 0033:0x7f72afd8d169 [ 1605.334647][T21204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1605.334663][T21204] RSP: 002b:00007f72b0ca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1605.334687][T21204] RAX: ffffffffffffffda RBX: 00007f72affa5fa0 RCX: 00007f72afd8d169 [ 1605.334706][T21204] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 1605.334717][T21204] RBP: 00007f72b0ca6090 R08: 0000000000000010 R09: 0000000000000000 [ 1605.334729][T21204] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.334741][T21204] R13: 0000000000000000 R14: 00007f72affa5fa0 R15: 00007ffca1ddc7a8 [ 1605.334768][T21204] [ 1607.381111][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.387490][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.563915][T21224] befs: (nbd4): No write support. Marking filesystem read-only [ 1607.571669][T21224] syz.4.4285: attempt to access beyond end of device [ 1607.571669][T21224] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1607.961972][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1608.017198][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1611.493687][T21251] ceph: No mds server is up or the cluster is laggy [ 1611.500680][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 1611.506653][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 1611.694534][T21258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4297'. [ 1611.729877][T21258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1613.528977][T21271] mkiss: ax0: crc mode is auto. [ 1613.628120][T21276] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4299'. [ 1614.984756][T21269] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1615.065429][T21269] team0: Port device batadv1 added [ 1615.074749][T21282] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4298'. [ 1616.749104][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 1616.755656][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 1617.264037][T21294] ceph: No mds server is up or the cluster is laggy [ 1618.731091][T21309] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4308'. [ 1618.932509][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4311'. [ 1619.068020][ T2153] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 1619.219214][ T2153] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1619.256815][ T2153] usb 5-1: config 1 has an invalid descriptor of length 134, skipping remainder of the config [ 1619.287343][ T2153] usb 5-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1619.318315][ T2153] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1619.361364][ T2153] usb 5-1: string descriptor 0 read error: -22 [ 1619.577148][ T2153] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1619.586782][ T2153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.614275][ T2153] usb 5-1: bad CDC descriptors [ 1619.709668][T21325] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4314'. [ 1619.723401][T21325] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4314'. [ 1620.002358][T21326] netlink: 'syz.0.4309': attribute type 5 has an invalid length. [ 1620.111372][ T2153] usb 5-1: USB disconnect, device number 59 [ 1621.649352][T21337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4315'. [ 1624.677066][T21357] ceph: No mds server is up or the cluster is laggy [ 1624.711008][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 1624.727353][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 1625.245331][T21370] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4325'. [ 1625.258297][T21370] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4325'. [ 1625.933659][ T5870] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1627.078341][T21374] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1627.172300][ T5870] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 1627.206018][T21379] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1627.217495][T21379] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1627.226702][T21379] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1627.235618][T21379] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1627.244739][T21379] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1627.253641][T21379] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1627.262806][T21379] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1627.271911][T21379] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1627.382229][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.421217][ T5870] usb 4-1: Product: syz [ 1627.429832][ T5870] usb 4-1: Manufacturer: syz [ 1627.434589][ T5870] usb 4-1: SerialNumber: syz [ 1627.460977][ T5870] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1627.495166][ T5870] dvb-usb: bulk message failed: -22 (3/0) [ 1627.535341][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1627.557227][ T5870] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1627.604793][ T5870] usb 4-1: media controller created [ 1627.679796][T21362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.773588][T21393] fuse: Unknown parameter 'user_id00000000000000000000' [ 1627.789445][T21362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1627.846538][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1628.349090][ T5870] DVB: Unable to find symbol mt352_attach() [ 1628.355231][ T5870] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1628.378234][ T5870] dvb-usb: bulk message failed: -22 (3/0) [ 1628.417577][ T5870] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1628.447781][T21397] netlink: 'syz.6.4332': attribute type 10 has an invalid length. [ 1628.453005][ T5870] usb 4-1: USB disconnect, device number 67 [ 1628.522311][ T5870] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1628.602401][T21397] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1628.714791][T21396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1631.000810][T21416] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1631.172833][T21424] __nla_validate_parse: 143 callbacks suppressed [ 1631.172866][T21424] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1631.287297][T21424] netlink: 'syz.5.4339': attribute type 1 has an invalid length. [ 1631.337669][T21424] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1631.449464][T21424] netlink: 'syz.5.4339': attribute type 10 has an invalid length. [ 1631.517601][T21428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4337'. [ 1632.040582][T21424] batman_adv: batadv0: Adding interface: team0 [ 1632.046796][T21424] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1632.117418][T21429] netlink: 'syz.5.4339': attribute type 10 has an invalid length. [ 1632.158333][T21424] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1632.175343][T21429] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1632.314660][T21429] team0: entered promiscuous mode [ 1632.427140][T21429] team_slave_0: entered promiscuous mode [ 1632.433043][T21429] team_slave_1: entered promiscuous mode [ 1632.461724][T21429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.488781][T21429] batman_adv: batadv0: Interface activated: team0 [ 1632.518285][T21429] batman_adv: batadv0: Interface deactivated: team0 [ 1632.525362][T21429] batman_adv: batadv0: Removing interface: team0 [ 1632.590925][T21429] bridge0: port 3(team0) entered blocking state [ 1632.609671][T21429] bridge0: port 3(team0) entered disabled state [ 1632.663845][T21429] team0: entered allmulticast mode [ 1632.701737][T21429] team_slave_0: entered allmulticast mode [ 1632.733758][T21429] team_slave_1: entered allmulticast mode [ 1632.882150][T21429] bridge0: port 3(team0) entered blocking state [ 1632.888651][T21429] bridge0: port 3(team0) entered forwarding state [ 1633.716138][T21443] fuse: Bad value for 'fd' [ 1634.033813][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4351'. [ 1634.322377][T21466] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1634.986799][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 1635.119593][T21469] ceph: No mds server is up or the cluster is laggy [ 1635.324120][T21459] bond0: (slave wlan1): Releasing backup interface [ 1635.428048][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 1635.751189][T21477] ceph: No mds server is up or the cluster is laggy [ 1637.327208][T21493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4356'. [ 1637.336336][T21493] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4356'. [ 1637.345392][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 1638.622086][T21496] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1638.723181][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4359'. [ 1640.096685][T21511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1640.105895][T21511] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1640.114975][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1640.992961][T21514] FAULT_INJECTION: forcing a failure. [ 1640.992961][T21514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.021110][T21514] CPU: 0 UID: 0 PID: 21514 Comm: syz.3.4363 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 1641.021139][T21514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1641.021152][T21514] Call Trace: [ 1641.021160][T21514] [ 1641.021169][T21514] dump_stack_lvl+0x241/0x360 [ 1641.021213][T21514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1641.021240][T21514] ? __pfx__printk+0x10/0x10 [ 1641.021281][T21514] ? __pfx_lock_release+0x10/0x10 [ 1641.021314][T21514] should_fail_ex+0x40a/0x550 [ 1641.021346][T21514] _copy_from_user+0x2d/0xb0 [ 1641.021372][T21514] packet_setsockopt+0x320/0x1870 [ 1641.021395][T21514] ? __pfx_packet_setsockopt+0x10/0x10 [ 1641.021414][T21514] ? __lock_acquire+0x1397/0x2100 [ 1641.021462][T21514] ? __pfx_lock_acquire+0x10/0x10 [ 1641.021488][T21514] ? __fget_files+0x2a/0x410 [ 1641.021507][T21514] ? do_sys_openat2+0x17a/0x1d0 [ 1641.021528][T21514] ? __pfx_packet_setsockopt+0x10/0x10 [ 1641.021546][T21514] do_sock_setsockopt+0x3af/0x720 [ 1641.021570][T21514] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1641.021592][T21514] ? __fget_files+0x395/0x410 [ 1641.021609][T21514] ? __fget_files+0x2a/0x410 [ 1641.021635][T21514] __x64_sys_setsockopt+0x1ee/0x280 [ 1641.021659][T21514] do_syscall_64+0xf3/0x230 [ 1641.021687][T21514] ? clear_bhb_loop+0x35/0x90 [ 1641.021716][T21514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.021742][T21514] RIP: 0033:0x7f72afd8d169 [ 1641.021758][T21514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.021773][T21514] RSP: 002b:00007f72b0ca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1641.021793][T21514] RAX: ffffffffffffffda RBX: 00007f72affa5fa0 RCX: 00007f72afd8d169 [ 1641.021807][T21514] RDX: 000000000000000f RSI: 0000000000000107 RDI: 0000000000000003 [ 1641.021818][T21514] RBP: 00007f72b0ca6090 R08: 0000000000000004 R09: 0000000000000000 [ 1641.021830][T21514] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.021841][T21514] R13: 0000000000000000 R14: 00007f72affa5fa0 R15: 00007ffca1ddc7a8 [ 1641.021867][T21514] [ 1642.713000][T21532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1642.722276][T21532] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1642.731412][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1644.115972][T21525] ceph: No mds server is up or the cluster is laggy [ 1644.131636][T19604] libceph: connect (1)[c::]:6789 error -101 [ 1644.150014][T19604] libceph: mon0 (1)[c::]:6789 connect error [ 1646.373063][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4372'. [ 1646.749102][T21558] xt_connbytes: Forcing CT accounting to be enabled [ 1646.767417][T21558] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1646.797611][T21558] xt_bpf: check failed: parse error [ 1646.818811][T21558] netlink: 'syz.5.4375': attribute type 12 has an invalid length. [ 1647.147406][T21558] netlink: 'syz.5.4375': attribute type 29 has an invalid length. [ 1647.378434][T21558] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4375'. [ 1647.496343][T21572] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4379'. [ 1647.510853][T21558] netlink: 59 bytes leftover after parsing attributes in process `syz.5.4375'. [ 1648.165408][T21544] infiniband syz1: set down [ 1648.682988][T21544] infiniband syz1: added ipvlan0 [ 1648.745191][T21544] syz1: rxe_create_cq: returned err = -12 [ 1648.937345][T21544] infiniband syz1: Couldn't create ib_mad CQ [ 1648.943661][T21544] infiniband syz1: Couldn't open port 1 [ 1650.337262][T21584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1650.346259][T21584] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1650.356598][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1650.790389][T21544] RDS/IB: syz1: added [ 1650.795104][T21544] smc: adding ib device syz1 with port count 1 [ 1650.968836][T21544] smc: ib device syz1 port 1 has pnetid [ 1652.949379][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4388'. [ 1654.606020][T21635] loop9: detected capacity change from 0 to 8 [ 1654.675556][T21635] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1654.696052][T21635] loop9: partition table partially beyond EOD, truncated [ 1654.727626][T21635] loop9: p1 size 4245934988 extends beyond EOD, truncated [ 1655.728272][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1655.737288][T21622] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1656.040548][T21622] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1656.075493][T21622] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1656.081553][T21622] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1656.092168][T21622] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1656.349655][T21622] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1656.803050][T21622] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1656.819829][T21622] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1656.844979][T21622] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1656.859354][T21622] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1656.894300][T21622] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1657.817421][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1658.117386][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 1658.117397][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 1658.814282][T16754] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1658.823068][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 1658.879486][T21672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4403'. [ 1658.982514][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 1659.679838][T16754] usb 5-1: Using ep0 maxpacket: 32 [ 1659.692977][T16754] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1659.707355][T16754] usb 5-1: config 0 has no interface number 0 [ 1659.713965][T16754] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1659.729219][T16754] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1659.746211][T16754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.755593][T16754] usb 5-1: Product: syz [ 1659.765229][T16754] usb 5-1: Manufacturer: syz [ 1659.791736][T16754] usb 5-1: SerialNumber: syz [ 1659.801724][T16754] usb 5-1: config 0 descriptor?? [ 1660.840066][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 1660.846163][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 1661.187953][T21684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4407'. [ 1661.197348][T21684] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4407'. [ 1661.206379][T21684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4407'. [ 1661.515829][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 1661.522343][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 1661.698956][T21690] input: syz0 as /devices/virtual/input/input40 [ 1661.875181][T16754] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1661.887272][T16754] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1661.894683][T16754] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1661.917573][T16754] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1661.947308][T16754] usb 5-1: USB disconnect, device number 60 [ 1662.046017][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1662.046035][ T30] audit: type=1326 audit(1741776182.586:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21694 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72afd8d169 code=0x7fc00000 [ 1662.672145][ T30] audit: type=1326 audit(1741776183.216:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21694 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72afd8d169 code=0x7fc00000 [ 1662.905584][T21712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1663.547438][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 1663.935479][T21725] mkiss: ax0: crc mode is auto. [ 1664.050544][T21726] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1664.636675][ T5873] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1664.846137][ T5873] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1664.911610][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1664.933225][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1664.947345][ T5873] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1664.956625][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.971213][ T5873] usb 5-1: Product: syz [ 1664.975456][ T5873] usb 5-1: Manufacturer: syz [ 1664.982394][ T5873] usb 5-1: SerialNumber: syz [ 1665.091155][ T5873] usb 5-1: config 0 descriptor?? [ 1669.506714][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4428'. [ 1669.530338][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.536834][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.443784][ T5873] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 1671.877755][ T5869] usb 5-1: USB disconnect, device number 61 [ 1671.898606][T21791] veth3: entered promiscuous mode [ 1673.635916][T21812] befs: (nbd0): No write support. Marking filesystem read-only [ 1673.646484][T21812] syz.0.4440: attempt to access beyond end of device [ 1673.646484][T21812] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1675.089943][T20531] libceph: connect (1)[c::]:6789 error -101 [ 1675.105420][T20531] libceph: mon0 (1)[c::]:6789 connect error [ 1675.128184][T21811] ceph: No mds server is up or the cluster is laggy [ 1675.543861][T21819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4441'. [ 1678.164901][ T30] audit: type=1326 audit(1741776198.696:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1678.406434][ T30] audit: type=1326 audit(1741776198.696:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1678.456121][T20531] libceph: connect (1)[c::]:6789 error -101 [ 1678.465853][T20531] libceph: mon0 (1)[c::]:6789 connect error [ 1678.489274][ T30] audit: type=1326 audit(1741776198.696:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1678.511415][ T30] audit: type=1326 audit(1741776198.696:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1678.533814][ T30] audit: type=1326 audit(1741776198.696:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1678.555694][ T30] audit: type=1326 audit(1741776198.696:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1678.577928][ T30] audit: type=1326 audit(1741776198.696:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1678.741125][T20531] libceph: connect (1)[c::]:6789 error -101 [ 1678.784273][T20531] libceph: mon0 (1)[c::]:6789 connect error [ 1678.845112][T21849] ceph: No mds server is up or the cluster is laggy [ 1679.423722][ T30] audit: type=1326 audit(1741776198.696:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1679.575181][ T30] audit: type=1326 audit(1741776198.696:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1679.665879][ T30] audit: type=1326 audit(1741776198.696:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21831 comm="syz.5.4446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1679.847823][T20531] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1680.347328][T20531] usb 5-1: Using ep0 maxpacket: 32 [ 1680.422819][T20531] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1680.449839][T20531] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1680.515048][T20531] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1680.561978][T20531] usb 5-1: config 1 has no interface number 0 [ 1680.615752][T20531] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1680.643872][T20531] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1680.669503][T20531] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1680.683161][T20531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.708512][T20531] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1680.913612][T20531] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1681.964774][T20531] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1683.935146][T20531] usb 5-1: USB disconnect, device number 62 [ 1683.948391][T20531] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1684.503174][T21893] ax25_connect(): syz.5.4459 uses autobind, please contact jreuter@yaina.de [ 1686.301154][T21905] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4463'. [ 1687.845104][T21915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4464'. [ 1689.207754][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1689.207790][ T30] audit: type=1326 audit(1741776209.746:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1690.089549][ T30] audit: type=1326 audit(1741776209.746:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21916 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c4bd8d169 code=0x7fc00000 [ 1690.111108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.129150][T21931] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4471'. [ 1690.803858][T21946] syz_tun: entered allmulticast mode [ 1690.892602][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4476'. [ 1691.271631][T21942] syz_tun: left allmulticast mode [ 1691.739201][ T30] audit: type=1800 audit(1741776212.286:465): pid=21951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4480" name="sg-" dev="tmpfs" ino=1438 res=0 errno=0 [ 1691.758947][ C0] vkms_vblank_simulate: vblank timer overrun [ 1692.467457][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1692.497910][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1692.505825][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1692.514213][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1692.526925][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1692.534190][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1693.708616][T21960] chnl_net:caif_netlink_parms(): no params data found [ 1694.609635][ T5827] Bluetooth: hci1: command tx timeout [ 1695.115628][T21960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.149025][T21960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.191981][T21960] bridge_slave_0: entered allmulticast mode [ 1695.207390][T21960] bridge_slave_0: entered promiscuous mode [ 1695.235127][T21960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.717278][T21960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.724615][T21960] bridge_slave_1: entered allmulticast mode [ 1695.798625][T21960] bridge_slave_1: entered promiscuous mode [ 1695.897172][ T5930] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1695.946769][T21960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.981067][T21960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.181487][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 1697.005799][ T5827] Bluetooth: hci1: command tx timeout [ 1697.130402][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 1697.153326][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 1697.392116][T22015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4493'. [ 1697.493351][ T5930] usb 5-1: Product: syz [ 1697.518002][ T5930] usb 5-1: config 0 descriptor?? [ 1697.537984][T22011] syz_tun: entered allmulticast mode [ 1697.628198][ T5930] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 1697.634443][ T5930] gspca_stv06xx: st6422 sensor detected [ 1697.761809][T21960] team0: Port device team_slave_0 added [ 1697.836412][T21960] team0: Port device team_slave_1 added [ 1697.913957][T22002] syz_tun: left allmulticast mode [ 1697.948668][T21960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.977811][T21960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.058091][T21960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.119162][ T5930] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 1698.129938][T21960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.136879][T21960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.185847][ T5930] usb 5-1: USB disconnect, device number 63 [ 1698.284874][T21960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.997477][ T5873] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1699.098770][ T5827] Bluetooth: hci1: command tx timeout [ 1699.289913][ T5873] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1699.332114][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.343451][T21960] hsr_slave_0: entered promiscuous mode [ 1699.375089][ T5873] usb 6-1: Product: syz [ 1699.382048][T21960] hsr_slave_1: entered promiscuous mode [ 1699.538055][T21960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1699.545655][T21960] Cannot create hsr debugfs directory [ 1699.574254][ T5873] usb 6-1: Manufacturer: syz [ 1699.604671][ T5873] usb 6-1: SerialNumber: syz [ 1700.338226][ T5873] usb 6-1: config 0 descriptor?? [ 1700.624232][ T5873] peak_usb 6-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 1701.097289][ T5873] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1701.104078][ T5873] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1701.135126][ T5873] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 1701.142236][ T5827] Bluetooth: hci1: command tx timeout [ 1701.318320][ T5873] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1701.552306][T21960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1701.624437][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4504'. [ 1701.758569][T21960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1702.567022][ T5873] usb 6-1: USB disconnect, device number 39 [ 1703.664058][T21960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1703.797588][T21960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1704.126068][T22067] syz_tun: entered allmulticast mode [ 1704.159799][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4508'. [ 1704.609096][T21960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.633825][T22050] block nbd4: shutting down sockets [ 1704.755995][T21960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.824790][T22066] syz_tun: left allmulticast mode [ 1705.419950][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.427123][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1705.739847][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.747002][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1706.812856][T22098] befs: (nbd0): No write support. Marking filesystem read-only [ 1706.821624][T22098] syz.0.4517: attempt to access beyond end of device [ 1706.821624][T22098] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1707.237307][ T30] audit: type=1326 audit(1741776227.776:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22089 comm="syz.6.4516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1951f8d169 code=0x7fc00000 [ 1707.381651][T22088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4515'. [ 1712.180679][T21960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.731812][T21960] veth0_vlan: entered promiscuous mode [ 1713.531099][T21960] veth1_vlan: entered promiscuous mode [ 1714.262711][T21960] veth0_macvtap: entered promiscuous mode [ 1714.318341][T21960] veth1_macvtap: entered promiscuous mode [ 1714.442606][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1714.484351][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.540060][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1714.740303][T22145] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4527'. [ 1715.246141][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.274091][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.285665][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.356683][T22151] befs: (nbd0): No write support. Marking filesystem read-only [ 1715.365071][T22151] syz.0.4528: attempt to access beyond end of device [ 1715.365071][T22151] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1715.777621][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.788478][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.800106][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.810640][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.821824][T21960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1715.919004][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.929777][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.942337][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.967148][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.977008][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.123778][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.134087][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.157239][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.177937][T21960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.203161][T21960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.247023][T21960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.280248][T21960] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.302227][T21960] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.325844][T21960] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.346345][T21960] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.538258][ T7090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.546130][ T7090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.557302][ T5930] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1717.708354][T22169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4535'. [ 1717.728494][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.741773][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.760544][ T5930] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1717.818440][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.855289][ T5930] usb 5-1: config 0 has no interface number 0 [ 1717.877845][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1717.925517][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.954394][ T5930] usb 5-1: Product: syz [ 1717.958822][ T5930] usb 5-1: Manufacturer: syz [ 1717.973669][ T5930] usb 5-1: SerialNumber: syz [ 1717.984588][ T5930] usb 5-1: config 0 descriptor?? [ 1718.537756][ T5930] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 1718.767586][ T5930] usb 5-1: No valid video chain found. [ 1720.324270][T22189] mkiss: ax0: crc mode is auto. [ 1721.118796][ T10] usb 5-1: USB disconnect, device number 64 [ 1723.232825][T22203] mkiss: ax0: crc mode is auto. [ 1728.988569][T22244] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4556'. [ 1729.747450][T22244] netlink: 'syz.7.4556': attribute type 1 has an invalid length. [ 1730.260044][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.338761][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.568255][T22260] syz_tun: entered allmulticast mode [ 1730.610913][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4560'. [ 1731.024629][T22254] syz_tun: left allmulticast mode [ 1732.130413][T22269] ceph: No mds server is up or the cluster is laggy [ 1733.457473][ T5869] IPVS: starting estimator thread 0... [ 1733.487978][T22284] befs: (nbd7): No write support. Marking filesystem read-only [ 1733.559650][T22284] syz.7.4561: attempt to access beyond end of device [ 1733.559650][T22284] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1733.597910][T22285] IPVS: using max 24 ests per chain, 57600 per kthread [ 1734.122481][T22292] netlink: 'syz.6.4567': attribute type 5 has an invalid length. [ 1734.727192][T22290] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1734.762464][T22290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1734.798093][T22290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1734.838241][T22290] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1734.875490][T22290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1734.892992][T22290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1734.920952][T22290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1734.970877][T22290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1735.633778][T22298] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4568'. [ 1735.646611][T22298] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4568'. [ 1736.097397][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1736.817176][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 1736.870927][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 1736.897180][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 1736.903626][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 1736.910101][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1738.735633][T22316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4573'. [ 1739.017261][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1740.063285][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 1740.072427][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 1740.090517][T22323] ceph: No mds server is up or the cluster is laggy [ 1741.059028][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1742.419336][T22338] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1742.456144][T22338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1742.557441][T22338] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1742.574494][T22338] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1742.604375][T22338] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1742.614503][T22338] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1742.967172][T16754] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1743.156796][T16754] usb 6-1: Using ep0 maxpacket: 8 [ 1743.168571][T16754] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.210095][T16754] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1743.271825][T16754] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1743.315655][T16754] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1743.364571][T16754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.402049][T16754] usb 6-1: config 0 descriptor?? [ 1743.709317][T22366] syz_tun: entered allmulticast mode [ 1743.744788][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4585'. [ 1744.181767][T22359] syz_tun: left allmulticast mode [ 1744.228239][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 1744.422400][T16754] smartjoyplus 0003:0B43:0003.0013: ignoring exceeding usage max [ 1744.497213][T15554] Bluetooth: hci2: command 0x0406 tx timeout [ 1744.503274][T15554] Bluetooth: hci5: command 0x0406 tx timeout [ 1744.514235][T16754] smartjoyplus 0003:0B43:0003.0013: unbalanced collection at end of report description [ 1744.647180][T22371] Bluetooth: hci4: command 0x0406 tx timeout [ 1744.653304][T22371] Bluetooth: hci3: command 0x0406 tx timeout [ 1744.659534][T22371] Bluetooth: hci1: command 0x0c1a tx timeout [ 1744.667141][T22371] Bluetooth: hci0: command 0x0c1a tx timeout [ 1744.694394][T16754] smartjoyplus 0003:0B43:0003.0013: parse failed [ 1744.715928][T22345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.729754][T16754] smartjoyplus 0003:0B43:0003.0013: probe with driver smartjoyplus failed with error -22 [ 1744.941871][T22345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.597758][T22345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.813317][T22377] netlink: 'syz.7.4589': attribute type 5 has an invalid length. [ 1745.951410][T22345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.271926][ T5873] usb 6-1: USB disconnect, device number 40 [ 1746.289013][T22364] block nbd4: shutting down sockets [ 1747.425017][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4594'. [ 1748.627268][T19604] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1748.752024][T22405] syz_tun: entered allmulticast mode [ 1748.768348][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4597'. [ 1749.039834][T22401] syz_tun: left allmulticast mode [ 1749.303695][T19604] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1749.347211][T19604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1749.408713][T19604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1749.569179][T19604] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1749.578431][T19604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.586543][T19604] usb 5-1: Product: syz [ 1749.590871][T19604] usb 5-1: Manufacturer: syz [ 1749.595520][T19604] usb 5-1: SerialNumber: syz [ 1749.602164][T19604] usb 5-1: config 0 descriptor?? [ 1750.391583][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1750.406091][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1750.656542][T22414] ceph: No mds server is up or the cluster is laggy [ 1751.586795][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1751.607257][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1752.698601][T19604] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 1752.805425][T19604] usb 5-1: USB disconnect, device number 65 [ 1753.281960][T22438] mkiss: ax0: crc mode is auto. [ 1756.533787][T22453] ceph: No mds server is up or the cluster is laggy [ 1756.895286][T22468] befs: (nbd7): No write support. Marking filesystem read-only [ 1756.903760][T22468] syz.7.4608: attempt to access beyond end of device [ 1756.903760][T22468] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1757.679689][T22469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4609'. [ 1759.750207][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1760.659268][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1760.667464][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1760.920619][T22486] ceph: No mds server is up or the cluster is laggy [ 1760.977757][ T10] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1760.985296][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1761.077909][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1761.130082][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1761.169576][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.211257][ T10] usb 5-1: Product: syz [ 1761.215454][ T10] usb 5-1: Manufacturer: syz [ 1761.427119][ T10] usb 5-1: SerialNumber: syz [ 1761.448250][ T10] usb 5-1: config 0 descriptor?? [ 1763.692898][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4620'. [ 1764.180934][ T10] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 1764.333075][ T10] usb 5-1: USB disconnect, device number 66 [ 1767.076607][T22525] ceph: No mds server is up or the cluster is laggy [ 1767.324155][T22532] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4627'. [ 1767.669081][T16754] libceph: connect (1)[c::]:6789 error -101 [ 1767.681694][T16754] libceph: mon0 (1)[c::]:6789 connect error [ 1767.947795][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 1768.922305][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 1768.977243][T22533] ceph: No mds server is up or the cluster is laggy [ 1769.356698][T22551] mkiss: ax0: crc mode is auto. [ 1769.489259][T22552] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4631'. [ 1770.193342][T22558] overlayfs: missing 'lowerdir' [ 1770.243977][T22558] trusted_key: encrypted_key: insufficient parameters specified [ 1771.380855][T22571] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1779.028580][T22615] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1780.449076][ T30] audit: type=1326 audit(1741776300.996:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22620 comm="syz.5.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba78d169 code=0x7fc00000 [ 1784.608071][T22658] ceph: No mds server is up or the cluster is laggy [ 1785.443578][T22671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4667'. [ 1785.468602][T22671] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4667'. [ 1785.565691][T22671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4667'. [ 1790.661092][T22716] syz_tun: entered allmulticast mode [ 1790.957524][T22714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4679'. [ 1790.997874][T22713] syz_tun: left allmulticast mode [ 1791.715668][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.722647][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.678184][T22732] ceph: No mds server is up or the cluster is laggy [ 1795.648230][T22750] netlink: 'syz.7.4687': attribute type 3 has an invalid length. [ 1795.744131][T22750] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4687'. [ 1797.291846][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4689'. [ 1798.012124][T22766] syz_tun: entered allmulticast mode [ 1798.042191][T22766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4691'. [ 1798.460284][T22763] syz_tun: left allmulticast mode [ 1798.627380][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4692'. [ 1798.684771][T22771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4693'. [ 1798.707198][T22770] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4692'. [ 1798.747271][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4692'. [ 1804.477298][T22814] syz_tun: entered allmulticast mode [ 1804.491391][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4704'. [ 1804.523371][T22813] syz_tun: left allmulticast mode [ 1805.164174][T22818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4706'. [ 1805.173192][T22818] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4706'. [ 1805.182261][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4706'. [ 1805.711784][T22825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4708'. [ 1807.365019][T22832] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4711'. [ 1807.955973][T22844] syz_tun: entered allmulticast mode [ 1808.511705][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4715'. [ 1808.542163][T22841] syz_tun: left allmulticast mode [ 1810.000172][T22864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1810.939982][T22870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4723'. [ 1816.557334][T22911] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4732'. [ 1816.741353][T22919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4733'. [ 1816.783217][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4734'. [ 1820.439566][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4739'. [ 1821.768396][T22961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4743'. [ 1831.378194][ T31] INFO: task syz.3.4444:21835 blocked for more than 143 seconds. [ 1831.453757][ T31] Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 1831.515169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1831.543897][T23037] ALSA: mixer_oss: invalid OSS volume 'Xr~|\) }BUGbrUӲ>' [ 1831.684933][ T31] task:syz.3.4444 state:D stack:27552 pid:21835 tgid:21827 ppid:16578 task_flags:0x400040 flags:0x00004004 [ 1831.697425][ T31] Call Trace: [ 1831.700737][ T31] [ 1831.703695][ T31] __schedule+0x18bc/0x4c40 [ 1831.709751][ T31] ? __pfx___schedule+0x10/0x10 [ 1831.714643][ T31] ? __pfx_lock_release+0x10/0x10 [ 1831.719761][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1831.725691][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1831.731678][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1831.738150][ T31] ? schedule+0x90/0x320 [ 1831.744244][ T31] schedule+0x14b/0x320 [ 1831.754370][ T31] schedule_preempt_disabled+0x13/0x30 [ 1831.771068][ T31] __mutex_lock+0x817/0x1010 [ 1831.782868][ T31] ? __mutex_lock+0x602/0x1010 [ 1832.569482][ T31] ? blk_trace_startstop+0xa4/0x740 [ 1832.584045][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1832.589835][ T31] ? stack_trace_save+0x118/0x1d0 [ 1832.596520][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1832.606495][ T31] blk_trace_startstop+0xa4/0x740 [ 1832.612518][ T31] ? __pfx_blk_trace_startstop+0x10/0x10 [ 1832.626243][ T31] ? kasan_save_track+0x51/0x80 [ 1832.634228][ T31] ? kasan_save_track+0x3f/0x80 [ 1832.645550][ T31] ? kasan_save_free_info+0x40/0x50 [ 1832.658600][ T31] ? __kasan_slab_free+0x59/0x70 [ 1832.663678][ T31] ? kfree+0x196/0x430 [ 1832.672496][ T31] ? tomoyo_path_number_perm+0x5dd/0x770 [ 1832.679614][ T31] ? security_file_ioctl+0xc6/0x2a0 [ 1832.684911][ T31] ? __se_sys_ioctl+0x46/0x170 [ 1832.690909][ T31] ? do_syscall_64+0xf3/0x230 [ 1832.702948][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.710968][ T31] blk_trace_ioctl+0x19b/0x830 [ 1832.726672][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1832.736751][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1832.745043][ T31] ? tomoyo_path_number_perm+0x209/0x770 [ 1832.766613][ T31] ? tomoyo_path_number_perm+0x5dd/0x770 [ 1832.787407][T23028] block nbd7: shutting down sockets [ 1832.790050][ T31] blkdev_common_ioctl+0xe6c/0x2460 [ 1832.802007][ T31] ? __lock_acquire+0x1397/0x2100 [ 1832.809481][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1832.815203][ T31] ? tomoyo_path_number_perm+0x209/0x770 [ 1832.827049][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1832.847913][ T31] ? __asan_memset+0x23/0x50 [ 1832.861758][ T31] ? smack_file_ioctl+0x2a5/0x3b0 [ 1832.866905][ T31] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1832.872478][ T31] ? file_to_blk_mode+0xcc/0x140 [ 1832.888345][ T31] blkdev_ioctl+0x51d/0x6f0 [ 1832.893910][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1832.901710][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1832.910744][ T31] __se_sys_ioctl+0xf5/0x170 [ 1832.916546][ T31] do_syscall_64+0xf3/0x230 [ 1832.923471][ T31] ? clear_bhb_loop+0x35/0x90 [ 1832.929790][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.945192][ T31] RIP: 0033:0x7f72afd8d169 [ 1832.953118][ T31] RSP: 002b:00007f72b0c64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.962774][ T31] RAX: ffffffffffffffda RBX: 00007f72affa6160 RCX: 00007f72afd8d169 [ 1832.974954][ T31] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000006 [ 1832.984369][ T31] RBP: 00007f72afe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1833.002514][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1833.014436][ T31] R13: 0000000000000001 R14: 00007f72affa6160 R15: 00007ffca1ddc7a8 [ 1833.023917][ T31] [ 1833.035340][ T31] [ 1833.035340][ T31] Showing all locks held in the system: [ 1833.048860][ T31] 1 lock held by khungtaskd/31: [ 1833.053904][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1833.063959][ T31] 2 locks held by kworker/u8:2/36: [ 1833.070304][ T31] 2 locks held by getty/5575: [ 1833.075082][ T31] #0: ffff8880356020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1833.085520][ T31] #1: ffffc900032fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 1833.095758][ T31] 2 locks held by syz.3.4444/21834: [ 1833.101789][ T31] 1 lock held by syz.3.4444/21835: [ 1833.107368][ T31] #0: ffff8881437e5b38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0xa4/0x740 [ 1833.117652][ T31] [ 1833.120052][ T31] ============================================= [ 1833.120052][ T31] [ 1833.130568][ T31] NMI backtrace for cpu 1 [ 1833.130579][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 1833.130593][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1833.130602][ T31] Call Trace: [ 1833.130606][ T31] [ 1833.130612][ T31] dump_stack_lvl+0x241/0x360 [ 1833.130635][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1833.130648][ T31] ? __pfx__printk+0x10/0x10 [ 1833.130674][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 1833.130694][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1833.130708][ T31] ? _printk+0xd5/0x120 [ 1833.130726][ T31] ? __pfx__printk+0x10/0x10 [ 1833.130745][ T31] ? __wake_up_klogd+0xcc/0x110 [ 1833.130761][ T31] ? __pfx__printk+0x10/0x10 [ 1833.130780][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 1833.130799][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1833.130816][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1833.130834][ T31] watchdog+0x1058/0x10a0 [ 1833.130854][ T31] ? watchdog+0x1ea/0x10a0 [ 1833.130880][ T31] ? __pfx_watchdog+0x10/0x10 [ 1833.130898][ T31] kthread+0x7a9/0x920 [ 1833.130916][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.130935][ T31] ? __pfx_watchdog+0x10/0x10 [ 1833.130953][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.130970][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.130991][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.131008][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1833.131025][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 1833.131042][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.131061][ T31] ret_from_fork+0x4b/0x80 [ 1833.131077][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.131095][ T31] ret_from_fork_asm+0x1a/0x30 [ 1833.131117][ T31] [ 1833.131138][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1833.302235][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 1833.327231][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1833.334106][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 1833.344700][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1833.354784][ T31] Call Trace: [ 1833.358067][ T31] [ 1833.360988][ T31] dump_stack_lvl+0x241/0x360 [ 1833.365661][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1833.370940][ T31] ? __pfx__printk+0x10/0x10 [ 1833.375531][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1833.381513][ T31] ? vscnprintf+0x5d/0x90 [ 1833.385836][ T31] panic+0x349/0x880 [ 1833.389737][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1833.395890][ T31] ? __pfx_panic+0x10/0x10 [ 1833.400301][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1833.405664][ T31] ? __irq_work_queue_local+0x137/0x410 [ 1833.411209][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 1833.416580][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1833.422740][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1833.428900][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1833.435054][ T31] watchdog+0x1097/0x10a0 [ 1833.439385][ T31] ? watchdog+0x1ea/0x10a0 [ 1833.443806][ T31] ? __pfx_watchdog+0x10/0x10 [ 1833.448487][ T31] kthread+0x7a9/0x920 [ 1833.452576][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.457181][ T31] ? __pfx_watchdog+0x10/0x10 [ 1833.461856][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.466444][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.471047][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.475638][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1833.480832][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 1833.486028][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.490621][ T31] ret_from_fork+0x4b/0x80 [ 1833.495033][ T31] ? __pfx_kthread+0x10/0x10 [ 1833.499642][ T31] ret_from_fork_asm+0x1a/0x30 [ 1833.504411][ T31] [ 1833.507726][ T31] Kernel Offset: disabled [ 1833.512047][ T31] Rebooting in 86400 seconds..