last executing test programs: 20m19.862954014s ago: executing program 32 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) setregid(0x0, r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x7, 0x8, 0x0, 0x0, 0x6}) readv(r5, &(0x7f0000000240), 0x0) r6 = syz_open_dev$vim2m(0x0, 0xffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000480)={0x14, 0x1, 0x0, "43e191a176f79697a7746cf24b0f1367a7b9e58729635fc4ea66a59a0cd611a6", 0x3136564e}) 15m49.831405757s ago: executing program 33 (id=591): iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180600fe8000000000000000000000000000bbfe80000000000000a101b2ab511200000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="64c20000907800101e040121"], 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e21, 0x9, @mcast1, 0x5}, r5}}, 0x38) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x84, 0xc}], 0x10}, 0x41) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001100)="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", 0x46a}], 0x1}}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000003920793856697878a2a78dca4ec6c2f0a7d36ed09eb7df071a1c9488389e3e06ab240c13495ba9e4e03320bc43a9f056e52fbd09b265f49907708e6c5ca993756ece38b339784e07e46de80fe759da1a14f3aefda842e8513bf6ed48f50e15c8d7ed627e2737daf5ee760878c0f644bb", @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRESOCT=r5, @ANYRESHEX=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800040000000200000032fd00000d000000243b64110bc1f45573ced5a5ea39a3af21bf"], 0x118) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) connect$inet(r0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={r6, 0x1, 0xfffffffff0000000, 0x1000000000000}) socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x4d, 0xa, 0x1, "3258ae0bc770aa63f5040800", 0x34324948}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) 7m18.38073197s ago: executing program 34 (id=2473): open(&(0x7f0000000300)='./file2\x00', 0x0, 0xf4) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x2c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000500)={'nat\x00', 0x0, 0x0, 0x0, [0x75, 0x80000000, 0x654, 0x80000000, 0x51, 0xfffffffffffff800]}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x7) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) clock_gettime(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x400, 0x105) mknodat$loop(r3, &(0x7f0000001600)='./bus\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$KDFONTOP_GET(r4, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x1d, 0xb, 0x2, 0x0}) open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 6m27.523712138s ago: executing program 6 (id=2686): open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083ee0b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca95643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cf4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616eb4b020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edba1ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaaa6e8108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d00", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x6, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) 6m23.66564925s ago: executing program 6 (id=2701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r4, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x4e23, @broadcast}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = io_uring_setup(0x25f2, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257, 0x0, r5}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0xfffffffd}, 0x1c) io_uring_enter(r6, 0x2000000, 0x2, 0xf, 0x0, 0x0) 6m22.252533307s ago: executing program 6 (id=2706): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r5, r5], 0x2, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 6m21.613837484s ago: executing program 6 (id=2708): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x1) 6m21.375630199s ago: executing program 6 (id=2711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1801000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0x124, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x28}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcc9e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xc000, 0x6, 0x4, 0xa430, 0x8001]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x152}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x23}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x9, 0x3, 0x42, 0x7, 0x1, 0x5, 0x79, 0xf]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ad}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20008894}, 0x400) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x1c, 0x4, 0x410, 0x108, 0x0, 0x0, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x6}}}}, {{@arp={@broadcast, @loopback, 0x0, 0xffffff00, 0xfe, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0xffff, 0x4000, 0xf7fe, 0x2, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @private=0xa010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x460) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00d1140000000b010800000000000000000a00000005000100000000aaf7f05c7014ccf8020800034000000001"], 0x2c}}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x1) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x80) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) 6m19.749235623s ago: executing program 6 (id=2718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x100, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000c40)="3ce2de4d", 0x4, 0x805, 0x0, 0x0) 6m19.372335915s ago: executing program 35 (id=2718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x100, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000c40)="3ce2de4d", 0x4, 0x805, 0x0, 0x0) 5m44.901212046s ago: executing program 1 (id=2824): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/159) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001"], 0x122}}, 0x4008090) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv2(r6, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0x2}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 5m38.088699141s ago: executing program 1 (id=2842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x704, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x400c840) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r0, 0x0, 0x0, 0x80000) 5m37.201978933s ago: executing program 1 (id=2846): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) 5m35.952916968s ago: executing program 1 (id=2850): syz_emit_ethernet(0x4a, &(0x7f0000001080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 5m33.633115259s ago: executing program 1 (id=2861): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x80, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m32.492827837s ago: executing program 1 (id=2864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x704, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x400c840) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r0, 0x0, 0x0, 0x80000) 5m16.355515473s ago: executing program 36 (id=2864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x704, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x400c840) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r0, 0x0, 0x0, 0x80000) 5m11.082909736s ago: executing program 8 (id=2960): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x118, &(0x7f0000000100)={0x0, 0x2, 0x10, 0xfffffffc, 0x3a6}, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=0x1, 0xffffffffffffffff, 0x3, 0x2010, 0x0, @value}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001040)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x20, &(0x7f0000000500)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000580)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0xfffffffc, 0x0, 0x1, [], [0x9], [0x81, 0x80000001, 0xffffffff], [0x0, 0x0, 0xfffffffffffffffd, 0x3]}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97020fc80400fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000003c0)={0xe0000000}) 5m7.357446437s ago: executing program 8 (id=2977): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x40, 0x8}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5m7.235436297s ago: executing program 8 (id=2979): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x2, 0x0, "f937267f0f7ba57603a6a12e3f0a7f64c64c56"}) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000006580)={0x2020}, 0xffffff80) 5m6.212031529s ago: executing program 8 (id=2981): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) setpgid(r0, 0x0) r1 = getpgid(r0) setpgid(0x0, r1) open(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x41c201, 0x338) 5m5.797179769s ago: executing program 8 (id=2986): socket$packet(0x11, 0x3, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x7) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2001030000000e8916"], 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x3, 0x9, 0x9}) 5m5.539499678s ago: executing program 8 (id=2988): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x87}}}}}]}}]}}, 0x0) 5m5.248613172s ago: executing program 37 (id=2988): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x87}}}}}]}}]}}, 0x0) 4m37.051268723s ago: executing program 9 (id=3073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r1) socket$igmp(0x2, 0x3, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf25250000000c0005000201aaaaaaaaaaaa05002b0000000000060006000100000008000200", @ANYRES32=r3], 0x38}}, 0x10) 4m36.323825893s ago: executing program 9 (id=3076): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrusage(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) 4m34.451145952s ago: executing program 9 (id=3079): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000400000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000003"], 0x0, 0x0, 0x0}) 4m33.099475365s ago: executing program 9 (id=3085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x81, 0x2, {{0x0, 0x0, 0x0, 0x3, 0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x3b6}]}, {0xfffffffffffffce8}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040800}, 0x20044884) 4m29.063005375s ago: executing program 9 (id=3096): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m27.938068769s ago: executing program 9 (id=3099): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)="89509806d59f40", 0x0, 0xa7c}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000180)=@get={0x1, &(0x7f00000008c0)=""/253, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xa, [@func, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0x6, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0xf, 0x1}, {0xc}]}, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000004c0)={0x2, &(0x7f0000000380)=[{0x3f, 0xff, 0x8, 0xffffff3a}, {0x507, 0x8, 0x3, 0x3f}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$binfmt_script(r7, &(0x7f00000006c0)={'#! ', '', [{0x20, '/{/]\xd4#'}, {}, {}, {0x20, '\x00'}, {0x20, '@-*\\'}]}, 0x14) socket$netlink(0x10, 0x3, 0x0) 4m11.698523739s ago: executing program 38 (id=3099): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)="89509806d59f40", 0x0, 0xa7c}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000180)=@get={0x1, &(0x7f00000008c0)=""/253, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xa, [@func, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0x6, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0xf, 0x1}, {0xc}]}, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000004c0)={0x2, &(0x7f0000000380)=[{0x3f, 0xff, 0x8, 0xffffff3a}, {0x507, 0x8, 0x3, 0x3f}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$binfmt_script(r7, &(0x7f00000006c0)={'#! ', '', [{0x20, '/{/]\xd4#'}, {}, {}, {0x20, '\x00'}, {0x20, '@-*\\'}]}, 0x14) socket$netlink(0x10, 0x3, 0x0) 2m51.870350274s ago: executing program 0 (id=3430): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrusage(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, 0x0, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) 2m50.658449789s ago: executing program 0 (id=3432): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x1) 2m46.637853571s ago: executing program 0 (id=3441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000140)="24000000010006", 0x7) 2m44.007987351s ago: executing program 0 (id=3445): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) r3 = add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r2, r3) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r1, r1}, &(0x7f0000000040)=""/217, 0xd9, 0x0) 2m42.018847271s ago: executing program 0 (id=3448): rt_tgsigqueueinfo(0x0, 0x0, 0x36, &(0x7f0000000240)={0x21, 0xfffffff7, 0xe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e1cdf1c9d746bcaa9854b30731a00f236b0aa22e760f29fc5e15ebe36fbe2e1698", 0x21}], 0x1}}], 0x1, 0x20000050) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m41.539467719s ago: executing program 0 (id=3452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() r1 = socket(0x11, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3d, 0x9, 0x80000, 0x800, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) 2m23.981333419s ago: executing program 39 (id=3452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() r1 = socket(0x11, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3d, 0x9, 0x80000, 0x800, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) 25.372749599s ago: executing program 7 (id=3718): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21.720099005s ago: executing program 7 (id=3723): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=@ipv6_getmulticast={0x14, 0x3a, 0x101}, 0x14}}, 0x0) 18.841278197s ago: executing program 2 (id=3727): bpf$MAP_CREATE(0x0, 0x0, 0x0) 18.839092306s ago: executing program 7 (id=3728): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000003240)=[{{&(0x7f0000000680)=@qipcrtr, 0x80, &(0x7f0000002c40)=[{&(0x7f0000000700)=""/138, 0x8a}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000900)=""/110, 0x6e}, {&(0x7f0000000980)=""/164, 0xa4}, {&(0x7f0000000a40)=""/150, 0x96}, {&(0x7f0000000b00)=""/101, 0x65}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x9, &(0x7f0000002d00)=""/105, 0x69}, 0x6f9}, {{&(0x7f0000002d80)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003100)=[{&(0x7f0000003300)=""/132, 0x84}, {&(0x7f0000002e80)=""/141, 0x8d}, {&(0x7f0000002f40)=""/192, 0xc0}, {&(0x7f0000003000)=""/218, 0xda}, {&(0x7f0000000b80)=""/22, 0x16}], 0x5, &(0x7f0000003180)=""/133, 0x85}, 0x23d9}], 0x2, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) lsm_get_self_attr(0x68, &(0x7f0000000280)={0x0, 0x0, 0x104, 0xe4, ""/228}, &(0x7f0000000000)=0x104, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.721993555s ago: executing program 5 (id=3729): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r3 = eventfd2(0x0, 0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) setpriority(0x1, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, 0x0, 0x8f) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x0}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 17.252840541s ago: executing program 2 (id=3731): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrusage(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) 16.227842977s ago: executing program 4 (id=3733): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r3, &(0x7f0000000000)='./file1\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 16.163189103s ago: executing program 7 (id=3734): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) r4 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x40}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 14.995095709s ago: executing program 2 (id=3735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x5, 0xcb, &(0x7f0000000a00)=""/203, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000600000008000140000000170800024000000008240001800a000100726564697200000014000280080001400000001708000348000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, 0x0, 0xff2e) ioctl$TCSETA(r6, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "0b77380a49fed5c1"}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r8, &(0x7f000000af80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="86", 0xff03}], 0x1}}], 0xfffffdef, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x5141, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x3, 0x4, 0x500, 0x80000005, 0x48564, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x0, @value, @void, @void, @value}, 0x50) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) mincore(&(0x7f000082a000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/87) 14.249225503s ago: executing program 5 (id=3736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0xd8, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x28}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcc9e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xc000, 0x6, 0x4, 0xa430, 0x8001]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x152}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x23}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ad}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20008894}, 0x400) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00d1140000000b010800000000000000000a00000005000100000000aaf7f05c7014ccf8020800034000000001"], 0x2c}}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x1) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x80) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) 14.183169508s ago: executing program 4 (id=3737): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13.384710325s ago: executing program 5 (id=3738): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001e00080026bd7000fedbdf2500000000000000000000000000000000000004d402000000000000000000000000000000000000010a0000000535000008001e00020000008f0001007368613235362d61726d363400000000000000f06c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000380200001bca1dc441ec8c047a4e1021f53a2c4cdbbe17418d1e232f7c646663c3e148a2a134d5966e7d0440cae17f135bda25f41b835aadbaeb8c50780f105b48e0cbe28a894e26f257ab0008001f0001000000050019006c00000008001f0001000000"], 0xf0}}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0x19}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x448c0) 12.249444942s ago: executing program 2 (id=3739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x831}, 0x48080) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r2, 0xd08, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfbff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xb2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x40) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x670, 0x5, 0x3e8, 0x278, 0x350, 0xfeffffff, 0x0, 0xa8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key=0x3}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {0x0, 0x7}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@set={{0x40}, {{0x1, [0x4, 0x7, 0x0, 0x6, 0x2, 0xc], 0x3, 0x4}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x350}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x40, 0x17f]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) 11.35835861s ago: executing program 5 (id=3740): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) madvise(&(0x7f00000d7000/0x3000)=nil, 0x3000, 0x1) mbind(&(0x7f000036a000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)={0x94, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x61, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @random="a57c0398f3a0", {0x3, 0x4}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x40, @default, 0x61c, @val, @val, @void, @val={0x4, 0x6, {0x8, 0x9, 0x7fff, 0xf0}}, @val={0x6, 0x2, 0x4}, @val={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x8, 0xcd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x4, 0x6}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x2}}}}]}, 0x94}}, 0x0) 11.357029822s ago: executing program 3 (id=3741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240), &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000300)={{0xb}, 'port0\x00', 0x22, 0x40010, 0x9, 0x5f44dca1, 0x6, 0x9, 0x0, 0x0, 0x5, 0x7}) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050026bd7000fddbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="24002380060012000700000005001100"], 0x40}}, 0x40000) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 10.743809633s ago: executing program 7 (id=3742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) capset(&(0x7f0000000000)={0x20080522}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x9, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtaction={0x80, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x1f}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 10.692271097s ago: executing program 4 (id=3743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$kcm(0x29, 0xa, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 7.50139402s ago: executing program 7 (id=3744): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62060200) 7.435267058s ago: executing program 3 (id=3745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000300)=""/22, 0x16, 0x4) read$FUSE(r4, &(0x7f0000001300)={0x2020}, 0x2067) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000100)}, 0x20) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 6.545414474s ago: executing program 4 (id=3746): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x86783, 0x0) 6.308403838s ago: executing program 2 (id=3747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113500000000008510000002000000850000000000000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.442363388s ago: executing program 3 (id=3748): write(0xffffffffffffffff, &(0x7f0000000100)="d2de", 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0xc, &(0x7f00000000c0)={0x8000000000, 0x6}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) getrandom(0x0, 0x0, 0x600) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) 4.502077286s ago: executing program 4 (id=3749): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3450, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024094, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000000000000044d564b"]) 4.414237573s ago: executing program 5 (id=3750): clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x202}, {}], 0x20000000000000dc, 0x0, 0x0, 0xffffffa7) 3.251520645s ago: executing program 3 (id=3751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x24044810}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x3c, r3, 0xf2473ed90fb552e1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "ced67e75c6458b0b9c55e4a35ed2aaae"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x44800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[], 0x48}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 'queue0\x00', 0x2000d}) write$sndseq(r6, &(0x7f00000003c0)=[{0x84, 0x77, 0x0, 0x0, @time={0x3, 0xee}, {0x0, 0x20}, {}, @raw32={[0x2]}}, {0x10, 0xfd, 0x5, 0x3f, @tick=0x2, {0x7, 0xd}, {0x0, 0x3}, @note={0x5, 0x8, 0xb, 0x6, 0xffff}}, {0xff, 0x9, 0x40, 0x5, @time={0x1ff, 0x2894}, {0xf0, 0x2}, {0x9, 0x2}, @connect={{0x9, 0x1}, {0x5, 0x1}}}], 0x54) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="0000040000000b0f0667"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) poll(&(0x7f0000000180)=[{r9, 0x8003}, {r1, 0x400}], 0x2, 0x2be) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) 3.121990626s ago: executing program 2 (id=3752): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x21c0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbf5}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) 815.265384ms ago: executing program 4 (id=3753): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)="a3185cc3", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xed, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x5, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socket$inet6(0xa, 0x6, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 123.806343ms ago: executing program 3 (id=3754): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa43, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xf) ioctl$TIOCSETD(r1, 0x5423, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 55.689198ms ago: executing program 5 (id=3755): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "be46"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xa880}, 0xc084) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5], 0x38, 0x4800}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 0s ago: executing program 3 (id=3756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r4, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) kernel console output (not intermixed with test programs): attributes in process `syz.7.2655'. [ 1003.366922][ T5871] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1003.551429][ T5871] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 1003.622159][ T5871] usb 2-1: config 0 has no interface number 0 [ 1003.690967][ T5871] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1003.730246][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.801596][ T5871] usb 2-1: config 0 descriptor?? [ 1003.828642][ T5871] cp210x 2-1:0.9: cp210x converter detected [ 1004.055360][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2659'. [ 1004.382425][ T5871] cp210x 2-1:0.9: failed to get vendor val 0x000e size 3: -32 [ 1004.680794][ T5871] cp210x 2-1:0.9: GPIO initialisation failed: -19 [ 1005.626661][ T5871] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1005.678837][ T29] audit: type=1326 audit(948.484:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16025 comm="syz.3.2662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dfd18cde9 code=0x0 [ 1005.686474][ T5871] usb 2-1: USB disconnect, device number 50 [ 1005.777914][ T5871] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1005.811798][ T5871] cp210x 2-1:0.9: device disconnected [ 1006.219935][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2668'. [ 1007.222062][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 1007.840880][T16062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1008.847845][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2674'. [ 1009.592103][T16092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2678'. [ 1010.262411][T16094] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2679'. [ 1010.454455][ T5997] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1010.866038][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1011.003585][ T5997] usb 8-1: Using ep0 maxpacket: 16 [ 1011.047226][ T5997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.075914][ T5997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.095791][ T5997] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1011.115996][ T5997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.148273][ T5997] usb 8-1: config 0 descriptor?? [ 1011.196380][T16127] netlink: 'syz.1.2689': attribute type 2 has an invalid length. [ 1011.207270][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1012.335532][ T5997] input: HID 05ac:8241 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:05AC:8241.0018/input/input41 [ 1012.548006][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'. [ 1012.920258][ T5997] appleir 0003:05AC:8241.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 1012.990030][ T5997] usb 8-1: USB disconnect, device number 4 [ 1013.751519][T16158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2693'. [ 1016.431396][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'. [ 1017.410168][T16217] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2707'. [ 1017.692310][T16219] 9pnet_fd: Insufficient options for proto=fd [ 1018.518704][T12656] bond0: (slave syz_tun): Releasing backup interface [ 1018.677439][T16240] overlayfs: failed to clone upperpath [ 1018.946232][ T5947] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.148454][ T5947] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.423291][ T5947] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.965080][ T5947] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.115778][T16287] x_tables: unsorted underflow at hook 3 [ 1021.691033][ T5947] bridge_slave_1: left allmulticast mode [ 1021.696740][ T5947] bridge_slave_1: left promiscuous mode [ 1021.760433][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.887077][T16297] x_tables: unsorted underflow at hook 3 [ 1022.140762][ T5947] bridge_slave_0: left allmulticast mode [ 1022.553242][T16301] random: crng reseeded on system resumption [ 1023.218898][ T5947] bridge_slave_0: left promiscuous mode [ 1023.301581][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.364838][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1023.377632][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1023.395570][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1023.417375][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1023.427421][ T5824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1023.438192][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1026.108198][ T5824] Bluetooth: hci4: command tx timeout [ 1026.270239][T16346] x_tables: unsorted underflow at hook 3 [ 1026.539118][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.553586][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.570918][ T5947] bond0 (unregistering): Released all slaves [ 1026.697255][T16304] lo speed is unknown, defaulting to 1000 [ 1026.748251][T16304] lo speed is unknown, defaulting to 1000 [ 1026.877165][T16356] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2740'. [ 1026.905987][T16356] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2740'. [ 1027.208959][ T5909] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1027.356843][T16366] random: crng reseeded on system resumption [ 1028.212996][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.249470][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.287913][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.295956][ T5909] usb 2-1: Product: syz [ 1028.315367][ T5909] usb 2-1: Manufacturer: syz [ 1028.326048][ T5909] usb 2-1: SerialNumber: syz [ 1028.329187][ T5824] Bluetooth: hci4: command tx timeout [ 1029.470758][ T5947] hsr_slave_0: left promiscuous mode [ 1029.485287][T15876] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1029.496332][ T5947] hsr_slave_1: left promiscuous mode [ 1029.504524][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.517078][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.538313][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.545828][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.622896][ T5947] veth1_macvtap: left promiscuous mode [ 1029.635754][ T5947] veth0_macvtap: left promiscuous mode [ 1029.656134][T15876] usb 3-1: Using ep0 maxpacket: 8 [ 1029.668670][T15876] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1029.669715][ T5947] veth1_vlan: left promiscuous mode [ 1029.702564][T15876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.708318][ T5947] veth0_vlan: left promiscuous mode [ 1029.749542][T15876] usb 3-1: Product: syz [ 1029.765768][T15876] usb 3-1: Manufacturer: syz [ 1029.772982][T15876] usb 3-1: SerialNumber: syz [ 1029.780026][T16410] x_tables: unsorted underflow at hook 3 [ 1029.852064][T15876] usb 3-1: config 0 descriptor?? [ 1029.985851][ T5909] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1029.999211][ T5909] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1030.006927][ T5909] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1030.090218][T15876] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1031.154138][ T5824] Bluetooth: hci4: command tx timeout [ 1031.238300][ T5909] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 1031.421419][T16430] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2753'. [ 1031.431483][T16430] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2753'. [ 1031.589330][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 1031.645795][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 1031.870899][T15876] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1031.900447][T15876] usb 3-1: USB disconnect, device number 41 [ 1032.413243][T16437] random: crng reseeded on system resumption [ 1033.219057][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 1033.364805][T10478] Bluetooth: hci4: command tx timeout [ 1033.939875][ T5909] cdc_ncm 2-1:1.0 eth17: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1033.999171][ T5909] usb 2-1: USB disconnect, device number 51 [ 1034.012743][ T5909] cdc_ncm 2-1:1.0 eth17: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1034.042919][T16304] chnl_net:caif_netlink_parms(): no params data found [ 1034.084138][T16451] vlan2: entered promiscuous mode [ 1034.089240][T16451] vlan2: entered allmulticast mode [ 1034.869393][T16304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.062935][T16304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.210818][T16492] random: crng reseeded on system resumption [ 1035.784755][T16304] bridge_slave_0: entered allmulticast mode [ 1035.796878][T16304] bridge_slave_0: entered promiscuous mode [ 1035.814332][T16304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.821680][T16304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.829307][T16304] bridge_slave_1: entered allmulticast mode [ 1035.836051][T16304] bridge_slave_1: entered promiscuous mode [ 1035.915304][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2770'. [ 1036.367681][ T29] audit: type=1800 audit(977.154:226): pid=16496 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2772" name="nullb0" dev="tmpfs" ino=698 res=0 errno=0 [ 1036.605652][T16304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.644741][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 1036.663333][T16304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.766960][T16513] x_tables: unsorted underflow at hook 3 [ 1036.982132][T16517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2774'. [ 1037.240395][T16304] team0: Port device team_slave_0 added [ 1037.332994][T16304] team0: Port device team_slave_1 added [ 1037.459122][T16304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1037.526732][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.597122][T16304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1037.636546][T16304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.672242][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.743378][T16304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.886030][T16304] hsr_slave_0: entered promiscuous mode [ 1037.930244][T16304] hsr_slave_1: entered promiscuous mode [ 1038.143937][ T5871] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1038.158693][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 1038.628072][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.639366][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.731278][ T5871] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1038.799915][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.840480][ T5871] usb 8-1: config 0 descriptor?? [ 1039.336193][T16559] random: crng reseeded on system resumption [ 1040.136591][T16567] x_tables: unsorted underflow at hook 3 [ 1040.212353][T16561] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2783'. [ 1040.255208][T16561] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2783'. [ 1040.365901][T16304] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1040.470680][T16304] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1040.557530][T16304] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1041.099981][T16304] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1041.174282][ T5871] usbhid 8-1:0.0: can't add hid device: -71 [ 1041.237663][ T5871] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1041.347314][ T5871] usb 8-1: USB disconnect, device number 5 [ 1041.508837][T16304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.676416][T16304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.687578][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.694779][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.798769][T16586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2792'. [ 1042.378923][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.386043][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.714405][T16593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1043.376132][T16615] random: crng reseeded on system resumption [ 1044.123505][T16304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.569722][T16304] veth0_vlan: entered promiscuous mode [ 1045.617546][T16304] veth1_vlan: entered promiscuous mode [ 1045.642841][ T8895] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1045.816193][T16656] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2806'. [ 1046.532162][ T8895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.670927][T16304] veth0_macvtap: entered promiscuous mode [ 1046.927746][T16304] veth1_macvtap: entered promiscuous mode [ 1046.928975][ T8895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.036173][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.059430][ T8895] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1047.068511][ T8895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.072634][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.109027][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.144724][ T8895] usb 3-1: config 0 descriptor?? [ 1047.167931][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.241124][T16304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.419737][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.430732][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.529569][T16304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.553668][T16304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.072299][T16679] random: crng reseeded on system resumption [ 1048.685826][T16304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.743142][T16304] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.877787][T16304] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.886557][T16304] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.895369][T16304] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.969855][T16641] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2804'. [ 1048.994319][T16641] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2804'. [ 1049.830553][ T731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.868264][ T731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.021128][ T731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.052713][ T8895] usbhid 3-1:0.0: can't add hid device: -71 [ 1050.061840][ T8895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1050.069062][ T731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.080697][ T8895] usb 3-1: USB disconnect, device number 42 [ 1050.228406][T16709] x_tables: unsorted underflow at hook 3 [ 1050.721306][T16718] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 1050.750287][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2817'. [ 1051.617778][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2719'. [ 1051.966094][T10478] Bluetooth: hci3: Unknown advertising packet type: 0x11 [ 1051.966179][T10478] Bluetooth: hci3: Unknown advertising packet type: 0x17 [ 1053.077344][T16747] random: crng reseeded on system resumption [ 1053.665103][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.671974][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.245297][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2827'. [ 1054.444923][T16764] x_tables: unsorted underflow at hook 3 [ 1054.479573][T10220] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1054.852673][T10220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.054097][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2828'. [ 1055.074541][T10220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.194232][T10220] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1055.288752][T10220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.430275][T10220] usb 2-1: config 0 descriptor?? [ 1055.992916][T16784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2831'. [ 1056.947185][T16751] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2824'. [ 1056.990904][T16751] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2824'. [ 1058.133775][T10220] usbhid 2-1:0.0: can't add hid device: -71 [ 1058.151237][T10220] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1058.197410][T10220] usb 2-1: USB disconnect, device number 52 [ 1059.711979][T16827] random: crng reseeded on system resumption [ 1060.875871][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'. [ 1061.581598][T16857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2843'. [ 1064.389239][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2856'. [ 1065.016491][T16912] syz_tun: entered allmulticast mode [ 1065.095085][T16903] syz_tun: left allmulticast mode [ 1065.147696][ T5997] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1065.224405][T16921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2860'. [ 1066.005090][T16927] x_tables: unsorted underflow at hook 3 [ 1066.010757][ T5997] usb 9-1: Using ep0 maxpacket: 32 [ 1066.014039][ T5997] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1066.042817][ T5997] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1066.087838][ T5997] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1066.129383][ T5997] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1066.139791][ T5997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.171311][ T5997] usb 9-1: Product: syz [ 1066.187065][ T5997] usb 9-1: Manufacturer: syz [ 1066.191713][ T5997] usb 9-1: SerialNumber: syz [ 1066.264485][T16939] input: syz0 as /devices/virtual/input/input42 [ 1066.384907][T16944] Process accounting resumed [ 1066.693660][T16949] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2871'. [ 1066.710991][T16949] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2871'. [ 1066.955684][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 1067.270277][ T5997] usb 9-1: 0:2 : does not exist [ 1067.321476][ T5997] usb 9-1: USB disconnect, device number 2 [ 1067.690760][T16972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'. [ 1068.202082][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.079234][T16993] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1071.111216][T16993] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1071.149615][T16993] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 1071.962621][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2885'. [ 1073.119212][T17035] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1074.494631][T17045] overlayfs: failed to clone upperpath [ 1074.846082][ T8895] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1075.065620][ T8895] usb 8-1: config 0 has no interfaces? [ 1075.257162][ T8895] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1075.438122][ T8895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.458646][ T8895] usb 8-1: Product: syz [ 1075.463015][ T8895] usb 8-1: Manufacturer: syz [ 1075.468689][ T8895] usb 8-1: SerialNumber: syz [ 1075.495715][ T8895] usb 8-1: config 0 descriptor?? [ 1075.784675][ T5997] usb 8-1: USB disconnect, device number 6 [ 1076.122807][ T29] audit: type=1800 audit(1014.373:227): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2906" name="nullb0" dev="tmpfs" ino=698 res=0 errno=0 [ 1076.178250][T17077] x_tables: unsorted underflow at hook 3 [ 1076.992704][T10220] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1077.788854][T10220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.800759][T10220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.810775][T10220] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1077.820116][T10220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.837989][T10220] usb 3-1: config 0 descriptor?? [ 1077.976761][ T29] audit: type=1326 audit(1016.094:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17104 comm="syz.3.2915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3dfd18cde9 code=0x0 [ 1078.309193][ T8895] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1078.391371][T17116] x_tables: unsorted underflow at hook 3 [ 1078.481974][ T8895] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1078.491276][ T8895] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1078.502576][ T8895] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1078.512031][ T8895] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1078.526114][ T8895] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1078.541590][ T8895] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1078.551166][ T8895] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1078.559432][ T8895] usb 8-1: Product: syz [ 1078.564014][ T8895] usb 8-1: Manufacturer: syz [ 1078.581267][ T8895] cdc_wdm 8-1:1.0: skipping garbage [ 1078.587356][ T8895] cdc_wdm 8-1:1.0: skipping garbage [ 1078.598839][ T8895] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1078.605008][ T8895] cdc_wdm 8-1:1.0: Unknown control protocol [ 1078.978184][T10220] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0019/input/input43 [ 1078.986882][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1078.996841][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.003510][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1079.010219][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.016874][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1079.023489][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.031597][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1079.038227][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.045355][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1079.051982][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.058731][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1079.065360][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.072427][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1079.079047][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.085563][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1079.091024][T10220] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0019/input/input44 [ 1079.092174][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.110685][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1079.117308][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.123672][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1079.130291][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1079.147990][ T8895] usb 8-1: USB disconnect, device number 7 [ 1079.148045][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1079.181349][T10220] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0019/input/input45 [ 1079.220044][T17121] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1079.241839][T10220] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0019/input/input46 [ 1079.285392][T17123] Process accounting resumed [ 1079.363629][T10220] uclogic 0003:256C:006D.0019: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 1079.399783][T10220] usb 3-1: USB disconnect, device number 43 [ 1079.483272][T17127] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2922'. [ 1079.492979][T17127] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2922'. [ 1079.808826][T17131] tipc: Failed to remove unknown binding: 66,1,1/7:848994153/848994155 [ 1079.817705][T17131] tipc: Failed to remove unknown binding: 66,1,1/7:848994153/848994155 [ 1079.858166][ T8895] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1080.046899][ T8895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.060258][ T8895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.091610][ T8895] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1080.111001][ T8895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.149926][ T8895] usb 9-1: config 0 descriptor?? [ 1081.275782][T17150] netlink: 'syz.2.2929': attribute type 9 has an invalid length. [ 1081.279944][T17129] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2923'. [ 1081.380066][T17129] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2923'. [ 1081.419162][T15876] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1081.675784][T15876] usb 8-1: Using ep0 maxpacket: 8 [ 1081.729690][T17154] x_tables: unsorted underflow at hook 3 [ 1081.760184][T15876] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1081.796913][T15876] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1081.831782][T15876] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1081.852889][T15876] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1081.875672][T15876] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1081.885650][ T8895] usbhid 9-1:0.0: can't add hid device: -71 [ 1081.894871][T15876] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1081.906647][T15876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.942665][ T8895] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1081.970309][ T8895] usb 9-1: USB disconnect, device number 3 [ 1082.171496][T17168] ptrace attach of "./syz-executor exec"[5817] was attempted by " [ 1082.391885][T15876] usb 8-1: usb_control_msg returned -32 [ 1082.483003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.655152][T15876] usbtmc 8-1:16.0: can't read capabilities [ 1082.974472][T15876] usb 8-1: USB disconnect, device number 8 [ 1083.276953][T17177] netlink: 'syz.3.2935': attribute type 1 has an invalid length. [ 1083.291549][ T5953] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.315676][T17177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2935'. [ 1083.541602][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1083.553037][ T5953] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.565307][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1083.578186][ T5997] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1083.586010][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1083.598474][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1083.608553][ T5824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1083.619183][T17192] tipc: Enabling of bearer rejected, failed to enable media [ 1083.621701][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1083.686961][T17188] lo speed is unknown, defaulting to 1000 [ 1083.791149][ T5997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.813852][ T5997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.823650][ T5997] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1083.879090][ T5953] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.896828][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.940596][ T5997] usb 9-1: config 0 descriptor?? [ 1083.973865][T17188] lo speed is unknown, defaulting to 1000 [ 1084.142051][ T5953] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.407515][ T5953] vlan4: left promiscuous mode [ 1084.414525][ T5953] dummy0: left promiscuous mode [ 1084.420447][ T5953] bridge0: port 1(vlan4) entered disabled state [ 1084.451487][T17181] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2937'. [ 1084.465858][T17181] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2937'. [ 1084.505889][ T5953] xfrm0: left allmulticast mode [ 1084.595555][ T5997] usbhid 9-1:0.0: can't add hid device: -71 [ 1084.611731][ T5997] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1084.638266][ T5997] usb 9-1: USB disconnect, device number 4 [ 1084.793995][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1084.940187][ T5953] batman_adv: batadv0: Removing interface: geneve2 [ 1085.164471][ T5953] bond0 (unregistering): (slave team0): Releasing backup interface [ 1085.180707][ T5953] bond0 (unregistering): Released all slaves [ 1085.192062][ T5953] bond1 (unregistering): Released all slaves [ 1085.523944][ T5953] tipc: Left network mode [ 1085.581148][T17188] chnl_net:caif_netlink_parms(): no params data found [ 1085.877434][ T5824] Bluetooth: hci3: command tx timeout [ 1085.952615][T17261] overlayfs: failed to clone lowerpath [ 1086.007442][T17261] overlayfs: failed to clone upperpath [ 1086.101126][ T8895] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1086.520144][ T8895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.715478][ T8895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.728020][T17188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.730492][ T8895] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1086.750328][T17188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.788005][ T8895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.796320][T17188] bridge_slave_0: entered allmulticast mode [ 1086.797703][T17188] bridge_slave_0: entered promiscuous mode [ 1086.825436][ T8895] usb 8-1: config 0 descriptor?? [ 1086.826562][T17188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.842178][T17188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.861488][T17188] bridge_slave_1: entered allmulticast mode [ 1086.868497][T17188] bridge_slave_1: entered promiscuous mode [ 1087.083224][T17188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.158697][T17188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.200186][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2959'. [ 1087.332337][T17188] team0: Port device team_slave_0 added [ 1087.360002][T17259] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2953'. [ 1087.383873][T17259] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2953'. [ 1087.400700][ T5953] hsr_slave_0: left promiscuous mode [ 1087.427710][ T5953] hsr_slave_1: left promiscuous mode [ 1087.479776][ T5953] dummy0: left allmulticast mode [ 1087.492298][ T5953] veth0_macvtap: left promiscuous mode [ 1087.505094][ T5953] veth1_vlan: left promiscuous mode [ 1087.516163][ T5953] veth0_vlan: left promiscuous mode [ 1087.737617][ T29] audit: type=1800 audit(1025.233:229): pid=17281 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2958" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1088.111576][ T5824] Bluetooth: hci3: command tx timeout [ 1090.262461][T17337] overlayfs: failed to clone lowerpath [ 1090.324418][ T5824] Bluetooth: hci3: command tx timeout [ 1090.583718][T17188] team0: Port device team_slave_1 added [ 1090.630568][T17342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2974'. [ 1090.642473][T17342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2974'. [ 1090.683189][T15876] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1090.787663][T17188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.796322][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.846658][T17188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.868041][ T8895] usbhid 8-1:0.0: can't add hid device: -71 [ 1090.877443][T15876] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 1090.897124][ T8895] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1090.901149][T15876] usb 3-1: config 0 has no interface number 0 [ 1090.921717][T17188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.941346][T15876] usb 3-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=f0.4d [ 1090.948763][ T8895] usb 8-1: USB disconnect, device number 9 [ 1090.962035][T15876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.970190][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.970220][T17188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.996292][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.072825][T15876] usb 3-1: config 0 descriptor?? [ 1091.105262][T15876] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1091.261847][T17188] hsr_slave_0: entered promiscuous mode [ 1091.276298][T17188] hsr_slave_1: entered promiscuous mode [ 1091.282428][T17188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1091.364088][T17188] Cannot create hsr debugfs directory [ 1091.381551][ T8895] usb 3-1: USB disconnect, device number 44 [ 1092.214180][T17368] x_tables: unsorted underflow at hook 3 [ 1092.548577][ T5824] Bluetooth: hci3: command tx timeout [ 1092.609268][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'. [ 1092.739389][T17385] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2985'. [ 1092.751640][T17385] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2985'. [ 1092.789203][T17188] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1092.818135][T17188] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1092.838666][T17188] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1092.857062][T17188] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1093.017307][ T5953] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.162989][ T5953] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.281491][ T5953] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.779308][ T5953] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.896783][T17188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.962424][T17188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.019575][ T731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.026742][ T731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.041582][T17410] overlayfs: failed to clone upperpath [ 1094.262138][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.269312][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.273270][ T5953] bridge_slave_1: left allmulticast mode [ 1095.302110][ T5953] bridge_slave_1: left promiscuous mode [ 1095.308374][T10478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1095.319595][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.328570][T10478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1095.339920][T10478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1095.353666][T10478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1095.369312][T10478] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1095.379079][T10478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1095.399925][ T5953] bridge_slave_0: left allmulticast mode [ 1095.405748][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 1095.420403][ T5953] bridge_slave_0: left promiscuous mode [ 1095.426792][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.701452][ T5910] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1095.851051][ T5997] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1095.883671][ T5910] usb 8-1: Using ep0 maxpacket: 8 [ 1095.890221][ T5910] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1095.899543][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.910488][ T5910] usb 8-1: config 0 descriptor?? [ 1096.044148][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.055848][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.066468][ T5997] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1096.076769][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.088413][ T5997] usb 3-1: config 0 descriptor?? [ 1096.114795][ T5953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.127615][ T5953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.139686][ T5953] bond0 (unregistering): Released all slaves [ 1096.270868][T17430] lo speed is unknown, defaulting to 1000 [ 1096.287588][T17430] lo speed is unknown, defaulting to 1000 [ 1096.434719][T17460] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3000'. [ 1096.487115][T17460] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3000'. [ 1096.559916][ T5997] usbhid 3-1:0.0: can't add hid device: -71 [ 1096.566003][ T5997] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1096.622810][ T5997] usb 3-1: USB disconnect, device number 45 [ 1096.690297][T17188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.932585][ T5953] hsr_slave_0: left promiscuous mode [ 1096.952217][ T5953] hsr_slave_1: left promiscuous mode [ 1096.959009][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.969923][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.986839][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.994392][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.050693][ T5953] veth1_macvtap: left promiscuous mode [ 1097.060336][ T5953] veth0_macvtap: left promiscuous mode [ 1097.068417][ T5953] veth1_vlan: left promiscuous mode [ 1097.077270][ T5953] veth0_vlan: left promiscuous mode [ 1097.593850][ T5824] Bluetooth: hci4: command tx timeout [ 1098.168352][ T5910] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1098.188033][ T5910] asix 8-1:0.0: probe with driver asix failed with error -71 [ 1098.200578][ T5910] usb 8-1: USB disconnect, device number 10 [ 1098.724431][ T5953] team0 (unregistering): Port device team_slave_1 removed [ 1098.864357][ T5953] team0 (unregistering): Port device team_slave_0 removed [ 1099.814847][T17512] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1099.825304][ T5824] Bluetooth: hci4: command tx timeout [ 1099.836710][T17512] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1100.163330][T17509] tipc: Enabling of bearer rejected, failed to enable media [ 1100.277085][T10220] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1100.353714][T17188] veth0_vlan: entered promiscuous mode [ 1100.379407][T17188] veth1_vlan: entered promiscuous mode [ 1100.492646][T10220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.506342][T17430] chnl_net:caif_netlink_parms(): no params data found [ 1100.513869][T10220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.524722][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1100.544532][T10220] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1100.554271][T10220] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.567485][T10220] usb 8-1: config 0 descriptor?? [ 1100.585257][T17188] veth0_macvtap: entered promiscuous mode [ 1100.606342][T17188] veth1_macvtap: entered promiscuous mode [ 1100.707026][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.717692][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.728678][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.739571][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.954209][T17188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1102.056752][T10220] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 1102.062180][ T5824] Bluetooth: hci4: command tx timeout [ 1102.092719][T10220] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 1102.177879][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.242064][T10220] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 1102.319889][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.319924][T10220] cm6533_jd 0003:0D8C:0022.001A: No inputs registered, leaving [ 1102.361940][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.377660][T17516] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3010'. [ 1102.400253][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.401000][T10220] cm6533_jd 0003:0D8C:0022.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 1102.411118][T17516] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3010'. [ 1102.446809][T17188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.000057][T17188] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.034476][T17188] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.056038][T17188] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.184346][T17188] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.231347][T17430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.755461][T10220] usb 8-1: USB disconnect, device number 11 [ 1103.915030][T17430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.922816][T17430] bridge_slave_0: entered allmulticast mode [ 1104.005963][T17430] bridge_slave_0: entered promiscuous mode [ 1104.050445][T17430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.079732][T17430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.087321][T17430] bridge_slave_1: entered allmulticast mode [ 1104.102814][T17430] bridge_slave_1: entered promiscuous mode [ 1104.198208][T17430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.226839][T17430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.265137][ T5824] Bluetooth: hci4: command tx timeout [ 1104.388227][T17430] team0: Port device team_slave_0 added [ 1104.538704][T17430] team0: Port device team_slave_1 added [ 1104.565478][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.315627][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.448299][T17430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.464523][T17430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.499645][T17430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.534707][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3026'. [ 1105.535105][T17430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.555048][T17430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.585054][T17430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.695737][T17590] bond0: (slave bond_slave_1): Releasing backup interface [ 1105.831426][ T731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.877286][ T731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.895600][T17430] hsr_slave_0: entered promiscuous mode [ 1105.924130][T17430] hsr_slave_1: entered promiscuous mode [ 1108.211316][T17635] overlayfs: failed to clone upperpath [ 1108.978155][T17661] x_tables: unsorted underflow at hook 3 [ 1109.475735][T17653] syzkaller0: entered promiscuous mode [ 1109.481267][T17653] syzkaller0: entered allmulticast mode [ 1110.531437][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'. [ 1110.857681][T17680] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1113.692360][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3049'. [ 1114.066432][T17430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1114.098657][T17430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1114.990673][T17430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1115.110582][T17430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1115.867658][T17430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.923198][T17430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.936827][T17620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.943975][T17620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.974250][T17620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.981415][T17620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.772839][ T29] audit: type=1326 audit(1052.397:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17734 comm="syz.9.3056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88f918cde9 code=0x0 [ 1116.987158][T17430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.066792][T17746] vlan2: entered promiscuous mode [ 1117.078939][T17746] hsr_slave_1: entered promiscuous mode [ 1117.087153][T17746] vlan2: entered allmulticast mode [ 1117.092526][T17746] hsr_slave_1: entered allmulticast mode [ 1117.223325][T17430] veth0_vlan: entered promiscuous mode [ 1117.239370][T17430] veth1_vlan: entered promiscuous mode [ 1118.210971][T17430] veth0_macvtap: entered promiscuous mode [ 1118.230364][T17430] veth1_macvtap: entered promiscuous mode [ 1118.256259][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.304764][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.323546][T17762] GUP no longer grows the stack in syz.9.3061 (17762): 400000003000-40000000a000 (400000001000) [ 1118.335071][T17762] CPU: 0 UID: 0 PID: 17762 Comm: syz.9.3061 Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 1118.335100][T17762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1118.335117][T17762] Call Trace: [ 1118.335122][T17762] [ 1118.335130][T17762] dump_stack_lvl+0x241/0x360 [ 1118.335183][T17762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1118.335204][T17762] ? __pfx__printk+0x10/0x10 [ 1118.335226][T17762] ? find_vma+0xf9/0x170 [ 1118.335256][T17762] __get_user_pages+0x3b07/0x4140 [ 1118.335288][T17762] ? mark_lock+0x9a/0x360 [ 1118.335334][T17762] ? __pfx___get_user_pages+0x10/0x10 [ 1118.335353][T17762] ? __gup_longterm_locked+0xd2f/0x17f0 [ 1118.335376][T17762] ? __pfx_down_read_killable+0x10/0x10 [ 1118.335401][T17762] ? __pfx_lock_acquire+0x10/0x10 [ 1118.335422][T17762] ? try_get_folio+0xf1/0x6f0 [ 1118.335440][T17762] ? __pfx_lock_release+0x10/0x10 [ 1118.335472][T17762] __gup_longterm_locked+0xe64/0x17f0 [ 1118.335507][T17762] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1118.335528][T17762] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1118.335548][T17762] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 1118.335571][T17762] gup_fast_fallback+0x2266/0x29c0 [ 1118.335616][T17762] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1118.335634][T17762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.335690][T17762] ? is_valid_gup_args+0x124/0x200 [ 1118.335721][T17762] pin_user_pages_fast+0xcc/0x160 [ 1118.335745][T17762] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1118.335764][T17762] ? rcu_is_watching+0x15/0xb0 [ 1118.335781][T17762] ? trace_kmalloc+0x1f/0xd0 [ 1118.335803][T17762] ? rds_info_getsockopt+0x20c/0x600 [ 1118.335825][T17762] rds_info_getsockopt+0x22e/0x600 [ 1118.335844][T17762] ? __might_fault+0xaa/0x120 [ 1118.335864][T17762] ? __pfx_lock_release+0x10/0x10 [ 1118.335889][T17762] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1118.335914][T17762] ? __might_fault+0xc6/0x120 [ 1118.335935][T17762] ? rds_getsockopt+0x2ae/0x530 [ 1118.335958][T17762] ? __pfx_rds_getsockopt+0x10/0x10 [ 1118.335982][T17762] do_sock_getsockopt+0x38e/0x740 [ 1118.336011][T17762] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1118.336031][T17762] ? __fget_files+0x2a/0x410 [ 1118.336049][T17762] ? __fget_files+0x395/0x410 [ 1118.336065][T17762] ? __fget_files+0x2a/0x410 [ 1118.336089][T17762] __x64_sys_getsockopt+0x2a1/0x370 [ 1118.336119][T17762] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1118.336141][T17762] ? do_syscall_64+0x100/0x230 [ 1118.336161][T17762] ? do_syscall_64+0xb6/0x230 [ 1118.336179][T17762] do_syscall_64+0xf3/0x230 [ 1118.336198][T17762] ? clear_bhb_loop+0x35/0x90 [ 1118.336221][T17762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.336241][T17762] RIP: 0033:0x7f88f918cde9 [ 1118.336265][T17762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1118.336278][T17762] RSP: 002b:00007f88f9f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1118.336296][T17762] RAX: ffffffffffffffda RBX: 00007f88f93a5fa0 RCX: 00007f88f918cde9 [ 1118.336308][T17762] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000006 [ 1118.336319][T17762] RBP: 00007f88f920e2a0 R08: 0000400000000040 R09: 0000000000000000 [ 1118.336330][T17762] R10: 0000400000000580 R11: 0000000000000246 R12: 0000000000000000 [ 1118.336340][T17762] R13: 0000000000000000 R14: 00007f88f93a5fa0 R15: 00007ffca3c11d08 [ 1118.336370][T17762] [ 1118.376122][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.380940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1118.385504][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.800428][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3062'. [ 1118.847169][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.858395][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.010213][T17430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.422821][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.429447][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.739047][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.759975][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.785447][T17784] overlayfs: failed to get inode (-116) [ 1119.791942][T17784] overlayfs: failed to get inode (-116) [ 1119.952296][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.059786][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.287656][T17430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.337587][T17430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.363184][T17430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.425799][T17430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.452719][T17430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.471647][T17430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.480813][T17430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.528876][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 1120.656235][T17796] openvswitch: netlink: Actions may not be safe on all matching packets [ 1121.134542][T17616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.146081][T17616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.211585][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.273244][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.522861][T17808] Process accounting resumed [ 1122.182018][T17822] x_tables: unsorted underflow at hook 3 [ 1124.334256][ T29] audit: type=1326 audit(1059.441:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17852 comm="syz.7.3082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc60e78cde9 code=0x0 [ 1126.036204][T17873] Process accounting resumed [ 1126.328017][T17876] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3085'. [ 1126.399249][T17876] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3085'. [ 1126.457100][T17876] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3085'. [ 1126.658031][T17871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1126.679686][T17871] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1126.775828][T17890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3088'. [ 1126.928775][T17871] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1127.134496][T17871] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1127.494433][T17871] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1127.639549][T17871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1127.646751][T17871] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1127.747754][T17871] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1128.661971][T17903] xt_addrtype: ipv6 does not support BROADCAST matching [ 1128.796163][T17907] x_tables: unsorted underflow at hook 3 [ 1128.811894][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 1129.152376][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 1129.836974][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 1131.119613][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 1131.390678][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 1131.721480][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3101'. [ 1131.867695][ T5910] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1132.049370][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 1132.060172][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 1132.072931][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1132.102857][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1132.136166][ T5910] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1132.145255][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.167149][ T5910] usb 3-1: Product: syz [ 1132.171353][ T5910] usb 3-1: Manufacturer: syz [ 1132.175961][ T5910] usb 3-1: SerialNumber: syz [ 1132.212328][ T5910] usb 3-1: config 0 descriptor?? [ 1132.236757][ T5910] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1132.263176][ T5910] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1133.045834][ T5910] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1133.077679][ T5910] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1133.599641][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 1134.077737][ T5910] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1134.953491][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 1135.393978][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1135.461425][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1135.476432][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1135.492118][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1135.535932][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1135.573249][T18006] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1135.577480][ T5910] usb 3-1: USB disconnect, device number 46 [ 1135.588046][T18006] Process accounting resumed [ 1136.315076][ T5910] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1136.486039][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 1136.524873][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.559382][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.603705][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1136.654807][ T5910] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 1136.677033][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.716760][ T5910] usb 3-1: config 0 descriptor?? [ 1136.961903][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 1137.129551][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1137.186172][ T5910] usb 3-1: USB disconnect, device number 47 [ 1137.712741][ T29] audit: type=1800 audit(1071.891:232): pid=18052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.3122" name="bus" dev="overlay" ino=635 res=0 errno=0 [ 1138.334739][T18080] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1138.343428][T18080] Process accounting resumed [ 1138.807510][T18095] overlayfs: failed to clone upperpath [ 1140.214711][T18115] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1142.314089][T18148] vlan2: entered allmulticast mode [ 1142.319243][T18148] bond0: entered allmulticast mode [ 1142.355191][T18148] bond_slave_0: entered allmulticast mode [ 1142.367019][T18148] bond_slave_1: entered allmulticast mode [ 1142.388782][T18148] bridge0: port 3(vlan2) entered blocking state [ 1142.408343][T18148] bridge0: port 3(vlan2) entered disabled state [ 1142.906469][T18148] vlan2: entered promiscuous mode [ 1142.921882][T18148] bond0: entered promiscuous mode [ 1142.927300][T18148] bond_slave_0: entered promiscuous mode [ 1142.964615][T18148] bond_slave_1: entered promiscuous mode [ 1142.977320][T18148] bridge0: port 3(vlan2) entered blocking state [ 1142.985294][T18148] bridge0: port 3(vlan2) entered forwarding state [ 1143.261654][T18177] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1143.268228][T18177] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1143.288640][T18177] vhci_hcd vhci_hcd.0: Device attached [ 1143.328230][ T5824] Bluetooth: hci4: ISO packet for unknown connection handle 1024 [ 1143.337455][T18179] vhci_hcd: connection closed [ 1143.348042][T17616] vhci_hcd: stop threads [ 1143.381451][T17616] vhci_hcd: release socket [ 1143.385930][T17616] vhci_hcd: disconnect device [ 1143.933015][T18197] Process accounting resumed [ 1144.392445][T18202] overlayfs: failed to clone upperpath [ 1145.193458][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3160'. [ 1145.619245][T18236] Process accounting resumed [ 1147.679171][T16694] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1148.717173][T16694] usb 8-1: Using ep0 maxpacket: 16 [ 1148.735694][T16694] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1148.750247][T16694] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1149.101853][T16694] usb 8-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1149.110063][T16694] usb 8-1: Product: syz [ 1149.135826][T16694] usb 8-1: Manufacturer: syz [ 1149.140479][T16694] usb 8-1: SerialNumber: syz [ 1149.157426][T16694] usb 8-1: config 0 descriptor?? [ 1149.383969][T18255] input: syz1 as /devices/virtual/input/input47 [ 1149.538033][T16694] usb 8-1: selecting invalid altsetting 1 [ 1149.580279][ T5947] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.606283][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'. [ 1149.652091][T10478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1149.665130][T10478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1149.674076][T10478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1149.688195][T10478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1149.696218][T10478] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1149.704180][T16694] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1149.713639][T10478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1149.726082][T16694] usb 8-1: USB disconnect, device number 12 [ 1149.850133][T18282] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1149.859533][T18282] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1149.915187][T18273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.929853][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1149.960904][T18273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.071169][ T5947] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.205901][T18273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.222007][T18273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.316143][ T5947] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.349711][T18294] team0: entered promiscuous mode [ 1150.359342][T18294] team_slave_0: entered promiscuous mode [ 1150.367460][T18294] team_slave_1: entered promiscuous mode [ 1150.400640][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3177'. [ 1150.462443][T18273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.480102][T18273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.583815][ T5947] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.583933][T18304] xt_hashlimit: max too large, truncated to 1048576 [ 1150.640231][T18306] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1150.772765][T18309] Process accounting resumed [ 1150.934622][T18294] hsr_slave_1 (unregistering): left promiscuous mode [ 1151.087429][T18273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.091009][T18312] x_tables: unsorted underflow at hook 3 [ 1151.118312][T18273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.194935][T18277] lo speed is unknown, defaulting to 1000 [ 1151.214022][T18293] team0: left promiscuous mode [ 1151.239687][T18293] team_slave_0: left promiscuous mode [ 1151.271787][T18293] team_slave_1: left promiscuous mode [ 1151.294968][T18277] lo speed is unknown, defaulting to 1000 [ 1151.606709][T18273] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.642725][T18273] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.680529][ T5947] bridge_slave_1: left allmulticast mode [ 1151.686217][ T5947] bridge_slave_1: left promiscuous mode [ 1151.731214][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.758347][ T5947] bridge_slave_0: left allmulticast mode [ 1151.785920][ T5947] bridge_slave_0: left promiscuous mode [ 1151.791672][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.005479][ T5824] Bluetooth: hci3: command tx timeout [ 1153.610420][ T8798] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1153.744213][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.757234][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.770434][T18353] x_tables: unsorted underflow at hook 3 [ 1153.771579][ T5947] bond0 (unregistering): Released all slaves [ 1153.782620][ T8798] usb 8-1: device descriptor read/64, error -71 [ 1153.804630][T18273] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.815819][T18273] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.928539][T18273] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.937412][T18273] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.041799][ T8798] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1154.109200][T18273] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1154.128768][T18273] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.210330][ T8798] usb 8-1: device descriptor read/64, error -71 [ 1154.221687][ T5824] Bluetooth: hci3: command tx timeout [ 1154.346653][T18358] Process accounting resumed [ 1154.361655][ T8798] usb usb8-port1: attempt power cycle [ 1154.752541][ T8798] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1154.804111][ T8798] usb 8-1: device descriptor read/8, error -71 [ 1154.869144][T18363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.959496][ T5947] hsr_slave_0: left promiscuous mode [ 1154.989561][ T5947] hsr_slave_1: left promiscuous mode [ 1155.000176][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.024418][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.033383][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.041918][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.091881][ T8798] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1155.094533][ T5947] veth1_macvtap: left promiscuous mode [ 1155.110165][ T5947] veth0_macvtap: left promiscuous mode [ 1155.117535][ T5947] veth1_vlan: left promiscuous mode [ 1155.125655][ T5947] veth0_vlan: left promiscuous mode [ 1155.130836][ T8798] usb 8-1: device descriptor read/8, error -71 [ 1155.248413][ T8798] usb usb8-port1: unable to enumerate USB device [ 1155.365773][ T5910] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1155.536909][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 1155.556972][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1155.587720][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1155.613619][ T5910] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1155.632960][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.646841][ T5910] usb 3-1: Product: syz [ 1155.651138][ T5910] usb 3-1: Manufacturer: syz [ 1155.665086][ T5910] usb 3-1: SerialNumber: syz [ 1155.671834][ T5910] usb 3-1: config 0 descriptor?? [ 1155.831129][ T5910] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1155.857423][ T5910] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1156.045843][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 1156.139607][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 1156.435235][ T5824] Bluetooth: hci3: command tx timeout [ 1156.518286][ T5910] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1156.530973][ T5910] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1156.677500][T18385] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1156.689741][T18385] Process accounting resumed [ 1156.940241][ T29] audit: type=1800 audit(1089.944:233): pid=18389 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.3204" name="bus" dev="overlay" ino=229 res=0 errno=0 [ 1157.540706][T18277] chnl_net:caif_netlink_parms(): no params data found [ 1157.671075][T18363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.716633][ T5910] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1157.738102][T18394] x_tables: unsorted underflow at hook 3 [ 1157.880239][T18363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.939042][ T5910] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1157.952392][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1157.963066][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1157.971396][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1157.978677][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1157.985984][ T5910] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1158.004379][ T5910] usb 3-1: USB disconnect, device number 48 [ 1158.172114][T18363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.196996][T18277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.212280][T18277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.270616][T18277] bridge_slave_0: entered allmulticast mode [ 1158.288708][T18277] bridge_slave_0: entered promiscuous mode [ 1158.317818][T18277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.325121][T18277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.354469][T18277] bridge_slave_1: entered allmulticast mode [ 1158.424407][T18277] bridge_slave_1: entered promiscuous mode [ 1158.678797][ T5824] Bluetooth: hci3: command tx timeout [ 1158.705813][T18277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.820782][T18403] x_tables: unsorted underflow at hook 3 [ 1158.888210][T18277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.329641][T18277] team0: Port device team_slave_0 added [ 1159.370129][T18277] team0: Port device team_slave_1 added [ 1159.427370][T18363] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.466195][T18363] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.646407][T18409] x_tables: unsorted underflow at hook 3 [ 1160.049417][T18363] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.108324][T18277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.119770][T18277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.147005][T18277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.170757][T18277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.185128][T18277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.429405][T18277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.695077][T18363] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.817106][ T29] audit: type=1326 audit(1093.592:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1160.851299][T18277] hsr_slave_0: entered promiscuous mode [ 1160.989383][T18277] hsr_slave_1: entered promiscuous mode [ 1161.042651][ T29] audit: type=1326 audit(1093.592:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1161.043010][T18277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1161.365298][T18277] Cannot create hsr debugfs directory [ 1161.425277][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'. [ 1161.456175][ T29] audit: type=1326 audit(1093.611:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1161.482912][ T29] audit: type=1326 audit(1093.620:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1161.607973][ T29] audit: type=1326 audit(1093.620:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1161.639994][ T29] audit: type=1326 audit(1093.751:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1161.846704][T18431] x_tables: unsorted underflow at hook 3 [ 1162.055275][ T29] audit: type=1326 audit(1093.751:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1162.190953][ T29] audit: type=1326 audit(1093.863:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1162.281957][ T29] audit: type=1326 audit(1094.041:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1162.432294][ T29] audit: type=1326 audit(1094.041:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1162.898510][ T29] audit: type=1326 audit(1094.041:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1162.932026][ T29] audit: type=1326 audit(1094.041:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1163.025512][T18441] x_tables: unsorted underflow at hook 3 [ 1163.433364][ T29] audit: type=1326 audit(1094.135:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1163.552581][ T29] audit: type=1326 audit(1094.135:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1163.621155][ T29] audit: type=1326 audit(1094.135:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5b18cde9 code=0x7ffc0000 [ 1163.715952][T18449] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3223'. [ 1164.989635][T18465] x_tables: unsorted underflow at hook 3 [ 1165.221028][T18467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 1165.361487][T16694] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1165.561542][T16694] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.626869][T16694] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1165.707382][T16694] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1165.781391][T16694] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1165.831668][T16694] usb 8-1: SerialNumber: syz [ 1166.043219][T18277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1166.087216][T16694] usb 8-1: 0:2 : does not exist [ 1166.095572][T16694] usb 8-1: unit 255 not found! [ 1166.132864][T18277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1166.202170][T16694] usb 8-1: USB disconnect, device number 17 [ 1166.216551][T18277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1166.258084][T18277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1166.368901][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3241'. [ 1166.386215][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3241'. [ 1166.405107][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1166.448285][T18277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.448836][T18491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3241'. [ 1166.496451][T18277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.519436][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.526622][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.569547][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.576724][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.601906][T18491] nbd0: detected capacity change from 0 to 256 [ 1166.620577][ T5824] block nbd0: Receive control failed (result -104) [ 1166.781209][T18495] overlayfs: failed to clone upperpath [ 1167.142648][T18277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.635994][T18539] x_tables: unsorted underflow at hook 3 [ 1169.170041][T18277] veth0_vlan: entered promiscuous mode [ 1169.240210][T18277] veth1_vlan: entered promiscuous mode [ 1169.339668][T18277] veth0_macvtap: entered promiscuous mode [ 1169.363659][T18277] veth1_macvtap: entered promiscuous mode [ 1169.420498][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.477308][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.487198][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.552100][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.601157][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.620524][T18570] Process accounting resumed [ 1169.621887][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.670789][T18277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.711320][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.754089][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.798798][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.830194][ T5872] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1169.858534][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.874883][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.904356][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.118285][T18277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.172861][ T5872] usb 3-1: device descriptor read/64, error -71 [ 1170.206716][T18277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.220197][T18277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.282681][T18277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.338374][T18277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.429882][ T5872] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1170.685622][ T5872] usb 3-1: device descriptor read/64, error -71 [ 1170.901915][ T5872] usb usb3-port1: attempt power cycle [ 1170.981958][ T731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.011376][ T731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.196650][T18602] x_tables: unsorted underflow at hook 3 [ 1171.243083][ T731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.509164][ T5872] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1171.685327][ T5872] usb 3-1: device descriptor read/8, error -71 [ 1171.946701][ T731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.172192][ T5872] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1172.207443][ T5872] usb 3-1: device descriptor read/8, error -71 [ 1172.443865][ T5872] usb usb3-port1: unable to enumerate USB device [ 1172.959857][T18644] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1173.045501][T18651] Process accounting resumed [ 1174.569265][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1174.955346][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 1175.055887][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1175.102420][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1175.145427][ T5909] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1175.176492][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.196277][ T5909] usb 5-1: Product: syz [ 1175.212700][ T5909] usb 5-1: Manufacturer: syz [ 1175.233320][ T5909] usb 5-1: SerialNumber: syz [ 1175.250765][ T5909] usb 5-1: config 0 descriptor?? [ 1175.268942][ T5909] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1175.289479][ T5909] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1175.442035][T18697] overlayfs: failed to clone upperpath [ 1176.379798][T18707] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1176.481666][ T5909] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1176.521032][T18712] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1176.534804][ T5909] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1177.399531][ T5909] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1177.410024][ T5871] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1177.585238][ T5871] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.611714][ T5871] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1177.632273][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.657923][ T5871] usb 8-1: config 0 descriptor?? [ 1177.699431][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 1178.101247][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 1178.876615][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1178.892792][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 1178.902015][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1178.909998][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 1179.115989][ T5909] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1179.131716][ T5909] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1179.782604][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 1180.182432][ T5909] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1180.199907][ T5909] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1180.223720][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 1180.233791][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 1180.369329][ T5909] usb 5-1: USB disconnect, device number 9 [ 1180.413550][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 1180.644813][ T5871] pwc: recv_control_msg error -71 req 02 val 2400 [ 1180.719104][ T5871] pwc: recv_control_msg error -71 req 02 val 2600 [ 1180.756113][T18766] netfs: Couldn't get user pages (rc=-14) [ 1180.783437][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 1180.831133][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 1180.894266][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 1180.997195][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 1181.124833][ T5871] pwc: Registered as video103. [ 1181.162763][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input48 [ 1181.216734][ T5871] usb 8-1: USB disconnect, device number 18 [ 1182.210069][ T8798] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1182.447399][ T8798] usb 5-1: Using ep0 maxpacket: 8 [ 1182.932077][ T8798] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1183.043723][ T8798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.161943][ T8798] usb 5-1: Product: syz [ 1183.238968][ T8798] usb 5-1: Manufacturer: syz [ 1183.246374][ T8798] usb 5-1: SerialNumber: syz [ 1183.263223][ T8798] usb 5-1: config 0 descriptor?? [ 1183.362403][T18802] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1183.443722][T18800] Process accounting resumed [ 1183.521387][ T8798] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1183.700159][ T5824] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 1183.792401][T18815] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1183.812461][T18815] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1184.981772][T18851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3315'. [ 1185.028377][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.040962][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.279878][ T8798] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1185.297512][ T8798] usb 5-1: USB disconnect, device number 10 [ 1185.942491][T18865] Process accounting resumed [ 1188.011088][ T5824] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1188.037386][ T5824] Bluetooth: hci4: Injecting HCI hardware error event [ 1188.072484][T10478] Bluetooth: hci4: hardware error 0x00 [ 1188.139786][T18900] Cache volume key already in use (9p,(null),) [ 1188.437122][T18921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3328'. [ 1188.457284][ T8798] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1188.615363][T18926] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1188.652704][ T8798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.776197][ T8798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.803422][T18928] program syz.2.3330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1188.897767][ T8798] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1188.936362][ T8798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.027996][ T8798] usb 8-1: config 0 descriptor?? [ 1189.440220][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3335'. [ 1189.717244][ T8798] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 1189.732150][ T8798] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 1189.744644][ T8798] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.001B/input/input49 [ 1189.761353][ T8798] cm6533_jd 0003:0D8C:0022.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 1190.173831][T18908] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3324'. [ 1190.222983][T18908] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3324'. [ 1190.309965][T10478] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1190.406543][T18960] x_tables: unsorted underflow at hook 3 [ 1190.629289][ T25] usb 8-1: USB disconnect, device number 19 [ 1192.259247][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1192.803234][T18995] Process accounting resumed [ 1193.614355][T19010] x_tables: unsorted underflow at hook 3 [ 1194.138014][T19014] vivid-003: ================= START STATUS ================= [ 1194.148987][T19014] vivid-003: Radio HW Seek Mode: Bounded [ 1194.156497][T19014] vivid-003: Radio Programmable HW Seek: false [ 1194.163272][T19014] vivid-003: RDS Rx I/O Mode: Block I/O [ 1194.172172][T19014] vivid-003: Generate RBDS Instead of RDS: false [ 1194.178962][T19014] vivid-003: RDS Reception: true [ 1194.184501][T19014] vivid-003: RDS Program Type: 0 inactive [ 1194.198196][T19014] vivid-003: RDS PS Name: inactive [ 1194.223240][T19014] vivid-003: RDS Radio Text: inactive [ 1194.232789][T19014] vivid-003: RDS Traffic Announcement: false inactive [ 1194.241202][T19014] vivid-003: RDS Traffic Program: false inactive [ 1194.252044][T19014] vivid-003: RDS Music: false inactive [ 1194.258748][T19014] vivid-003: ================== END STATUS ================== [ 1197.182871][T19054] Process accounting resumed [ 1197.839441][ T25] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1198.877859][T19055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3357'. [ 1199.378965][ T42] block nbd0: Possible stuck request ffff888025dae000: control (read@0,4096B). Runtime 30 seconds [ 1199.458074][ T25] usb 8-1: device descriptor read/all, error -71 [ 1199.621663][T19072] x_tables: unsorted underflow at hook 3 [ 1200.182796][T19078] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3363'. [ 1202.205933][T19099] Process accounting resumed [ 1203.826182][ T5874] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1204.068083][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.108030][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.133851][ T5874] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1204.147582][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.167995][ T5874] usb 3-1: config 0 descriptor?? [ 1204.681221][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 1204.705870][ T5874] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1204.787537][ T5874] usb 3-1: USB disconnect, device number 53 [ 1205.098007][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1205.266205][T19158] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 1207.579640][T19184] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1208.644007][T19190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3384'. [ 1210.744414][ T8798] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1210.929137][ T8798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.955625][ T8798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.994127][ T8798] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1211.823561][ T8798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.837456][ T8798] usb 3-1: config 0 descriptor?? [ 1212.855744][ T8798] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1212.886905][ T8798] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1213.370394][T19210] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3391'. [ 1213.373255][ T8798] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001C/input/input50 [ 1213.415807][T19210] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3391'. [ 1213.461924][ T8798] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1213.882290][ T25] usb 3-1: USB disconnect, device number 54 [ 1214.254334][T19273] 9pnet_fd: Insufficient options for proto=fd [ 1214.717696][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3400'. [ 1217.576427][T19305] TCP: out of memory -- consider tuning tcp_mem [ 1219.480198][T19326] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1219.489897][T19326] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1220.006517][T19336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3414'. [ 1220.572940][T19343] x_tables: unsorted underflow at hook 3 [ 1221.078563][T19356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3418'. [ 1221.091303][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1221.262958][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 1221.299015][ T5871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.430905][ T5871] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1221.564224][ T5871] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.704677][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.713481][ T5871] usb 5-1: Product: syz [ 1221.717669][ T5871] usb 5-1: Manufacturer: syz [ 1221.722439][ T5871] usb 5-1: SerialNumber: syz [ 1221.949149][T19347] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1222.032791][T19370] netlink: 'syz.2.3420': attribute type 11 has an invalid length. [ 1222.041138][T19370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3420'. [ 1223.313178][T19347] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1223.630223][T19347] netlink: 'syz.4.3417': attribute type 1 has an invalid length. [ 1223.658136][T16694] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1223.690916][T19347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1223.755821][T19398] bond1: (slave gretap1): making interface the new active one [ 1223.764869][T19398] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1223.778015][ T5871] cdc_ncm 5-1:1.0: failed to get mac address [ 1223.790399][ T5871] cdc_ncm 5-1:1.0: bind() failure [ 1223.811841][ T5871] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1223.829729][ T5871] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1223.841745][ T5871] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1223.860583][T16694] usb 8-1: Using ep0 maxpacket: 16 [ 1223.878015][ T5871] usb 5-1: USB disconnect, device number 11 [ 1223.890868][T16694] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.942569][T16694] usb 8-1: config 0 has no interfaces? [ 1224.136947][T19407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1224.224669][T16694] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1224.544792][T16694] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.552848][T16694] usb 8-1: Product: syz [ 1224.582640][T16694] usb 8-1: Manufacturer: syz [ 1224.608716][T16694] usb 8-1: SerialNumber: syz [ 1224.637605][T16694] usb 8-1: config 0 descriptor?? [ 1224.988673][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3428'. [ 1225.090175][ T5871] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1225.428570][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.464185][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.496023][ T5871] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1225.505106][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.526633][ T5871] usb 5-1: config 0 descriptor?? [ 1225.755076][T15876] usb 8-1: USB disconnect, device number 22 [ 1226.574187][ T5871] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 1226.606627][ T5871] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 1226.633478][ T5871] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.001D/input/input51 [ 1226.671725][ T5871] cm6533_jd 0003:0D8C:0022.001D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1226.920303][T19412] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3427'. [ 1226.950062][T19412] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3427'. [ 1227.720789][T19442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1228.041613][T19445] random: crng reseeded on system resumption [ 1228.717596][ T5871] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 1230.682178][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3436'. [ 1230.694069][T19467] nbd: must specify a device to reconfigure [ 1230.823363][T15876] usb 5-1: USB disconnect, device number 12 [ 1231.138850][T16694] hid-generic 0000:0003:0000.001E: unknown main item tag 0x0 [ 1231.298437][T16694] hid-generic 0000:0003:0000.001E: unknown main item tag 0x0 [ 1231.333342][T16694] hid-generic 0000:0003:0000.001E: hidraw1: HID v0.00 Device [syz0] on syz1 [ 1231.526170][ T42] block nbd0: Possible stuck request ffff888025dae000: control (read@0,4096B). Runtime 60 seconds [ 1231.653932][T19482] syz.2.3437: attempt to access beyond end of device [ 1231.653932][T19482] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1231.672653][T19482] SQUASHFS error: Failed to read block 0x0: -5 [ 1231.680231][T19482] unable to read squashfs_super_block [ 1231.697852][ T5824] Bluetooth: hci5: command 0x1003 tx timeout [ 1231.699313][T10478] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1231.958124][T15876] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1232.242389][T15876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.400034][T15876] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1232.409510][T15876] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1232.418676][T15876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.454784][T15876] usb 5-1: config 0 descriptor?? [ 1235.504666][T19481] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3439'. [ 1236.027485][T19481] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3439'. [ 1236.252860][T19509] macsec0: entered promiscuous mode [ 1236.394354][T19509] macsec1: entered allmulticast mode [ 1236.443363][T19509] macsec0: entered allmulticast mode [ 1236.450321][T19509] veth1_macvtap: entered allmulticast mode [ 1236.680627][T16694] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1236.872854][T16694] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.907831][ T8798] usb 5-1: USB disconnect, device number 13 [ 1236.932935][T16694] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.004819][T16694] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1237.065157][T16694] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.299072][T16694] usb 8-1: config 0 descriptor?? [ 1237.358477][T19547] openvswitch: netlink: IP tunnel TTL not specified. [ 1238.906041][T16694] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 1238.923484][T16694] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 1238.932670][T16694] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.001F/input/input52 [ 1238.960474][T16694] cm6533_jd 0003:0D8C:0022.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 1239.157134][T19515] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3446'. [ 1239.306764][T19515] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3446'. [ 1239.996620][T16694] usb 8-1: USB disconnect, device number 23 [ 1241.411050][T19588] x_tables: unsorted underflow at hook 3 [ 1247.918472][T19651] x_tables: unsorted underflow at hook 3 [ 1248.247804][T19658] x_tables: unsorted underflow at hook 3 [ 1250.687738][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1250.698205][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1252.914978][T19702] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1252.953602][T19702] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1252.973157][T19677] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 1258.767455][T19743] x_tables: unsorted underflow at hook 3 [ 1260.505012][ T5195] udevd[5195]: worker [15061] /devices/virtual/block/nbd0 is taking a long time [ 1261.140226][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1261.237654][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1261.247554][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1261.356775][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1261.364658][ T5824] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1261.372000][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1262.743624][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3497'. [ 1263.140792][T19776] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3498'. [ 1263.148583][T19755] lo speed is unknown, defaulting to 1000 [ 1263.149908][T19776] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3498'. [ 1263.168199][T19755] lo speed is unknown, defaulting to 1000 [ 1263.787265][ T42] block nbd0: Possible stuck request ffff888025dae000: control (read@0,4096B). Runtime 90 seconds [ 1264.805566][ T5824] Bluetooth: hci5: command tx timeout [ 1267.030816][ T5824] Bluetooth: hci5: command tx timeout [ 1267.480493][T19802] (syz.7.3503,19802,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1267.489914][T19802] (syz.7.3503,19802,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1268.395506][T19755] chnl_net:caif_netlink_parms(): no params data found [ 1269.369429][T19818] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1269.378226][ T5824] Bluetooth: hci5: command tx timeout [ 1269.515774][T19818] kvm: pic: non byte read [ 1269.969927][T19755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.006648][T19755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.020554][T19755] bridge_slave_0: entered allmulticast mode [ 1270.054709][T19755] bridge_slave_0: entered promiscuous mode [ 1270.064930][T19755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.072170][T19755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.081021][T19755] bridge_slave_1: entered allmulticast mode [ 1270.089561][T19755] bridge_slave_1: entered promiscuous mode [ 1270.140293][ T25] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1270.169219][T19755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.191410][T19755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.287099][T19755] team0: Port device team_slave_0 added [ 1270.345428][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1270.373377][T19755] team0: Port device team_slave_1 added [ 1270.384379][ T25] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1270.412466][ T25] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1270.442007][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1270.551420][ T25] usb 3-1: config 1 has no interface number 0 [ 1270.658611][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1271.194349][ T25] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1271.231608][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3512'. [ 1271.426399][ T25] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1271.479181][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.551832][ T5824] Bluetooth: hci5: command tx timeout [ 1271.676157][ T25] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1271.788247][T19755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.808521][T19755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.897602][T19755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.920351][ T25] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1272.005508][T19755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.038245][T19755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.103381][T19755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.942652][T19755] hsr_slave_0: entered promiscuous mode [ 1272.949123][T19755] hsr_slave_1: entered promiscuous mode [ 1272.988114][T19755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1273.008269][ T47] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1273.058674][T19755] Cannot create hsr debugfs directory [ 1273.860292][ C1] hrtimer: interrupt took 32483 ns [ 1273.983513][ T5909] usb 3-1: USB disconnect, device number 55 [ 1274.013583][ T5909] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1275.256670][T19902] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3522'. [ 1275.640206][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'. [ 1278.726369][T19936] Cache volume key already in use (9p,(null),) [ 1281.522797][T19966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3536'. [ 1283.521612][T19755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1283.580731][T19755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1283.619981][T19755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1283.653803][T19755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1285.297842][T19755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.422921][T19755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.492882][T17621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.499977][T17621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.546507][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.553624][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.718282][T19755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.377175][T20047] tmpfs: Bad value for 'mpol' [ 1292.233188][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.233188][T20085] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1292.247754][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.247754][T20085] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1292.261315][T20085] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1292.273369][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.273369][T20085] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1292.286593][T20085] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1292.296242][T20085] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1292.303917][T20085] UDF-fs: Scanning with blocksize 512 failed [ 1292.313828][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.313828][T20085] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1292.329507][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.329507][T20085] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1292.343046][T20085] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1292.353331][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.353331][T20085] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1292.366562][T20085] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1292.376100][T20085] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1292.383815][T20085] UDF-fs: Scanning with blocksize 1024 failed [ 1292.392010][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.392010][T20085] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1292.405708][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.405708][T20085] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1292.418927][T20085] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1292.429225][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.429225][T20085] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1292.442619][T20085] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1292.452178][T20085] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1292.459788][T20085] UDF-fs: Scanning with blocksize 2048 failed [ 1292.467857][T20085] syz.2.3556: attempt to access beyond end of device [ 1292.467857][T20085] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1292.483649][T20085] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1292.493929][T20085] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1292.503574][T20085] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1292.511291][T20085] UDF-fs: Scanning with blocksize 4096 failed [ 1292.517490][T20085] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1292.614039][T19755] veth0_vlan: entered promiscuous mode [ 1292.652057][T19755] veth1_vlan: entered promiscuous mode [ 1292.681023][T20081] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3559'. [ 1292.714244][T20081] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3559'. [ 1292.758368][T19755] veth0_macvtap: entered promiscuous mode [ 1292.805479][T19755] veth1_macvtap: entered promiscuous mode [ 1292.896916][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.961459][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.018326][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.057986][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.089671][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.295399][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.306928][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.373738][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.278380][T19755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.320831][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.407705][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.484670][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.536384][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.576515][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.629801][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.657649][T19755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.679272][T19755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.697658][T19755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.015891][T20111] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 1295.076870][T19755] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.088335][T19755] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.113479][T19755] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.316880][T19755] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.658456][ T42] block nbd0: Possible stuck request ffff888025dae000: control (read@0,4096B). Runtime 120 seconds [ 1297.573187][T17616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.616578][T17616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.740771][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.801298][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.880656][ T47] libceph: connect (1)[c::]:6789 error -101 [ 1298.032891][T20146] ceph: No mds server is up or the cluster is laggy [ 1298.041640][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 1298.980183][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3570'. [ 1299.659507][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 1300.822412][T20174] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3574'. [ 1301.406868][T20174] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3574'. [ 1302.633361][T20188] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3578'. [ 1303.269827][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3577'. [ 1304.013224][T20204] ip6t_rpfilter: unknown options [ 1306.421894][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'. [ 1306.877781][T20242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3590'. [ 1306.905166][ T5997] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1307.832865][T20241] openvswitch: netlink: Actions may not be safe on all matching packets [ 1307.923433][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.108955][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.122542][ T5997] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1308.139075][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.169865][ T5997] usb 5-1: config 0 descriptor?? [ 1310.657488][ T5824] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1311.085299][ T5824] Bluetooth: hci3: Injecting HCI hardware error event [ 1311.097851][ T5824] Bluetooth: hci3: hardware error 0x00 [ 1311.558436][ T5997] usbhid 5-1:0.0: can't add hid device: -71 [ 1312.646891][ T5997] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1312.705566][ T5997] usb 5-1: USB disconnect, device number 14 [ 1313.653005][ T5824] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1313.745698][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1314.395138][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3602'. [ 1316.370262][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1316.376664][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1323.539709][T20366] xt_hashlimit: max too large, truncated to 1048576 [ 1323.547085][T20366] xt_limit: Overflow, try lower: 0/0 [ 1323.978849][T20373] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1324.163993][T20373] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1324.762413][T20373] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1324.822524][ T8798] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1324.844023][T20373] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1325.004866][ T8798] usb 6-1: Using ep0 maxpacket: 8 [ 1325.059216][T20373] geneve2: entered promiscuous mode [ 1325.080059][ T8798] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1325.091034][ T8798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.099149][ T8798] usb 6-1: Product: syz [ 1325.816734][ T8798] usb 6-1: Manufacturer: syz [ 1325.821655][ T8798] usb 6-1: SerialNumber: syz [ 1325.839200][ T8798] usb 6-1: config 0 descriptor?? [ 1325.935212][T20373] geneve2: entered allmulticast mode [ 1326.052528][ T8798] usb 6-1: can't set config #0, error -71 [ 1326.077989][ T8798] usb 6-1: USB disconnect, device number 38 [ 1326.257692][T20393] netlink: 'syz.7.3623': attribute type 4 has an invalid length. [ 1329.381568][ T42] block nbd0: Possible stuck request ffff888025dae000: control (read@0,4096B). Runtime 150 seconds [ 1329.420685][T20421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.077849][T20439] x_tables: unsorted underflow at hook 3 [ 1331.565498][T16694] kernel write not supported for file /cpu/0/msr (pid: 16694 comm: kworker/0:0) [ 1332.400181][ T29] audit: type=1326 audit(1254.098:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.3636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ed098cde9 code=0x0 [ 1333.534837][T20489] xt_cgroup: path and classid specified [ 1334.261561][T20465] kvm: kvm [20464]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1334.561131][T20499] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x33524742, 8, 0, 0, 0) [ 1337.701064][T20534] x_tables: unsorted underflow at hook 3 [ 1349.795914][T20599] program syz.2.3664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1349.827214][T20599] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1349.850035][ T5874] kernel read not supported for file /rfkill (pid: 5874 comm: kworker/0:4) [ 1350.042659][T20599] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1350.198504][T20599] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1352.520494][T20599] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1352.532660][T20599] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1353.963849][T20690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3680'. [ 1354.846268][T20695] batman_adv: batadv0: Adding interface: vxlan0 [ 1354.888938][T20695] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 1355.396838][T20712] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1358.154919][T20733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3688'. [ 1359.084316][T20748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1360.683839][ T29] audit: type=1326 audit(1280.551:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20755 comm="syz.4.3694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ed098cde9 code=0x0 [ 1361.523724][ T42] block nbd0: Possible stuck request ffff888025dae000: control (read@0,4096B). Runtime 180 seconds [ 1364.686626][T20801] x_tables: unsorted underflow at hook 3 [ 1364.993659][T20811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 1366.261392][T20824] random: crng reseeded on system resumption [ 1375.747435][T20879] random: crng reseeded on system resumption [ 1376.595929][ T5195] udevd[5195]: worker [15061] /devices/virtual/block/nbd0 timeout; kill it [ 1376.734349][ T5195] udevd[5195]: seq 20702 '/devices/virtual/block/nbd0' killed [ 1378.325748][T20900] x_tables: unsorted underflow at hook 3 [ 1382.146860][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1382.153249][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1384.420102][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3732'. [ 1385.266928][T20953] random: crng reseeded on system resumption [ 1386.912789][T20965] veth0_to_team: entered promiscuous mode [ 1386.918680][T20965] veth0_to_team: entered allmulticast mode [ 1387.197428][T20968] bio_check_eod: 2 callbacks suppressed [ 1387.197446][T20968] syz.2.3739: attempt to access beyond end of device [ 1387.197446][T20968] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1387.216817][T20968] vxfs: unable to read disk superblock at 1 [ 1387.228057][T20968] syz.2.3739: attempt to access beyond end of device [ 1387.228057][T20968] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1387.252017][T20968] vxfs: unable to read disk superblock at 8 [ 1387.258359][T20968] vxfs: can't find superblock. [ 1390.078318][T20981] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3742'. [ 1390.087380][T20981] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3742'. [ 1393.213193][T20998] trusted_key: encrypted_key: insufficient parameters specified [ 1393.826215][ T42] block nbd0: Possible stuck request ffff888025dae000: control (read@0,4096B). Runtime 210 seconds [ 1396.534686][T21020] lo speed is unknown, defaulting to 1000 [ 1396.542608][T21020] lo speed is unknown, defaulting to 1000 [ 1398.480506][ T30] INFO: task syz.0.3452:19545 blocked for more than 143 seconds. [ 1398.534342][ T30] Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 1398.568831][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1398.649390][ T30] task:syz.0.3452 state:D stack:25712 pid:19545 tgid:19541 ppid:17430 task_flags:0x400140 flags:0x00004004 [ 1398.722602][ T30] Call Trace: [ 1398.725951][ T30] [ 1398.769561][ T30] __schedule+0x18bc/0x4c40 [ 1398.774141][ T30] ? __pfx___schedule+0x10/0x10 [ 1398.779021][ T30] ? __pfx_lock_release+0x10/0x10 [ 1398.879952][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1398.885908][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1398.953829][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1399.021541][ T30] ? schedule+0x90/0x320 [ 1399.025853][ T30] schedule+0x14b/0x320 [ 1399.103490][ T30] schedule_preempt_disabled+0x13/0x30 [ 1399.109014][ T30] __mutex_lock+0x817/0x1010 [ 1399.153842][ T30] ? __mutex_lock+0x602/0x1010 [ 1399.172136][ T30] ? sync_bdevs+0x1ae/0x340 [ 1399.196158][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1399.224315][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1399.264773][ T30] ? __pfx_lock_release+0x10/0x10 [ 1399.269862][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 1399.291237][ T30] ? iput+0x3be/0xa50 [ 1399.295573][ T30] sync_bdevs+0x1ae/0x340 [ 1399.299944][ T30] ksys_sync+0xe2/0x1c0 [ 1399.311505][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1399.316388][ T30] __do_sys_sync+0xe/0x20 [ 1399.320747][ T30] do_syscall_64+0xf3/0x230 [ 1399.325281][ T30] ? clear_bhb_loop+0x35/0x90 [ 1399.346643][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.374239][ T30] RIP: 0033:0x7f6892f8cde9 [ 1399.378715][ T30] RSP: 002b:00007f6893d8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1399.388653][ T30] RAX: ffffffffffffffda RBX: 00007f68931a6080 RCX: 00007f6892f8cde9 [ 1399.401795][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1399.432367][ T30] RBP: 00007f68931a6080 R08: 0000000000000000 R09: 0000000000000000 [ 1399.440496][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.478009][ T30] R13: 0000000000000000 R14: 00007f68931a6080 R15: 00007ffde0c035d8 [ 1399.492086][ T30] [ 1399.496118][ T30] [ 1399.496118][ T30] Showing all locks held in the system: [ 1399.504320][ T30] 1 lock held by khungtaskd/30: [ 1399.517780][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1399.527756][ T30] 2 locks held by getty/5585: [ 1399.753038][ T30] #0: ffff888031ab30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1399.762877][ T30] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 1399.779974][ T30] 3 locks held by kworker/0:5/5909: [ 1399.788559][ T30] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 1399.965058][ T30] #1: ffffc900044e7c60 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 1400.011171][ T30] #2: ffffffff8eb3e300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1400.030459][ T30] 2 locks held by kworker/u8:13/5953: [ 1400.040180][ T30] 1 lock held by udevd/15061: [ 1400.045358][ T30] #0: ffff888025cb94c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 1400.054877][ T30] 3 locks held by kworker/u8:8/17621: [ 1400.076118][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 1400.088009][ T30] #1: ffffc900048efc60 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 1400.099970][ T30] #2: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 1400.111749][ T30] 1 lock held by syz.0.3452/19545: [ 1400.120554][ T30] #0: ffff888025cb94c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 1400.133779][ T30] 2 locks held by syz.5.3755/21041: [ 1400.141567][ T30] #0: ffffffff8ff25fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1400.151996][ T30] #1: ffffffff8ee051e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 1400.162627][ T30] 1 lock held by syz.4.3753/21056: [ 1400.167906][ T30] #0: ffffffff8fec1f08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x706/0x1340 [ 1400.228744][ T30] [ 1400.232296][ T30] ============================================= [ 1400.232296][ T30] [ 1400.244340][ T30] NMI backtrace for cpu 0 [ 1400.244356][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 1400.244374][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1400.244383][ T30] Call Trace: [ 1400.244389][ T30] [ 1400.244395][ T30] dump_stack_lvl+0x241/0x360 [ 1400.244418][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1400.244434][ T30] ? __pfx__printk+0x10/0x10 [ 1400.244465][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1400.244493][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1400.244513][ T30] ? _printk+0xd5/0x120 [ 1400.244532][ T30] ? __pfx__printk+0x10/0x10 [ 1400.244556][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1400.244575][ T30] ? __pfx__printk+0x10/0x10 [ 1400.244597][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1400.244616][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1400.244635][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1400.244669][ T30] watchdog+0x1058/0x10a0 [ 1400.244690][ T30] ? watchdog+0x1ea/0x10a0 [ 1400.244712][ T30] ? __pfx_watchdog+0x10/0x10 [ 1400.244731][ T30] kthread+0x7a9/0x920 [ 1400.244749][ T30] ? __pfx_kthread+0x10/0x10 [ 1400.244768][ T30] ? __pfx_watchdog+0x10/0x10 [ 1400.244787][ T30] ? __pfx_kthread+0x10/0x10 [ 1400.244804][ T30] ? __pfx_kthread+0x10/0x10 [ 1400.244826][ T30] ? __pfx_kthread+0x10/0x10 [ 1400.244843][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1400.244858][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1400.244874][ T30] ? __pfx_kthread+0x10/0x10 [ 1400.244895][ T30] ret_from_fork+0x4b/0x80 [ 1400.244912][ T30] ? __pfx_kthread+0x10/0x10 [ 1400.244932][ T30] ret_from_fork_asm+0x1a/0x30 [ 1400.244962][ T30] [ 1400.408617][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1400.413872][ C1] NMI backtrace for cpu 1 [ 1400.413886][ C1] CPU: 1 UID: 0 PID: 21045 Comm: dhcpcd-run-hook Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 1400.413903][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1400.413913][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1400.413938][ C1] Code: 8b 3d 84 fb 91 0c 48 89 de 5b e9 a3 61 59 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 00 d5 03 00 65 8b 15 10 1d 42 7e 81 e2 00 01 ff 00 [ 1400.413951][ C1] RSP: 0018:ffffc900132576f8 EFLAGS: 00000283 [ 1400.413965][ C1] RAX: ffffffff821d521f RBX: 0000000000000012 RCX: ffff88804fbc5a00 [ 1400.413976][ C1] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 000000000000001f [ 1400.413985][ C1] RBP: ffffc90013257988 R08: ffffffff821d51eb R09: 1ffffd4000073988 [ 1400.413997][ C1] R10: dffffc0000000000 R11: fffff94000073989 R12: ffffc90013257760 [ 1400.414008][ C1] R13: 000000000000008e R14: 0000000000000012 R15: dffffc0000000000 [ 1400.414018][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1400.414030][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1400.414040][ C1] CR2: 00005573a0c91131 CR3: 000000000e938000 CR4: 00000000003526f0 [ 1400.414053][ C1] DR0: 0000000000000006 DR1: 0000000000003609 DR2: 000000000000029f [ 1400.414063][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1400.414072][ C1] Call Trace: [ 1400.414077][ C1] [ 1400.414083][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1400.414106][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1400.414127][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1400.414148][ C1] ? nmi_handle+0x2a/0x5a0 [ 1400.414174][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1400.414191][ C1] ? nmi_handle+0x14f/0x5a0 [ 1400.414210][ C1] ? nmi_handle+0x2a/0x5a0 [ 1400.414230][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1400.414248][ C1] ? default_do_nmi+0x63/0x160 [ 1400.414268][ C1] ? exc_nmi+0x123/0x1f0 [ 1400.414288][ C1] ? end_repeat_nmi+0xf/0x53 [ 1400.414310][ C1] ? free_pages_and_swap_cache+0x2cb/0x690 [ 1400.414329][ C1] ? free_pages_and_swap_cache+0x2ff/0x690 [ 1400.414348][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1400.414366][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1400.414385][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1400.414403][ C1] [ 1400.414408][ C1] [ 1400.414412][ C1] free_pages_and_swap_cache+0x2ff/0x690 [ 1400.414434][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1400.414465][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1400.414487][ C1] ? tlb_table_flush+0x365/0x410 [ 1400.414509][ C1] tlb_flush_mmu+0x3a3/0x680 [ 1400.414528][ C1] ? __pfx_down_write+0x10/0x10 [ 1400.414548][ C1] tlb_finish_mmu+0xd4/0x200 [ 1400.414568][ C1] exit_mmap+0x52a/0xd40 [ 1400.414588][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1400.414610][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1400.414634][ C1] ? uprobe_clear_state+0x271/0x290 [ 1400.414655][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 1400.414674][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1400.414692][ C1] __mmput+0x115/0x410 [ 1400.414707][ C1] exit_mm+0x220/0x310 [ 1400.414732][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1400.414748][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1400.414762][ C1] ? taskstats_exit+0x326/0xa60 [ 1400.414784][ C1] do_exit+0x9ad/0x28e0 [ 1400.414806][ C1] ? __pfx_do_exit+0x10/0x10 [ 1400.414822][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1400.414843][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1400.414866][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1400.414879][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1400.414895][ C1] do_group_exit+0x207/0x2c0 [ 1400.414916][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1400.414934][ C1] x64_sys_call+0x26a8/0x26b0 [ 1400.414950][ C1] do_syscall_64+0xf3/0x230 [ 1400.414967][ C1] ? clear_bhb_loop+0x35/0x90 [ 1400.414988][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.415006][ C1] RIP: 0033:0x7f56be8fba90 [ 1400.415018][ C1] Code: Unable to access opcode bytes at 0x7f56be8fba66. [ 1400.415025][ C1] RSP: 002b:00007ffe4ddcd4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1400.415040][ C1] RAX: ffffffffffffffda RBX: 00005573a0c85910 RCX: 00007f56be8fba90 [ 1400.415050][ C1] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 1400.415062][ C1] RBP: 00007ffe4ddcd818 R08: 00005573a0c85c58 R09: ae814953d4bacf1c [ 1400.415073][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4ddcd810 [ 1400.415083][ C1] R13: 00007ffe4ddcd820 R14: 0000557383d0c169 R15: 00007f56beaf8a80 [ 1400.415100][ C1] [ 1400.860439][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1400.867312][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00228-g04f41cbf03ec #0 [ 1400.877908][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1400.887975][ T30] Call Trace: [ 1400.891258][ T30] [ 1400.894192][ T30] dump_stack_lvl+0x241/0x360 [ 1400.898971][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1400.904190][ T30] ? __pfx__printk+0x10/0x10 [ 1400.908773][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1400.914749][ T30] ? vscnprintf+0x5d/0x90 [ 1400.919072][ T30] panic+0x349/0x880 [ 1400.922958][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1400.929112][ T30] ? __pfx_panic+0x10/0x10 [ 1400.933515][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1400.938874][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1400.944416][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1400.949782][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1400.955929][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1400.962084][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1400.968230][ T30] watchdog+0x1097/0x10a0 [ 1400.972556][ T30] ? watchdog+0x1ea/0x10a0 [ 1400.976975][ T30] ? __pfx_watchdog+0x10/0x10 [ 1400.981648][ T30] kthread+0x7a9/0x920 [ 1400.985712][ T30] ? __pfx_kthread+0x10/0x10 [ 1400.990292][ T30] ? __pfx_watchdog+0x10/0x10 [ 1400.994960][ T30] ? __pfx_kthread+0x10/0x10 [ 1400.999536][ T30] ? __pfx_kthread+0x10/0x10 [ 1401.004119][ T30] ? __pfx_kthread+0x10/0x10 [ 1401.008697][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1401.013880][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1401.019065][ T30] ? __pfx_kthread+0x10/0x10 [ 1401.023645][ T30] ret_from_fork+0x4b/0x80 [ 1401.028056][ T30] ? __pfx_kthread+0x10/0x10 [ 1401.032634][ T30] ret_from_fork_asm+0x1a/0x30 [ 1401.037396][ T30] [ 1401.040641][ T30] Kernel Offset: disabled [ 1401.044952][ T30] Rebooting in 86400 seconds..