last executing test programs: 5m3.082415717s ago: executing program 32 (id=423): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x101, 0x1) r1 = syz_open_procfs(0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="2fe75b0a7a789e899d432a351a7241033b66df731ff1c2c55c980fa24f72ab8a8bb4ef745c7491121eb6dc5238f52dbcacb128182ce6db87ca2a5fa5dccab8c6d47e058061177bf7004b537c3f6bad4f9300e957bcfe397a00318d55895d1bf58c3d00"/110, 0x6e, 0x2004c840, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x9}, 0x8) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) 4m51.595697151s ago: executing program 33 (id=466): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x404e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kcmp(r2, r2, 0x3, r1, r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x75394b00, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) poll(0x0, 0x0, 0x1d) writev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f", 0x81}, {&(0x7f00000012c0)="361880853a70294931a79d1451eaa604703c25909bb1e9fac5d8a149d894f3950f32a11202b51f30d8c727a4ecd53f466a002eb67964e39b014ebbd9228f09", 0x3f}], 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 4m24.34095429s ago: executing program 34 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xcc}}, 0x0) 4m14.871461769s ago: executing program 35 (id=595): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x84) 4m6.816591828s ago: executing program 36 (id=626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe) sendmsg(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x28}}, 0x0) faccessat(r3, &(0x7f0000000140)='./file0\x00', 0x102) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) close(r4) fcntl$setsig(r3, 0xa, 0x21) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3m51.976246329s ago: executing program 7 (id=663): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023"], 0xe8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x5410, &(0x7f00000010c0)=""/4096) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 3m50.80134137s ago: executing program 7 (id=666): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4) 3m48.938462978s ago: executing program 7 (id=671): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000100)={0x2, 0x1, 0x1c, 0xf, 0x195, &(0x7f00000006c0)="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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m47.637594169s ago: executing program 7 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m47.514904806s ago: executing program 7 (id=675): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r0}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 3m47.193113561s ago: executing program 7 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 3m46.104645733s ago: executing program 37 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 2m0.448007115s ago: executing program 2 (id=1034): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) fgetxattr(r0, &(0x7f0000000100)=@known='system.posix_acl_access\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x2000000, 0x92, 0xb49, 0x9, 0x8, 0xfffffffc, 0x3}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x40000) writev(r7, &(0x7f0000000600)=[{&(0x7f0000000140)}], 0x1) fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x448000, 0x0) 1m58.441862765s ago: executing program 8 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESDEC, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x10000, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1m57.42762767s ago: executing program 8 (id=1043): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdc, 0xe, 0xb3, 0x20, 0xbfd, 0x3, 0xb54a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x20, 0x0, 0x2, 0xbf, 0x76, 0xbc, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x4, 0x5, 0x8}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x4, 0x9, 0x5}}]}}]}}]}}, 0x0) 1m57.306271509s ago: executing program 2 (id=1044): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)}, 0x41) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4) 1m56.019103676s ago: executing program 2 (id=1048): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000140)=ANY=[@ANYRESDEC]) 1m55.888084481s ago: executing program 2 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m55.79495561s ago: executing program 8 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x80ff}, {{0x0, 0x0, 0x0}, 0x20010000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000400)=""/255, 0xff}, {&(0x7f0000000340)=""/173, 0xad}], 0x7}, 0x7}], 0x4, 0x20, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x880) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={@local, @local, 0x19, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="070000000400000008", @ANYRESDEC], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048801}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655c, 0x4) r6 = dup2(r5, r5) write$tun(r6, 0x0, 0x46) 1m55.792358039s ago: executing program 2 (id=1051): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 1m55.512324018s ago: executing program 2 (id=1052): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfffffffd}]}]}]}, 0x3c}}, 0x0) 1m54.856081296s ago: executing program 38 (id=1052): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfffffffd}]}]}]}, 0x3c}}, 0x0) 1m53.820188856s ago: executing program 8 (id=1057): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0xc, 0x400000000001, 0x7, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 1m52.563253831s ago: executing program 8 (id=1062): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000680)) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x400c010}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0x7, 0x0, 0x0, 0x80]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x7f, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000200)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000040)={r12}) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.317093738s ago: executing program 8 (id=1067): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x10001, 0x8, 0x8001}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 1m38.046333787s ago: executing program 1 (id=1108): listen(0xffffffffffffffff, 0x50) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 1m37.56292721s ago: executing program 1 (id=1109): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) dup2(r1, r0) pwrite64(r0, &(0x7f0000000d40)='@', 0x1, 0x1) 1m36.392124862s ago: executing program 1 (id=1112): getpid() mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) 1m36.348620331s ago: executing program 1 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m36.283026782s ago: executing program 1 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 1m36.212841179s ago: executing program 39 (id=1067): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x10001, 0x8, 0x8001}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 1m35.870226287s ago: executing program 1 (id=1118): listen(0xffffffffffffffff, 0x50) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 1m35.438830601s ago: executing program 40 (id=1118): listen(0xffffffffffffffff, 0x50) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 1m4.072348767s ago: executing program 5 (id=1217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x8) 1m2.596125174s ago: executing program 5 (id=1221): socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x85, 0x0, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0x52, 0x20, 0x16dc, 0x15, 0x8453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x0, 0xf8, 0x9d, 0x1e, 0xfe}}]}}]}}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) readv(r2, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 57.490208772s ago: executing program 5 (id=1232): ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000003c0)={0x78, 0x3000, 0x0, 0xffffffffffffffff, 0x4}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400200010000100000000b40d0011"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 57.325148937s ago: executing program 5 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 57.206175555s ago: executing program 5 (id=1237): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) semctl$SETVAL(r0, 0x4, 0x10, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x1a00408, &(0x7f0000000080)=ANY=[]) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000130a01010000000000000000000000001800034000000008"], 0x1c}}, 0x40880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100004, 0x81) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0000000110001"], 0xe0}}, 0x40400c4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) 56.723999017s ago: executing program 5 (id=1241): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4) 56.060008398s ago: executing program 41 (id=1241): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4) 34.331323651s ago: executing program 6 (id=1340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x80001) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086a"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) socket$packet(0x11, 0x2, 0x300) 33.288383756s ago: executing program 6 (id=1342): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x44, r2, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}, @NL80211_KEY_TYPE={0x8}]}]}, 0x44}}, 0x20000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000091000040"]) 32.600221648s ago: executing program 3 (id=1344): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='lp\x00', 0x3) shutdown(r0, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 32.363960064s ago: executing program 3 (id=1348): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb02163c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000001cc0)="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", 0x2000, &(0x7f0000001880)={&(0x7f0000000300)={0x50, 0xfffffffffffffff5, 0xfffffffffffffffa, {0x7, 0x2b, 0x1ff, 0x100000, 0x4, 0x7f, 0x89, 0x3, 0x0, 0x0, 0x19, 0x80000000}}, &(0x7f0000000380)={0x18, 0x0, 0x3, {0x33ce}}, &(0x7f00000003c0)={0x18, 0x0, 0x7b169121, {0x1}}, &(0x7f0000000400)={0x18, 0x0, 0x5, {0xe649}}, &(0x7f00000004c0)={0x18, 0x0, 0x4, {0xffff8001}}, &(0x7f0000000500)={0x28, 0x0, 0xfffffffffffffffd, {{0x0, 0xcd21c00000000000, 0x1, r0}}}, &(0x7f0000000580)={0x60, 0x0, 0xb, {{0x2, 0x0, 0x4, 0x0, 0x0, 0x10001, 0x100, 0xb3}}}, &(0x7f0000000600)={0x18, 0xfffffffffffffff5, 0x3, {0x2}}, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)={0x20, 0x0, 0x5}, 0x0, &(0x7f0000000900)={0x90, 0xffffffffffffffda, 0x80, {0x6, 0x1, 0xffffffffffff7a7a, 0x81, 0x9, 0xf, {0x1, 0xc, 0x3, 0x80, 0x8, 0x8, 0x1, 0x101, 0x6, 0x2000, 0x9, 0x0, 0x0, 0x7fff, 0x4}}}, &(0x7f00000009c0)={0x78, 0x0, 0x101, [{0x2, 0x2, 0xd, 0x5, 'sched_switch\x00'}, {0xc7, 0x317, 0x5, 0x2, 'wfdno'}, {0x4, 0x800, 0x3, 0x6, '9p\x00'}]}, &(0x7f0000001000)={0x1f0, 0x0, 0x0, [{{0x1, 0x200000, 0x4, 0x800, 0x200, 0x80000001, {0x3, 0x7, 0x3ff, 0x4, 0x2, 0x2, 0xfffffffc, 0x6, 0x440, 0x4000, 0x160b, 0x0, 0x0, 0x3, 0x1}}, {0x4, 0x9, 0x1, 0x6, '\x00'}}, {{0x4, 0x1, 0x10001, 0xffff, 0x6, 0x2, {0x1, 0x3, 0xda3, 0xd8, 0x3, 0x0, 0x2, 0x40000, 0x4eb, 0x8000, 0x6, 0x0, 0x0, 0x7, 0x2}}, {0x6, 0x0, 0x5, 0x4, 'rfdno'}}, {{0x1, 0x2, 0x81, 0x9, 0xe, 0x953c, {0x2, 0x6, 0x8, 0x9, 0x2, 0x5, 0x2, 0xe00, 0x7, 0x2000, 0x2, r5, 0x0, 0xf0d, 0x5e68}}, {0x2, 0x9, 0x1, 0x6, '\\'}}]}, &(0x7f00000014c0)={0xa0, 0x0, 0x10000, {{0x0, 0x3, 0x6, 0x80, 0x0, 0x3, {0x0, 0x7f, 0xfff, 0x7, 0x7, 0x0, 0x0, 0xe69b, 0xe55, 0x2000, 0x400, 0x0, r6, 0x91, 0x1}}, {0x0, 0x8}}}, 0x0, &(0x7f0000001740)={0x130, 0xfffffffffffffffe, 0x7fffffff, {0x9, 0x8001, 0x0, '\x00', {0x1, 0x7, 0x3, 0x1, r7, r8, 0x2000, '\x00', 0x5, 0x2, 0x3, 0x2a, {0x800, 0x8}, {0xa, 0x6}, {0x80000001, 0x1}, {0x28d4, 0x4}, 0x9, 0xecfc, 0x80000001, 0x6}}}}) 31.837896589s ago: executing program 0 (id=1351): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x20050800) syz_open_dev$sg(0x0, 0x1, 0x50001) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0xffffff80, &(0x7f000001b640)=""/102398, &(0x7f0000000040)=0x18ffe) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 31.301967573s ago: executing program 3 (id=1352): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000043d8a0870272091776c010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 31.19611472s ago: executing program 0 (id=1353): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 29.460610726s ago: executing program 3 (id=1356): socket$nl_rdma(0x10, 0x3, 0x14) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$inet(0xa, 0x801, 0x84) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 28.763859442s ago: executing program 6 (id=1362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 27.779925784s ago: executing program 6 (id=1366): r0 = socket(0x15, 0x5, 0x5) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbe) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d34"], 0x10}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) write(r1, &(0x7f0000000200)='G', 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x8) 26.751559488s ago: executing program 3 (id=1372): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 26.722085516s ago: executing program 0 (id=1373): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x44, r2, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}, @NL80211_KEY_TYPE={0x8}]}]}, 0x44}}, 0x20000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000091000040"]) 26.599255499s ago: executing program 4 (id=1374): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0xc, 0x400000000001, 0x7, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 26.017937172s ago: executing program 9 (id=1375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESDEC, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x10000, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 23.10166463s ago: executing program 9 (id=1376): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a7490b4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 23.081421789s ago: executing program 3 (id=1377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000500)=ANY=[], 0x1009, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) 22.984035091s ago: executing program 4 (id=1378): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x81, 0x0, 0xb49, 0x9, 0x2, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x38) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x7fff, 0x8, {{0x8, 0x4, 0x0, 0x3e, 0x20, 0x67, 0x0, 0x8, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0x57}, @generic={0x94, 0x7, "03a2955e07"}]}}}}}) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084149, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101241, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c0005001740"], 0x15) 22.309897523s ago: executing program 9 (id=1379): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x300}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r4, 0xfffffd63, &(0x7f00000002c0)={0x0, 0x41, 0x0, &(0x7f00000003c0)=""/166, 0xab}}, 0x10) r5 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x250}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xc7, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) io_uring_enter(r5, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xc}, {0x2, 0x0, 0x0, 0x4}, {0x0, 0x4, 0xb0009}], 0x10, 0xfffffff6}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 20.436359461s ago: executing program 6 (id=1380): openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x711301, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) 18.062828831s ago: executing program 0 (id=1381): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f9, 0x800, 0x3, 0x2e2}, &(0x7f0000000140), &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$TCFLSH(r3, 0x400455c8, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x41) syz_usb_connect(0x5, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000180)={0x20, 0x1410, 0x1, 0x72bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x20000}]}, 0x20}, 0x1, 0x0, 0x0, 0x240048c5}, 0x0) 18.01146299s ago: executing program 4 (id=1382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000300000000000012000000000000000000000002010000000061615f"], 0x0, 0x35, 0x0, 0x1}, 0x28) 16.640684523s ago: executing program 6 (id=1383): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 15.915651595s ago: executing program 4 (id=1384): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000100)={0x2, 0x1, 0x1c, 0xf, 0x195, &(0x7f00000006c0)="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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14.218020752s ago: executing program 9 (id=1385): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0x9, 0x0) io_destroy(r2) capset(0x0, &(0x7f0000000100)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000600)="1c8ec6752be378e4975226946c9de7a697052e2ae0e02a61115fe2855555ae15298b5750c8558b0187fda86960f18b56f317ffea27cb3bae6907bc26ac2b6c2a0fe5fca7d6a90e38de874099aa20b91d4ca96b1155c94380487a465ca5ea49569be0cc73f634be4a54f4a1c585b0aa3a611f573cf9406c164d371c435c32d057a1f657a1f1a2f1dad6f3c01fc7b74df38117058a8f0537f7eee60d9bb46e7f028efc8b4f8a97d5c5ab01f0a4ba20d256b305bc7513719d92f9d90ab7ba07f7cc5aee7ae4f9320b58f3747ee66589ef51feaa2ae71a8e31049f495cea580d13ffff99c558f4", 0xe5}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) io_destroy(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 5.474523746s ago: executing program 42 (id=1377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000500)=ANY=[], 0x1009, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) 5.407159937s ago: executing program 0 (id=1387): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 5.050639088s ago: executing program 4 (id=1388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002"], 0x34}}, 0x0) 4.892261737s ago: executing program 9 (id=1389): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a7490b4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 4.41064692s ago: executing program 4 (id=1390): r0 = socket(0x15, 0x5, 0x5) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xbe) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d34"], 0x10}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) write(r1, &(0x7f0000000200)='G', 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x8) 129.918527ms ago: executing program 43 (id=1383): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000180)=0x1f00) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 89.836183ms ago: executing program 9 (id=1392): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x81, 0x0, 0xb49, 0x9, 0x2, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0xc3dc) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x38) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x7fff, 0x8, {{0x8, 0x4, 0x0, 0x3e, 0x20, 0x67, 0x0, 0x8, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0x57}, @generic={0x94, 0x7, "03a2955e07"}]}}}}}) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084149, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101241, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c0005001740"], 0x15) 0s ago: executing program 0 (id=1393): openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x711301, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) kernel console output (not intermixed with test programs): : port 2(bridge_slave_1) entered disabled state [ 214.719292][ T7931] bridge_slave_1: entered allmulticast mode [ 214.774177][ T7931] bridge_slave_1: entered promiscuous mode [ 214.849809][ T7931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.889959][ T7931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.982994][ T7931] team0: Port device team_slave_0 added [ 215.007053][ T7931] team0: Port device team_slave_1 added [ 215.017952][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 215.158142][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.169782][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.199830][ T5866] Bluetooth: hci4: command tx timeout [ 215.247433][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 215.261490][ T24] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 215.278550][ T7931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.322267][ T24] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 215.349530][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.356501][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.382690][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 215.412747][ T24] usb 3-1: config 1 has no interface number 0 [ 215.441504][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.816269][ T24] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 215.832665][ T7931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.843420][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 215.893986][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.957438][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 216.024202][ T7931] hsr_slave_0: entered promiscuous mode [ 216.038893][ T7931] hsr_slave_1: entered promiscuous mode [ 216.048489][ T7931] debugfs: 'hsr0' already exists in 'hsr' [ 216.065011][ T7931] Cannot create hsr debugfs directory [ 216.163141][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 216.237986][ T92] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.197933][ T5866] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 217.206275][ T5866] Bluetooth: hci1: Injecting HCI hardware error event [ 217.228017][ T5866] Bluetooth: hci1: hardware error 0x00 [ 217.280122][ T5864] Bluetooth: hci4: command tx timeout [ 217.495640][ T5863] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 217.523708][ T24] usb 3-1: USB disconnect, device number 9 [ 217.532245][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 217.656407][ T92] usb 5-1: Using ep0 maxpacket: 32 [ 217.695162][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 217.713254][ T8023] bridge_slave_0: left allmulticast mode [ 217.720940][ T92] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 218.125010][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.128956][ T8023] bridge_slave_0: left promiscuous mode [ 218.139768][ T92] usb 5-1: config 0 descriptor?? [ 218.143347][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.153128][ T92] hub 5-1:0.0: USB hub found [ 218.175319][ T8023] bridge_slave_1: left allmulticast mode [ 218.182728][ T8023] bridge_slave_1: left promiscuous mode [ 218.190573][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.210919][ T8023] bond0: (slave bond_slave_0): Releasing backup interface [ 218.229060][ T8023] bond0: (slave bond_slave_1): Releasing backup interface [ 218.247353][ T8023] team0: Port device team_slave_0 removed [ 218.264569][ T8023] team0: Port device team_slave_1 removed [ 218.273923][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.281618][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.293566][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.301308][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.390619][ T92] hub 5-1:0.0: 1 port detected [ 218.931474][ T7931] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.992580][ T7931] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.016496][ T7931] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.080912][ T5983] usb 5-1: USB disconnect, device number 15 [ 219.096957][ T7931] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.291464][ T7931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.349147][ T5864] Bluetooth: hci4: command tx timeout [ 219.374542][ T7931] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.410625][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.417756][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.474426][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.481574][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.598188][ T5866] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 220.324946][ T8095] vlan2: entered promiscuous mode [ 220.330358][ T8095] vlan2: entered allmulticast mode [ 220.335500][ T8095] hsr_slave_1: entered allmulticast mode [ 220.357778][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 220.423357][ T8098] fuse: Unknown parameter 'user_id00000000000000000000' [ 220.473619][ T8102] netlink: 'syz.4.499': attribute type 24 has an invalid length. [ 220.659462][ T7931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.774072][ T30] audit: type=1326 audit(1755830564.150:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 220.796387][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.847973][ T30] audit: type=1326 audit(1755830564.150:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 220.930137][ T30] audit: type=1326 audit(1755830564.150:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 220.958098][ T30] audit: type=1326 audit(1755830564.150:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 220.980261][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.990397][ T30] audit: type=1326 audit(1755830564.150:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 221.012547][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.021268][ T30] audit: type=1326 audit(1755830564.150:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 221.118415][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 221.411073][ T30] audit: type=1326 audit(1755830564.150:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 221.433276][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.508022][ T30] audit: type=1326 audit(1755830564.150:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 221.530207][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.568373][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 221.621770][ T7931] veth0_vlan: entered promiscuous mode [ 221.650937][ T7931] veth1_vlan: entered promiscuous mode [ 221.758726][ T30] audit: type=1326 audit(1755830564.150:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 221.780928][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.788472][ T43] usb 5-1: config 0 has an invalid interface number: 79 but max is 0 [ 221.797227][ T43] usb 5-1: config 0 has no interface number 0 [ 221.814755][ T30] audit: type=1326 audit(1755830564.150:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f226c38ebe9 code=0x7ffc0000 [ 221.966742][ T43] usb 5-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 221.980341][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.003389][ T43] usb 5-1: Product: syz [ 222.007581][ T43] usb 5-1: Manufacturer: syz [ 222.033937][ T7931] veth0_macvtap: entered promiscuous mode [ 222.048917][ T43] usb 5-1: SerialNumber: syz [ 222.064411][ T7931] veth1_macvtap: entered promiscuous mode [ 222.107371][ T43] usb 5-1: config 0 descriptor?? [ 222.210581][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.221147][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.246763][ T3028] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.275916][ T3028] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.385718][ T3028] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.458818][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.666031][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.748804][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.863843][ T3028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.962411][ T3028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.902398][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 223.909842][ T43] cp210x 5-1:0.79: cp210x converter detected [ 223.973644][ T43] cp210x 5-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 224.039865][ T8166] fuse: Unknown parameter 'user_id00000000000000000000' [ 224.049235][ T43] cp210x 5-1:0.79: querying part number failed [ 224.059938][ T43] usb 5-1: cp210x converter now attached to ttyUSB0 [ 224.087545][ T43] usb 5-1: USB disconnect, device number 16 [ 224.097331][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 224.106502][ T43] cp210x 5-1:0.79: device disconnected [ 225.728362][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 225.775036][ T8214] fuse: Bad value for 'fd' [ 225.984363][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 225.984392][ T30] audit: type=1800 audit(1755830569.350:176): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.520" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 226.321139][ T43] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 226.432856][ T43] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 226.444512][ T43] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 226.454875][ T43] usb 4-1: config 220 has no interface number 2 [ 226.461476][ T43] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 226.474789][ T43] usb 4-1: config 220 interface 0 has no altsetting 0 [ 226.485338][ T43] usb 4-1: config 220 interface 76 has no altsetting 0 [ 226.664296][ T43] usb 4-1: config 220 interface 1 has no altsetting 0 [ 226.673760][ T43] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 226.692609][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.857601][ T8228] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 227.023510][ T5924] IPVS: starting estimator thread 0... [ 227.067833][ T43] usb 4-1: Product: syz [ 227.092486][ T43] usb 4-1: Manufacturer: syz [ 227.097315][ T43] usb 4-1: SerialNumber: syz [ 227.221936][ T8232] IPVS: using max 42 ests per chain, 100800 per kthread [ 227.436019][ T43] usb 4-1: selecting invalid altsetting 0 [ 227.442106][ T43] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 227.449175][ T43] usb 4-1: No valid video chain found. [ 227.468325][ T43] usb 4-1: selecting invalid altsetting 0 [ 227.474083][ T43] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 227.486408][ T43] usb 4-1: USB disconnect, device number 27 [ 229.954470][ T8269] fuse: Bad value for 'fd' [ 230.114157][ T8272] Invalid logical block size (7) [ 230.298012][ T5923] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 230.483941][ T5923] usb 7-1: config 0 has an invalid interface number: 157 but max is 1 [ 230.494348][ T8294] CIFS mount error: No usable UNC path provided in device string! [ 230.494348][ T8294] [ 230.520128][ T8294] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 230.570279][ T5923] usb 7-1: config 0 has no interface number 1 [ 230.608162][ T5923] usb 7-1: config 0 interface 157 has no altsetting 0 [ 230.620457][ T5923] usb 7-1: config 0 interface 0 has no altsetting 0 [ 230.628374][ T5923] usb 7-1: New USB device found, idVendor=0403, idProduct=a5ae, bcdDevice=d1.8d [ 230.704893][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.752649][ T5923] usb 7-1: config 0 descriptor?? [ 230.966344][ T5923] usb 7-1: string descriptor 0 read error: -71 [ 230.976140][ T5923] ftdi_sio 7-1:0.157: FTDI USB Serial Device converter detected [ 230.987934][ T30] audit: type=1107 audit(1755830574.340:177): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 231.000953][ T5923] ftdi_sio ttyUSB0: unknown device type: 0xd18d [ 231.021954][ T5923] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 231.031039][ T5923] ftdi_sio ttyUSB1: unknown device type: 0xd18d [ 231.053041][ T5923] usb 7-1: USB disconnect, device number 2 [ 231.071554][ T5923] ftdi_sio 7-1:0.157: device disconnected [ 231.085509][ T5923] ftdi_sio 7-1:0.0: device disconnected [ 233.679982][ T8331] fuse: Bad value for 'fd' [ 233.828554][ T8339] binder_alloc: 8337: binder_alloc_buf, no vma [ 234.259560][ T24] libceph: connect (1)[c::]:6789 error -101 [ 234.297103][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 235.042683][ T8342] ceph: No mds server is up or the cluster is laggy [ 235.351468][ T24] libceph: connect (1)[c::]:6789 error -101 [ 235.393141][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 235.506973][ T8377] CIFS mount error: No usable UNC path provided in device string! [ 235.506973][ T8377] [ 235.552090][ T8377] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 237.318767][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.591729][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.693793][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.752707][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.251279][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 238.417286][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 238.450386][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 238.469576][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 238.777737][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 238.998445][ T8416] ceph: No mds server is up or the cluster is laggy [ 239.010379][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 239.460731][ T49] bond0 (unregistering): Released all slaves [ 239.500606][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.570'. [ 239.510005][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.570'. [ 239.519043][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.537043][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.544962][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.553860][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.561427][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.641450][ T8435] sit1: entered allmulticast mode [ 239.995623][ T49] hsr_slave_0: left promiscuous mode [ 240.018275][ T49] hsr_slave_1: left promiscuous mode [ 240.030684][ T49] veth1_macvtap: left promiscuous mode [ 240.037350][ T49] veth0_macvtap: left promiscuous mode [ 240.082140][ T49] veth1_vlan: left promiscuous mode [ 240.093595][ T49] veth0_vlan: left promiscuous mode [ 241.593342][ T5866] Bluetooth: hci3: command tx timeout [ 241.628250][ T8488] tipc: Started in network mode [ 241.697659][ T8488] tipc: Node identity ca847f4b3d17, cluster identity 4711 [ 241.735657][ T8488] tipc: Enabled bearer , priority 0 [ 241.883670][ T8498] tipc: Resetting bearer [ 242.199043][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 242.255273][ T8485] tipc: Disabling bearer [ 242.464011][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 242.736581][ T49] IPVS: stop unused estimator thread 0... [ 242.799254][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.806489][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.813960][ T8437] bridge_slave_0: entered allmulticast mode [ 242.988008][ T8510] Invalid logical block size (7) [ 243.078995][ T8437] bridge_slave_0: entered promiscuous mode [ 243.159745][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.168309][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.177092][ T8437] bridge_slave_1: entered allmulticast mode [ 243.184344][ T8437] bridge_slave_1: entered promiscuous mode [ 243.671120][ T5866] Bluetooth: hci3: command tx timeout [ 243.947325][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.201722][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.758083][ T5866] Bluetooth: hci3: command tx timeout [ 245.820713][ T8437] team0: Port device team_slave_0 added [ 245.847552][ T8437] team0: Port device team_slave_1 added [ 246.332761][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.350826][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.399913][ T8552] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 246.465185][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.598331][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.706990][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.733045][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.195667][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.222473][ T7476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.262841][ T8437] hsr_slave_0: entered promiscuous mode [ 247.269257][ T8437] hsr_slave_1: entered promiscuous mode [ 247.275289][ T8437] debugfs: 'hsr0' already exists in 'hsr' [ 247.284160][ T8437] Cannot create hsr debugfs directory [ 247.300932][ T7476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.414679][ T7476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.444307][ T8581] syzkaller0: entered promiscuous mode [ 247.458996][ T8581] syzkaller0: entered allmulticast mode [ 247.516727][ T7476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.858191][ T5866] Bluetooth: hci3: command tx timeout [ 248.315253][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.325521][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.335128][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.346688][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.354278][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.409040][ T8437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 248.601236][ T8437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 248.661432][ T8437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 248.713364][ T8437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 249.330408][ T92] libceph: connect (1)[c::]:6789 error -101 [ 249.336844][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 249.631698][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 249.677985][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 249.694898][ T7476] bond0 (unregistering): Released all slaves [ 249.772624][ T7476] tipc: Left network mode [ 249.829443][ T8634] ceph: No mds server is up or the cluster is laggy [ 250.316310][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.335604][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.407387][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.407999][ T5866] Bluetooth: hci2: command tx timeout [ 250.414549][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.530940][ T7476] hsr_slave_0: left promiscuous mode [ 250.556530][ T7476] veth1_macvtap: left promiscuous mode [ 250.572689][ T7476] veth0_macvtap: left promiscuous mode [ 250.578541][ T7476] veth1_vlan: left promiscuous mode [ 250.584361][ T7476] veth0_vlan: left promiscuous mode [ 251.109615][ T8602] chnl_net:caif_netlink_parms(): no params data found [ 251.199607][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.206737][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.325565][ T8437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.336825][ T8437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.519543][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.559584][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.587462][ T8602] bridge_slave_0: entered allmulticast mode [ 251.604033][ T8602] bridge_slave_0: entered promiscuous mode [ 251.638829][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.736166][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.744787][ T8602] bridge_slave_1: entered allmulticast mode [ 251.751938][ T8602] bridge_slave_1: entered promiscuous mode [ 252.057074][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.264141][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.528033][ T5866] Bluetooth: hci2: command tx timeout [ 252.891889][ T8602] team0: Port device team_slave_0 added [ 252.916581][ T8602] team0: Port device team_slave_1 added [ 253.411286][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 253.417273][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 253.451283][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.469610][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.495936][ T8602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.510423][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.522819][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.548767][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.555857][ T8602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.663872][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.698297][ T10] libceph: connect (1)[c::]:6789 error -101 [ 253.705348][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 253.799489][ T8716] ceph: No mds server is up or the cluster is laggy [ 253.816060][ T8602] hsr_slave_0: entered promiscuous mode [ 253.835123][ T8602] hsr_slave_1: entered promiscuous mode [ 253.891971][ T8602] debugfs: 'hsr0' already exists in 'hsr' [ 253.903205][ T8602] Cannot create hsr debugfs directory [ 253.932182][ T8728] syzkaller0: entered promiscuous mode [ 253.950109][ T8728] syzkaller0: entered allmulticast mode [ 253.988315][ T8733] fuse: Unknown parameter 'grou00000000000000000000' [ 254.481493][ T8437] veth0_vlan: entered promiscuous mode [ 254.507594][ T8437] veth1_vlan: entered promiscuous mode [ 254.549063][ T5866] Bluetooth: hci2: command tx timeout [ 254.573065][ T8602] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 254.634042][ T8602] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 254.806135][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.898494][ T8602] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 255.194894][ T8437] veth0_macvtap: entered promiscuous mode [ 255.205262][ T8437] veth1_macvtap: entered promiscuous mode [ 255.367061][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.388669][ T8602] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 255.523932][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.560763][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.567213][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.663578][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.760721][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.793597][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.843600][ T3004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.913820][ T3004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.939723][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.946821][ T3004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.955841][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.966134][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.989096][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.021048][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.070539][ T3004] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.182911][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.208066][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.246574][ T12] bridge_slave_1: left allmulticast mode [ 256.253078][ T12] bridge_slave_1: left promiscuous mode [ 256.259684][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.269371][ T12] bridge_slave_0: left allmulticast mode [ 256.275030][ T12] bridge_slave_0: left promiscuous mode [ 256.282023][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.319650][ T5978] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 256.418402][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.447713][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.476641][ T12] bond0 (unregistering): Released all slaves [ 256.490699][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 256.638836][ T5866] Bluetooth: hci2: command tx timeout [ 256.800525][ T5978] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 256.824032][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.832390][ T5978] usb 3-1: Product: syz [ 256.836590][ T5978] usb 3-1: Manufacturer: syz [ 256.841523][ T5978] usb 3-1: SerialNumber: syz [ 256.854470][ T5978] usb 3-1: config 0 descriptor?? [ 256.949104][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.956998][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.004459][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.030852][ T8602] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.079069][ T5978] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 257.107962][ T12] hsr_slave_0: left promiscuous mode [ 257.128190][ T12] hsr_slave_1: left promiscuous mode [ 257.133967][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.143041][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.155955][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.164000][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.175116][ T12] veth1_macvtap: left promiscuous mode [ 257.184619][ T12] veth0_macvtap: left promiscuous mode [ 257.199710][ T12] veth1_vlan: left promiscuous mode [ 257.205017][ T12] veth0_vlan: left promiscuous mode [ 258.082619][ T5866] Bluetooth: hci4: command tx timeout [ 258.316692][ T12] team0 (unregistering): Port device team_slave_1 removed [ 258.332327][ T12] team0 (unregistering): Port device team_slave_0 removed [ 258.459847][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.466993][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.502578][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.509727][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.524145][ T8825] syzkaller0: entered promiscuous mode [ 258.529749][ T8825] syzkaller0: entered allmulticast mode [ 258.726217][ T8602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.786764][ T8773] chnl_net:caif_netlink_parms(): no params data found [ 258.851032][ T5978] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 258.918050][ T5924] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 258.990665][ T5978] usb 3-1: USB disconnect, device number 10 [ 259.148210][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 259.166237][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.199706][ T5923] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 259.214967][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.239058][ T8773] bridge_slave_0: entered allmulticast mode [ 259.266357][ T8773] bridge_slave_0: entered promiscuous mode [ 259.388018][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 259.401131][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.409871][ T5923] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 259.430871][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.437999][ T5923] usb 2-1: config 0 has no interface number 0 [ 259.503960][ T8773] bridge_slave_1: entered allmulticast mode [ 259.562385][ T8773] bridge_slave_1: entered promiscuous mode [ 259.603675][ T5923] usb 2-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 259.636021][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.663701][ T5923] usb 2-1: Product: syz [ 259.673540][ T8773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.684391][ T5923] usb 2-1: Manufacturer: syz [ 259.701809][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.709693][ T5923] usb 2-1: SerialNumber: syz [ 259.740293][ T5923] usb 2-1: config 0 descriptor?? [ 259.766447][ T8773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.961982][ T8773] team0: Port device team_slave_0 added [ 260.115557][ T8872] CIFS mount error: No usable UNC path provided in device string! [ 260.115557][ T8872] [ 260.128046][ T8872] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 260.148165][ T5866] Bluetooth: hci4: command tx timeout [ 260.879275][ T8773] team0: Port device team_slave_1 added [ 261.123513][ T8876] /dev/nullb0: Can't open blockdev [ 261.135778][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.144384][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.201321][ T8773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.253147][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.362203][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.436806][ T8773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.803215][ T5924] usb 8-1: unable to get BOS descriptor or descriptor too short [ 261.814194][ T8773] hsr_slave_0: entered promiscuous mode [ 261.825249][ T5924] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 261.836051][ T8773] hsr_slave_1: entered promiscuous mode [ 261.862363][ T8773] debugfs: 'hsr0' already exists in 'hsr' [ 261.873177][ T5924] usb 8-1: can't read configurations, error -71 [ 261.976951][ T8773] Cannot create hsr debugfs directory [ 261.988032][ T8602] veth0_vlan: entered promiscuous mode [ 262.228163][ T5866] Bluetooth: hci4: command tx timeout [ 262.374907][ T30] audit: type=1800 audit(1755830605.750:178): pid=8893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.640" name="bus" dev="overlay" ino=31 res=0 errno=0 [ 262.506846][ T8602] veth1_vlan: entered promiscuous mode [ 262.621700][ T5923] cp210x 2-1:0.79: cp210x converter detected [ 262.649768][ T5923] cp210x 2-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 262.662539][ T8602] veth0_macvtap: entered promiscuous mode [ 262.683531][ T5923] cp210x 2-1:0.79: querying part number failed [ 262.767533][ T5923] usb 2-1: cp210x converter now attached to ttyUSB0 [ 262.786241][ T5923] usb 2-1: USB disconnect, device number 8 [ 262.806037][ T8602] veth1_macvtap: entered promiscuous mode [ 262.820027][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 262.841164][ T5923] cp210x 2-1:0.79: device disconnected [ 262.847433][ T8773] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 262.946590][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.022644][ T8773] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 263.382042][ T8773] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 263.405012][ T8773] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 263.422099][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.941904][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.308131][ T5866] Bluetooth: hci4: command tx timeout [ 264.383452][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.402916][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.502446][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.617186][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.715351][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.758654][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.868826][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.881686][ T8773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.256019][ T8773] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.283471][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.290622][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.347641][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.354776][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.103608][ T8773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.427963][ T8975] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 267.559092][ T8975] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 267.718420][ T8773] veth0_vlan: entered promiscuous mode [ 267.728032][ T8773] veth1_vlan: entered promiscuous mode [ 267.756645][ T8773] veth0_macvtap: entered promiscuous mode [ 267.898478][ T8773] veth1_macvtap: entered promiscuous mode [ 267.940502][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.986428][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.144328][ T7476] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.163707][ T7476] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.179064][ T7476] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.202929][ T7476] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.557616][ T30] audit: type=1800 audit(1755830611.620:179): pid=9002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.657" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 268.719410][ T9007] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 268.771695][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.803839][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.946862][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.012235][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.012913][ T9019] syzkaller0: entered promiscuous mode [ 269.032238][ T9019] syzkaller0: entered allmulticast mode [ 270.456270][ T9035] input: syz1 as /devices/virtual/input/input30 [ 270.680386][ T9035] input: failed to attach handler leds to device input30, error: -6 [ 271.952925][ T979] libceph: connect (1)[c::]:6789 error -101 [ 271.965124][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 272.358697][ T979] libceph: connect (1)[c::]:6789 error -101 [ 272.373465][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 272.392341][ T9053] ceph: No mds server is up or the cluster is laggy [ 272.676426][ T9077] 9p: Bad value for 'rfdno' [ 273.182564][ T30] audit: type=1800 audit(1755830616.250:180): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.670" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 273.865880][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 273.878394][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 274.127396][ T9091] ceph: No mds server is up or the cluster is laggy [ 274.148202][ T24] libceph: connect (1)[c::]:6789 error -101 [ 274.154190][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 275.113163][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.334000][ T9132] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 275.424122][ T9134] input: syz1 as /devices/virtual/input/input31 [ 275.729164][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.754965][ T9134] input: failed to attach handler leds to device input31, error: -6 [ 276.019375][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.223201][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.579538][ T59] bridge_slave_1: left allmulticast mode [ 276.585218][ T59] bridge_slave_1: left promiscuous mode [ 276.609533][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.693019][ T59] bridge_slave_0: left allmulticast mode [ 276.705334][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.715666][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.723264][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.727992][ T59] bridge_slave_0: left promiscuous mode [ 276.731039][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.735905][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.743586][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.079437][ T9164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.269594][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 277.631029][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.641637][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.121228][ T24] usb 9-1: config 0 has an invalid interface number: 199 but max is 1 [ 278.157430][ T24] usb 9-1: config 0 has no interface number 1 [ 278.165207][ T59] bond0 (unregistering): Released all slaves [ 278.174525][ T24] usb 9-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 278.200859][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.216083][ T24] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 278.225301][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.235275][ T24] usb 9-1: SerialNumber: syz [ 278.282135][ T24] usb 9-1: config 0 descriptor?? [ 278.309785][ T24] usb 9-1: Found UVC 0.00 device (0002:0000) [ 278.317624][ T24] usb 9-1: No valid video chain found. [ 278.520098][ T24] usb 9-1: USB disconnect, device number 2 [ 278.868031][ T5864] Bluetooth: hci3: command tx timeout [ 279.105516][ T59] hsr_slave_0: left promiscuous mode [ 279.115047][ T59] hsr_slave_1: left promiscuous mode [ 279.122808][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.130861][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.142586][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.151136][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.368086][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 279.382621][ T59] veth1_macvtap: left promiscuous mode [ 279.410970][ T59] veth0_macvtap: left promiscuous mode [ 279.473739][ T59] veth1_vlan: left promiscuous mode [ 279.487793][ T59] veth0_vlan: left promiscuous mode [ 279.503049][ T9192] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 279.510891][ T9192] netlink: 224 bytes leftover after parsing attributes in process `syz.1.693'. [ 279.540339][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.557229][ T24] usb 9-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 279.580007][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.602094][ T24] usb 9-1: config 0 descriptor?? [ 279.764211][ T59] team0 (unregistering): Port device team_slave_1 removed [ 279.782578][ T59] team0 (unregistering): Port device team_slave_0 removed [ 279.928395][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 279.934367][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 279.944962][ T24] usb 9-1: USB disconnect, device number 3 [ 280.258414][ T5978] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 280.487928][ T5978] usb 3-1: Using ep0 maxpacket: 16 [ 280.632006][ T9149] chnl_net:caif_netlink_parms(): no params data found [ 280.948676][ T5864] Bluetooth: hci3: command tx timeout [ 281.004549][ T9220] input: syz1 as /devices/virtual/input/input32 [ 281.011378][ T9220] input: failed to attach handler leds to device input32, error: -6 [ 281.109678][ T9149] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.118330][ T9149] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.125638][ T9149] bridge_slave_0: entered allmulticast mode [ 281.132857][ T9149] bridge_slave_0: entered promiscuous mode [ 281.296411][ T9149] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.422083][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.430330][ T9149] bridge_slave_1: entered allmulticast mode [ 281.437342][ T9149] bridge_slave_1: entered promiscuous mode [ 281.700520][ T9149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.770348][ T9149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.853171][ T9149] team0: Port device team_slave_0 added [ 281.869986][ T9149] team0: Port device team_slave_1 added [ 281.972359][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.987232][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.066141][ T9149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.152417][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.180839][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.565883][ T9149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.790892][ T5978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 282.814476][ T5978] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 282.816190][ T9149] hsr_slave_0: entered promiscuous mode [ 282.862425][ T9149] hsr_slave_1: entered promiscuous mode [ 282.889710][ T9149] debugfs: 'hsr0' already exists in 'hsr' [ 282.898575][ T9149] Cannot create hsr debugfs directory [ 282.906572][ T5978] usb 3-1: can't read configurations, error -71 [ 283.030534][ T5864] Bluetooth: hci3: command tx timeout [ 284.300135][ T30] audit: type=1800 audit(1755830627.670:181): pid=9278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.707" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 284.320167][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.988554][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.8.710'. [ 285.107891][ T5864] Bluetooth: hci3: command tx timeout [ 285.900921][ T24] libceph: connect (1)[c::]:6789 error -101 [ 285.966516][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 286.095424][ T9293] ceph: No mds server is up or the cluster is laggy [ 286.104155][ T9149] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.136907][ T9149] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.159203][ T9149] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.195059][ T9149] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.856035][ T9149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.915837][ T9149] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.086845][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.093974][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.394249][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.401392][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.318974][ T9149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.375941][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.9.722'. [ 288.689468][ T9358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.196961][ T9149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.391465][ T9149] veth0_vlan: entered promiscuous mode [ 289.799019][ T9149] veth1_vlan: entered promiscuous mode [ 289.816923][ T9149] veth0_macvtap: entered promiscuous mode [ 289.857750][ T9149] veth1_macvtap: entered promiscuous mode [ 289.917372][ T9367] infiniband syz!: set active [ 289.922097][ T9367] infiniband syz!: added team_slave_0 [ 289.954453][ T9367] RDS/IB: syz!: added [ 289.958600][ T9367] smc: adding ib device syz! with port count 1 [ 289.964763][ T9367] smc: ib device syz! port 1 has pnetid [ 290.385592][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.721055][ T9149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.781222][ T2913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.803563][ T9382] fuse: Bad value for 'user_id' [ 290.830660][ T9382] fuse: Bad value for 'user_id' [ 290.832361][ T2913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.918228][ T2913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.342184][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.470023][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.486241][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.566516][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.594110][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.641619][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.9.733'. [ 291.908034][ T8783] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 292.078204][ T8783] usb 3-1: Using ep0 maxpacket: 32 [ 292.232666][ T9424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.738'. [ 292.246587][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 292.345819][ T8783] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 292.365884][ T8783] usb 3-1: config 0 has no interface number 0 [ 292.409795][ T8783] usb 3-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 292.428133][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 292.434742][ T9429] input: syz1 as /devices/virtual/input/input34 [ 292.456257][ T24] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 292.456722][ T8783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.485301][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.532160][ T8783] usb 3-1: Product: syz [ 292.536468][ T8783] usb 3-1: Manufacturer: syz [ 292.544891][ T24] usb 10-1: Product: syz [ 292.555894][ T9429] input: failed to attach handler leds to device input34, error: -6 [ 292.566661][ T24] usb 10-1: Manufacturer: syz [ 292.576092][ T24] usb 10-1: SerialNumber: syz [ 292.584034][ T8783] usb 3-1: SerialNumber: syz [ 292.597608][ T24] usb 10-1: config 0 descriptor?? [ 292.977643][ T24] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 292.997082][ T8783] usb 3-1: config 0 descriptor?? [ 295.156682][ T24] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 295.387805][ T24] usb 10-1: USB disconnect, device number 2 [ 295.428460][ T8783] cp210x 3-1:0.79: cp210x converter detected [ 295.588340][ T8783] cp210x 3-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 295.684315][ T9470] 9p: Bad value for 'rfdno' [ 295.943716][ T8783] cp210x 3-1:0.79: querying part number failed [ 295.951256][ T8783] usb 3-1: cp210x converter now attached to ttyUSB0 [ 295.964073][ T8783] usb 3-1: USB disconnect, device number 13 [ 295.971960][ T8783] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.980413][ T8783] cp210x 3-1:0.79: device disconnected [ 296.545746][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.9.746'. [ 299.128758][ T9525] input: syz1 as /devices/virtual/input/input37 [ 299.143631][ T9525] input: failed to attach handler leds to device input37, error: -6 [ 300.712951][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 300.897018][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 300.918998][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 300.932184][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 300.945340][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 301.052927][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 301.077362][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.157041][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.193930][ T9561] fuse: Bad value for 'fd' [ 301.210346][ T9] usb 3-1: Product: syz [ 301.222313][ T9] usb 3-1: Manufacturer: syz [ 301.412884][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 301.480339][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 301.511497][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 301.561245][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 302.184487][ T979] usb 3-1: USB disconnect, device number 14 [ 305.079242][ T9629] siw: device registration error -23 [ 305.725187][ T9646] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 305.936276][ T9652] 9p: Bad value for 'rfdno' [ 306.798090][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 306.947925][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 306.954281][ T9] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 306.964461][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 306.976392][ T9] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 307.017050][ T9] usb 3-1: config 0 has no interface number 0 [ 307.033392][ T9] usb 3-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.179030][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 308.067308][ T9] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 308.186597][ T9] usb 3-1: Product: syz [ 308.320168][ T9] usb 3-1: config 0 descriptor?? [ 308.554907][ T9] usb 3-1: USB disconnect, device number 15 [ 308.621772][ T30] audit: type=1800 audit(1755830651.990:182): pid=9684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.780" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 310.299842][ T9716] netlink: 'syz.9.784': attribute type 10 has an invalid length. [ 310.315532][ T9716] veth0_vlan: left promiscuous mode [ 310.551207][ T9716] veth0_vlan: entered promiscuous mode [ 310.576014][ T9716] team0: Device veth0_vlan failed to register rx_handler [ 311.793932][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.788'. [ 311.829005][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 312.267881][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 313.168412][ T9764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'. [ 313.178700][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 313.190185][ T9764] netlink: 100 bytes leftover after parsing attributes in process `syz.1.794'. [ 313.418017][ T5923] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 313.859973][ T5923] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 313.892538][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.620344][ T5923] usb 10-1: config 0 descriptor?? [ 314.719536][ T5923] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 315.183904][ T9789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.473457][ T5923] gp8psk: usb in 128 operation failed. [ 315.525585][ T5923] gp8psk: usb in 137 operation failed. [ 315.604698][ T5923] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 315.652989][ T5923] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 316.078036][ T5923] usb 10-1: USB disconnect, device number 3 [ 316.101534][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 316.122410][ T9] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 316.327990][ T9] usb 9-1: can't read configurations, error -71 [ 317.183563][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.009209][ T9827] 9p: Bad value for 'rfdno' [ 318.541131][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 318.945301][ T92] libceph: connect (1)[c::]:6789 error -101 [ 318.952734][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 319.077931][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 319.089657][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 319.098650][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 319.109245][ T9] usb 9-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40 [ 319.134283][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.158497][ T5978] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 319.190157][ T9] usb 9-1: Product: syz [ 319.195955][ T9] usb 9-1: Manufacturer: ⷃ㠓耻萵噻ⱥ㰑ㄦྗ擼ਨ磶ᆤ⥆妺䊿暸⳩渷/কᐏ햓૏དྷ㑀遶횖〾蹶䓵缄䭘s [ 319.213123][ T9861] syzkaller0: entered promiscuous mode [ 319.218425][ T92] libceph: connect (1)[c::]:6789 error -101 [ 319.226138][ T9861] syzkaller0: entered allmulticast mode [ 319.237039][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 319.300249][ T9] usb 9-1: SerialNumber: syz [ 319.319295][ T9849] ceph: No mds server is up or the cluster is laggy [ 319.338814][ T5978] usb 1-1: Using ep0 maxpacket: 16 [ 319.859537][ T9] usbhid 9-1:1.0: can't add hid device: -71 [ 319.871295][ T9] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 319.970697][ T9] usb 9-1: USB disconnect, device number 5 [ 321.064855][ T9889] overlayfs: failed to resolve './file0': -2 [ 321.502917][ T9894] fuse: Invalid rootmode [ 323.229282][ T9915] syzkaller0: entered promiscuous mode [ 323.235906][ T9915] syzkaller0: entered allmulticast mode [ 323.449010][ T5923] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 323.527141][ T5978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.555843][ T5978] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 323.602879][ T5978] usb 1-1: can't read configurations, error -71 [ 323.687899][ T5944] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 323.699937][ T5864] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 323.701426][ T5923] usb 10-1: config 0 has an invalid interface number: 157 but max is 1 [ 323.724659][ T5923] usb 10-1: config 0 has no interface number 1 [ 323.748426][ T5923] usb 10-1: config 0 interface 157 has no altsetting 0 [ 323.756598][ T5923] usb 10-1: config 0 interface 0 has no altsetting 0 [ 323.763399][ T5923] usb 10-1: New USB device found, idVendor=0403, idProduct=a5ae, bcdDevice=d1.8d [ 323.773115][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.785813][ T5923] usb 10-1: config 0 descriptor?? [ 324.215965][ T5923] usb 10-1: string descriptor 0 read error: -71 [ 324.225973][ T5923] ftdi_sio 10-1:0.157: FTDI USB Serial Device converter detected [ 324.235264][ T5944] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 324.252797][ T5944] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 324.279830][ T5923] ftdi_sio ttyUSB0: unknown device type: 0xd18d [ 324.295935][ T5944] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.306954][ T5923] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 324.315878][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.336446][ T5923] ftdi_sio ttyUSB1: unknown device type: 0xd18d [ 324.377767][ T5923] usb 10-1: USB disconnect, device number 4 [ 324.406293][ T5923] ftdi_sio 10-1:0.157: device disconnected [ 324.424433][ T5923] ftdi_sio 10-1:0.0: device disconnected [ 325.171170][ T9925] kAFS: unable to lookup cell '.,' [ 325.193861][ T5944] usb 3-1: USB disconnect, device number 16 [ 326.037590][ T9957] CIFS mount error: No usable UNC path provided in device string! [ 326.037590][ T9957] [ 326.097927][ T9957] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 327.639432][ T9985] input: syz1 as /devices/virtual/input/input39 [ 327.661107][ T9985] input: failed to attach handler leds to device input39, error: -6 [ 328.622699][ T9999] comedi comedi3: pcmmio: I/O port conflict (0xffff,32) [ 328.767950][ T5978] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 329.084893][T10012] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 329.504772][T10012] veth0_vlan: left promiscuous mode [ 329.511292][T10012] veth0_vlan: entered promiscuous mode [ 329.518106][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 329.597252][T10012] team0: Device veth0_vlan failed to register rx_handler [ 333.565330][ T5978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.642790][ T5978] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 333.896237][ T5978] usb 2-1: can't read configurations, error -71 [ 334.454682][T10082] netlink: 'syz.1.858': attribute type 1 has an invalid length. [ 334.464265][T10082] netlink: 224 bytes leftover after parsing attributes in process `syz.1.858'. [ 335.714095][T10099] netlink: 'syz.9.861': attribute type 10 has an invalid length. [ 335.722654][T10099] veth0_vlan: left promiscuous mode [ 335.730912][T10099] veth0_vlan: entered promiscuous mode [ 335.744639][T10099] team0: Device veth0_vlan failed to register rx_handler [ 336.363929][T10106] tipc: Started in network mode [ 336.408389][T10106] tipc: Node identity 3ed2ee57dc29, cluster identity 4711 [ 336.416532][T10106] tipc: Enabled bearer , priority 0 [ 336.871797][T10112] syzkaller0: entered promiscuous mode [ 336.877434][T10112] syzkaller0: entered allmulticast mode [ 336.906181][T10117] netlink: 'syz.1.865': attribute type 10 has an invalid length. [ 336.932831][T10117] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 336.959318][T10106] tipc: Resetting bearer [ 337.008721][T10117] binder: 10116:10117 ioctl 4004ae99 2000000001c0 returned -22 [ 337.021021][T10104] tipc: Resetting bearer [ 337.037003][T10116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.048035][T10104] tipc: Disabling bearer [ 337.130826][T10125] Invalid ELF header magic: != ELF [ 337.487908][ T5944] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 337.501718][T10138] fuse: Unknown parameter 'user00000000000000000000' [ 337.667930][ T5944] usb 10-1: Using ep0 maxpacket: 16 [ 338.111057][T10152] tmpfs: Bad value for 'mpol' [ 338.998153][ T5983] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 339.237898][ T5983] usb 9-1: Using ep0 maxpacket: 32 [ 339.262403][T10171] CIFS mount error: No usable UNC path provided in device string! [ 339.262403][T10171] [ 339.272518][T10171] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 339.289834][T10172] fuse: Bad value for 'fd' [ 339.362242][ T5983] usb 9-1: config 0 has an invalid interface number: 79 but max is 0 [ 339.551936][ T5983] usb 9-1: config 0 has no interface number 0 [ 339.580844][ T5983] usb 9-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 339.590847][ T5983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.610472][ T5983] usb 9-1: Product: syz [ 339.620592][ T5983] usb 9-1: Manufacturer: syz [ 339.627556][ T5983] usb 9-1: SerialNumber: syz [ 339.643979][ T5983] usb 9-1: config 0 descriptor?? [ 340.140966][T10179] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 340.258951][T10179] netlink: 'syz.2.880': attribute type 2 has an invalid length. [ 341.415056][ T5944] usb 10-1: unable to get BOS descriptor or descriptor too short [ 341.442257][ T5944] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 341.520596][ T5944] usb 10-1: can't read configurations, error -71 [ 342.135491][ T5983] cp210x 9-1:0.79: cp210x converter detected [ 342.285161][ T5983] cp210x 9-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 342.667881][ T5983] cp210x 9-1:0.79: querying part number failed [ 342.688918][ T5983] usb 9-1: cp210x converter now attached to ttyUSB0 [ 342.726694][ T5983] usb 9-1: USB disconnect, device number 6 [ 342.773629][ T5983] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 342.824609][ T5983] cp210x 9-1:0.79: device disconnected [ 343.083936][T10231] Invalid ELF header magic: != ELF [ 343.252140][T10232] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 343.260455][T10232] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 343.268993][T10232] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 343.580308][T10249] Invalid ELF header magic: != ELF [ 345.144206][ T5983] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 346.117967][ T5983] usb 3-1: Using ep0 maxpacket: 32 [ 346.176433][ T5983] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 346.195141][ T5983] usb 3-1: config 0 has no interface number 0 [ 346.215939][ T5983] usb 3-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 346.247040][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.294627][ T5983] usb 3-1: Product: syz [ 346.310467][ T5983] usb 3-1: Manufacturer: syz [ 346.331308][ T5983] usb 3-1: SerialNumber: syz [ 346.379473][T10292] netlink: 'syz.9.904': attribute type 10 has an invalid length. [ 346.389065][ T5983] usb 3-1: config 0 descriptor?? [ 346.698016][T10304] netlink: 'syz.1.907': attribute type 9 has an invalid length. [ 347.157312][T10288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.171102][T10292] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 347.251165][T10292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.083721][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 349.089817][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 349.759249][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 350.166937][T10332] ceph: No mds server is up or the cluster is laggy [ 350.180349][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 350.311376][ T30] audit: type=1800 audit(1755830693.670:183): pid=10351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.909" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 350.499045][T10358] netlink: 228 bytes leftover after parsing attributes in process `syz.0.919'. [ 350.593587][T10360] 9p: Bad value for 'rfdno' [ 350.957593][ T5983] cp210x 3-1:0.79: cp210x converter detected [ 350.969007][ T5983] cp210x 3-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 350.984573][ T5983] cp210x 3-1:0.79: querying part number failed [ 350.997674][ T5983] usb 3-1: cp210x converter now attached to ttyUSB0 [ 351.047551][T10364] netlink: 16 bytes leftover after parsing attributes in process `syz.9.920'. [ 351.047931][ T5983] usb 3-1: USB disconnect, device number 17 [ 351.114161][ T5983] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 351.141696][ T5983] cp210x 3-1:0.79: device disconnected [ 351.186561][T10371] netlink: 'syz.0.923': attribute type 10 has an invalid length. [ 351.309244][T10371] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 351.336210][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.8.925'. [ 351.350318][T10370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.378967][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 351.389249][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 351.728216][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 351.734803][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 351.889090][T10388] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 352.271461][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 352.316976][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 352.347729][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 352.354347][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 352.362774][T10378] ceph: No mds server is up or the cluster is laggy [ 352.854386][T10395] ceph: No mds server is up or the cluster is laggy [ 353.058002][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 353.064056][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 354.037133][T10431] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 355.090082][T10443] 9p: Bad value for 'rfdno' [ 355.372495][ T5978] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 355.546228][T10448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.789884][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 355.841263][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 355.917876][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 355.932002][ T5978] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 355.953644][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.002424][ T5978] usb 2-1: Product: syz [ 356.030836][ T5978] usb 2-1: Manufacturer: syz [ 356.077515][ T5978] usb 2-1: SerialNumber: syz [ 356.104234][ T5978] usb 2-1: config 0 descriptor?? [ 356.110842][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 356.116977][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 356.455021][ T5978] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 356.594174][T10449] ceph: No mds server is up or the cluster is laggy [ 356.887862][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 356.942685][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 358.347779][T10513] netlink: 16 bytes leftover after parsing attributes in process `syz.9.954'. [ 358.447753][ T5978] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 358.478582][ T5978] usb 2-1: USB disconnect, device number 11 [ 359.648535][T10527] CIFS mount error: No usable UNC path provided in device string! [ 359.648535][T10527] [ 359.658637][T10527] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 360.089026][T10531] netlink: 'syz.2.957': attribute type 10 has an invalid length. [ 360.152258][T10531] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 360.720018][T10540] Bluetooth: MGMT ver 1.23 [ 360.927413][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 361.302765][T10560] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 362.066453][T10578] netlink: 'syz.9.969': attribute type 10 has an invalid length. [ 362.663972][T10584] input: syz1 as /devices/virtual/input/input40 [ 362.687780][T10584] input: failed to attach handler leds to device input40, error: -6 [ 364.090519][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 366.192689][T10649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.384461][T10679] netlink: 'syz.8.990': attribute type 1 has an invalid length. [ 368.432702][T10679] netlink: 'syz.8.990': attribute type 2 has an invalid length. [ 370.004582][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 370.188125][ T5983] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 370.377896][ T5983] usb 9-1: Using ep0 maxpacket: 8 [ 370.386630][ T5983] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 370.475741][ T5983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.511868][ T5983] usb 9-1: Product: syz [ 370.522676][ T5983] usb 9-1: Manufacturer: syz [ 370.544037][ T5983] usb 9-1: SerialNumber: syz [ 370.574540][ T5983] usb 9-1: config 0 descriptor?? [ 370.618047][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 370.857876][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 371.250591][ T5983] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 371.276000][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 371.317063][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.345074][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.383850][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.408175][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.469858][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 371.489269][T10743] 9p: Unknown parameter 'k' [ 371.494261][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.813819][ T9] usb 3-1: usb_control_msg returned -32 [ 371.982431][T10753] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 372.440734][ T9] usbtmc 3-1:16.0: can't read capabilities [ 372.781420][T10758] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 373.205511][ T5983] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 373.226214][ T5983] usb 9-1: USB disconnect, device number 7 [ 374.725194][T10794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.207504][ T5983] usb 3-1: USB disconnect, device number 18 [ 375.347993][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 375.624946][T10807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.321739][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1018'. [ 378.392568][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.413336][T10864] CIFS mount error: No usable UNC path provided in device string! [ 379.413336][T10864] [ 379.423395][T10864] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 380.099389][T10886] warning: `syz.2.1026' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 380.198098][ T43] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 380.261180][T10893] vivid-004: disconnect [ 380.388114][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 380.395974][ T43] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 380.404192][ T43] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.414545][ T43] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.424569][ T43] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.848134][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 380.859438][ T43] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.873617][ T43] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.884824][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.015070][T10891] vivid-004: reconnect [ 381.074809][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 381.117407][ T43] usb 9-1: usb_control_msg returned -32 [ 381.199149][ T43] usbtmc 9-1:16.0: can't read capabilities [ 381.640391][T10884] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 382.798689][T10927] fuse: Unknown parameter '0x0000000000000003' [ 383.177936][ T5923] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 383.407950][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 383.416457][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 383.437065][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.486332][ T5923] usb 2-1: Product: syz [ 383.493476][ T5923] usb 2-1: Manufacturer: syz [ 383.522003][ T5923] usb 2-1: SerialNumber: syz [ 383.554683][ T5923] usb 2-1: config 0 descriptor?? [ 383.577564][ T5978] usb 9-1: USB disconnect, device number 8 [ 384.558023][ T5923] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 384.679820][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 384.889363][ T43] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 384.901582][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.922722][ T43] usb 1-1: config 0 descriptor?? [ 385.317866][ T8783] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 385.469302][ T8783] usb 9-1: config 0 has an invalid interface number: 32 but max is 0 [ 385.479172][ T8783] usb 9-1: config 0 has no interface number 0 [ 385.487453][ T8783] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0003, bcdDevice=b5.4a [ 385.505525][ T8783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.514062][ T8783] usb 9-1: Product: syz [ 385.520294][ T8783] usb 9-1: Manufacturer: syz [ 385.525280][ T8783] usb 9-1: SerialNumber: syz [ 385.532720][ T8783] usb 9-1: config 0 descriptor?? [ 385.541244][ T8783] kvaser_usb 9-1:0.32: error -ENODEV: Cannot get usb endpoint(s) [ 385.795964][ T8783] usb 9-1: USB disconnect, device number 9 [ 385.869719][T10981] netlink: 'syz.9.1046': attribute type 7 has an invalid length. [ 385.877614][T10981] netlink: 'syz.9.1046': attribute type 8 has an invalid length. [ 385.885636][T10981] netlink: 'syz.9.1046': attribute type 15 has an invalid length. [ 386.211428][T10987] tmpfs: Unknown parameter '18446744073709551615' [ 386.212695][ T5923] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 386.341090][ T5923] usb 2-1: USB disconnect, device number 12 [ 386.646017][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.759558][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1050'. [ 387.083799][ T43] pegasus 1-1:0.0: setup Pegasus II specific registers [ 387.125751][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.202686][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.219302][ T43] pegasus 1-1:0.0: can't locate MII phy, using default [ 387.254320][ T43] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 5a:9b:9b:b0:c6:51 [ 387.275728][ T43] usb 1-1: USB disconnect, device number 10 [ 387.311773][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.377958][T10159] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 389.607921][T10159] usb 2-1: Using ep0 maxpacket: 32 [ 389.648732][T10159] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 389.677968][T10159] usb 2-1: config 0 has no interface number 0 [ 389.698740][T10159] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 389.708274][T10159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.737370][T10159] usb 2-1: Product: syz [ 389.795088][T10159] usb 2-1: Manufacturer: syz [ 389.854922][T10159] usb 2-1: SerialNumber: syz [ 389.878185][T10159] usb 2-1: config 0 descriptor?? [ 389.992682][T10159] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 390.036618][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.070238][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.077662][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 390.098429][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 390.112200][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 390.194208][T10159] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 390.216673][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 390.236702][ T13] bond0 (unregistering): Released all slaves [ 390.237641][T10159] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 390.602763][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 390.635215][T10159] usb 2-1: USB disconnect, device number 13 [ 390.695470][T10159] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 390.716855][ T13] tipc: Left network mode [ 390.828446][T10159] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 390.908294][T10159] quatech2 2-1:0.51: device disconnected [ 391.561477][T11073] 9p: Bad value for 'rfdno' [ 391.868462][ T13] hsr_slave_0: left promiscuous mode [ 391.880405][ T13] hsr_slave_1: left promiscuous mode [ 391.896810][ T13] veth1_macvtap: left promiscuous mode [ 391.908630][ T13] veth0_macvtap: left promiscuous mode [ 391.922206][ T13] veth1_vlan: left promiscuous mode [ 392.157886][ T5864] Bluetooth: hci1: command tx timeout [ 392.418412][T11085] fuse: Unknown parameter 'fd0x0000000000000003' [ 392.873984][ T92] infiniband syz1: ib_query_port failed (-19) [ 392.909005][T11092] netlink: 'syz.1.1073': attribute type 10 has an invalid length. [ 392.961938][T11092] veth0_vlan: left promiscuous mode [ 392.982204][T11092] veth0_vlan: entered promiscuous mode [ 393.009745][T11092] team0: Device veth0_vlan failed to register rx_handler [ 393.281841][T11049] chnl_net:caif_netlink_parms(): no params data found [ 393.459106][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1076'. [ 393.468680][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1076'. [ 394.070399][T11049] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.099097][T11049] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.118281][T11049] bridge_slave_0: entered allmulticast mode [ 394.125191][T11049] bridge_slave_0: entered promiscuous mode [ 394.133436][T11049] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.140905][T11049] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.150646][T11049] bridge_slave_1: entered allmulticast mode [ 394.157582][T11049] bridge_slave_1: entered promiscuous mode [ 394.228199][ T5864] Bluetooth: hci1: command tx timeout [ 394.771328][T11049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.816126][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 394.909061][T11049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.019744][T11127] 9p: Bad value for 'rfdno' [ 395.419762][T11049] team0: Port device team_slave_0 added [ 395.453594][T11129] fuse: Unknown parameter 'fd0x0000000000000003' [ 395.465064][T11049] team0: Port device team_slave_1 added [ 395.562111][T11049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.570044][T11049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.716366][T11049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.756706][T11049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.765415][T11049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.792084][T11049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.105212][T11049] hsr_slave_0: entered promiscuous mode [ 396.140181][T11049] hsr_slave_1: entered promiscuous mode [ 396.205404][T11143] mmap: syz.1.1084 (11143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 396.317914][ T5864] Bluetooth: hci1: command tx timeout [ 396.331409][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1086'. [ 396.347051][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1086'. [ 397.545397][T11166] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1090'. [ 397.554905][T11166] openvswitch: netlink: Message has 512 unknown bytes. [ 398.361334][T11049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 398.387899][ T5864] Bluetooth: hci1: command tx timeout [ 398.422044][T11049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 398.434444][T11170] netlink: 'syz.9.1089': attribute type 10 has an invalid length. [ 398.516486][T11049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.582459][T11170] veth0_vlan: left promiscuous mode [ 398.600630][T11170] veth0_vlan: entered promiscuous mode [ 398.617107][T11170] team0: Device veth0_vlan failed to register rx_handler [ 398.710103][T11049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 398.771820][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 399.777647][T11049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.840578][T11049] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.853679][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.860814][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.080737][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.088074][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.978002][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 401.946258][T11049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.852018][T11049] veth0_vlan: entered promiscuous mode [ 402.974403][T11049] veth1_vlan: entered promiscuous mode [ 403.116575][T11049] veth0_macvtap: entered promiscuous mode [ 403.124853][T11049] veth1_macvtap: entered promiscuous mode [ 403.139732][T11049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.230359][T11049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.345138][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.741240][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.766483][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.779084][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.907463][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.945524][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.117647][T11283] netlink: 'syz.9.1106': attribute type 15 has an invalid length. [ 404.125658][T11283] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1106'. [ 404.198728][ T7476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.620167][ T7476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.526440][ T3004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.568879][T11327] syzkaller0: entered promiscuous mode [ 406.577410][T11327] syzkaller0: entered allmulticast mode [ 406.640363][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.647622][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.656574][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.665200][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.674400][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.710279][ T3004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.156303][ T3004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.237366][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.246736][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.254018][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.262234][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.272668][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.537273][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1124'. [ 407.865896][ T3004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.217681][ T3004] bridge_slave_1: left allmulticast mode [ 408.239740][ T3004] bridge_slave_1: left promiscuous mode [ 408.266377][T11375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.290603][T11375] random: crng reseeded on system resumption [ 408.365254][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.382774][ T3004] bridge_slave_0: left allmulticast mode [ 408.396179][ T3004] bridge_slave_0: left promiscuous mode [ 408.407774][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.707994][ T5866] Bluetooth: hci0: command tx timeout [ 408.784315][T11380] tmpfs: Bad value for 'mpol' [ 408.846637][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.856453][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.890352][ T3004] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 408.990778][ T3004] bond0 (unregistering): Released all slaves [ 409.348684][ T5866] Bluetooth: hci2: command tx timeout [ 409.890579][ T3004] tipc: Left network mode [ 410.011515][T11334] chnl_net:caif_netlink_parms(): no params data found [ 410.222305][T11062] syz.8.1067 (11062) used greatest stack depth: 16800 bytes left [ 410.823469][T11412] block device autoloading is deprecated and will be removed. [ 410.831252][ T5866] Bluetooth: hci0: command tx timeout [ 411.310249][T11356] chnl_net:caif_netlink_parms(): no params data found [ 411.447874][ T5866] Bluetooth: hci2: command tx timeout [ 411.555927][T11434] netlink: 'syz.0.1136': attribute type 9 has an invalid length. [ 412.115465][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.124656][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.140513][T11334] bridge_slave_0: entered allmulticast mode [ 412.219063][T11334] bridge_slave_0: entered promiscuous mode [ 412.233351][ T3004] hsr_slave_0: left promiscuous mode [ 412.269751][ T3004] hsr_slave_1: left promiscuous mode [ 412.275494][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.285605][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.295918][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.313682][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.344306][ T3004] veth1_macvtap: left promiscuous mode [ 412.354268][ T3004] veth0_macvtap: left promiscuous mode [ 412.377923][ T3004] veth1_vlan: left promiscuous mode [ 412.637490][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 412.958156][ T5866] Bluetooth: hci0: command tx timeout [ 413.061039][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 413.163909][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.173431][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.182115][T11334] bridge_slave_1: entered allmulticast mode [ 413.191060][T11334] bridge_slave_1: entered promiscuous mode [ 413.289100][T11467] tmpfs: Bad value for 'mpol' [ 413.520690][ T5866] Bluetooth: hci2: command tx timeout [ 414.303107][ T30] audit: type=1800 audit(1755830757.680:184): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1141" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 414.379585][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.400237][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.427065][T11356] bridge_slave_0: entered allmulticast mode [ 414.434249][T11356] bridge_slave_0: entered promiscuous mode [ 414.448563][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.458876][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.466049][T11356] bridge_slave_1: entered allmulticast mode [ 414.473335][T11356] bridge_slave_1: entered promiscuous mode [ 414.571374][T11334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.705465][T11492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.884402][T11334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.894992][T11356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.917844][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 415.029450][ T5866] Bluetooth: hci0: command tx timeout [ 415.070355][T11356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.090111][ T5924] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 415.138815][T11334] team0: Port device team_slave_0 added [ 415.146157][ T5924] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 415.165479][ T5924] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 415.175771][T11334] team0: Port device team_slave_1 added [ 415.197628][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.387718][T11356] team0: Port device team_slave_0 added [ 415.400580][T11356] team0: Port device team_slave_1 added [ 415.409560][ T3004] IPVS: stop unused estimator thread 0... [ 415.411580][T11334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.519375][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.545350][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.557316][T11334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.571514][T11334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.586660][T11502] netlink: 'syz.9.1145': attribute type 10 has an invalid length. [ 415.601549][ T5866] Bluetooth: hci2: command tx timeout [ 415.620495][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.646471][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.682497][T11334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.778208][T11502] veth0_vlan: left promiscuous mode [ 415.859423][T11502] veth0_vlan: entered promiscuous mode [ 415.880653][T11502] team0: Device veth0_vlan failed to register rx_handler [ 416.037033][T11356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.045082][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.094878][T11356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.253155][ T3004] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.393217][T11334] hsr_slave_0: entered promiscuous mode [ 416.401023][T11334] hsr_slave_1: entered promiscuous mode [ 416.429406][T11334] debugfs: 'hsr0' already exists in 'hsr' [ 416.456994][T11334] Cannot create hsr debugfs directory [ 416.492542][T11356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.507053][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.532972][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.623910][T11356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.685295][ T3004] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.754731][T11356] hsr_slave_0: entered promiscuous mode [ 416.768944][T11356] hsr_slave_1: entered promiscuous mode [ 416.802249][T11356] debugfs: 'hsr0' already exists in 'hsr' [ 416.832522][T11356] Cannot create hsr debugfs directory [ 416.855790][ T3004] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.040886][ T3004] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.541968][ T3004] bridge_slave_1: left allmulticast mode [ 417.547711][ T3004] bridge_slave_1: left promiscuous mode [ 417.553749][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.600673][ T5923] usb 6-1: USB disconnect, device number 2 [ 417.616336][ T3004] bridge_slave_0: left allmulticast mode [ 417.624070][ T3004] bridge_slave_0: left promiscuous mode [ 417.630697][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.214893][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.227441][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.240673][ T3004] bond0 (unregistering): Released all slaves [ 419.739321][ T3004] hsr_slave_0: left promiscuous mode [ 419.745030][ T3004] hsr_slave_1: left promiscuous mode [ 419.761138][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.778053][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.831139][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.842759][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.871832][ T3004] veth1_macvtap: left promiscuous mode [ 419.885333][ T3004] veth0_macvtap: left promiscuous mode [ 419.903841][ T3004] veth1_vlan: left promiscuous mode [ 419.918102][ T3004] veth0_vlan: left promiscuous mode [ 420.377896][ T5978] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 420.476184][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 420.491873][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 420.500767][ T49] smc: removing ib device syz! [ 420.554798][ T5978] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 420.565358][ T5978] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 420.577065][ T5978] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 420.587642][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.996689][T11612] tipc: Enabling of bearer rejected, failed to enable media [ 421.407976][T11356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.460997][T11356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.516080][T11356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.649010][T11356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.874623][T11334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.959777][ T5978] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 422.147905][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 422.200537][T11334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.219978][T11334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.254819][T11334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.302598][ T5978] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 422.429756][ T5978] usb 1-1: config 0 has no interface number 0 [ 422.498302][ T5978] usb 1-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 422.507446][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.516756][ T5978] usb 1-1: Product: syz [ 422.542674][ T5978] usb 1-1: Manufacturer: syz [ 422.549641][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.565899][ T5978] usb 1-1: SerialNumber: syz [ 422.587644][ T5978] usb 1-1: config 0 descriptor?? [ 422.623328][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.684007][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.691148][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.742361][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.749466][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.856778][T11334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.917162][T11334] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.935521][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.942655][ T7476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.985056][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.992206][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.168502][T11356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.328992][T11356] veth0_vlan: entered promiscuous mode [ 423.382097][T11356] veth1_vlan: entered promiscuous mode [ 423.439110][T11334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.502570][T11356] veth0_macvtap: entered promiscuous mode [ 423.532011][T11356] veth1_macvtap: entered promiscuous mode [ 423.575117][T11356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.609650][T11356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.661037][ T1007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.686971][ T5924] usb 6-1: USB disconnect, device number 3 [ 423.699333][ T1007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.739476][ T1007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.771359][ T1007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.914380][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.923001][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.951203][T11334] veth0_vlan: entered promiscuous mode [ 423.979554][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.052666][T11334] veth1_vlan: entered promiscuous mode [ 424.060389][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.097662][T11678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.222456][T11334] veth0_macvtap: entered promiscuous mode [ 424.374725][T11334] veth1_macvtap: entered promiscuous mode [ 424.876824][ T5978] cp210x 1-1:0.79: cp210x converter detected [ 425.009284][ T5978] cp210x 1-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 425.023436][ T5978] cp210x 1-1:0.79: querying part number failed [ 425.035266][ T5978] usb 1-1: cp210x converter now attached to ttyUSB0 [ 425.063592][ T5978] usb 1-1: USB disconnect, device number 11 [ 425.064926][T11686] tipc: Started in network mode [ 425.080459][ T5978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 425.097883][T11686] tipc: Node identity e634f1e1863d, cluster identity 4711 [ 425.109062][T11686] tipc: Enabled bearer , priority 0 [ 425.117086][T11334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.125865][ T5978] cp210x 1-1:0.79: device disconnected [ 425.137701][T11334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.163626][T11684] tipc: Resetting bearer [ 425.173671][T11683] tipc: Disabling bearer [ 425.444918][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.864195][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.154193][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.177864][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 426.269414][T11714] input: syz1 as /devices/virtual/input/input41 [ 426.275856][T11714] input: failed to attach handler leds to device input41, error: -6 [ 426.359409][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.491936][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 426.550921][ T24] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 426.577471][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 426.625604][ T7476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.639166][ T7476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.648399][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.674640][ T7476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.683465][ T7476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.376894][T11701] kAFS: unable to lookup cell '.,' [ 428.596613][ T8783] usb 4-1: USB disconnect, device number 28 [ 431.181355][T11780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.206024][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1194'. [ 431.383575][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 431.880029][T11780] random: crng reseeded on system resumption [ 432.833294][ T5943] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 433.369828][T11822] CIFS mount error: No usable UNC path provided in device string! [ 433.369828][T11822] [ 433.380095][T11822] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 433.386535][T11823] input: syz1 as /devices/virtual/input/input42 [ 433.395383][ T5943] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 433.459516][ T5943] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 433.469425][ T5943] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.487819][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.553253][T11823] input: failed to attach handler leds to device input42, error: -6 [ 434.226275][T11806] kAFS: unable to lookup cell '.,' [ 436.729423][ T24] usb 5-1: USB disconnect, device number 17 [ 437.158376][T11870] syz.4.1211 uses obsolete (PF_INET,SOCK_PACKET) [ 439.831532][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.640817][T11914] tipc: Enabling of bearer rejected, failed to enable media [ 440.877911][ T5983] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 441.055357][ T30] audit: type=1800 audit(1755830784.425:185): pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1224" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 441.075783][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 441.259669][ T5983] usb 1-1: Using ep0 maxpacket: 16 [ 441.329671][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 441.917218][T11933] input: syz1 as /devices/virtual/input/input43 [ 441.918783][ T24] usb 6-1: config 0 has an invalid interface number: 79 but max is 0 [ 441.932835][ T24] usb 6-1: config 0 has no interface number 0 [ 442.016060][T11933] input: failed to attach handler leds to device input43, error: -6 [ 442.087962][ T24] usb 6-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 442.097050][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.456584][ T24] usb 6-1: Product: syz [ 442.465793][ T24] usb 6-1: Manufacturer: syz [ 442.541936][T11947] netlink: 'syz.4.1227': attribute type 15 has an invalid length. [ 442.550562][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1227'. [ 442.604294][ T24] usb 6-1: SerialNumber: syz [ 442.810429][ T24] usb 6-1: config 0 descriptor?? [ 444.692159][ T24] cp210x 6-1:0.79: cp210x converter detected [ 444.726739][ T24] cp210x 6-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 444.735025][ T24] cp210x 6-1:0.79: querying part number failed [ 444.742879][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 444.753340][ T24] usb 6-1: USB disconnect, device number 4 [ 444.760661][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 444.770127][ T24] cp210x 6-1:0.79: device disconnected [ 445.062073][ T5983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 445.110117][ T5983] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 445.131325][ T5983] usb 1-1: can't read configurations, error -71 [ 445.281030][T11996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.294490][T11996] random: crng reseeded on system resumption [ 445.395705][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.499740][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.578760][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.647638][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.978067][ T49] bridge_slave_1: left allmulticast mode [ 445.983859][ T49] bridge_slave_1: left promiscuous mode [ 446.055328][T12015] netlink: 'syz.0.1242': attribute type 15 has an invalid length. [ 446.063299][T12015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1242'. [ 446.104309][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.200442][ T49] bridge_slave_0: left allmulticast mode [ 446.209862][ T49] bridge_slave_0: left promiscuous mode [ 446.215513][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.746588][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.764263][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.785588][ T49] bond0 (unregistering): Released all slaves [ 447.013200][ T49] hsr_slave_0: left promiscuous mode [ 447.037001][ T49] hsr_slave_1: left promiscuous mode [ 447.075525][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.090568][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.117013][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.124585][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.146203][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.164034][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.164421][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.203987][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 447.220977][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.280247][ T49] veth1_macvtap: left promiscuous mode [ 447.287993][ T49] veth0_macvtap: left promiscuous mode [ 447.293564][ T49] veth1_vlan: left promiscuous mode [ 447.302071][ T49] veth0_vlan: left promiscuous mode [ 448.029132][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 448.038574][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1251'. [ 448.133715][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 448.302343][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.401974][ T49] team0 (unregistering): Port device team_slave_1 removed [ 448.505026][ T49] team0 (unregistering): Port device team_slave_0 removed [ 448.697454][ T9] libceph: connect (1)[c::]:6789 error -101 [ 448.748937][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 449.008239][ T9] libceph: connect (1)[c::]:6789 error -101 [ 449.056684][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 449.263874][T12088] ceph: No mds server is up or the cluster is laggy [ 449.269791][ T5864] Bluetooth: hci1: command tx timeout [ 449.330407][T12117] netlink: 'syz.0.1261': attribute type 15 has an invalid length. [ 449.338802][T12117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 449.514328][T12049] chnl_net:caif_netlink_parms(): no params data found [ 449.687089][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 449.697437][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 450.469061][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.486391][T12135] tipc: Failed to remove unknown binding: 66,1,1/0:3959823793/3959823795 [ 450.488684][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.496196][T12135] tipc: Failed to remove unknown binding: 66,1,1/0:3959823793/3959823795 [ 450.508909][T12049] bridge_slave_0: entered allmulticast mode [ 450.518533][T12049] bridge_slave_0: entered promiscuous mode [ 450.596341][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.651023][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.671200][T12049] bridge_slave_1: entered allmulticast mode [ 450.730652][T12049] bridge_slave_1: entered promiscuous mode [ 450.899632][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.990274][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.051250][T12146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.298808][T12049] team0: Port device team_slave_0 added [ 451.353123][T12049] team0: Port device team_slave_1 added [ 451.361765][ T5864] Bluetooth: hci1: command tx timeout [ 451.425839][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.434487][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.460581][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.473965][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.480994][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.551032][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.654941][T12049] hsr_slave_0: entered promiscuous mode [ 451.681589][T12049] hsr_slave_1: entered promiscuous mode [ 453.346484][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 453.362994][T12192] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.407995][T12049] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 453.440540][ T5864] Bluetooth: hci1: command tx timeout [ 453.453932][T12049] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 453.588341][T12049] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 453.621093][T12049] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 453.780293][T12212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.898287][T12228] netlink: 'syz.4.1279': attribute type 15 has an invalid length. [ 453.908304][T12228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1279'. [ 454.093839][T12049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.119216][T12049] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.307479][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.314624][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.359199][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.366370][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.509558][ T5864] Bluetooth: hci1: command tx timeout [ 455.550080][T12049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.852914][T12277] CIFS mount error: No usable UNC path provided in device string! [ 455.852914][T12277] [ 455.863039][T12277] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 455.924444][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 455.936373][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 456.737160][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.916107][T12290] fuse: Unknown parameter 'grou00000000000000000000' [ 457.459000][T12049] veth0_vlan: entered promiscuous mode [ 457.569032][T12049] veth1_vlan: entered promiscuous mode [ 457.593003][T12049] veth0_macvtap: entered promiscuous mode [ 457.638611][T12049] veth1_macvtap: entered promiscuous mode [ 457.740721][T12049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.760785][T12049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.783094][ T3004] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.822440][ T3004] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.006831][ T3004] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.034849][ T3004] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.121946][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.171037][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.227703][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.279504][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.055699][T12327] netlink: 'syz.4.1299': attribute type 15 has an invalid length. [ 459.073846][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1299'. [ 459.175743][T12333] CIFS mount error: No usable UNC path provided in device string! [ 459.175743][T12333] [ 459.185761][T12333] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 459.537965][ T5944] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 459.723136][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 459.766540][ T5944] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 459.799240][ T5944] usb 4-1: config 0 has no interface number 0 [ 459.958402][ T5944] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 460.371091][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.446365][ T5944] usb 4-1: Product: syz [ 460.477564][ T5944] usb 4-1: Manufacturer: syz [ 460.480283][T12361] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 460.483747][ T5944] usb 4-1: SerialNumber: syz [ 460.499879][ T5944] usb 4-1: config 0 descriptor?? [ 460.776424][T12365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.263464][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 462.791545][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 462.806746][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 462.818874][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.836949][ T9] usb 1-1: Product: syz [ 462.844085][ T9] usb 1-1: Manufacturer: syz [ 462.861838][ T9] usb 1-1: SerialNumber: syz [ 462.899599][ T9] usb 1-1: config 0 descriptor?? [ 463.025060][ T5864] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 463.192490][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 463.367385][ T5944] cp210x 4-1:0.79: cp210x converter detected [ 463.389916][ T5944] cp210x 4-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 463.397584][ T5944] cp210x 4-1:0.79: querying part number failed [ 463.438659][ T5944] usb 4-1: cp210x converter now attached to ttyUSB0 [ 463.470672][ T5944] usb 4-1: USB disconnect, device number 29 [ 463.615199][ T5944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 463.629117][ T5944] cp210x 4-1:0.79: device disconnected [ 463.732160][T12433] netlink: 'syz.9.1321': attribute type 9 has an invalid length. [ 464.394918][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 465.455987][ T5983] usb 1-1: USB disconnect, device number 14 [ 466.328762][ T5983] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 466.831202][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 466.842467][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 467.274905][ T5983] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 467.300931][ T5983] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 467.334017][ T5983] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.405877][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.636201][T12483] kAFS: unable to lookup cell '.,' [ 469.247093][ T5983] usb 1-1: USB disconnect, device number 15 [ 469.336562][ T8783] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 469.517840][ T8783] usb 7-1: Using ep0 maxpacket: 16 [ 471.167870][T10159] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 471.327834][T10159] usb 4-1: Using ep0 maxpacket: 8 [ 471.352773][T10159] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 471.366567][T10159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.398384][T10159] usb 4-1: Product: syz [ 471.415252][T10159] usb 4-1: Manufacturer: syz [ 471.438281][T10159] usb 4-1: SerialNumber: syz [ 471.469063][ T5944] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 471.531127][T10159] usb 4-1: config 0 descriptor?? [ 471.553610][T10159] gspca_main: sq905-2.14.0 probing 2770:9120 [ 471.630282][ T5944] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 471.641986][ T5944] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 471.653857][ T5944] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 471.679540][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.947638][T12586] kAFS: unable to lookup cell '.,' [ 472.155198][T10159] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 472.166758][T10159] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 472.183554][T10159] usb 4-1: USB disconnect, device number 30 [ 472.800159][ T8783] usb 7-1: unable to get BOS descriptor or descriptor too short [ 472.820186][ T8783] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 472.856652][ T8783] usb 7-1: can't read configurations, error -71 [ 473.251733][T12621] tipc: Started in network mode [ 473.296769][T12621] tipc: Node identity ea7746cdf6c9, cluster identity 4711 [ 473.325632][T12621] tipc: Enabled bearer , priority 0 [ 473.344488][T12624] syzkaller0: entered promiscuous mode [ 473.358212][T12624] syzkaller0: entered allmulticast mode [ 473.389137][T12621] tipc: Resetting bearer [ 473.467178][T12619] tipc: Resetting bearer [ 473.592194][T12619] tipc: Disabling bearer [ 475.262108][ T9] usb 1-1: USB disconnect, device number 16 [ 479.458013][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 480.257346][T12704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.273369][T12704] random: crng reseeded on system resumption [ 488.802551][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 488.837998][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 488.917853][T10159] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 492.595479][T12731] ceph: No mds server is up or the cluster is laggy [ 492.767719][ C0] sched: DL replenish lagged too much [ 492.914265][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 493.992048][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 496.638553][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 496.687784][T10159] usb 7-1: device descriptor read/64, error -110 [ 496.712048][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 497.277781][T10159] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 497.661050][T10159] usb 7-1: device descriptor read/64, error -32 [ 501.597880][T10159] usb usb7-port1: attempt power cycle [ 501.781205][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.357986][T10159] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 502.539534][T10159] usb 7-1: device descriptor read/8, error -32 [ 503.609585][T10159] raw-gadget.0 gadget.6: failed to queue resume event [ 520.856796][T10159] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 616.367635][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 616.374626][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12744/1:b..l P11356/1:b..l [ 616.383859][ C0] rcu: (detected by 0, t=10502 jiffies, g=48193, q=1132923 ncpus=2) [ 616.391933][ C0] task:syz-executor state:R running task stack:21736 pid:11356 tgid:11356 ppid:1 task_flags:0x40054c flags:0x00004006 [ 616.405447][ C0] Call Trace: [ 616.408740][ C0] [ 616.411689][ C0] __schedule+0x1798/0x4cc0 [ 616.416241][ C0] ? __pfx___schedule+0x10/0x10 [ 616.421095][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.426224][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.431014][ C0] preempt_schedule_irq+0xb5/0x150 [ 616.436147][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 616.441879][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.446668][ C0] ? rcu_irq_exit_check_preempt+0xd6/0x210 [ 616.452504][ C0] irqentry_exit+0x6f/0x90 [ 616.456937][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.462952][ C0] RIP: 0010:unwind_next_frame+0x26a/0x2390 [ 616.468785][ C0] Code: 1c 00 00 44 8b 45 00 41 ff c0 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 34 45 4c 36 4b 90 48 81 fe 62 fd 00 91 0f 83 24 18 00 00 <4b> 8d 04 40 48 8d 04 45 4c 36 4b 90 48 3d 62 fd 00 91 0f 87 0c 18 [ 616.488409][ C0] RSP: 0018:ffffc90003d9f578 EFLAGS: 00000283 [ 616.494498][ C0] RAX: 000000000003bbd1 RBX: dffffc0000000000 RCX: 633d3c76caf2ea00 [ 616.502483][ C0] RDX: 00000000000a826f RSI: ffffffff9052adee RDI: ffffffff8c035820 [ 616.510464][ C0] RBP: ffffffff910293f8 R08: 0000000000013ea2 R09: 0000000000000000 [ 616.518452][ C0] R10: ffffc90003d9f698 R11: ffffffff81ad2180 R12: ffffffff8165a4f9 [ 616.526440][ C0] R13: 0000000000013e9b R14: ffffc90003d9f648 R15: 00000000000065a4 [ 616.534447][ C0] ? arch_do_signal_or_restart+0x99/0x750 [ 616.540197][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 616.546372][ C0] ? unwind_next_frame+0xcb/0x2390 [ 616.551500][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.556628][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 616.562382][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 616.568559][ C0] arch_stack_walk+0x11c/0x150 [ 616.573360][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 616.579079][ C0] stack_trace_save+0x9c/0xe0 [ 616.583764][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 616.589141][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 616.593913][ C0] ? __kmalloc_cache_noprof+0x21c/0x3a0 [ 616.599475][ C0] ? kmem_cache_free+0x166/0x400 [ 616.604508][ C0] ? task_work_run+0x1d4/0x260 [ 616.609283][ C0] ? do_exit+0x6b5/0x2300 [ 616.613620][ C0] ? do_group_exit+0x21c/0x2d0 [ 616.618411][ C0] ? get_signal+0x1286/0x1340 [ 616.623110][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 616.628833][ C0] kasan_save_stack+0x3e/0x60 [ 616.633532][ C0] ? kasan_save_stack+0x3e/0x60 [ 616.638394][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 616.643795][ C0] ? kmem_cache_free+0x2f6/0x400 [ 616.648746][ C0] ? task_work_run+0x1d4/0x260 [ 616.653533][ C0] ? do_exit+0x6b5/0x2300 [ 616.657882][ C0] ? do_group_exit+0x21c/0x2d0 [ 616.662669][ C0] ? get_signal+0x1286/0x1340 [ 616.667366][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 616.673130][ C0] ? task_work_run+0x1d4/0x260 [ 616.677894][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 616.683121][ C0] kmem_cache_free+0x2f6/0x400 [ 616.687899][ C0] task_work_run+0x1d4/0x260 [ 616.692511][ C0] ? __pfx_task_work_run+0x10/0x10 [ 616.697644][ C0] do_exit+0x6b5/0x2300 [ 616.701826][ C0] ? do_raw_spin_lock+0x121/0x290 [ 616.706866][ C0] ? __pfx_do_exit+0x10/0x10 [ 616.711467][ C0] ? remove_wait_queue+0x33/0x120 [ 616.716514][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.721287][ C0] do_group_exit+0x21c/0x2d0 [ 616.725866][ C0] get_signal+0x1286/0x1340 [ 616.730374][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 616.735941][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 616.741233][ C0] ? fput_close_sync+0x119/0x200 [ 616.746179][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 616.752353][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.757137][ C0] exit_to_user_mode_loop+0x75/0x130 [ 616.762449][ C0] do_syscall_64+0x2bd/0xfa0 [ 616.767057][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.773130][ C0] ? clear_bhb_loop+0x60/0xb0 [ 616.777894][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.783824][ C0] RIP: 0033:0x7feacc784e57 [ 616.788254][ C0] RSP: 002b:00007fffd48fe0c0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 616.796689][ C0] RAX: fffffffffffffe00 RBX: 000000000000006c RCX: 00007feacc784e57 [ 616.804665][ C0] RDX: 0000000040000000 RSI: 00007fffd48fe12c RDI: 00000000ffffffff [ 616.812642][ C0] RBP: 00007fffd48fe12c R08: 0000000000000000 R09: 0000000000000000 [ 616.820622][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000020 [ 616.828590][ C0] R13: 0000555560672590 R14: 00000000000753b5 R15: 00007fffd48fe180 [ 616.836584][ C0] [ 616.839612][ C0] task:syz-executor state:R running task stack:24232 pid:12744 tgid:12744 ppid:5846 task_flags:0x400100 flags:0x00004002 [ 616.853110][ C0] Call Trace: [ 616.856398][ C0] [ 616.859335][ C0] __schedule+0x1798/0x4cc0 [ 616.863854][ C0] ? call_rcu+0x157/0x9c0 [ 616.868211][ C0] ? mas_store_prealloc+0xb00/0xf60 [ 616.873422][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.878207][ C0] ? __pfx___schedule+0x10/0x10 [ 616.883094][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.888215][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.893337][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.898120][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.903248][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.908033][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.913159][ C0] ? lock_release+0x4b/0x3e0 [ 616.917760][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.922644][ C0] preempt_schedule_irq+0xb5/0x150 [ 616.927756][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 616.933489][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.938274][ C0] ? rcu_irq_exit_check_preempt+0xd6/0x210 [ 616.944109][ C0] irqentry_exit+0x6f/0x90 [ 616.948563][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 616.954565][ C0] RIP: 0010:lock_acquire+0x70/0x360 [ 616.959785][ C0] Code: f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 b8 bf 25 0e 73 16 e8 61 02 09 00 84 c0 75 0d f6 05 12 a2 0f 0e 01 0f 84 d7 01 00 00 <83> 3d d9 f0 25 0e 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c [ 616.979402][ C0] RSP: 0018:ffffc9000b586c58 EFLAGS: 00000202 [ 616.985482][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 384e5232fe56b000 [ 616.993462][ C0] RDX: 0000000000000000 RSI: ffffffff8c035860 RDI: ffffffff8c035820 [ 617.001453][ C0] RBP: ffffffff8173a1d5 R08: 0000000000000000 R09: 0000000000000000 [ 617.009435][ C0] R10: ffffc9000b586e18 R11: ffffffff81ad2180 R12: 0000000000000002 [ 617.017417][ C0] R13: ffffffff8e33bfe0 R14: 0000000000000000 R15: 0000000000000000 [ 617.025396][ C0] ? unwind_next_frame+0xa5/0x2390 [ 617.030607][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.036785][ C0] ? lock_acquire+0x5f/0x360 [ 617.041385][ C0] ? rcu_is_watching+0x15/0xb0 [ 617.046162][ C0] ? unwind_next_frame+0xa5/0x2390 [ 617.051281][ C0] ? lock_release+0x4b/0x3e0 [ 617.055886][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 617.061200][ C0] ? deref_stack_reg+0x19f/0x230 [ 617.066142][ C0] ? __pte_alloc+0x25/0x1a0 [ 617.070660][ C0] ? unwind_next_frame+0xa5/0x2390 [ 617.075765][ C0] unwind_next_frame+0xc2/0x2390 [ 617.080692][ C0] ? unwind_next_frame+0xa5/0x2390 [ 617.085819][ C0] ? unwind_next_frame+0xa5/0x2390 [ 617.090945][ C0] ? pte_alloc_one+0x7d/0x170 [ 617.095639][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.101808][ C0] arch_stack_walk+0x11c/0x150 [ 617.106588][ C0] ? __pte_alloc+0x25/0x1a0 [ 617.111111][ C0] stack_trace_save+0x9c/0xe0 [ 617.115808][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 617.121192][ C0] save_stack+0xf5/0x1f0 [ 617.125427][ C0] ? __pfx_save_stack+0x10/0x10 [ 617.130272][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 617.135573][ C0] ? __put_partials+0x146/0x170 [ 617.140446][ C0] ? put_cpu_partial+0x17c/0x250 [ 617.145398][ C0] ? __slab_free+0x2b9/0x390 [ 617.150003][ C0] ? qlist_free_all+0x97/0x140 [ 617.154776][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 617.160419][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 617.165449][ C0] ? kmem_cache_alloc_noprof+0x1ad/0x390 [ 617.171118][ C0] ? ptlock_alloc+0x20/0x70 [ 617.175648][ C0] ? pte_alloc_one+0x7d/0x170 [ 617.180334][ C0] ? __pte_alloc+0x25/0x1a0 [ 617.184849][ C0] ? lock_release+0x4b/0x3e0 [ 617.189446][ C0] ? page_ext_get+0x22/0x2f0 [ 617.194034][ C0] __reset_page_owner+0x71/0x1f0 [ 617.198960][ C0] __free_frozen_pages+0xbc4/0xd30 [ 617.204068][ C0] __put_partials+0x146/0x170 [ 617.208741][ C0] put_cpu_partial+0x17c/0x250 [ 617.213500][ C0] ? put_cpu_partial+0x6d/0x250 [ 617.218433][ C0] __slab_free+0x2b9/0x390 [ 617.222846][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 617.228729][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 617.235050][ C0] ? __phys_addr+0xd3/0x180 [ 617.239557][ C0] qlist_free_all+0x97/0x140 [ 617.244137][ C0] kasan_quarantine_reduce+0x148/0x160 [ 617.249587][ C0] __kasan_slab_alloc+0x22/0x80 [ 617.254427][ C0] kmem_cache_alloc_noprof+0x1ad/0x390 [ 617.259873][ C0] ? ptlock_alloc+0x20/0x70 [ 617.264365][ C0] ptlock_alloc+0x20/0x70 [ 617.268688][ C0] pte_alloc_one+0x7d/0x170 [ 617.273178][ C0] __pte_alloc+0x25/0x1a0 [ 617.277497][ C0] copy_pmd_range+0x7805/0x7f00 [ 617.282334][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.288494][ C0] ? stack_trace_save+0x9c/0xe0 [ 617.293342][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 617.298536][ C0] ? kasan_save_track+0x4f/0x80 [ 617.303376][ C0] ? kasan_save_track+0x3e/0x80 [ 617.308214][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 617.313230][ C0] ? kmem_cache_alloc_noprof+0x1ad/0x390 [ 617.318849][ C0] ? vm_area_dup+0x2b/0x680 [ 617.323358][ C0] ? copy_mm+0x13c/0x4b0 [ 617.327588][ C0] ? mas_wr_walk_descend+0x543/0x880 [ 617.332878][ C0] copy_page_range+0xc14/0x1270 [ 617.337726][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 617.343007][ C0] ? up_write+0x1c4/0x420 [ 617.347318][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 617.354078][ C0] dup_mmap+0xf57/0x1ac0 [ 617.358322][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 617.362991][ C0] ? mm_init+0xd69/0xfa0 [ 617.367224][ C0] copy_mm+0x13c/0x4b0 [ 617.371284][ C0] copy_process+0x1706/0x3c00 [ 617.375955][ C0] ? rcu_is_watching+0x15/0xb0 [ 617.380709][ C0] ? copy_process+0x97f/0x3c00 [ 617.385466][ C0] ? __pfx_copy_process+0x10/0x10 [ 617.390496][ C0] ? perf_event_namespaces+0x15e/0x920 [ 617.395962][ C0] ? copy_pid_ns+0x798/0xa10 [ 617.400536][ C0] ? copy_pid_ns+0x87f/0xa10 [ 617.405116][ C0] kernel_clone+0x21e/0x840 [ 617.409601][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 617.414621][ C0] __x64_sys_clone+0x18b/0x1e0 [ 617.419366][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 617.424650][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 617.430716][ C0] ? rcu_is_watching+0x15/0xb0 [ 617.435476][ C0] ? rcu_is_watching+0x15/0xb0 [ 617.440247][ C0] do_syscall_64+0xfa/0xfa0 [ 617.444754][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.450807][ C0] ? clear_bhb_loop+0x60/0xb0 [ 617.455476][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.461350][ C0] RIP: 0033:0x7f1baef85453 [ 617.465751][ C0] RSP: 002b:00007ffd52a17798 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 617.474147][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1baef85453 [ 617.482107][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 617.490058][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.498014][ C0] R10: 00005555844f67d0 R11: 0000000000000246 R12: 0000000000000001 [ 617.505972][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 617.513931][ C0] [ 617.611351][ T1301] ieee802154 phy1 wpan1: encryption failed: -22