last executing test programs: 11m48.471365494s ago: executing program 1 (id=88): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="725eb862ce"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 11m46.54071141s ago: executing program 1 (id=91): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=""/151, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000002c0)) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000040)=0x6e, 0x40000) bind$unix(r2, 0x0, 0x0) mknod$loop(0x0, 0x2480, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) getsockopt$inet6_tcp_int(r3, 0x6, 0x12, 0xfffffffffffffffd, &(0x7f0000000340)) write(0xffffffffffffffff, &(0x7f00000000c0)='&\x00\x00', 0x3) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000190a010100bb000000000000020000000988028c3abe39c6ae80410784935820692b2b5ef2623d0df4abc3b1ddbff3165b88304fc5e7d4b388f6a34dfbbdc896c56c10040b4bb3485f312445f1d639f81edff32b4e43895ca32a845e60345519ed505874371ca8d5a67b0cde465ff60ce91a94e790eb38b439d94759785f24080b5193c49976416d390aaa8bffafc81391944ceb9537344a274571179e7ba1f6f5f0a4e2f11f86e90354a2457b7d792a173a10e66c9271a584f2b2aafbcc5c9f692cf5810105977b0000", @ANYRESHEX=r6], 0x2c}}, 0x8004) 11m43.749520702s ago: executing program 1 (id=97): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6808, 0x75, &(0x7f0000000240)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143fdcec18cc8b3213976a3fc08aff92f2b89945b7b0c5eefa27023b1255d07451cb983965bf38fa80e4f5da4a21b5352bff6de3f6e27b29198193485b14b2dfafd1ad93bac454dc7168420ddbb1513d32409e"}], 0x2}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') 11m40.058124224s ago: executing program 1 (id=105): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 11m39.47839045s ago: executing program 1 (id=107): r0 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r1 = syz_io_uring_setup(0x114, &(0x7f0000000040)={0x0, 0xa81, 0x1, 0x2, 0x3da, 0x0, r0}, &(0x7f0000000340), &(0x7f00000003c0)) io_uring_enter(r1, 0x5d2c, 0x8944, 0x5b, &(0x7f0000000380)={[0x5]}, 0x8) 11m39.24747802s ago: executing program 1 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getrlimit(0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x2, 0x0, 0x8, 0x7, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000050c003000a00010000000000000000004bee11046c9c721c95dee4c91f950454be99c5a15386d950f7b3fbfff59995e711357624ea8cb406"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x97da, 0x9, 0x5, 0x80, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x9}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x54}, 0x1, 0xba01}, 0x8004) 11m24.22012152s ago: executing program 32 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getrlimit(0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x2, 0x0, 0x8, 0x7, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000050c003000a00010000000000000000004bee11046c9c721c95dee4c91f950454be99c5a15386d950f7b3fbfff59995e711357624ea8cb406"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x97da, 0x9, 0x5, 0x80, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x9}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x54}, 0x1, 0xba01}, 0x8004) 2m48.738998386s ago: executing program 0 (id=1521): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x88c1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) eventfd(0x2000100) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f00000001c0)=[0x0]) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r6 = syz_io_uring_setup(0x114, &(0x7f0000000040)={0x0, 0xa81, 0x1, 0x2, 0x3da, 0x0, r5}, &(0x7f0000000340), &(0x7f00000003c0)) io_uring_enter(r6, 0x5d2c, 0x8944, 0x5b, &(0x7f0000000380)={[0x5]}, 0x8) sendmsg$nl_route(r4, 0x0, 0x800) 2m48.456692047s ago: executing program 4 (id=1523): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) 2m48.295331135s ago: executing program 4 (id=1525): setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x25dfdbfc, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 2m46.676336446s ago: executing program 4 (id=1527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) keyctl$clear(0x7, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086603, &(0x7f0000000040)) 2m44.392176196s ago: executing program 4 (id=1531): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={r0, r5, r6}, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r8, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x4734}}, 0x10) close_range(r7, r7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf2506000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000600040003000000080001007063690011000200303030303a30303a31302e300000000008000300010000001f00040003000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040000000000"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=r10, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x20008800}, 0x8010) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m43.141660211s ago: executing program 3 (id=1533): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 2m42.188168713s ago: executing program 3 (id=1534): syz_open_dev$evdev(0x0, 0x0, 0x2002) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r9, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r9, &(0x7f0000000000)='2\x00', 0x2) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x154) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 2m40.992004856s ago: executing program 3 (id=1535): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x100009, 0xffffffffc2c4adcc, 0x0, 0x4, 0x0, 0x2000004, 0x0, 0x0, 0x4}}, 0x50) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="030300000000fcffff290dbbe844b5b96e94feff0c000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000100)=@generic={0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg(r3, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @local, 0xe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="9b87a7e080d34ad499b9b36f4e70aee186d5d1e5772aa3f0467475f8094db20c5e5127a95234343b77c67c308ea9c06415fc620429d23dbfc0ef1a0e7dda683e", 0x40}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000180)="c5b755bb45e1f3c340d438006dde6f05e385d0c7f8d02d9e53cc1d31329ec33529d7017f11e4ff150c155a844235938f3e54cc915d4add4d4e356f37f84cba1e208d464bc1df12e391766e6edf700b83b4", 0x51}], 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60881, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2m40.413488271s ago: executing program 0 (id=1536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701002400128009000100626f6e64000000001400028008000700020000000800030008"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4606, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r9}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x4b) 2m37.70137283s ago: executing program 3 (id=1538): setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x25dfdbfc, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 2m37.337475136s ago: executing program 0 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000040)=ANY=[@ANYBLOB="4657b5d9cce9c9dc65c82dd2d33830e9fd084a6788dbff60ebf5b2298507d406839f5714bed2000fe63c87cae5c68eb277bc35598c33"], 0x1, 0x6e5, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) lgetxattr(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 2m35.956201776s ago: executing program 3 (id=1541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) keyctl$clear(0x7, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086603, &(0x7f0000000040)) 2m35.578896053s ago: executing program 0 (id=1542): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x96, "7c2e3e881a56c27696586bc6920712b9ab8b2936da63d19b19750597120b7b4a59cfc5a2abd7787a0ede316a38d34552ac4ec1dc704284ad74a143461f6de6994a8a4eb77ddb8e401201eb562747f8b02cb1f1cc1f3299249484b1ebf6902950b4a6cf40e7630ed9b19028f4ec99eac1628eea906583ce28f1e6480c70896f644750d912074da88b56f279fa5665900b2c0505ce1f91"}, &(0x7f0000000780)=0x9e) sendmmsg$inet_sctp(r0, &(0x7f0000001c40)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="194486b4af8ba45e1d32a3629211bf22cd57a56a0f4c52dd2cace7e25c897f40b6f5fd9570e3d936ac85c9b28e915a6d5cc82c01a86db19685aacfc4b62b01b43f", 0x41}], 0x1, &(0x7f0000000340)=[@authinfo={0x18, 0x84, 0x6, {0xa684}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x39}}], 0x68, 0x8000}, {&(0x7f00000002c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000003c0)="c9f9910c31b0068ce8f13b9b01335153860f33008dc8323b96ec1d40716e4fdd656d220b8a6d022918c44a13120ecb8eb8658e7a7a6dc4ef3be82fbfbd8ea6997f083f55c63721ab40ffb82c586c7bfadfd60a9db78d2411610e195ab049aed381d66a52011bb12faee0e20f09facbec4dead8cc688572ab474b53cb8d0f013900c2cebb2a2eb756f9f4c12a72851f9daa182011bd1a4643e2a17d92b5ebb079554818dd97c50eea6e228d68bdb645839ae15f615180f49b1c7603d5e31b2683f67de973207aeaa930e93772d137291a1a9a900ea6e72da0b2f45a3b9fa55cba216d44dcd83af75575d1fc100212", 0xee}, {&(0x7f00000004c0)="7fe4e1ccc035bb4169c39fe20627e23c3fdd40dd74b1aa1cbc4be9cf4c87a1e4a1b1d43b8ff36effdd413e31d1baca375b8331872e61572027acb63d99e24ef939822b617a866fb0d9d07fc4d7b941d9c3ea442078c5a22833cc77", 0x5b}, {&(0x7f0000000540)="534cdabf783bf048fc8c6732f33914432f6dc725a4eb4fdfb64df72076eec3fda5ffb0dcc6952eed09935bf8c89c84761db9eeb1b8888d0f62c47ea4818cdf77b06408f5b35d3ba82118be853b4f59890d84abb4f0b80a6b0bcc26bd91728c67402f008f2d2643512169ffd38284f124932519498feb4a2ebd2781c3cd7938", 0x7f}, {0x0}, {&(0x7f0000000600)="a9f1e4679ab3311a53d49d9b4323c6502dcad7c91c6f2fd194b08d496c4812b21ca586edc6cf7679dd7deb0b195eda7836e621ec10f4c52a", 0x38}], 0x5, 0x0, 0x0, 0x20000001}, {&(0x7f00000008c0)=@in6={0xa, 0x4e24, 0xef3e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}, 0x1c, &(0x7f0000000900)=[{0x0}, {&(0x7f0000001b40)="203f6c020de6b172450808ac42db1fdc59a57b5f4da3b993872fee2ef2c6d14cf04a95c079145b0e6215a1818c4934096180e971de96abee926a687b1798f4734fe7ed54b62a4866bf5cc9d61b9f0d126d14ab40b8dc56e53eb133b1a10695ef7ce8e9d1ed11a5271df14123df87d4a0eea64bbde40324133f7ece9c1630269e66055f574575af7b912a3474f3bd6d0ec850df04dbe567f0864699779c3481ec7a2f6493d0d40d12f4bdf5f5a7eed5f399b9c22f811376ffa3f28f85819d14d8757bef08b6dff7d7f9db67148b7133a9c89c2451b34369bebb56", 0xda}], 0x2, &(0x7f0000000940)=[@authinfo={0x18, 0x84, 0x6, {0x100}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xc}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xe69, 0xc, 0x9, 0x7, 0x9, 0x8001, 0x7ff, r1}}], 0x78, 0x10}], 0x3, 0x0) 2m35.445334879s ago: executing program 0 (id=1543): io_setup(0x281, &(0x7f0000000100)=0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x420041, 0x0) setsockopt$inet6_int(r5, 0x29, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2m34.639139815s ago: executing program 4 (id=1544): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00'], 0x1, 0x26c, &(0x7f0000000340)="$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") 2m34.270707341s ago: executing program 0 (id=1546): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x88c1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = eventfd(0x2000100) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r7 = syz_io_uring_setup(0x114, &(0x7f0000000040)={0x0, 0xa81, 0x1, 0x2, 0x3da, 0x0, r6}, &(0x7f0000000340), &(0x7f00000003c0)) io_uring_enter(r7, 0x5d2c, 0x8944, 0x5b, &(0x7f0000000380)={[0x5]}, 0x8) sendmsg$nl_route(r5, 0x0, 0x800) 2m33.460848146s ago: executing program 3 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x206) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=0x97) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc3a902ffb870e8b4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0xfffffffffffffffd, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='gfs2\x00', 0x208000, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000080)={0x2, @short={0x2, 0xffff}}, 0x66) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40044040) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000b4bffc)=0x5, 0x4) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190a010100bb0000"], 0x2c}}, 0x8004) 2m33.408044368s ago: executing program 4 (id=1548): getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m19.182406593s ago: executing program 33 (id=1546): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x88c1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = eventfd(0x2000100) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r7 = syz_io_uring_setup(0x114, &(0x7f0000000040)={0x0, 0xa81, 0x1, 0x2, 0x3da, 0x0, r6}, &(0x7f0000000340), &(0x7f00000003c0)) io_uring_enter(r7, 0x5d2c, 0x8944, 0x5b, &(0x7f0000000380)={[0x5]}, 0x8) sendmsg$nl_route(r5, 0x0, 0x800) 2m18.093098731s ago: executing program 34 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x206) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=0x97) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc3a902ffb870e8b4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0xfffffffffffffffd, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='gfs2\x00', 0x208000, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000080)={0x2, @short={0x2, 0xffff}}, 0x66) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40044040) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000b4bffc)=0x5, 0x4) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190a010100bb0000"], 0x2c}}, 0x8004) 2m17.974309436s ago: executing program 35 (id=1548): getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 25.31023993s ago: executing program 5 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40088c0) 25.068329031s ago: executing program 5 (id=1850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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") symlinkat(&(0x7f0000000080)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 24.948744556s ago: executing program 5 (id=1851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r1, 0xd, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="725eb862ce"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 23.807563856s ago: executing program 5 (id=1855): socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x73d3, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004850) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) getsockopt$ax25_int(r3, 0x101, 0x6, 0x0, &(0x7f00000002c0)) 21.567251153s ago: executing program 5 (id=1858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={r0, r5, r6}, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r8, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x4734}}, 0x10) close_range(r7, r7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r10, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=r10, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x20008800}, 0x8010) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 20.533419518s ago: executing program 5 (id=1860): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000140), &(0x7f0000000040)=r4}, 0x20) socket(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) close(r5) 15.217928499s ago: executing program 7 (id=1871): socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00001000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000020000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018a6f1c7b100997436e3eb35b994e57a104bea3bc5973c33b64d06af1e5620f882"], 0xa8}}, 0x40080) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1, @local, @local, 0x5, 0xb, 0x0, 0x100, 0x4}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x42}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400"], 0x0) 13.58676554s ago: executing program 6 (id=1874): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(r5, 0x0, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 11.334772457s ago: executing program 6 (id=1879): io_setup(0x281, &(0x7f0000000100)=0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x420041, 0x0) setsockopt$inet6_int(r5, 0x29, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 10.786966121s ago: executing program 7 (id=1880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 10.772742752s ago: executing program 8 (id=1881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x1, r0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) r7 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) 9.604187372s ago: executing program 6 (id=1883): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x100009, 0xffffffffc2c4adcc, 0x0, 0x4, 0x0, 0x2000004, 0x0, 0x0, 0x4}}, 0x50) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="030300000000fcffff290dbbe844b5b96e94feff0c000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000100)=@generic={0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg(r3, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @local, 0xe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="9b87a7e080d34ad499b9b36f4e70aee186d5d1e5772aa3f0467475f8094db20c5e5127a95234343b77c67c308ea9c06415fc620429d23dbfc0ef1a0e7dda683e", 0x40}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000180)="c5b755bb45e1f3c340d438006dde6f05e385d0c7f8d02d9e53cc1d31329ec33529d7017f11e4ff150c155a844235938f3e54cc915d4add4d4e356f37f84cba1e208d464bc1df12e391766e6edf700b83b4", 0x51}], 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60881, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 8.191793714s ago: executing program 8 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={r0, r5, r6}, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r8, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x4734}}, 0x10) close_range(r7, r7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r10, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=r10, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x20008800}, 0x8010) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 7.863816318s ago: executing program 7 (id=1886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4606, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r9}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x4b) 7.177939398s ago: executing program 8 (id=1887): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) 7.061248273s ago: executing program 2 (id=1888): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, 0x0, 0x0) 6.968572677s ago: executing program 7 (id=1889): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, 0x0, 0x20000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000080)='[(\x00') 5.964365221s ago: executing program 2 (id=1890): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0xd0, 0x0, 0xd0, 0x3d0, 0x300, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [0xffffffff], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0x0, 0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 5.948448572s ago: executing program 7 (id=1891): socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00001000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000020000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018a6f1c7b100997436e3eb35b994e57a104bea3bc5973c33b64d06af1e5620f882"], 0xa8}}, 0x40080) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1, @local, @local, 0x5, 0xb, 0x0, 0x100, 0x4}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x42}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400"], 0x0) 5.654245644s ago: executing program 2 (id=1892): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r10, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r10, &(0x7f0000000000)='2\x00', 0x2) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x154) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 3.647512972s ago: executing program 36 (id=1860): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000140), &(0x7f0000000040)=r4}, 0x20) socket(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) close(r5) 3.567793345s ago: executing program 6 (id=1894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x1, r0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) r7 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) 3.567374125s ago: executing program 8 (id=1895): r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = fanotify_init(0xf00, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f00009e1000)='./file0\x00', 0x88461, 0x0) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) 1.531281313s ago: executing program 6 (id=1896): r0 = io_uring_setup(0x1f6a, &(0x7f0000000340)={0x0, 0xcc11, 0x40, 0x1, 0x1a9}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) 1.448341047s ago: executing program 6 (id=1897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) fsopen(0x0, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x2000e844) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r3, 0x4, r3}, 0x10) 1.447718617s ago: executing program 2 (id=1898): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x96, "7c2e3e881a56c27696586bc6920712b9ab8b2936da63d19b19750597120b7b4a59cfc5a2abd7787a0ede316a38d34552ac4ec1dc704284ad74a143461f6de6994a8a4eb77ddb8e401201eb562747f8b02cb1f1cc1f3299249484b1ebf6902950b4a6cf40e7630ed9b19028f4ec99eac1628eea906583ce28f1e6480c70896f644750d912074da88b56f279fa5665900b2c0505ce1f91"}, &(0x7f0000000780)=0x9e) sendmmsg$inet_sctp(r0, &(0x7f0000001c40)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="194486b4af8ba45e1d32a3629211bf22cd57a56a0f4c52dd2cace7e25c897f40b6f5fd9570e3d936ac85c9b28e915a6d5cc82c01a86db19685aacfc4b62b01b43f", 0x41}], 0x1, &(0x7f0000000340)=[@authinfo={0x18, 0x84, 0x6, {0xa684}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x39}}], 0x68, 0x8000}, {&(0x7f00000002c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000003c0)="c9f9910c31b0068ce8f13b9b01335153860f33008dc8323b96ec1d40716e4fdd656d220b8a6d022918c44a13120ecb8eb8658e7a7a6dc4ef3be82fbfbd8ea6997f083f55c63721ab40ffb82c586c7bfadfd60a9db78d2411610e195ab049aed381d66a52011bb12faee0e20f09facbec4dead8cc688572ab474b53cb8d0f013900c2cebb2a2eb756f9f4c12a72851f9daa182011bd1a4643e2a17d92b5ebb079554818dd97c50eea6e228d68bdb645839ae15f615180f49b1c7603d5e31b2683f67de973207aeaa930e93772d137291a1a9a900ea6e72da0b2f45a3b9fa55cba216d44dcd83af75575d1fc100212", 0xee}, {&(0x7f00000004c0)="7fe4e1ccc035bb4169c39fe20627e23c3fdd40dd74b1aa1cbc4be9cf4c87a1e4a1b1d43b8ff36effdd413e31d1baca375b8331872e61572027acb63d99e24ef939822b617a866fb0d9d07fc4d7b941d9c3ea442078c5a22833cc77", 0x5b}, {&(0x7f0000000540)="534cdabf783bf048fc8c6732f33914432f6dc725a4eb4fdfb64df72076eec3fda5ffb0dcc6952eed09935bf8c89c84761db9eeb1b8888d0f62c47ea4818cdf77b06408f5b35d3ba82118be853b4f59890d84abb4f0b80a6b0bcc26bd91728c67402f008f2d2643512169ffd38284f124932519498feb4a2e", 0x78}, {&(0x7f00000005c0)="f9ecc2804cffa5aef1af984e192bbe34c476962cc6faa673f548f052544e4b4b4698d6dcad0dcd69a26cd7ee6e6fa6bc53e4f07e1411e3556e", 0x39}, {&(0x7f0000000600)="a9f1e4679ab3311a53d49d9b4323c6502dcad7c91c6f2fd194b08d496c4812b21ca586edc6cf7679dd7deb0b195eda7836e621ec10f4c52a", 0x38}], 0x5, 0x0, 0x0, 0x20000001}, {&(0x7f00000008c0)=@in6={0xa, 0x4e24, 0xef3e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}, 0x1c, &(0x7f0000000900)=[{0x0}, {&(0x7f0000001b40)="203f6c020de6b172450808ac42db1fdc59a57b5f4da3b993872fee2ef2c6d14cf04a95c079145b0e6215a1818c4934096180e971de96abee926a687b1798f4734fe7ed54b62a4866bf5cc9d61b9f0d126d14ab40b8dc56e53eb133b1a10695ef7ce8e9d1ed11a5271df14123df87d4a0eea64bbde40324133f7ece9c1630269e66055f574575af7b912a3474f3bd6d0ec850df04dbe567f0864699779c3481ec7a2f6493d0d40d12f4bdf5f5a7eed5f399b9c22f811376ffa3f28f85819d14d8757bef08b6dff7d7f9db67148b7133a9c89c2451b34369bebb56", 0xda}], 0x2, &(0x7f0000000940)=[@authinfo={0x18, 0x84, 0x6, {0x100}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xc}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xe69, 0xc, 0x9, 0x7, 0x9, 0x8001, 0x7ff, r1}}], 0x78, 0x10}], 0x3, 0x0) 1.322477563s ago: executing program 8 (id=1899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={r0, r5, r6}, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r8, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x4734}}, 0x10) close_range(r7, r7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r10, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=r10, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x20008800}, 0x8010) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.139369401s ago: executing program 2 (id=1900): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 621.389293ms ago: executing program 7 (id=1901): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, 0x0, 0x20000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000080)='[(\x00') 122.161095ms ago: executing program 8 (id=1902): socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x73d3, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24008814}, 0x24004850) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) getsockopt$ax25_int(r3, 0x101, 0x6, 0x0, &(0x7f00000002c0)) 0s ago: executing program 2 (id=1903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0x5, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff7, 0x728b2c8c}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x40004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): rval 255, changing to 11 [ 329.741134][ T1327] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 329.824956][ T1327] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 329.834909][ T1327] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 329.846865][ T1327] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 329.874446][ T1107] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 329.944583][ T1327] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 329.953482][ T1327] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 329.971833][ T1327] usb 6-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 330.215276][ T1327] usb 6-1: string descriptor 0 read error: -22 [ 330.244006][ T1327] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 330.274727][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.302703][ T1327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.339240][ T1107] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 330.380396][ T1107] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 330.543434][ T1327] adutux 6-1:168.0: interrupt endpoints not found [ 331.227277][ T7026] nvme_fabrics: missing parameter 'transport=%s' [ 331.233723][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.263103][ T1107] usb 1-1: config 0 descriptor?? [ 331.276767][ T7026] nvme_fabrics: missing parameter 'nqn=%s' [ 331.300942][ T4885] usb 6-1: USB disconnect, device number 4 [ 331.306616][ T1107] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 331.321254][ T1107] dvb-usb: bulk message failed: -22 (3/0) [ 331.350648][ T1107] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 331.388127][ T1107] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 331.402852][ T1107] usb 1-1: media controller created [ 331.409548][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.423715][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 331.433378][ T1107] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 331.705013][ T7033] autofs4:pid:7033:autofs_fill_super: called with bogus options [ 332.075268][ T7036] dvb-usb: bulk message failed: -22 (2/0) [ 332.100694][ T1107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 332.124524][ T1107] dvb-usb: schedule remote query interval to 150 msecs. [ 332.131709][ T1107] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 332.635427][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 332.648731][ T1107] dvb-usb: error while querying for an remote control event. [ 332.824386][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 332.830356][ T1107] dvb-usb: error while querying for an remote control event. [ 333.014688][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 333.021244][ T1107] dvb-usb: error while querying for an remote control event. [ 333.206162][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 333.214285][ T1107] dvb-usb: error while querying for an remote control event. [ 333.416880][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 333.429215][ T1107] dvb-usb: error while querying for an remote control event. [ 333.614705][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 333.692282][ T1107] dvb-usb: error while querying for an remote control event. [ 333.704965][ T1107] usb 1-1: USB disconnect, device number 11 [ 333.929994][ T1107] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 334.146689][ T7056] autofs4:pid:7056:autofs_fill_super: called with bogus options [ 335.696000][ T7072] autofs4:pid:7072:autofs_fill_super: called with bogus options [ 336.044735][ T1107] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 336.092900][ T7067] nvme_fabrics: missing parameter 'transport=%s' [ 336.099387][ T7067] nvme_fabrics: missing parameter 'nqn=%s' [ 336.756358][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 336.894544][ T1107] usb 1-1: device descriptor read/all, error -71 [ 336.989669][ T7086] xt_socket: unknown flags 0x50 [ 337.108716][ T4320] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 337.221080][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 337.231912][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 337.239492][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.249657][ T4196] Workqueue: hci1 hci_rx_work [ 337.254393][ T4196] Call Trace: [ 337.257688][ T4196] [ 337.260636][ T4196] dump_stack_lvl+0x168/0x230 [ 337.265356][ T4196] ? show_regs_print_info+0x20/0x20 [ 337.270599][ T4196] ? load_image+0x3b0/0x3b0 [ 337.275139][ T4196] sysfs_create_dir_ns+0x252/0x280 [ 337.280297][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 337.285354][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 337.290078][ T4196] kobject_add_internal+0x662/0xd00 [ 337.295314][ T4196] kobject_add+0x152/0x210 [ 337.299766][ T4196] ? kobject_init+0x1d0/0x1d0 [ 337.304482][ T4196] ? klist_children_get+0x50/0x50 [ 337.309540][ T4196] ? get_device_parent+0x121/0x3f0 [ 337.314685][ T4196] device_add+0x483/0xfb0 [ 337.319066][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 337.324046][ T4196] le_conn_complete_evt+0xcbc/0x1590 [ 337.329380][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 337.334522][ T4196] ? __schedule+0x11c3/0x4390 [ 337.339230][ T4196] ? __mutex_trylock_common+0x14f/0x250 [ 337.344814][ T4196] hci_le_meta_evt+0x289/0x3b80 [ 337.349708][ T4196] ? hci_event_packet+0x36d/0x12f0 [ 337.354851][ T4196] ? hci_event_packet+0x2e2/0x12f0 [ 337.360008][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 337.365070][ T4196] ? release_firmware_map_entry+0x190/0x190 [ 337.370996][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 337.377103][ T4196] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 337.382776][ T4196] ? mark_lock+0x94/0x320 [ 337.387139][ T4196] ? mutex_unlock+0x10/0x10 [ 337.391686][ T4196] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 337.397699][ T4196] ? lock_chain_count+0x20/0x20 [ 337.402585][ T4196] ? __rwlock_init+0x140/0x140 [ 337.407377][ T4196] hci_event_packet+0xe05/0x12f0 [ 337.412352][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 337.417585][ T4196] ? rcu_lock_release+0x20/0x20 [ 337.422474][ T4196] ? lock_acquire+0x1f2/0x3f0 [ 337.427191][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 337.432418][ T4196] hci_rx_work+0x255/0xa10 [ 337.436876][ T4196] process_one_work+0x863/0x1000 [ 337.441867][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 337.447528][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 337.452849][ T4196] ? _raw_spin_lock_irq+0xab/0xe0 [ 337.457907][ T4196] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 337.463312][ T4196] ? wq_worker_running+0x97/0x170 [ 337.468368][ T4196] worker_thread+0xaa8/0x12a0 [ 337.473111][ T4196] kthread+0x436/0x520 [ 337.477202][ T4196] ? rcu_lock_release+0x20/0x20 [ 337.482060][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 337.486656][ T4196] ret_from_fork+0x1f/0x30 [ 337.491105][ T4196] [ 337.497716][ T4196] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 337.511276][ T4196] Bluetooth: hci1: failed to register connection device [ 337.654709][ T4320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.748917][ T4320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 337.960190][ T4320] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 337.969984][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.980308][ T4320] usb 5-1: config 0 descriptor?? [ 338.166855][ T7102] comedi comedi0: pcl724: I/O port conflict (0x8002f,4) [ 338.524466][ T4320] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 338.532223][ T4320] dvb-usb: bulk message failed: -22 (3/0) [ 338.539925][ T4320] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 338.565685][ T4320] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 338.675154][ T4320] usb 5-1: media controller created [ 338.681880][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.709545][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 338.716950][ T4320] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 338.766447][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 338.787489][ T4320] dvb-usb: schedule remote query interval to 150 msecs. [ 338.816949][ T4320] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 339.006782][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 339.012815][ T4320] dvb-usb: error while querying for an remote control event. [ 339.293934][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 339.299967][ T4320] dvb-usb: error while querying for an remote control event. [ 339.464707][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 339.473405][ T4320] dvb-usb: error while querying for an remote control event. [ 339.674884][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 339.681093][ T4320] dvb-usb: error while querying for an remote control event. [ 339.968733][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 339.991947][ T7] dvb-usb: error while querying for an remote control event. [ 340.047142][ T7119] nvme_fabrics: missing parameter 'transport=%s' [ 340.053686][ T7119] nvme_fabrics: missing parameter 'nqn=%s' [ 340.173799][ T4885] usb 5-1: USB disconnect, device number 7 [ 340.338664][ T4885] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 340.604451][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 341.154668][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 341.168379][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 341.353933][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.375191][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.393334][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 341.410148][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 341.931624][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.061213][ T7146] binder: 7144:7146 ioctl 4018620d 0 returned -22 [ 342.152058][ T7] usb 6-1: config 0 descriptor?? [ 344.437995][ T4482] Bluetooth: hci1: command 0x0406 tx timeout [ 344.643144][ T7153] nvme_fabrics: missing parameter 'transport=%s' [ 344.724118][ T7153] nvme_fabrics: missing parameter 'nqn=%s' [ 345.074722][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 345.080688][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 345.101471][ T7] usb 6-1: USB disconnect, device number 5 [ 345.392148][ T7166] comedi comedi0: pcl724: I/O port conflict (0x8002f,4) [ 345.614476][ T1107] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 346.054530][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.745360][ T7169] nvme_fabrics: missing parameter 'transport=%s' [ 346.754621][ T1107] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 346.764953][ T1107] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 346.784483][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.819189][ T1107] usb 5-1: config 0 descriptor?? [ 346.828397][ T7169] nvme_fabrics: missing parameter 'nqn=%s' [ 346.969891][ T1107] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 346.984817][ T1107] dvb-usb: bulk message failed: -22 (3/0) [ 346.996832][ T1107] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 347.086634][ T1107] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 347.094159][ T1107] usb 5-1: media controller created [ 347.110074][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.142905][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 347.149453][ T1107] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 347.406773][ T7178] dvb-usb: bulk message failed: -22 (2/0) [ 347.505815][ T1107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 347.531277][ T1107] dvb-usb: schedule remote query interval to 150 msecs. [ 347.541941][ T1107] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 348.114934][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 348.506739][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 348.512896][ T1107] dvb-usb: error while querying for an remote control event. [ 348.534630][ T7] usb 5-1: USB disconnect, device number 8 [ 348.758195][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 349.255042][ T7198] sp0: Synchronizing with TNC [ 349.349456][ T7193] [U] è [ 350.356274][ T4885] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 350.654790][ T4885] usb 4-1: Using ep0 maxpacket: 16 [ 350.779123][ T4885] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.848756][ T7207] (syz.2.737,7207,1):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 350.858397][ T7208] nvme_fabrics: missing parameter 'transport=%s' [ 350.865251][ T7208] nvme_fabrics: missing parameter 'nqn=%s' [ 350.868614][ T4885] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.029610][ T4885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.147397][ T4885] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 351.245228][ T4885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.375569][ T4885] usb 4-1: config 0 descriptor?? [ 352.521495][ T7229] netlink: set zone limit has 8 unknown bytes [ 352.715188][ T4885] usbhid 4-1:0.0: can't add hid device: -71 [ 352.721215][ T4885] usbhid: probe of 4-1:0.0 failed with error -71 [ 353.115810][ T4885] usb 4-1: USB disconnect, device number 11 [ 358.855414][ T7310] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 359.804823][ T7313] nvme_fabrics: missing parameter 'transport=%s' [ 359.901589][ T7313] nvme_fabrics: missing parameter 'nqn=%s' [ 360.235134][ T7317] (syz.2.762,7317,0):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 361.622231][ T7335] netlink: set zone limit has 8 unknown bytes [ 363.432606][ T7339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 364.224419][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 364.870065][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 365.039847][ T4885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 365.129328][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.141150][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 365.155358][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 365.164552][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.248103][ T7369] autofs4:pid:7369:autofs_fill_super: called with bogus options [ 365.325376][ T4885] usb 3-1: Using ep0 maxpacket: 32 [ 365.455101][ T4885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.533896][ T4885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.658766][ T4885] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 365.805546][ T4885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.900862][ T7] usb 5-1: config 0 descriptor?? [ 365.907614][ T4885] usb 3-1: config 0 descriptor?? [ 367.517759][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 367.525537][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 367.703462][ T7382] process 'syz.5.778' launched './file0' with NULL argv: empty string added [ 367.731704][ T7] usb 5-1: USB disconnect, device number 9 [ 368.056765][ T7389] netlink: set zone limit has 8 unknown bytes [ 368.577162][ T7395] autofs4:pid:7395:autofs_fill_super: called with bogus options [ 369.505431][ T4885] usbhid 3-1:0.0: can't add hid device: -71 [ 369.511548][ T4885] usbhid: probe of 3-1:0.0 failed with error -71 [ 369.528716][ T4885] usb 3-1: USB disconnect, device number 8 [ 371.305277][ T4255] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 371.388883][ T7432] (syz.2.790,7432,0):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 371.782255][ T7437] autofs4:pid:7437:autofs_fill_super: called with bogus options [ 372.014581][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.054015][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.096288][ T4255] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 372.133753][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.275337][ T4255] usb 1-1: config 0 descriptor?? [ 372.735495][ T4255] usbhid 1-1:0.0: can't add hid device: -71 [ 372.744419][ T4255] usbhid: probe of 1-1:0.0 failed with error -71 [ 372.794828][ T4255] usb 1-1: USB disconnect, device number 14 [ 373.981198][ T7467] kvm: pic: non byte write [ 374.035168][ T4296] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 374.445032][ T7475] (syz.2.807,7475,0):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 374.850055][ T4296] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.883404][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 375.012451][ T7480] autofs4:pid:7480:autofs_fill_super: called with bogus options [ 375.104701][ T4296] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 375.113867][ T4296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.135018][ T4296] usb 6-1: config 0 descriptor?? [ 375.199638][ T4296] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 375.206557][ T4296] dvb-usb: bulk message failed: -22 (3/0) [ 375.236494][ T4296] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 375.284624][ T4296] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 375.294055][ T4296] usb 6-1: media controller created [ 375.320409][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.357055][ T4296] dvb-usb: bulk message failed: -22 (6/0) [ 375.497807][ T4296] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 375.545983][ T7490] dvb-usb: bulk message failed: -22 (2/0) [ 375.555726][ T4296] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 376.055227][ T7496] xt_socket: unknown flags 0x50 [ 376.671469][ T4296] dvb-usb: schedule remote query interval to 150 msecs. [ 376.707600][ T4296] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 376.819435][ T4296] usb 6-1: USB disconnect, device number 6 [ 377.144038][ T4296] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 378.429689][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.436416][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.535863][ T7519] capability: warning: `syz.3.820' uses deprecated v2 capabilities in a way that may be insecure [ 378.563178][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 379.865275][ T7535] xt_socket: unknown flags 0x50 [ 380.014395][ T7] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 380.414905][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.440614][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 380.487656][ T7] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 380.546160][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.616626][ T7] usb 6-1: config 0 descriptor?? [ 380.660458][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 380.787481][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 380.800845][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 380.913913][ T7541] netlink: set zone limit has 8 unknown bytes [ 380.975902][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 380.983148][ T7] usb 6-1: media controller created [ 381.006002][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.136658][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 381.142939][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 381.423070][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'. [ 381.434412][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25 [ 381.450455][ T7547] dvb-usb: bulk message failed: -22 (2/0) [ 381.485430][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 381.516777][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 381.697377][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 381.731866][ T7] dvb-usb: error while querying for an remote control event. [ 381.924677][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 381.930889][ T7] dvb-usb: error while querying for an remote control event. [ 382.106538][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 382.112450][ T7] dvb-usb: error while querying for an remote control event. [ 382.274414][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 382.280245][ T7] dvb-usb: error while querying for an remote control event. [ 382.449920][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 382.482705][ T7] dvb-usb: error while querying for an remote control event. [ 382.555411][ T7566] netlink: set zone limit has 8 unknown bytes [ 383.230726][ T4296] usb 6-1: USB disconnect, device number 7 [ 383.407567][ T7570] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 383.453800][ T4296] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 384.253019][ T7569] netlink: 52 bytes leftover after parsing attributes in process `syz.5.835'. [ 384.817138][ T7584] binder: 7577:7584 ioctl 4018620d 0 returned -22 [ 385.415703][ T7586] nvme_fabrics: missing parameter 'transport=%s' [ 385.446953][ T7586] nvme_fabrics: missing parameter 'nqn=%s' [ 386.273921][ T7602] tipc: Started in network mode [ 386.313499][ T7602] tipc: Node identity 32704682caba, cluster identity 4711 [ 386.405034][ T7602] tipc: Enabled bearer , priority 0 [ 386.594197][ T7603] device syzkaller0 entered promiscuous mode [ 386.945770][ T7603] tipc: Resetting bearer [ 387.022087][ T7603] tipc: Disabling bearer [ 387.722441][ T7621] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 388.676041][ T7612] ALSA: mixer_oss: invalid OSS volume 'Î ' [ 394.415110][ T7671] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 396.612598][ T4296] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 396.636996][ T7686] netlink: set zone limit has 8 unknown bytes [ 397.304399][ T4296] usb 1-1: Using ep0 maxpacket: 16 [ 397.688152][ T7691] nvme_fabrics: missing parameter 'transport=%s' [ 397.694910][ T7691] nvme_fabrics: missing parameter 'nqn=%s' [ 398.165177][ T4296] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.178811][ T4296] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.189034][ T4296] usb 1-1: config 0 interface 0 has no altsetting 0 [ 398.196873][ T4296] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 398.206258][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.235943][ T4296] usb 1-1: config 0 descriptor?? [ 399.360789][ T4296] hid (null): unknown global tag 0xd [ 399.834426][ T4296] hid (null): unknown global tag 0xd [ 399.839798][ T4296] hid (null): nested delimiters [ 399.850376][ T4296] usb 1-1: USB disconnect, device number 15 [ 399.867256][ T7711] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 401.385231][ T4296] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 401.978666][ T4296] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.011884][ T4296] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 402.027013][ T4296] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 402.038690][ T4296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.108455][ T4296] usb 6-1: config 0 descriptor?? [ 402.228588][ T4296] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 402.236870][ T4296] dvb-usb: bulk message failed: -22 (3/0) [ 402.346578][ T4296] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 402.526197][ T4296] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 402.533451][ T4296] usb 6-1: media controller created [ 402.539623][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.550344][ T4296] dvb-usb: bulk message failed: -22 (6/0) [ 402.573186][ T7728] dvb-usb: bulk message failed: -22 (2/0) [ 402.593085][ T4296] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 402.680538][ T4296] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 402.774608][ T4296] dvb-usb: schedule remote query interval to 150 msecs. [ 402.788765][ T4296] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 403.505660][ T4296] usb 6-1: USB disconnect, device number 8 [ 403.513417][ T4255] dvb-usb: bulk message failed: -22 (1/0) [ 403.522365][ T4255] dvb-usb: error while querying for an remote control event. [ 403.617155][ T4296] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 403.664441][ T4885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 404.905046][ T7775] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 405.025454][ T4885] usb 1-1: Using ep0 maxpacket: 32 [ 405.144465][ T4885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.734219][ T4885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.801880][ T4885] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 405.811179][ T4885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.825492][ T4885] usb 1-1: config 0 descriptor?? [ 406.051594][ T4885] usb 1-1: can't set config #0, error -71 [ 406.812190][ T4885] usb 1-1: USB disconnect, device number 16 [ 406.992773][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 407.001966][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.009643][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.298837][ T4255] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 410.494042][ T4255] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.504379][ T4255] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 411.392814][ T4255] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 411.598246][ T4255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.941144][ T4255] usb 6-1: config 0 descriptor?? [ 412.019887][ T4255] usb 6-1: can't set config #0, error -71 [ 412.074712][ T4255] usb 6-1: USB disconnect, device number 9 [ 412.110523][ T7827] vivid-000: disconnect [ 413.694132][ T7824] vivid-000: reconnect [ 415.183093][ T7859] netlink: set zone limit has 8 unknown bytes [ 415.894516][ T1107] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 416.220464][ T7869] nvme_fabrics: missing parameter 'transport=%s' [ 416.227805][ T7869] nvme_fabrics: missing parameter 'nqn=%s' [ 416.314743][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.334412][ T1107] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 416.361606][ T1107] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 416.384748][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.435081][ T1107] usb 3-1: config 0 descriptor?? [ 416.481995][ T1107] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 416.500783][ T1107] dvb-usb: bulk message failed: -22 (3/0) [ 416.640001][ T1107] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 416.802809][ T7863] dvb-usb: bulk message failed: -22 (2/0) [ 416.814656][ T1107] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 416.821757][ T1107] usb 3-1: media controller created [ 416.829582][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.846874][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 416.859132][ T1107] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 416.935779][ T1107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 416.973715][ T1107] dvb-usb: schedule remote query interval to 150 msecs. [ 417.134744][ T1107] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 417.169358][ T1107] usb 3-1: USB disconnect, device number 9 [ 417.926188][ T1107] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 420.305929][ T7898] nvme_fabrics: missing parameter 'transport=%s' [ 420.474518][ T7898] nvme_fabrics: missing parameter 'nqn=%s' [ 422.738714][ T7922] nvme_fabrics: missing parameter 'transport=%s' [ 423.292498][ T7922] nvme_fabrics: missing parameter 'nqn=%s' [ 423.350131][ T7] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 424.674736][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.471948][ T7947] nvme_fabrics: missing parameter 'transport=%s' [ 425.478489][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 425.489298][ T7] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 425.525195][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.566149][ T7] usb 1-1: config 0 descriptor?? [ 425.573955][ T7947] nvme_fabrics: missing parameter 'nqn=%s' [ 425.606933][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 425.632999][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 425.649872][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 425.674711][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 425.681782][ T7] usb 1-1: media controller created [ 425.696269][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.726857][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 425.734410][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 425.785686][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 425.809283][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 425.819500][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 425.877799][ T7952] dvb-usb: bulk message failed: -22 (2/0) [ 425.974407][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 426.003350][ T7] dvb-usb: error while querying for an remote control event. [ 426.014593][ T1327] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 426.240019][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 426.245986][ T1107] dvb-usb: error while querying for an remote control event. [ 426.363722][ T7959] xt_socket: unknown flags 0x50 [ 426.931295][ T4255] usb 1-1: USB disconnect, device number 17 [ 426.985824][ T4255] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 427.094635][ T1327] usb 4-1: Using ep0 maxpacket: 32 [ 427.114595][ T1107] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 427.370033][ T7967] netlink: set zone limit has 8 unknown bytes [ 427.918232][ T1327] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 427.928221][ T1327] usb 4-1: config 0 has no interface number 0 [ 427.934970][ T1327] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.946493][ T1327] usb 4-1: config 0 interface 85 has no altsetting 0 [ 428.264771][ T1327] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 428.273870][ T1327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.053054][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE4, skipping [ 429.065804][ T1107] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 429.075000][ T1327] usb 4-1: Product: syz [ 429.079261][ T1327] usb 4-1: Manufacturer: syz [ 429.083891][ T1327] usb 4-1: SerialNumber: syz [ 429.088969][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.102697][ T1107] usb 5-1: config 0 descriptor?? [ 429.108532][ T1327] usb 4-1: config 0 descriptor?? [ 429.135121][ T1327] usb 4-1: can't set config #0, error -71 [ 429.147419][ T1107] usb 5-1: can't set config #0, error -71 [ 429.166436][ T1327] usb 4-1: USB disconnect, device number 12 [ 429.220818][ T1107] usb 5-1: USB disconnect, device number 10 [ 430.228019][ T7980] nvme_fabrics: missing parameter 'transport=%s' [ 430.425644][ T7980] nvme_fabrics: missing parameter 'nqn=%s' [ 431.878080][ T8004] netlink: set zone limit has 8 unknown bytes [ 432.826905][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 433.517732][ T1327] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 433.744014][ T8017] netlink: set zone limit has 8 unknown bytes [ 433.831211][ T8020] tipc: Started in network mode [ 433.836273][ T8020] tipc: Node identity 8e9795700e59, cluster identity 4711 [ 433.845969][ T8020] tipc: Enabled bearer , priority 0 [ 433.869862][ T8020] device syzkaller0 entered promiscuous mode [ 434.004561][ T1327] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.019726][ T1327] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 434.030334][ T1327] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 434.037671][ T8020] tipc: Resetting bearer [ 434.060266][ T1327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.657483][ T8019] tipc: Resetting bearer [ 434.667451][ T1327] usb 3-1: config 0 descriptor?? [ 434.716247][ T1327] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 434.751047][ T8019] tipc: Disabling bearer [ 434.760335][ T1327] dvb-usb: bulk message failed: -22 (3/0) [ 434.797687][ T1327] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 434.824609][ T1327] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 434.840835][ T1327] usb 3-1: media controller created [ 434.871831][ T1327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.914175][ T1327] dvb-usb: bulk message failed: -22 (6/0) [ 434.935744][ T1327] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 434.973607][ T8032] dvb-usb: bulk message failed: -22 (2/0) [ 434.986217][ T1327] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 435.106299][ T1327] dvb-usb: schedule remote query interval to 150 msecs. [ 435.125128][ T1327] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 436.011152][ T1327] usb 3-1: USB disconnect, device number 10 [ 436.078785][ T8041] input: syz1 as /devices/virtual/input/input30 [ 437.026972][ T1327] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 439.807813][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.814566][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.080745][ T8067] nvme_fabrics: missing parameter 'transport=%s' [ 440.087342][ T8067] nvme_fabrics: missing parameter 'nqn=%s' [ 440.675546][ T4482] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 442.004608][ T4482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.040028][ T4482] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 442.078249][ T4482] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 442.108323][ T4482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.139127][ T4482] usb 5-1: config 0 descriptor?? [ 442.196468][ T4482] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 442.210077][ T4482] dvb-usb: bulk message failed: -22 (3/0) [ 442.240581][ T4482] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 442.291496][ T4482] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 442.317242][ T4482] usb 5-1: media controller created [ 442.333621][ T4482] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.362045][ T8077] delete_channel: no stack [ 442.383804][ T4482] dvb-usb: bulk message failed: -22 (6/0) [ 443.248831][ T4482] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 443.322445][ T8089] dvb-usb: bulk message failed: -22 (2/0) [ 443.452790][ T4482] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 443.758592][ T4482] dvb-usb: schedule remote query interval to 150 msecs. [ 443.937189][ T4482] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 444.115073][ T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 444.360954][ T4482] dvb-usb: bulk message failed: -22 (1/0) [ 444.366946][ T4482] dvb-usb: error while querying for an remote control event. [ 444.376709][ T4885] usb 5-1: USB disconnect, device number 11 [ 444.622986][ T4885] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 444.764956][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 444.884515][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 445.191209][ T8110] netlink: set zone limit has 8 unknown bytes [ 445.344496][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.386963][ T7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 446.414218][ T7] pvrusb2: ********** [ 446.429524][ T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 446.562499][ T7] pvrusb2: Important functionality might not be entirely working. [ 446.571140][ T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 446.589723][ T7] pvrusb2: ********** [ 447.315040][ T2424] pvrusb2: Invalid write control endpoint [ 447.567781][ T4482] usb 1-1: USB disconnect, device number 18 [ 447.760582][ T2424] pvrusb2: Invalid write control endpoint [ 447.785305][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 447.871089][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 447.916586][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 447.929149][ T8133] tipc: Started in network mode [ 447.934056][ T8133] tipc: Node identity 7292a390a6f4, cluster identity 4711 [ 447.992191][ T2424] pvrusb2: Device being rendered inoperable [ 448.011296][ T8133] tipc: Enabled bearer , priority 0 [ 448.041788][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 448.083810][ T8134] device syzkaller0 entered promiscuous mode [ 448.102382][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 448.210686][ T2424] pvrusb2: Attached sub-driver cx25840 [ 448.240830][ T8133] tipc: Resetting bearer [ 448.273349][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 448.308952][ T8132] tipc: Resetting bearer [ 448.340742][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 448.361366][ T8132] tipc: Disabling bearer [ 451.014894][ T1107] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 451.435730][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.499749][ T1107] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 451.613642][ T1107] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 451.754891][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.112854][ T1107] usb 3-1: config 0 descriptor?? [ 452.186634][ T1107] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 452.214687][ T1107] dvb-usb: bulk message failed: -22 (3/0) [ 452.245218][ T1107] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 452.287327][ T1107] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 452.300207][ T1107] usb 3-1: media controller created [ 452.314444][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.337331][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 452.348511][ T1107] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 452.406104][ T1107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 452.697692][ T1107] dvb-usb: schedule remote query interval to 150 msecs. [ 452.728490][ T1107] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 453.067949][ T4489] dvb-usb: bulk message failed: -22 (1/0) [ 453.073891][ T4489] dvb-usb: error while querying for an remote control event. [ 453.559817][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 453.601467][ T13] dvb-usb: error while querying for an remote control event. [ 453.630734][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.996'. [ 453.845398][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 453.854974][ T13] dvb-usb: error while querying for an remote control event. [ 454.570637][ T8176] netlink: set zone limit has 8 unknown bytes [ 454.754385][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 454.760274][ T13] dvb-usb: error while querying for an remote control event. [ 454.958115][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 454.964842][ T13] dvb-usb: error while querying for an remote control event. [ 455.061269][ T8181] xt_socket: unknown flags 0x50 [ 455.823158][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 455.831474][ T13] dvb-usb: error while querying for an remote control event. [ 456.027624][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 456.033459][ T13] dvb-usb: error while querying for an remote control event. [ 456.804797][ T13] dvb-usb: bulk message failed: -22 (1/0) [ 456.810573][ T13] dvb-usb: error while querying for an remote control event. [ 457.057412][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 457.063463][ T1107] dvb-usb: error while querying for an remote control event. [ 457.843451][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 457.850986][ T1107] dvb-usb: error while querying for an remote control event. [ 457.884048][ T1107] usb 3-1: USB disconnect, device number 11 [ 457.933372][ T1107] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 459.311544][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1009'. [ 460.839173][ T8218] netlink: set zone limit has 8 unknown bytes [ 461.142064][ T8221] binder: 8220:8221 ioctl 4018620d 0 returned -22 [ 461.150770][ T8221] binder: 8220:8221 ioctl c0306201 0 returned -14 [ 461.600333][ T8228] tipc: Cannot configure node identity twice [ 462.882523][ T4489] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 463.935190][ T4489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.956100][ T4489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.194437][ T4489] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 464.261652][ T4489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.342040][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'. [ 464.369643][ T4489] usb 4-1: config 0 descriptor?? [ 464.675847][ T8230] fuse: Bad value for 'fd' [ 465.003878][ T8254] binder: 8252:8254 ioctl 4018620d 0 returned -22 [ 465.016911][ T4489] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 465.115481][ T8259] binder: 8252:8259 ioctl c0306201 0 returned -14 [ 465.423175][ T4489] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 465.718171][ T4489] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0009/input/input33 [ 466.567387][ T8265] nvme_fabrics: missing parameter 'transport=%s' [ 466.573791][ T8265] nvme_fabrics: missing parameter 'nqn=%s' [ 466.647943][ T4489] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 467.575008][ T4489] usb 4-1: USB disconnect, device number 13 [ 467.867463][ T8281] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 468.105230][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 469.688605][ T4489] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 470.513240][ T8314] binder: 8310:8314 ioctl 4018620d 0 returned -22 [ 470.523524][ T8314] binder: 8310:8314 ioctl c0306201 0 returned -14 [ 470.535005][ T4489] usb 4-1: Using ep0 maxpacket: 32 [ 470.714991][ T4489] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 471.675571][ T4489] usb 4-1: string descriptor 0 read error: -71 [ 471.682559][ T4489] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 471.692010][ T4489] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 471.702178][ T4489] usb 4-1: config 0 descriptor?? [ 471.724465][ T4489] usb 4-1: can't set config #0, error -71 [ 471.743595][ T4489] usb 4-1: USB disconnect, device number 14 [ 474.018997][ T8333] delete_channel: no stack [ 474.584779][ T8322] nvme_fabrics: missing parameter 'transport=%s' [ 474.591643][ T8322] nvme_fabrics: missing parameter 'nqn=%s' [ 475.278645][ T8344] nvme_fabrics: missing parameter 'transport=%s' [ 475.385562][ T8344] nvme_fabrics: missing parameter 'nqn=%s' [ 475.543352][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'. [ 476.865095][ T8361] binder: 8359:8361 ioctl 4018620d 0 returned -22 [ 476.875747][ T8361] binder: 8359:8361 ioctl c0306201 0 returned -14 [ 480.119139][ T8375] netlink: 'syz.2.1055': attribute type 12 has an invalid length. [ 480.269587][ T8381] nvme_fabrics: missing parameter 'transport=%s' [ 480.276980][ T8381] nvme_fabrics: missing parameter 'nqn=%s' [ 480.504521][ T1107] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 481.339704][ T8389] nvme_fabrics: missing parameter 'transport=%s' [ 481.606052][ T8389] nvme_fabrics: missing parameter 'nqn=%s' [ 481.734493][ T1107] usb 5-1: Using ep0 maxpacket: 32 [ 481.854690][ T1107] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 481.867150][ T1107] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 481.880814][ T1107] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 481.894752][ T8398] binder: 8396:8398 ioctl 4018620d 0 returned -22 [ 481.903933][ T8398] binder: 8396:8398 ioctl c0306201 0 returned -14 [ 481.913500][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 481.930762][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 481.941387][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 481.962054][ T1107] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 481.972182][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.009036][ T1107] usb 5-1: config 0 descriptor?? [ 482.278297][ T1107] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 482.468300][ T4248] usb 5-1: USB disconnect, device number 12 [ 482.484465][ C0] usblp0: nonzero read bulk status received: -108 [ 483.075226][ T8378] usblp0: removed [ 483.081325][ T8404] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 485.338157][ T8424] netlink: set zone limit has 8 unknown bytes [ 485.740431][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'. [ 487.833201][ T8439] nvme_fabrics: missing parameter 'transport=%s' [ 487.857236][ T8447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1074'. [ 487.887001][ T8439] nvme_fabrics: missing parameter 'nqn=%s' [ 488.055275][ T8447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1074'. [ 488.071097][ T8447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1074'. [ 488.081699][ T8447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1074'. [ 488.462591][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1075'. [ 489.792640][ T8463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1079'. [ 489.818099][ T8463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1079'. [ 489.835584][ T8463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1079'. [ 489.870861][ T8463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1079'. [ 489.991537][ T8465] tipc: Enabled bearer , priority 0 [ 490.000641][ T8465] device syzkaller0 entered promiscuous mode [ 490.041287][ T8465] tipc: Resetting bearer [ 490.081989][ T8464] tipc: Resetting bearer [ 490.117587][ T8464] tipc: Disabling bearer [ 492.192791][ T8487] nvme_fabrics: missing parameter 'transport=%s' [ 492.217275][ T8487] nvme_fabrics: missing parameter 'nqn=%s' [ 492.252665][ T8494] netlink: set zone limit has 8 unknown bytes [ 493.031458][ T8504] tipc: Enabled bearer , priority 0 [ 493.125215][ T8504] device syzkaller0 entered promiscuous mode [ 493.188569][ T8504] tipc: Resetting bearer [ 493.220986][ T8503] tipc: Resetting bearer [ 493.301287][ T8503] tipc: Disabling bearer [ 493.635299][ T8527] binder: 8500:8527 ioctl 4018620d 0 returned -22 [ 494.788397][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1101'. [ 495.295095][ T8549] netlink: set zone limit has 8 unknown bytes [ 495.889997][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1106'. [ 496.714176][ T8559] nvme_fabrics: missing parameter 'transport=%s' [ 496.790551][ T8559] nvme_fabrics: missing parameter 'nqn=%s' [ 497.261166][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1108'. [ 499.545455][ T8601] nvme_fabrics: missing parameter 'transport=%s' [ 499.552461][ T8601] nvme_fabrics: missing parameter 'nqn=%s' [ 501.261718][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.269058][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.042299][ T8662] nvme_fabrics: missing parameter 'transport=%s' [ 503.519308][ T8662] nvme_fabrics: missing parameter 'nqn=%s' [ 504.257462][ T8677] xt_socket: unknown flags 0x50 [ 505.344659][ T8681] netlink: set zone limit has 8 unknown bytes [ 509.300533][ T8719] nvme_fabrics: missing parameter 'transport=%s' [ 509.352454][ T8719] nvme_fabrics: missing parameter 'nqn=%s' [ 509.731051][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 515.095547][ T8770] nvme_fabrics: missing parameter 'transport=%s' [ 515.105243][ T8770] nvme_fabrics: missing parameter 'nqn=%s' [ 516.257109][ T8777] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 516.603723][ T8798] netlink: set zone limit has 8 unknown bytes [ 516.783177][ T8801] loop2: detected capacity change from 0 to 512 [ 516.839475][ T8804] loop3: detected capacity change from 0 to 128 [ 518.549799][ T8818] loop3: detected capacity change from 0 to 1024 [ 519.296915][ T4483] hfsplus: b-tree write err: -5, ino 4 [ 524.236463][ T8865] device syzkaller0 entered promiscuous mode [ 525.914612][ T4320] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 526.164825][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 526.254704][ T8910] xt_socket: unknown flags 0x50 [ 527.087976][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.683303][ T4320] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 527.699668][ T8914] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 527.708545][ T4320] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 527.720232][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.741191][ T4320] usb 4-1: config 0 descriptor?? [ 527.892671][ T8562] usb 4-1: USB disconnect, device number 15 [ 528.490701][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 528.505304][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 528.515441][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 528.529295][ T4196] Workqueue: hci1 hci_rx_work [ 528.534943][ T4196] Call Trace: [ 528.540648][ T4196] [ 528.544070][ T4196] dump_stack_lvl+0x168/0x230 [ 528.551241][ T4196] ? show_regs_print_info+0x20/0x20 [ 528.559571][ T4196] ? load_image+0x3b0/0x3b0 [ 528.564738][ T4196] sysfs_create_dir_ns+0x252/0x280 [ 528.571130][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 528.577797][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 528.584548][ T4196] ? le_conn_complete_evt+0xcbc/0x1590 [ 528.592163][ T4196] ? hci_event_packet+0xe05/0x12f0 [ 528.599422][ T4196] ? process_one_work+0x863/0x1000 [ 528.606660][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 528.612775][ T4196] kobject_add_internal+0x662/0xd00 [ 528.621637][ T4196] kobject_add+0x152/0x210 [ 528.627383][ T4196] ? kobject_init+0x1d0/0x1d0 [ 528.632971][ T4196] ? klist_children_get+0x50/0x50 [ 528.639837][ T4196] ? get_device_parent+0x121/0x3f0 [ 528.647791][ T4196] device_add+0x483/0xfb0 [ 528.653126][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 528.659982][ T4196] le_conn_complete_evt+0xcbc/0x1590 [ 528.666736][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 528.673103][ T4196] ? __mutex_trylock_common+0x14f/0x250 [ 528.680643][ T4196] hci_le_meta_evt+0x289/0x3b80 [ 528.687192][ T4196] ? hci_event_packet+0x36d/0x12f0 [ 528.693505][ T4196] ? hci_event_packet+0x2e2/0x12f0 [ 528.701023][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 528.708241][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 528.718555][ T4196] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 528.728775][ T4196] ? mark_lock+0x94/0x320 [ 528.734459][ T4196] ? mutex_unlock+0x10/0x10 [ 528.739639][ T4196] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 528.748638][ T4196] ? lock_chain_count+0x20/0x20 [ 528.754009][ T4196] ? __rwlock_init+0x140/0x140 [ 528.760439][ T4196] hci_event_packet+0xe05/0x12f0 [ 528.768383][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 528.774360][ T4196] ? rcu_lock_release+0x20/0x20 [ 528.782222][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 528.789091][ T4196] hci_rx_work+0x255/0xa10 [ 528.794065][ T4196] process_one_work+0x863/0x1000 [ 528.800448][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 528.807975][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 528.814118][ T4196] ? _raw_spin_lock_irq+0xab/0xe0 [ 528.819495][ T4196] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 528.828756][ T4196] ? wq_worker_running+0x97/0x170 [ 528.835124][ T4196] worker_thread+0xaa8/0x12a0 [ 528.841503][ T4196] kthread+0x436/0x520 [ 528.846699][ T4196] ? rcu_lock_release+0x20/0x20 [ 528.852173][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 528.856916][ T4196] ret_from_fork+0x1f/0x30 [ 528.861584][ T4196] [ 528.885107][ T4196] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 528.903646][ T4196] Bluetooth: hci1: failed to register connection device [ 531.124447][ T13] Bluetooth: hci1: command 0x2016 tx timeout [ 532.551677][ T8963] device syzkaller0 entered promiscuous mode [ 533.294629][ T4320] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 533.776090][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.941811][ T4320] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 534.065015][ T4320] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 534.203274][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.505306][ T4320] usb 4-1: config 0 descriptor?? [ 534.582139][ T4320] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 534.654375][ T4320] dvb-usb: bulk message failed: -22 (3/0) [ 534.722690][ T4320] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 534.844732][ T4320] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 534.884043][ T4320] usb 4-1: media controller created [ 534.926839][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 534.976790][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 535.003264][ T4320] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 535.968021][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 536.077634][ T4320] dvb-usb: schedule remote query interval to 150 msecs. [ 536.145418][ T4320] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 536.232140][ T4320] usb 4-1: USB disconnect, device number 16 [ 536.502367][ T4320] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 539.367210][ T9023] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 540.922504][ T26] audit: type=1326 audit(1764024751.451:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bf0be1749 code=0x0 [ 540.946365][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.993075][ T9056] xt_socket: unknown flags 0x50 [ 542.923448][ T9050] nvme_fabrics: missing parameter 'transport=%s' [ 542.930624][ T9050] nvme_fabrics: missing parameter 'nqn=%s' [ 547.286792][ T9099] xt_socket: unknown flags 0x50 [ 547.667926][ T9108] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1262'. [ 547.832230][ T9114] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 550.168720][ T26] audit: type=1326 audit(1764024760.701:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a6fb749 code=0x7ffc0000 [ 550.420420][ T9141] xt_socket: unknown flags 0x50 [ 551.861732][ T26] audit: type=1326 audit(1764024760.821:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a6fb749 code=0x7ffc0000 [ 551.906552][ T26] audit: type=1326 audit(1764024762.211:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe83a6fb749 code=0x7ffc0000 [ 551.967631][ T26] audit: type=1326 audit(1764024762.211:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a6fb749 code=0x7ffc0000 [ 552.111610][ T26] audit: type=1326 audit(1764024762.211:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a6fb749 code=0x7ffc0000 [ 553.097315][ T9157] kthread_run failed with err -4 [ 553.217371][ T9161] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 555.133702][ T9188] xt_socket: unknown flags 0x50 [ 556.801271][ T9202] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 559.439915][ T9226] input: syz0 as /devices/virtual/input/input35 [ 560.755049][ T9243] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 561.664424][ T4299] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 561.893450][ T9261] tipc: Started in network mode [ 561.915806][ T9261] tipc: Node identity 5e5da8e47ae8, cluster identity 4711 [ 561.932564][ T9261] tipc: Enabled bearer , priority 0 [ 561.960237][ T9261] tipc: Resetting bearer [ 561.977860][ T9260] tipc: Disabling bearer [ 562.621073][ T4299] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 562.647331][ T4299] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.697878][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.715750][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.043721][ T4482] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 563.057298][ T4299] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 563.071511][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.088100][ T4299] usb 4-1: Product: syz [ 563.096965][ T4299] usb 4-1: Manufacturer: syz [ 563.106776][ T4299] usb 4-1: SerialNumber: syz [ 563.445417][ T4296] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 563.464992][ T4482] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.488061][ T4482] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 563.503346][ T4482] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 563.526087][ T4482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.546165][ T4482] usb 3-1: config 0 descriptor?? [ 563.605862][ T4299] usbhid 4-1:1.0: can't add hid device: -71 [ 563.624747][ T4482] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 563.807162][ T4299] usbhid: probe of 4-1:1.0 failed with error -71 [ 563.824944][ T4296] usb 5-1: Using ep0 maxpacket: 16 [ 564.087161][ T4296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.110958][ T4482] dvb-usb: bulk message failed: -22 (3/0) [ 565.324790][ T4299] usb 4-1: USB disconnect, device number 17 [ 565.334065][ T4296] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.366399][ T4296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 565.374018][ T4296] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 565.386827][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.422056][ T4482] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 565.442677][ T4296] usb 5-1: config 0 descriptor?? [ 565.484948][ T4482] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 565.524566][ T4482] usb 3-1: media controller created [ 565.546948][ T4296] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 565.612590][ T9295] netlink: 'syz.5.1325': attribute type 1 has an invalid length. [ 565.637995][ T4482] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.852627][ T4482] dvb-usb: bulk message failed: -22 (6/0) [ 565.886137][ T4482] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 565.946656][ T9295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.992282][ T9294] tipc: Enabling of bearer rejected, failed to enable media [ 566.010681][ T4482] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 566.051796][ T4482] dvb-usb: schedule remote query interval to 150 msecs. [ 566.113666][ T4482] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 566.264455][ T4482] dvb-usb: bulk message failed: -22 (1/0) [ 566.464951][ T4248] usb 3-1: USB disconnect, device number 12 [ 566.504849][ T4482] dvb-usb: error while querying for an remote control event. [ 566.636666][ T4248] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 567.585949][ T9315] nvme_fabrics: missing parameter 'transport=%s' [ 567.593769][ T9315] nvme_fabrics: missing parameter 'nqn=%s' [ 568.337741][ T4248] usb 5-1: USB disconnect, device number 13 [ 568.464585][ T9333] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 568.735382][ T9333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.811885][ T9341] tipc: Enabling of bearer rejected, failed to enable media [ 571.034138][ T9361] binder: 9357:9361 ioctl 4018620d 0 returned -22 [ 571.359197][ C0] hrtimer: interrupt took 81204 ns [ 571.719041][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 571.955030][ T4296] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 572.707751][ T9377] netlink: 'syz.5.1349': attribute type 4 has an invalid length. [ 572.770302][ T9369] nvme_fabrics: missing parameter 'transport=%s' [ 572.817956][ T9379] netlink: 'syz.5.1349': attribute type 17 has an invalid length. [ 572.854396][ T4296] usb 4-1: Using ep0 maxpacket: 16 [ 572.915062][ T9369] nvme_fabrics: missing parameter 'nqn=%s' [ 572.957453][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 573.004980][ T4296] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.087682][ T9381] netlink: 'syz.4.1350': attribute type 1 has an invalid length. [ 573.111313][ T4296] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.149238][ T4296] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 573.205198][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.236599][ T4296] usb 4-1: config 0 descriptor?? [ 573.298700][ T9381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.326244][ T4296] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 573.771218][ T9391] loop4: detected capacity change from 0 to 256 [ 574.077020][ T9391] ======================================================= [ 574.077020][ T9391] WARNING: The mand mount option has been deprecated and [ 574.077020][ T9391] and is ignored by this kernel. Remove the mand [ 574.077020][ T9391] option from the mount to silence this warning. [ 574.077020][ T9391] ======================================================= [ 574.327835][ T9391] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 574.352095][ T9391] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 574.695471][ T9401] binder: 9398:9401 ioctl 4018620d 0 returned -22 [ 574.738624][ T9391] attempt to access beyond end of device [ 574.738624][ T9391] loop4: rw=524288, want=408, limit=256 [ 574.807147][ T9391] attempt to access beyond end of device [ 574.807147][ T9391] loop4: rw=524288, want=664, limit=256 [ 575.035116][ T9391] attempt to access beyond end of device [ 575.035116][ T9391] loop4: rw=0, want=288, limit=256 [ 575.760512][ T4320] usb 4-1: USB disconnect, device number 18 [ 575.811935][ T26] audit: type=1800 audit(1764024786.341:15): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1354" name="file1" dev="loop4" ino=1048593 res=0 errno=0 [ 576.155743][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 576.181701][ T9420] device bridge_slave_1 left promiscuous mode [ 576.224034][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.291487][ T9420] device bridge_slave_0 left promiscuous mode [ 576.316932][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.981159][ T9423] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 578.548540][ T9455] binder: 9440:9455 ioctl 4018620d 0 returned -22 [ 578.914699][ T13] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 579.335634][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 579.707185][ T13] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.073671][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 580.214296][ T13] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 580.300368][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.460099][ T13] usb 5-1: config 0 descriptor?? [ 580.571367][ T13] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 581.997842][ T9495] binder: 9492:9495 ioctl 4018620d 0 returned -22 [ 582.801188][ T9501] xt_socket: unknown flags 0x50 [ 583.036174][ T4299] usb 5-1: USB disconnect, device number 14 [ 587.184886][ T9524] netlink: 'syz.3.1392': attribute type 4 has an invalid length. [ 587.195991][ T9524] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1392'. [ 589.261991][ T9542] binder: 9537:9542 ioctl 4018620d 0 returned -22 [ 589.718595][ T9553] xt_socket: unknown flags 0x50 [ 591.293331][ T4482] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 592.314484][ T4482] usb 5-1: Using ep0 maxpacket: 16 [ 592.455571][ T4482] usb 5-1: device descriptor read/all, error -71 [ 593.041143][ T9592] xt_socket: unknown flags 0x50 [ 598.234373][ T4489] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 599.230893][ T9632] xt_socket: unknown flags 0x50 [ 599.944415][ T4489] usb 1-1: Using ep0 maxpacket: 16 [ 601.054441][ T4489] usb 1-1: unable to read config index 0 descriptor/all [ 601.063668][ T4489] usb 1-1: can't read configurations, error -71 [ 602.313061][ T9661] loop0: detected capacity change from 0 to 512 [ 602.338258][ T9664] loop4: detected capacity change from 0 to 128 [ 602.534698][ T9664] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 602.815311][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.881271][ T9671] loop4: detected capacity change from 0 to 512 [ 602.979468][ T9661] EXT4-fs (loop0): Test dummy encryption mode enabled [ 603.024947][ T9661] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 603.119191][ T9671] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 603.141356][ T9661] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 603.178124][ T9671] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 603.432021][ T9671] EXT4-fs (loop4): 1 truncate cleaned up [ 603.446204][ T9661] EXT4-fs (loop0): 1 truncate cleaned up [ 603.533849][ T9661] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 603.565737][ T9671] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 603.648890][ T9661] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #12: comm syz.0.1435: Siphash requires key [ 603.965947][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.612001][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.029916][ T9698] tipc: Enabling of bearer rejected, failed to enable media [ 606.196962][ T8562] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 606.351305][ T9708] loop3: detected capacity change from 0 to 128 [ 606.469165][ T9708] FAT-fs (loop3): bogus number of directory entries (2) [ 606.474761][ T8562] usb 5-1: Using ep0 maxpacket: 16 [ 606.503544][ T9708] FAT-fs (loop3): Can't find a valid FAT filesystem [ 606.625593][ T8562] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.653659][ T8562] usb 5-1: config 0 interface 0 has no altsetting 0 [ 606.716058][ T8562] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 606.762431][ T8562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.839975][ T8562] usb 5-1: config 0 descriptor?? [ 606.943321][ T8562] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 607.684257][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 607.684292][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 607.803359][ T8562] usb 5-1: USB disconnect, device number 17 [ 607.949621][ T9717] device wireguard0 entered promiscuous mode [ 609.549794][ T9745] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967286. macoff=82 [ 611.645567][ T8562] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 611.894352][ T8562] usb 1-1: Using ep0 maxpacket: 16 [ 612.725357][ T9771] nvme_fabrics: missing parameter 'transport=%s' [ 612.804466][ T8562] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.817927][ T8562] usb 1-1: config 0 interface 0 has no altsetting 0 [ 612.826905][ T8562] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 612.838290][ T8562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.864804][ T8562] usb 1-1: config 0 descriptor?? [ 612.871908][ T9771] nvme_fabrics: missing parameter 'nqn=%s' [ 612.918486][ T8562] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 615.003069][ T9005] usb 1-1: USB disconnect, device number 21 [ 615.194064][ T9791] loop0: detected capacity change from 0 to 1024 [ 616.266180][ T9791] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 616.326913][ T9791] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.936919][ T26] audit: type=1800 audit(1764024828.231:16): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1472" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 618.092463][ T9791] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.1472: lblock 0 mapped to illegal pblock 0 (length 1) [ 618.197449][ T9813] loop3: detected capacity change from 0 to 2048 [ 618.386272][ T9791] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 618.457326][ T9791] EXT4-fs (loop0): This should not happen!! Data will be lost [ 618.457326][ T9791] [ 618.528097][ T9815] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: comm syz.0.1472: lblock 0 mapped to illegal pblock 0 (length 1) [ 618.575687][ T9815] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.1472: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 618.672327][ T9815] EXT4-fs error (device loop0) in ext4_setattr:5622: Corrupt filesystem [ 620.378932][ T9838] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1484'. [ 620.452439][ T9838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1484'. [ 622.041411][ T9855] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 623.994511][ T9873] loop0: detected capacity change from 0 to 256 [ 624.065790][ T9873] exfat: Deprecated parameter 'namecase' [ 624.108480][ T9873] exFAT-fs (loop0): failed to read boot sector [ 624.128801][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.137139][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.196871][ T9873] exFAT-fs (loop0): failed to recognize exfat type [ 624.933640][ T9875] loop4: detected capacity change from 0 to 2048 [ 626.558129][ T9875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.419275][ T9907] netlink: set zone limit has 8 unknown bytes [ 628.885817][ T9911] nvme_fabrics: missing parameter 'transport=%s' [ 629.392017][ T9911] nvme_fabrics: missing parameter 'nqn=%s' [ 633.080216][ T9955] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 633.283370][ T9961] tipc: Enabling of bearer rejected, failed to enable media [ 636.545843][ T9981] netlink: set zone limit has 8 unknown bytes [ 636.554712][ T9981] overlayfs: failed to clone upperpath [ 637.634518][ T9997] xt_socket: unknown flags 0x50 [ 640.186129][T10008] nvme_fabrics: missing parameter 'transport=%s' [ 640.237756][T10008] nvme_fabrics: missing parameter 'nqn=%s' [ 641.859487][T10016] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 645.661658][T10037] tipc: Enabling of bearer rejected, failed to enable media [ 647.137833][T10058] loop4: detected capacity change from 0 to 256 [ 647.289667][T10058] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 651.357597][T10092] netlink: set zone limit has 8 unknown bytes [ 651.367989][T10092] overlayfs: failed to clone upperpath [ 653.068228][T10103] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 656.369938][T10125] nvme_fabrics: missing parameter 'transport=%s' [ 656.378472][T10125] nvme_fabrics: missing parameter 'nqn=%s' [ 656.778985][T10131] netlink: set zone limit has 8 unknown bytes [ 656.793431][T10131] overlayfs: failed to clone upperpath [ 658.963603][T10137] nvme_fabrics: missing parameter 'transport=%s' [ 659.017555][T10137] nvme_fabrics: missing parameter 'nqn=%s' [ 659.203361][T10146] tipc: Enabling of bearer rejected, failed to enable media [ 659.626349][T10152] binder: 10145:10152 ioctl 4018620d 0 returned -22 [ 659.656444][T10152] binder: 10145:10152 ioctl c0306201 0 returned -14 [ 665.171491][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 666.806796][ T4320] Bluetooth: hci6: command 0x0409 tx timeout [ 667.244454][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 667.758276][T10212] nvme_fabrics: missing parameter 'transport=%s' [ 667.776598][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 667.804796][T10212] nvme_fabrics: missing parameter 'nqn=%s' [ 668.369829][ T6155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.427774][T10178] chnl_net:caif_netlink_parms(): no params data found [ 668.533002][ T6155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.936878][ T9005] Bluetooth: hci6: command 0x041b tx timeout [ 669.145876][ T6155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.532532][ T6155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.673990][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.690358][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.942031][T10178] device bridge_slave_0 entered promiscuous mode [ 670.289611][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.302278][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.327957][T10178] device bridge_slave_1 entered promiscuous mode [ 670.525378][ T4320] Bluetooth: hci4: command 0x040f tx timeout [ 670.545912][ T4320] Bluetooth: hci1: command 0x041b tx timeout [ 670.622584][T10178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.643817][T10178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.005944][ T4320] Bluetooth: hci6: command 0x040f tx timeout [ 671.272693][T10178] team0: Port device team_slave_0 added [ 671.419495][T10196] chnl_net:caif_netlink_parms(): no params data found [ 671.640925][T10178] team0: Port device team_slave_1 added [ 671.857769][T10178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.885071][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.974985][T10178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.009668][ T6155] tipc: Left network mode [ 672.074898][T10178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.082007][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.181511][T10178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.454080][T10196] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.462611][T10196] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.525015][T10196] device bridge_slave_0 entered promiscuous mode [ 672.541799][T10190] chnl_net:caif_netlink_parms(): no params data found [ 672.587763][T10178] device hsr_slave_0 entered promiscuous mode [ 672.602594][T10178] device hsr_slave_1 entered promiscuous mode [ 672.615014][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 672.623895][T10178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.633502][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 672.634812][T10178] Cannot create hsr debugfs directory [ 672.821242][T10196] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.834445][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.863081][T10196] device bridge_slave_1 entered promiscuous mode [ 672.876955][T10270] xt_socket: unknown flags 0x50 [ 672.940259][T10267] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 673.113282][T10196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.174421][ T4489] Bluetooth: hci6: command 0x0419 tx timeout [ 673.190566][T10196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.476327][T10196] team0: Port device team_slave_0 added [ 673.566281][T10196] team0: Port device team_slave_1 added [ 673.766782][T10196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.794495][T10196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.923245][T10196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.935459][T10190] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.953494][T10190] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.985627][T10190] device bridge_slave_0 entered promiscuous mode [ 674.042091][T10196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.093840][T10196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.137491][T10196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.157378][T10190] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.165721][T10190] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.186512][T10190] device bridge_slave_1 entered promiscuous mode [ 674.445937][T10190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.501515][T10190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.322028][T10190] team0: Port device team_slave_0 added [ 675.379451][ T4489] Bluetooth: hci1: command 0x0419 tx timeout [ 675.420531][T10196] device hsr_slave_0 entered promiscuous mode [ 675.440458][T10196] device hsr_slave_1 entered promiscuous mode [ 675.450005][T10196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.460450][T10196] Cannot create hsr debugfs directory [ 675.469436][T10190] team0: Port device team_slave_1 added [ 675.583346][T10178] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 675.820946][T10178] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 675.897713][T10178] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 676.025339][T10190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.033084][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.084286][T10190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.107702][T10178] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 676.187067][T10323] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 676.216399][T10190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.254684][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.304627][T10190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.358487][T10190] device hsr_slave_0 entered promiscuous mode [ 677.390889][T10190] device hsr_slave_1 entered promiscuous mode [ 677.405181][T10190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.423352][T10190] Cannot create hsr debugfs directory [ 677.725034][ T6155] device hsr_slave_0 left promiscuous mode [ 677.737021][ T6155] device hsr_slave_1 left promiscuous mode [ 677.770241][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.785003][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.817572][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.845061][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.878276][ T6155] device bridge_slave_1 left promiscuous mode [ 677.894542][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.905728][ T6155] device bridge_slave_0 left promiscuous mode [ 677.923534][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.965787][ T6155] device veth1_macvtap left promiscuous mode [ 677.982674][ T6155] device veth0_macvtap left promiscuous mode [ 678.002793][ T6155] device veth1_vlan left promiscuous mode [ 678.016563][ T6155] device veth0_vlan left promiscuous mode [ 678.235861][T10355] xt_socket: unknown flags 0x50 [ 678.286114][ T6155] bond1 (unregistering): Released all slaves [ 678.569141][ T6155] team0 (unregistering): Port device team_slave_1 removed [ 678.599559][ T6155] team0 (unregistering): Port device team_slave_0 removed [ 678.634887][ T6155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.678068][ T6155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.056607][ T6155] bond0 (unregistering): Released all slaves [ 679.652051][T10178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.748206][T10196] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 679.780920][T10178] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.805941][T10196] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 679.831113][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 679.841694][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 679.874966][T10196] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 679.893982][T10196] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 679.917432][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 679.931088][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 679.968727][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.976098][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.121851][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 680.258722][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 680.362415][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.370343][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.784931][T10373] nvme_fabrics: missing parameter 'transport=%s' [ 680.807738][T10373] nvme_fabrics: missing parameter 'nqn=%s' [ 680.843274][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 680.855554][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 681.006535][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 681.029176][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 681.432730][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 681.625326][T10388] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 681.650978][T10190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 681.824556][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 681.865316][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 681.938242][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 682.094755][T10190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 682.252268][T10190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 682.444423][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 682.511715][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 682.745510][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 682.803335][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 682.926871][T10190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 682.973468][T10178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 683.183034][T10196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.264931][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 683.286468][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.310239][T10196] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.377110][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.397982][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.415597][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.422903][ T4483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.451754][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 683.472377][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.492840][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.500246][ T4483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.573964][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 683.593023][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 683.624019][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 683.696799][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 683.726935][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 683.745214][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 683.761242][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.771230][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 683.788731][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 683.800314][T10414] xt_socket: unknown flags 0x50 [ 683.809567][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 683.830102][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 683.856480][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 683.884923][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 683.953700][T10190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.002156][T10178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.065631][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 684.104569][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 684.123607][T10190] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.166394][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.195894][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.279818][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.315386][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 684.365712][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.374014][ T4483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.415032][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 684.468717][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 684.515781][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.523011][ T4483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.554794][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 684.587858][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 684.795226][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 684.804795][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 684.931165][T10190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.024818][T10190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.168976][T10196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.225575][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 685.255920][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 685.315372][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 685.352446][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 685.383719][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.425147][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 685.445533][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.475076][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 685.496252][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.527487][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.568454][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.575282][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.598139][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 686.127564][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 686.337335][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 686.876726][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 686.905604][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 686.921735][T10190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.973805][T10178] device veth0_vlan entered promiscuous mode [ 687.057157][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 687.070400][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 687.113205][T10178] device veth1_vlan entered promiscuous mode [ 687.151503][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 687.170828][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 687.188779][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 687.235359][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 687.266468][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 687.383538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 687.430148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 687.467651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 687.492241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 687.532391][T10196] device veth0_vlan entered promiscuous mode [ 687.566714][T10178] device veth0_macvtap entered promiscuous mode [ 687.647698][T10178] device veth1_macvtap entered promiscuous mode [ 687.713865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 687.755862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 687.787563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 687.821655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 687.889962][T10196] device veth1_vlan entered promiscuous mode [ 687.937630][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.985735][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.019689][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.069557][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.135708][T10178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.202382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 688.213467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 688.245334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 688.255697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 688.292153][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.314888][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.334306][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.354256][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.377394][T10178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.425474][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 688.455812][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 688.500541][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 688.519469][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 688.543693][T10178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.567399][T10178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.583746][T10178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.609511][T10178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.646816][T10196] device veth0_macvtap entered promiscuous mode [ 688.682233][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 688.707929][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 688.733950][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 688.770230][T10196] device veth1_macvtap entered promiscuous mode [ 688.825566][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 688.859655][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 688.875859][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 688.939893][T10190] device veth0_vlan entered promiscuous mode [ 688.976481][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 688.990754][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 689.009444][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.032165][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.048490][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.065508][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.077849][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.092581][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.107717][T10196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.126651][T10190] device veth1_vlan entered promiscuous mode [ 689.262251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 689.300852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 689.342511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 689.529579][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.555950][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.579577][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.595531][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.613941][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.634977][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.656343][T10196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.856263][T10190] device veth0_macvtap entered promiscuous mode [ 689.902643][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 689.923984][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 689.955203][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 689.973709][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.003086][T10196] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.025846][T10196] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.046162][T10196] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.066641][T10196] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.203210][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 690.226833][T10190] device veth1_macvtap entered promiscuous mode [ 690.235437][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.270815][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 690.280844][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.611320][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 691.101918][T10520] nvme_fabrics: missing parameter 'transport=%s' [ 691.139726][ T6155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.194449][T10520] nvme_fabrics: missing parameter 'nqn=%s' [ 691.433344][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.512916][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.562014][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.604868][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.624250][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.644293][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.667704][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.687270][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.729088][T10190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.755709][T10529] xt_socket: unknown flags 0x50 [ 691.787655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 691.814375][ T4248] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 691.823439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.880648][ T6155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.940568][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.952261][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.974290][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.986506][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.013732][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.063365][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.094506][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.114706][ T4248] usb 3-1: Using ep0 maxpacket: 16 [ 692.138167][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.167213][T10190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.215119][T10190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.255141][ T4248] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.270458][T10190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.294649][ T4248] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.313029][ T4248] usb 3-1: config 0 interface 0 has no altsetting 0 [ 692.335048][ T4248] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 692.355671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 692.363321][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.373154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 692.401781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 692.405673][ T4248] usb 3-1: config 0 descriptor?? [ 692.441880][ T6155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.487448][T10190] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.505403][T10190] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.517306][T10190] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.529564][T10190] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.547409][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.593903][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.618945][ T6155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.739871][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 692.793289][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.837439][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.912150][ T4248] hid (null): unknown global tag 0xd [ 692.931035][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 692.931755][ T4248] hid (null): unknown global tag 0xd [ 692.959649][ T4248] hid (null): nested delimiters [ 693.088953][T10547] device syzkaller0 entered promiscuous mode [ 693.119567][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.158863][ T4248] usb 3-1: USB disconnect, device number 13 [ 693.229443][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.382388][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.412342][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.468449][ T6155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.553630][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 693.584982][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 693.666735][T10555] binder: 10551:10555 ioctl 4018620d 0 returned -22 [ 693.982051][T10558] binder: 10551:10558 ioctl c0306201 0 returned -14 [ 694.338196][ T6155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.487046][T10561] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 694.557510][ T6155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.968469][ T6155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.817609][T10586] nvme_fabrics: missing parameter 'transport=%s' [ 696.838838][T10586] nvme_fabrics: missing parameter 'nqn=%s' [ 698.362825][T10604] device syzkaller0 entered promiscuous mode [ 699.706127][ T6155] tipc: Disabling bearer [ 699.884647][ T6155] tipc: Left network mode [ 700.336164][ T6155] tipc: Left network mode [ 700.828702][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1652'. [ 700.871044][T10632] nvme_fabrics: missing parameter 'transport=%s' [ 700.909551][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1651'. [ 700.969905][T10632] nvme_fabrics: missing parameter 'nqn=%s' [ 701.144886][T10642] xt_socket: unknown flags 0x50 [ 703.228939][T10649] nvme_fabrics: missing parameter 'transport=%s' [ 703.237070][T10649] nvme_fabrics: missing parameter 'nqn=%s' [ 704.868341][T10671] usb usb8: usbfs: process 10671 (syz.7.1660) did not claim interface 0 before use [ 704.962697][T10675] usb usb9: usbfs: process 10675 (syz.7.1661) did not claim interface 48 before use [ 706.927617][T10702] loop6: detected capacity change from 0 to 512 [ 707.059769][T10702] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 712.099493][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.802130][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.654303][ T1107] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 714.164353][ T1107] usb 9-1: Using ep0 maxpacket: 16 [ 714.242623][T10740] nvme_fabrics: missing parameter 'transport=%s' [ 714.250523][T10740] nvme_fabrics: missing parameter 'nqn=%s' [ 714.259938][ T1327] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 714.294896][ T1107] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.320781][ T1107] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.383740][ T1107] usb 9-1: config 0 interface 0 has no altsetting 0 [ 714.434079][ T1107] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 714.474590][ T1327] usb 3-1: device descriptor read/64, error -71 [ 714.494501][ T1107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.548493][ T1107] usb 9-1: config 0 descriptor?? [ 714.740559][ T6155] device hsr_slave_0 left promiscuous mode [ 714.744483][ T1327] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 714.964849][ T1327] usb 3-1: device descriptor read/64, error -71 [ 715.111673][ T1327] usb usb3-port1: attempt power cycle [ 715.438746][ T6155] device hsr_slave_1 left promiscuous mode [ 715.604302][ T1327] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 715.694822][ T1107] usb 9-1: USB disconnect, device number 2 [ 715.744984][ T1327] usb 3-1: device descriptor read/8, error -71 [ 716.522156][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.538520][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.609262][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.662458][ T1327] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 716.671159][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.723440][ T6155] device bridge_slave_1 left promiscuous mode [ 716.770149][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.655979][ T1327] usb 3-1: device descriptor read/8, error -71 [ 717.688832][ T6155] device bridge_slave_0 left promiscuous mode [ 717.719215][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.934554][ T1327] usb usb3-port1: unable to enumerate USB device [ 718.470162][ T6155] device hsr_slave_0 left promiscuous mode [ 718.664817][T10791] nvme_fabrics: missing parameter 'transport=%s' [ 718.879202][T10791] nvme_fabrics: missing parameter 'nqn=%s' [ 718.893433][ T6155] device hsr_slave_1 left promiscuous mode [ 719.369625][ T6155] device veth1_macvtap left promiscuous mode [ 719.391718][ T6155] device veth0_macvtap left promiscuous mode [ 719.432148][ T6155] device veth1_vlan left promiscuous mode [ 719.463958][ T6155] device veth0_vlan left promiscuous mode [ 719.522329][ T6155] device veth1_macvtap left promiscuous mode [ 719.552065][ T6155] device veth0_macvtap left promiscuous mode [ 719.574535][ T6155] device veth1_vlan left promiscuous mode [ 719.714616][ T6155] device veth0_vlan left promiscuous mode [ 722.274606][ T6155] bond2 (unregistering): Released all slaves [ 722.736639][ T6155] bond1 (unregistering): Released all slaves [ 723.683074][ T6155] team0 (unregistering): Port device team_slave_1 removed [ 723.862826][ T6155] team0 (unregistering): Port device team_slave_0 removed [ 724.070080][ T6155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.142354][ T6155] device bond_slave_1 left promiscuous mode [ 724.364038][ T6155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.398990][T10834] nvme_fabrics: missing parameter 'transport=%s' [ 724.406299][T10834] nvme_fabrics: missing parameter 'nqn=%s' [ 724.453114][ T6155] device bond_slave_0 left promiscuous mode [ 724.638858][ T26] audit: type=1326 audit(1764024935.171:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.8.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272dd26749 code=0x7ffc0000 [ 724.661990][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.821540][ T26] audit: type=1326 audit(1764024935.171:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.8.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f272dd26749 code=0x7ffc0000 [ 724.892086][T10848] fuse: Bad value for 'fd' [ 724.918450][ T6155] bond0 (unregistering): Released all slaves [ 724.947306][ T26] audit: type=1326 audit(1764024935.171:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.8.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272dd26749 code=0x7ffc0000 [ 724.992687][ T26] audit: type=1326 audit(1764024935.171:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.8.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f272dd26749 code=0x7ffc0000 [ 725.143095][ T6155] bond2 (unregistering): Released all slaves [ 725.155908][ T26] audit: type=1326 audit(1764024935.171:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.8.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272dd26749 code=0x7ffc0000 [ 725.857936][ T6155] bond1 (unregistering): Released all slaves [ 726.080448][T10861] fuse: Bad value for 'fd' [ 727.133673][ T6155] bond0 (unregistering): Released all slaves [ 728.840257][T10882] loop6: detected capacity change from 0 to 512 [ 729.212564][T10882] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 729.646925][T10882] EXT4-fs (loop6): inline encryption not supported [ 729.793387][T10882] EXT4-fs (loop6): Test dummy encryption mode enabled [ 729.831492][T10882] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 729.872961][T10882] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 729.914583][T10882] EXT4-fs (loop6): 1 truncate cleaned up [ 730.111316][T10882] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 737.325515][T10985] IPv6: addrconf: prefix option has invalid lifetime [ 737.653352][T11001] loop8: detected capacity change from 0 to 1024 [ 740.915996][ T8562] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 741.177806][ T8562] usb 8-1: device descriptor read/64, error -71 [ 741.492274][ T8562] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 742.862594][T11037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.917836][T11037] device batadv_slave_0 entered promiscuous mode [ 743.851405][T11070] loop6: detected capacity change from 0 to 128 [ 743.950398][T11074] xt_socket: unknown flags 0x50 [ 744.070481][T11070] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 744.202018][T11070] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 747.016850][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.027063][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.365069][T11140] netlink: set zone limit has 8 unknown bytes [ 747.656895][T11145] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 747.714693][ T8562] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 747.914296][ T8562] usb 7-1: device descriptor read/64, error -71 [ 748.184351][ T8562] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 748.251151][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1780'. [ 748.414424][ T8562] usb 7-1: device descriptor read/64, error -71 [ 748.535214][ T8562] usb usb7-port1: attempt power cycle [ 748.944643][ T8562] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 749.034898][ T8562] usb 7-1: device descriptor read/8, error -71 [ 749.844361][ T8562] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 750.107280][ T8562] usb 7-1: device descriptor read/8, error -71 [ 750.433062][ T8562] usb usb7-port1: unable to enumerate USB device [ 752.200228][T11194] loop2: detected capacity change from 0 to 512 [ 752.491676][T11206] IPv6: addrconf: prefix option has invalid lifetime [ 753.387357][T11194] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,grpquota,,errors=continue. Quota mode: writeback. [ 753.562354][T11194] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.268009][T11223] netlink: set zone limit has 8 unknown bytes [ 755.742427][T11241] nvme_fabrics: missing parameter 'transport=%s' [ 755.904561][T11241] nvme_fabrics: missing parameter 'nqn=%s' [ 757.730104][T11266] netlink: set zone limit has 8 unknown bytes [ 761.360618][T11306] netlink: set zone limit has 8 unknown bytes [ 761.369509][T11306] overlayfs: failed to clone upperpath [ 763.349403][T11318] binder: 11309:11318 ioctl 4018620d 0 returned -22 [ 766.665668][ T4296] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 766.770993][T11361] netlink: set zone limit has 8 unknown bytes [ 766.934635][ T4296] usb 7-1: Using ep0 maxpacket: 16 [ 767.052778][T11368] netlink: set zone limit has 8 unknown bytes [ 767.154779][ T4296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.255771][ T4296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.271552][ T4296] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 767.366702][ T4296] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 767.413270][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.646218][ T4296] usb 7-1: config 0 descriptor?? [ 767.670115][ T4296] usb 7-1: can't set config #0, error -71 [ 767.686064][ T4296] usb 7-1: USB disconnect, device number 6 [ 767.858477][T11374] nvme_fabrics: missing parameter 'transport=%s' [ 767.879389][T11374] nvme_fabrics: missing parameter 'nqn=%s' [ 768.192708][T11385] binder: 11381:11385 ioctl 4018620d 0 returned -22 [ 772.619914][T11420] netlink: set zone limit has 8 unknown bytes [ 773.724296][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 773.901886][T11441] binder: 11430:11441 ioctl 4018620d 0 returned -22 [ 774.754309][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 774.895062][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.000766][ T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 775.352703][ T7] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 776.002282][T11445] nvme_fabrics: missing parameter 'transport=%s' [ 776.014861][T11445] nvme_fabrics: missing parameter 'nqn=%s' [ 776.024307][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.034966][ T7] usb 3-1: config 0 descriptor?? [ 776.054661][ T7] usb 3-1: can't set config #0, error -71 [ 776.141979][ T7] usb 3-1: USB disconnect, device number 18 [ 776.839361][T11473] netlink: set zone limit has 8 unknown bytes [ 776.848173][T11473] overlayfs: failed to clone upperpath [ 776.857970][T11475] xt_socket: unknown flags 0x48 [ 778.066568][T11491] binder: 11478:11491 ioctl 4018620d 0 returned -22 [ 779.952658][ T4296] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 780.424573][ T4296] usb 9-1: Using ep0 maxpacket: 32 [ 781.044714][ T4296] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 781.121701][ T4296] usb 9-1: can't read configurations, error -71 [ 782.879304][T11533] netlink: set zone limit has 8 unknown bytes [ 785.584384][T11556] binder: 11544:11556 ioctl 4018620d 0 returned -22 [ 786.924298][ T1107] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 787.904396][ T1107] usb 8-1: Using ep0 maxpacket: 32 [ 788.424520][ T1107] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.462251][ T1107] usb 8-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 789.915351][T11581] nvme_fabrics: missing parameter 'transport=%s' [ 789.921924][T11581] nvme_fabrics: missing parameter 'nqn=%s' [ 789.954197][ T1107] usb 8-1: config 0 interface 0 has no altsetting 0 [ 789.969747][ T1107] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 789.979823][ T1107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.990398][ T1107] usb 8-1: config 0 descriptor?? [ 790.131719][ T1107] usb 8-1: can't set config #0, error -71 [ 790.159710][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 790.173275][ T1107] usb 8-1: USB disconnect, device number 4 [ 790.221893][T11594] netlink: set zone limit has 8 unknown bytes [ 790.287607][T11593] device syzkaller0 entered promiscuous mode [ 790.328058][ T7] Bluetooth: hci6: command 0x0406 tx timeout [ 790.337261][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 791.905525][T11614] binder: 11606:11614 ioctl 4018620d 0 returned -22 [ 792.840637][T11615] ODEBUG: Out of memory. ODEBUG disabled [ 795.564505][ T1107] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 796.074687][ T1107] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.214308][ T7] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 796.544065][ T1107] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.854633][T11655] nvme_fabrics: missing parameter 'transport=%s' [ 797.859428][ T1107] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 797.875181][ T1107] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 797.884912][ T1107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.906324][ T1107] usb 9-1: config 0 descriptor?? [ 797.934526][ T1107] usb 9-1: can't set config #0, error -71 [ 797.941855][ T1107] usb 9-1: USB disconnect, device number 5 [ 797.950929][T11655] nvme_fabrics: missing parameter 'nqn=%s' [ 797.974223][ T7] usb 8-1: Using ep0 maxpacket: 32 [ 798.141292][ T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.178936][ T7] usb 8-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 799.284396][T11666] binder: 11659:11666 ioctl 4018620d 0 returned -22 [ 799.808550][ T7] usb 8-1: config 0 interface 0 has no altsetting 0 [ 799.815372][ T7] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 799.824633][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.836023][ T7] usb 8-1: config 0 descriptor?? [ 799.935786][ T7] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 800.658565][ T4482] usb 8-1: USB disconnect, device number 5 [ 801.549624][T11673] team0: Port device team_slave_0 removed [ 802.154736][ T5344] ================================================================== [ 802.163405][ T5344] BUG: KASAN: use-after-free in __mutex_lock_common+0xc85/0x2390 [ 802.171187][ T5344] Read of size 8 at addr ffff88807d6c4060 by task khidpd_10000008/5344 [ 802.179571][ T5344] [ 802.181940][ T5344] CPU: 1 PID: 5344 Comm: khidpd_10000008 Not tainted syzkaller #0 [ 802.190232][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 802.200643][ T5344] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 802.204070][ T5344] [ 802.204439][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 802.207140][ T5344] dump_stack_lvl+0x168/0x230 [ 802.207231][ T5344] ? show_regs_print_info+0x20/0x20 [ 802.207260][ T5344] ? load_image+0x3b0/0x3b0 [ 802.207283][ T5344] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 802.207314][ T5344] print_address_description+0x60/0x2d0 [ 802.207339][ T5344] ? __mutex_lock_common+0xc85/0x2390 [ 802.207363][ T5344] kasan_report+0xdf/0x130 [ 802.250083][ T5344] ? __mutex_lock_common+0xc85/0x2390 [ 802.255876][ T5344] __mutex_lock_common+0xc85/0x2390 [ 802.261262][ T5344] ? l2cap_unregister_user+0x66/0x1a0 [ 802.266703][ T5344] ? mutex_lock_io_nested+0x60/0x60 [ 802.271960][ T5344] ? remove_wait_queue+0x120/0x120 [ 802.277594][ T5344] ? _raw_spin_unlock+0x40/0x40 [ 802.282512][ T5344] mutex_lock_nested+0x17/0x20 [ 802.287324][ T5344] l2cap_unregister_user+0x66/0x1a0 [ 802.292788][ T5344] hidp_session_thread+0x3c4/0x400 [ 802.298228][ T5344] ? hidp_session_get+0x80/0x80 [ 802.303139][ T5344] ? hidp_session_thread+0x400/0x400 [ 802.308567][ T5344] ? _raw_spin_unlock+0x40/0x40 [ 802.313624][ T5344] ? hidp_session_thread+0x400/0x400 [ 802.319596][ T5344] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 802.325572][ T5344] ? __kthread_parkme+0x157/0x1b0 [ 802.330676][ T5344] kthread+0x436/0x520 [ 802.334798][ T5344] ? hidp_session_get+0x80/0x80 [ 802.339777][ T5344] ? kthread_blkcg+0xd0/0xd0 [ 802.344422][ T5344] ret_from_fork+0x1f/0x30 [ 802.349587][ T5344] [ 802.352627][ T5344] [ 802.356574][ T5344] Allocated by task 4857: [ 802.361160][ T5344] __kasan_kmalloc+0xb5/0xf0 [ 802.366351][ T5344] hci_alloc_dev_priv+0x23/0x1d20 [ 802.371450][ T5344] vhci_create_device+0x122/0x5c0 [ 802.376665][ T5344] vhci_write+0x391/0x450 [ 802.381052][ T5344] vfs_write+0x712/0xd00 [ 802.385575][ T5344] ksys_write+0x14d/0x250 [ 802.389941][ T5344] do_syscall_64+0x4c/0xa0 [ 802.394408][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.400501][ T5344] [ 802.402859][ T5344] Freed by task 11517: [ 802.406975][ T5344] kasan_set_track+0x4b/0x70 [ 802.411707][ T5344] kasan_set_free_info+0x1f/0x40 [ 802.416864][ T5344] ____kasan_slab_free+0xd5/0x110 [ 802.422976][ T5344] slab_free_freelist_hook+0xea/0x170 [ 802.428731][ T5344] kfree+0xef/0x2a0 [ 802.432597][ T5344] hci_release_dev+0x1378/0x14e0 [ 802.437668][ T5344] bt_host_release+0x7e/0x90 [ 802.442486][ T5344] device_release+0x92/0x1c0 [ 802.447117][ T5344] kobject_put+0x21d/0x460 [ 802.451576][ T5344] vhci_release+0x7b/0xc0 [ 802.455959][ T5344] __fput+0x234/0x930 [ 802.461037][ T5344] task_work_run+0x125/0x1a0 [ 802.466000][ T5344] do_exit+0x61e/0x20a0 [ 802.470668][ T5344] do_group_exit+0x12e/0x300 [ 802.475473][ T5344] get_signal+0x6ca/0x12c0 [ 802.480037][ T5344] arch_do_signal_or_restart+0xc1/0x1300 [ 802.485734][ T5344] exit_to_user_mode_loop+0x9e/0x130 [ 802.491165][ T5344] exit_to_user_mode_prepare+0xee/0x180 [ 802.497398][ T5344] syscall_exit_to_user_mode+0x16/0x40 [ 802.503004][ T5344] do_syscall_64+0x58/0xa0 [ 802.507473][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.513512][ T5344] [ 802.515879][ T5344] Last potentially related work creation: [ 802.521762][ T5344] kasan_save_stack+0x35/0x60 [ 802.526679][ T5344] kasan_record_aux_stack+0xb8/0x100 [ 802.532098][ T5344] insert_work+0x54/0x3d0 [ 802.536557][ T5344] __queue_work+0x9c5/0xd50 [ 802.541353][ T5344] queue_work_on+0x11d/0x1d0 [ 802.546352][ T5344] hci_recv_frame+0x18c/0x1f0 [ 802.551153][ T5344] vhci_write+0x33f/0x450 [ 802.555528][ T5344] vfs_write+0x712/0xd00 [ 802.559807][ T5344] ksys_write+0x14d/0x250 [ 802.564275][ T5344] do_syscall_64+0x4c/0xa0 [ 802.568714][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.574658][ T5344] [ 802.577004][ T5344] Second to last potentially related work creation: [ 802.583605][ T5344] kasan_save_stack+0x35/0x60 [ 802.588673][ T5344] kasan_record_aux_stack+0xb8/0x100 [ 802.594601][ T5344] insert_work+0x54/0x3d0 [ 802.598978][ T5344] __queue_work+0x9c5/0xd50 [ 802.603724][ T5344] queue_work_on+0x11d/0x1d0 [ 802.608352][ T5344] hci_recv_frame+0x18c/0x1f0 [ 802.613182][ T5344] vhci_write+0x33f/0x450 [ 802.617546][ T5344] vfs_write+0x712/0xd00 [ 802.622183][ T5344] ksys_write+0x14d/0x250 [ 802.626711][ T5344] do_syscall_64+0x4c/0xa0 [ 802.631295][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.637597][ T5344] [ 802.639930][ T5344] The buggy address belongs to the object at ffff88807d6c4000 [ 802.639930][ T5344] which belongs to the cache kmalloc-8k of size 8192 [ 802.654088][ T5344] The buggy address is located 96 bytes inside of [ 802.654088][ T5344] 8192-byte region [ffff88807d6c4000, ffff88807d6c6000) [ 802.667912][ T5344] The buggy address belongs to the page: [ 802.673644][ T5344] page:ffffea0001f5b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d6c0 [ 802.684470][ T5344] head:ffffea0001f5b000 order:3 compound_mapcount:0 compound_pincount:0 [ 802.692947][ T5344] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 802.701566][ T5344] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016842280 [ 802.710754][ T5344] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 802.719383][ T5344] page dumped because: kasan: bad access detected [ 802.725831][ T5344] page_owner tracks the page as allocated [ 802.731762][ T5344] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4035, ts 41388359356, free_ts 41368857601 [ 802.752364][ T5344] get_page_from_freelist+0x1b77/0x1c60 [ 802.757952][ T5344] __alloc_pages+0x1e1/0x470 [ 802.762681][ T5344] new_slab+0xc0/0x4b0 [ 802.767378][ T5344] ___slab_alloc+0x81e/0xdf0 [ 802.772438][ T5344] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 802.778382][ T5344] __alloc_skb+0x22c/0x750 [ 802.783251][ T5344] netlink_dump+0x18a/0xcd0 [ 802.789264][ T5344] netlink_recvmsg+0x653/0xdb0 [ 802.795242][ T5344] ____sys_recvmsg+0x291/0x580 [ 802.800655][ T5344] ___sys_recvmsg+0x1af/0x4f0 [ 802.805957][ T5344] __x64_sys_recvmsg+0x1dd/0x2a0 [ 802.811028][ T5344] do_syscall_64+0x4c/0xa0 [ 802.815566][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.821580][ T5344] page last free stack trace: [ 802.826353][ T5344] free_unref_page_prepare+0x637/0x6c0 [ 802.832262][ T5344] free_unref_page+0x94/0x280 [ 802.838608][ T5344] __unfreeze_partials+0x1a5/0x200 [ 802.845258][ T5344] put_cpu_partial+0x12d/0x190 [ 802.850837][ T5344] qlist_free_all+0x35/0x90 [ 802.855466][ T5344] kasan_quarantine_reduce+0x150/0x160 [ 802.861949][ T5344] __kasan_slab_alloc+0x2f/0xd0 [ 802.867134][ T5344] slab_post_alloc_hook+0x4c/0x380 [ 802.872937][ T5344] __kmalloc+0x127/0x330 [ 802.877820][ T5344] tomoyo_realpath_from_path+0x118/0x610 [ 802.883690][ T5344] tomoyo_path_perm+0x1cd/0x510 [ 802.888673][ T5344] security_inode_getattr+0xcf/0x120 [ 802.894693][ T5344] vfs_getattr+0x26/0x3a0 [ 802.899102][ T5344] __x64_sys_newfstat+0x104/0x1d0 [ 802.904153][ T5344] do_syscall_64+0x4c/0xa0 [ 802.908611][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.914627][ T5344] [ 802.917068][ T5344] Memory state around the buggy address: [ 802.922717][ T5344] ffff88807d6c3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 802.931095][ T5344] ffff88807d6c3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 802.939281][ T5344] >ffff88807d6c4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 802.947471][ T5344] ^ [ 802.954848][ T5344] ffff88807d6c4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 802.963149][ T5344] ffff88807d6c4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 802.971352][ T5344] ================================================================== [ 802.979426][ T5344] Disabling lock debugging due to kernel taint [ 802.986635][ T5344] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 802.994219][ T5344] CPU: 1 PID: 5344 Comm: khidpd_10000008 Tainted: G B syzkaller #0 [ 803.003444][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 803.013985][ T5344] Call Trace: [ 803.017300][ T5344] [ 803.020246][ T5344] dump_stack_lvl+0x168/0x230 [ 803.025200][ T5344] ? show_regs_print_info+0x20/0x20 [ 803.030675][ T5344] ? load_image+0x3b0/0x3b0 [ 803.035458][ T5344] panic+0x2c9/0x7f0 [ 803.039384][ T5344] ? bpf_jit_dump+0xd0/0xd0 [ 803.043922][ T5344] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 803.050529][ T5344] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 803.057056][ T5344] ? _raw_spin_unlock+0x40/0x40 [ 803.062278][ T5344] ? __mutex_lock_common+0xc85/0x2390 [ 803.067759][ T5344] check_panic_on_warn+0x80/0xa0 [ 803.072744][ T5344] ? __mutex_lock_common+0xc85/0x2390 [ 803.078319][ T5344] end_report+0x6d/0xf0 [ 803.082662][ T5344] kasan_report+0x102/0x130 [ 803.087237][ T5344] ? __mutex_lock_common+0xc85/0x2390 [ 803.093408][ T5344] __mutex_lock_common+0xc85/0x2390 [ 803.098643][ T5344] ? l2cap_unregister_user+0x66/0x1a0 [ 803.104134][ T5344] ? mutex_lock_io_nested+0x60/0x60 [ 803.109573][ T5344] ? remove_wait_queue+0x120/0x120 [ 803.114738][ T5344] ? _raw_spin_unlock+0x40/0x40 [ 803.119696][ T5344] mutex_lock_nested+0x17/0x20 [ 803.124477][ T5344] l2cap_unregister_user+0x66/0x1a0 [ 803.129695][ T5344] hidp_session_thread+0x3c4/0x400 [ 803.135077][ T5344] ? hidp_session_get+0x80/0x80 [ 803.140251][ T5344] ? hidp_session_thread+0x400/0x400 [ 803.146383][ T5344] ? _raw_spin_unlock+0x40/0x40 [ 803.151461][ T5344] ? hidp_session_thread+0x400/0x400 [ 803.157005][ T5344] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 803.163414][ T5344] ? __kthread_parkme+0x157/0x1b0 [ 803.168751][ T5344] kthread+0x436/0x520 [ 803.172836][ T5344] ? hidp_session_get+0x80/0x80 [ 803.177705][ T5344] ? kthread_blkcg+0xd0/0xd0 [ 803.182439][ T5344] ret_from_fork+0x1f/0x30 [ 803.186881][ T5344] [ 803.190893][ T5344] Kernel Offset: disabled [ 803.195430][ T5344] Rebooting in 86400 seconds..