last executing test programs: 12m15.301389048s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prctl$PR_SET_THP_DISABLE(0x41, 0x3) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x94, 0x4, "9fc4"}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 12m13.9427511s ago: executing program 3 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x4040000) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xffffffffffffffee) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, 0x0) 12m12.200511999s ago: executing program 3 (id=17): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 12m10.701744132s ago: executing program 3 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x3c}}, 0x2404c014) unshare(0x2a010e00) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m6.531101093s ago: executing program 3 (id=27): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500000000feffffff0000fd00", @ANYRES32=0x0, @ANYBLOB="9b150100000800001c0012800b0001006d616373656300000c000280050003000c00000008000500", @ANYRES32, @ANYBLOB], 0x44}}, 0x0) epoll_create1(0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0xc, 0xf, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@multicast1}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x3c}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) getpid() getpid() 11m59.615068985s ago: executing program 3 (id=40): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x21, 0x2, 0x2) getpid() r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) 11m52.060652479s ago: executing program 4 (id=52): syz_open_procfs$userns(0x0, &(0x7f0000000080)) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2008002, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102376, 0x18fe8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x4188a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) 11m49.889550138s ago: executing program 4 (id=56): sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) r2 = socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x40000006, 0xc000, 0x9, r5, r6, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r3) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000040)=0x1) 11m47.731851174s ago: executing program 4 (id=60): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000dc0)=0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000005c0)) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, 0x0, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="010000000000000000000000000000000000000089075d1c8acf6d13e26af22d9486a18abd7d400aa3c7150736486b6e04aa508f594605e197", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="010000000100"/20], 0x50) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setrlimit(0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) close(r7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 11m44.265773349s ago: executing program 32 (id=40): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x21, 0x2, 0x2) getpid() r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) 11m44.261218725s ago: executing program 4 (id=69): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc0000001100010025bd7000fbdbdf2500000000", @ANYRES32], 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r6, &(0x7f0000001dc0)=""/4113, 0x55d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0xa, 0x9, 0x2, 0x2, 0x1}, @call={0x85, 0x0, 0x0, 0x44}, @map_fd={0x18, 0x7}, @ldst={0x3, 0x0, 0x4, 0x7, 0xa, 0xffffffffffffff7f, 0xfffffffffffffff0}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0xe0, &(0x7f0000000340)=""/224, 0x40f00, 0x30, '\x00', 0x0, 0x1a, r6, 0x8, &(0x7f0000000440)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2e104, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x2, 0xd, 0x4}, {0x3, 0x1, 0xf, 0xc}], 0x10, 0x1, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x100080, 0x0, 0x0, {r10}}, 0x20) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r9], 0x1, r7, r8, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 11m42.906084597s ago: executing program 4 (id=73): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf18}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11m33.625280062s ago: executing program 4 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x3c}}, 0x2404c014) unshare(0x2a010e00) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m18.560458746s ago: executing program 33 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x3c}}, 0x2404c014) unshare(0x2a010e00) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m57.340647357s ago: executing program 1 (id=147): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x33]}}]}) 10m51.150928689s ago: executing program 1 (id=154): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x4010000) readlink(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x8002) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20000000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f00000002c0)=""/117, 0xffffffffffffff34) 10m50.366978266s ago: executing program 1 (id=155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0xa6e, 0x400142) openat$audio(0xffffffffffffff9c, 0x0, 0xe480, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008844) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r1) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x17b}, 0x0, @in6=@remote, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000400000000fddbdf250000", @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 10m47.735334274s ago: executing program 6 (id=68): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x6, 0x0, &(0x7f0000000040)) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) socket$tipc(0x1e, 0x1, 0x0) r1 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x24, 0x0, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40048}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) chdir(0x0) 10m46.69046599s ago: executing program 6 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000340), 0x420, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4}) 10m44.544596563s ago: executing program 6 (id=162): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2000000, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x80000000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) writev(r1, &(0x7f0000000080), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 10m44.337681975s ago: executing program 1 (id=163): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_DUMPABLE(0x4, 0x2) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_DUMPABLE(0x4, 0x3) acct(&(0x7f0000000240)='./file0\x00') syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10m43.409244151s ago: executing program 1 (id=166): syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000180)="0dcd47c0ba", 0x5, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000280)={r1}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)='\x00', 0xf000}, {0x0, 0x2}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000", 0x17}], 0x1}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 10m42.439412821s ago: executing program 6 (id=168): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_DUMPABLE(0x4, 0x2) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_DUMPABLE(0x4, 0x3) acct(&(0x7f0000000240)='./file0\x00') syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10m41.311561844s ago: executing program 6 (id=170): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$inet6(0xa, 0x6, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x5800) listen(r6, 0x101) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10m38.07890176s ago: executing program 1 (id=171): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) 10m37.132548007s ago: executing program 6 (id=174): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0xa6e, 0x400142) openat$audio(0xffffffffffffff9c, 0x0, 0xe480, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008844) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r1) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x17b}, 0x0, @in6=@remote, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000400000000fddbdf250000", @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 10m21.910438094s ago: executing program 34 (id=171): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) 10m21.763881777s ago: executing program 35 (id=174): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0xa6e, 0x400142) openat$audio(0xffffffffffffff9c, 0x0, 0xe480, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008844) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r1) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x17b}, 0x0, @in6=@remote, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000400000000fddbdf250000", @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 3m3.361683293s ago: executing program 0 (id=1012): socket$inet6(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='map_files\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 3m1.813861175s ago: executing program 0 (id=1016): sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000240), 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x40000006, 0xc000, 0x9, r4, r5, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000040)=0x1) 2m59.336548434s ago: executing program 0 (id=1020): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="48c5"], 0x69) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r4, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) setitimer(0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 2m59.233372158s ago: executing program 7 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtfilter={0x5c, 0x2c, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff2, 0x3}, {0x0, 0xfff1}, {0xa, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6, 0xa}}, @TCA_CHAIN={0x8, 0xb, 0xd01c}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x81}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3c}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x5c}}, 0x4000010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000f8ffffffffffffff00800000f9ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYBLOB="010000000000000000000180000006000a004e24000014000900fec0ffffffffffff0000000000000001050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000895) socketpair(0x28, 0xa, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x17, &(0x7f0000000600)={@remote, @broadcast, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, '0`', "62f20a", 0x800}}}}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 2m57.113553016s ago: executing program 0 (id=1025): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x4010000) readlink(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x20000000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f00000002c0)=""/117, 0xffffffffffffff34) 2m57.050602369s ago: executing program 7 (id=1027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x504f, &(0x7f0000000400)={0x0, 0xfffffffd, 0x10000, 0x0, 0x2d1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 2m56.217524163s ago: executing program 7 (id=1029): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2m55.992737977s ago: executing program 0 (id=1033): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0xff, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x4, 0x1, 0x3, 0x8, 0x9, 0x8004}, {0x4, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m54.878293516s ago: executing program 7 (id=1034): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) chmod(&(0x7f0000000140)='./file0\x00', 0x42) 2m52.73295455s ago: executing program 7 (id=1041): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 2m43.122269431s ago: executing program 7 (id=1060): openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007b1000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x1ff, 0x2b}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) dup(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 2m42.650279405s ago: executing program 0 (id=1063): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc1", 0xa5, 0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000340), 0x420, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3}) 2m27.605366744s ago: executing program 36 (id=1060): openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007b1000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x1ff, 0x2b}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) dup(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 2m27.059245925s ago: executing program 37 (id=1063): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc1", 0xa5, 0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000340), 0x420, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3}) 2m13.34493436s ago: executing program 5 (id=1112): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2m9.933925711s ago: executing program 5 (id=1117): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x6, 0x0, &(0x7f0000000040)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) listen(r1, 0x0) socket$tipc(0x1e, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') socket$inet6_mptcp(0xa, 0x1, 0x106) chdir(0x0) 2m8.29761472s ago: executing program 5 (id=1122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="48c5"], 0x69) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r3, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) setitimer(0x2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 2m7.033353914s ago: executing program 5 (id=1124): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000280)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r4, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) 2m5.223372119s ago: executing program 5 (id=1127): openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x8}}}, 0x24}}, 0x0) dup(r5) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x1040402, &(0x7f0000000280)=ANY=[]) r9 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x0}) 2m0.813131994s ago: executing program 5 (id=1134): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000002800)={'gretap0\x00', 0x0, 0x10, 0x7, 0x9, 0x0, {{0x8, 0x4, 0x0, 0x31, 0x20, 0x68, 0x0, 0xf9, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x50, 0x0, 0x4}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x5f, 0x5f, 0x61, 0x61]}}, 0x0, 0x1e, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) unshare(0x62040200) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m45.615638487s ago: executing program 38 (id=1134): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000002800)={'gretap0\x00', 0x0, 0x10, 0x7, 0x9, 0x0, {{0x8, 0x4, 0x0, 0x31, 0x20, 0x68, 0x0, 0xf9, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x50, 0x0, 0x4}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x5f, 0x5f, 0x61, 0x61]}}, 0x0, 0x1e, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) unshare(0x62040200) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 11.034443951s ago: executing program 8 (id=1328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 10.159455777s ago: executing program 8 (id=1331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)}}], 0x2, 0x220, 0x0) 10.081757863s ago: executing program 9 (id=1332): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_open_dev$video(0x0, 0x81, 0xa082) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60801, 0x0) mount$afs(0x0, 0x0, 0x0, 0x200000, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x8, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 9.961250401s ago: executing program 8 (id=1334): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xfffffff5, 0x10}, 0xc) bind$packet(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) vmsplice(r4, &(0x7f00000000c0), 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 8.875784774s ago: executing program 9 (id=1335): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="48c5"], 0x69) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) setitimer(0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 7.148230129s ago: executing program 9 (id=1337): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 5.375827437s ago: executing program 9 (id=1338): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/221) 5.133590995s ago: executing program 8 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 4.407037638s ago: executing program 8 (id=1341): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x4010000) readlink(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20000000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f00000002c0)=""/117, 0xffffffffffffff34) 4.226093741s ago: executing program 2 (id=1342): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00"/12], 0x20}}], 0x2, 0x0) 3.973376883s ago: executing program 2 (id=1343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x2, 0x220, 0x0) 3.686370719s ago: executing program 2 (id=1344): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2c000011) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x20001) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023893) socket$pppoe(0x18, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x242, 0x0) sendfile(r4, r4, 0x0, 0xa) 3.037707157s ago: executing program 8 (id=1345): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2507000000080001003100000008000300", @ANYRES32=r5, @ANYBLOB="0c009900fb070000700000001400040073797a6b616c6c5172300000000000000800050004000000"], 0x4c}}, 0x24044884) 2.960308354s ago: executing program 2 (id=1346): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="48c5"], 0x69) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) setitimer(0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 2.192941871s ago: executing program 9 (id=1347): socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000280)={@host, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000140)={@host, 0x9}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, 0x0, &(0x7f0000000480)=r4}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYRES64], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r8}) 1.735584906s ago: executing program 2 (id=1348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 308.734937ms ago: executing program 9 (id=1349): socket$alg(0x26, 0x5, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x101602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000"], 0x78}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x0, {0x2, 0x0, @private=0xa010102}}) 0s ago: executing program 2 (id=1350): syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000180)="0dcd47c0ba", 0x5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r3, &(0x7f0000000000)=""/15, 0xf, 0x7fff) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)='\x00', 0xf000}, {0x0, 0x2}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000", 0x17}], 0x1}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): [ 463.958627][ T8884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.116745][ T5961] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.428461][ T9050] o2cb: This node has not been configured. [ 464.499331][ T9050] o2cb: Cluster check failed. Fix errors before retrying. [ 464.558193][ T9050] (syz.0.660,9050,1):user_dlm_register:674 ERROR: status = -22 [ 464.595999][ T8891] team0: Port device team_slave_0 added [ 464.616140][ T9050] (syz.0.660,9050,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 464.707517][ T5961] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.823742][ T8884] hsr_slave_0: entered promiscuous mode [ 464.914215][ T8884] hsr_slave_1: entered promiscuous mode [ 464.943700][ T8884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.969345][ T8884] Cannot create hsr debugfs directory [ 465.044759][ T8891] team0: Port device team_slave_1 added [ 466.785823][ T5961] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.974221][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.010942][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.099459][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.250451][ T5961] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.301379][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.355896][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.479226][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.229310][ T5932] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 468.301340][ T8891] hsr_slave_0: entered promiscuous mode [ 468.334554][ T8891] hsr_slave_1: entered promiscuous mode [ 468.351691][ T8891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.360696][ T8891] Cannot create hsr debugfs directory [ 468.395495][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 468.415855][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 468.442294][ T5932] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 468.470971][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.498320][ T5932] usb 3-1: Product: syz [ 468.568022][ T5932] usb 3-1: Manufacturer: syz [ 468.583169][ T5932] usb 3-1: SerialNumber: syz [ 469.233592][ T5932] usb 3-1: config 0 descriptor?? [ 469.248220][ T5932] hub 3-1:0.0: bad descriptor, ignoring hub [ 469.266488][ T5932] hub 3-1:0.0: probe with driver hub failed with error -5 [ 469.287991][ T5932] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 469.289271][ T5897] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 469.459617][ T5897] usb 8-1: Using ep0 maxpacket: 16 [ 469.467900][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 469.505069][ T5897] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 469.515953][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.546362][ T5897] usb 8-1: Product: syz [ 469.606651][ T5897] usb 8-1: Manufacturer: syz [ 469.632313][ T5897] usb 8-1: SerialNumber: syz [ 469.646299][ T5897] usb 8-1: config 0 descriptor?? [ 469.657754][ T5897] hub 8-1:0.0: bad descriptor, ignoring hub [ 469.670675][ T5897] hub 8-1:0.0: probe with driver hub failed with error -5 [ 469.689945][ T5961] bridge_slave_1: left allmulticast mode [ 469.697649][ T5961] bridge_slave_1: left promiscuous mode [ 469.726813][ T5897] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input6 [ 469.739315][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.756634][ T5961] bridge_slave_0: left allmulticast mode [ 469.779964][ T5961] bridge_slave_0: left promiscuous mode [ 469.795961][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.625854][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 470.632088][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 470.884783][ T9081] ceph: No mds server is up or the cluster is laggy [ 471.173899][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.184537][ T5187] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 471.195066][ T5187] usb 3-1: device reset changed ep0 maxpacket size! [ 471.203737][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.216025][ T5932] usb 3-1: USB disconnect, device number 8 [ 471.229628][ T5961] bond0 (unregistering): Released all slaves [ 471.258773][ T9079] netdevsim netdevsim5: Direct firmware load for . [ 471.258773][ T9079] failed with error -2 [ 471.281830][ T9079] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 471.281830][ T9079] [ 471.488050][ T5961] hsr_slave_0: left promiscuous mode [ 471.546991][ T5961] hsr_slave_1: left promiscuous mode [ 471.569554][ T5932] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 471.614110][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.676259][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.773656][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.835630][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.894947][ T5932] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 471.977457][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.077278][ T5932] usb 3-1: Product: syz [ 472.121533][ T5932] usb 3-1: Manufacturer: syz [ 472.162053][ T5932] usb 3-1: SerialNumber: syz [ 472.330110][ T5961] veth1_macvtap: left promiscuous mode [ 472.343358][ T5932] usb 3-1: config 0 descriptor?? [ 472.369259][ T5961] veth0_macvtap: left promiscuous mode [ 472.374845][ T5961] veth1_vlan: left promiscuous mode [ 472.385617][ T5961] veth0_vlan: left promiscuous mode [ 472.550007][ T6006] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 472.675574][ T5932] hso 3-1:0.0: Failed to find BULK IN ep [ 472.686712][ T5932] usb-storage 3-1:0.0: USB Mass Storage device detected [ 472.709242][ T6006] usb 6-1: Using ep0 maxpacket: 8 [ 472.745775][ T6006] usb 6-1: unable to get BOS descriptor or descriptor too short [ 472.789950][ T6006] usb 6-1: config 3 has an invalid interface number: 35 but max is 0 [ 472.859184][ T6006] usb 6-1: config 3 has no interface number 0 [ 472.888250][ T6006] usb 6-1: config 3 interface 35 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 473.003622][ T5932] usb 3-1: USB disconnect, device number 9 [ 473.034415][ T6006] usb 6-1: config 3 interface 35 has no altsetting 0 [ 473.141138][ T6006] usb 6-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=57.12 [ 473.187811][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.264900][ T6006] usb 6-1: Product: syz [ 473.287051][ T6006] usb 6-1: Manufacturer: syz [ 473.306180][ T6006] usb 6-1: SerialNumber: syz [ 473.317146][ T9096] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 473.591388][ T6006] usb 6-1: bad CDC descriptors [ 473.610963][ T6006] usb 6-1: USB disconnect, device number 7 [ 474.295441][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 474.494059][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 475.134330][ T26] usb 8-1: USB disconnect, device number 5 [ 477.100270][ T8884] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.223832][ T8884] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 477.269657][ T8884] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.355758][ T8884] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 480.223148][ T8884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.504827][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.528651][ T8891] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 480.579588][ T9144] netdevsim netdevsim5: Direct firmware load for . [ 480.579588][ T9144] failed with error -2 [ 480.616173][ T9144] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 480.616173][ T9144] [ 480.626827][ T8891] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 480.652364][ T972] libceph: connect (1)[c::]:6789 error -101 [ 480.658395][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 480.792104][ T8891] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 481.042340][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.049532][ T6437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.091238][ T8891] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 481.139874][ T8977] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.147052][ T8977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.164806][ T9145] ceph: No mds server is up or the cluster is laggy [ 481.496604][ T8884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.946173][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.549590][ T8891] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.132325][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.139460][ T8143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.240949][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.248135][ T8143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.389490][ T5895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 484.506297][ T8884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.549277][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 484.578003][ T5895] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 484.638489][ T5895] usb 1-1: config 0 has no interface number 0 [ 484.669275][ T5912] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 484.692702][ T5895] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 484.715447][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.747853][ T5895] usb 1-1: Product: syz [ 484.767194][ T5895] usb 1-1: Manufacturer: syz [ 484.794116][ T5895] usb 1-1: SerialNumber: syz [ 484.823537][ T5895] usb 1-1: config 0 descriptor?? [ 484.858341][ T5895] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 484.884452][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.080224][ T5895] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 485.115636][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.166513][ T5912] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 485.207624][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.228587][ T5895] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 485.297256][ T5912] usb 3-1: config 0 descriptor?? [ 485.411623][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.536436][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 485.547230][ T5895] usb 1-1: USB disconnect, device number 3 [ 485.570002][ T5895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 485.612702][ T5895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 485.632103][ T5895] quatech2 1-1:0.51: device disconnected [ 485.705333][ T8884] veth0_vlan: entered promiscuous mode [ 485.750061][ T5912] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 485.786260][ T8884] veth1_vlan: entered promiscuous mode [ 485.816589][ T5912] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 485.941983][ T8884] veth0_macvtap: entered promiscuous mode [ 485.949212][ T5912] cp2112 0003:10C4:EA90.0002: error requesting version [ 485.970683][ T5912] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 485.982040][ T8884] veth1_macvtap: entered promiscuous mode [ 486.026519][ T5912] usb 3-1: USB disconnect, device number 10 [ 486.078756][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.165029][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.204383][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.251389][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.290298][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.312427][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.329252][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.347421][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.359012][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.411057][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.425307][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.604808][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.616229][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.626547][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.643915][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.663967][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.625691][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.637069][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.767974][ T8884] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.899223][ T8884] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.973170][ T8884] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.983598][ T8884] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.348005][ T8891] veth0_vlan: entered promiscuous mode [ 489.425787][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.437034][ T8891] veth1_vlan: entered promiscuous mode [ 489.524856][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.616691][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.803263][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.900394][ T8891] veth0_macvtap: entered promiscuous mode [ 490.226584][ T8891] veth1_macvtap: entered promiscuous mode [ 490.331115][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.595746][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.619013][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.732961][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.743392][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.797131][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.896052][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.972370][ T9246] openvswitch: netlink: Multiple metadata blocks provided [ 491.187094][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.322443][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.357377][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.547057][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.313549][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.496617][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.514170][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.682795][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.693088][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.703704][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.729496][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.749150][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.725372][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.746372][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.778790][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.998108][ T8891] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.212751][ T8891] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.234180][ T8891] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.031030][ T8891] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.230212][ T9279] overlayfs: failed to get index nlink (file2/file1, err=-61) [ 496.652522][ T9290] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 497.189067][ T9297] netdevsim netdevsim7: Direct firmware load for . [ 497.189067][ T9297] failed with error -2 [ 497.200383][ T9297] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 497.200383][ T9297] [ 497.675199][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 497.685453][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 497.873690][ T9298] ceph: No mds server is up or the cluster is laggy [ 498.331772][ T5961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.372939][ T5961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.385290][ T9309] netdevsim netdevsim7: Direct firmware load for . [ 498.385290][ T9309] failed with error -2 [ 498.477219][ T9309] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 498.477219][ T9309] [ 498.752708][ T5961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.989343][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 498.997352][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 499.059476][ T5961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.248238][ T9310] ceph: No mds server is up or the cluster is laggy [ 499.329908][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 499.335970][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 500.188230][ T9326] overlayfs: missing 'lowerdir' [ 501.315393][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.321867][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.550514][ T9338] openvswitch: netlink: Multiple metadata blocks provided [ 501.614799][ T9345] fuse: Invalid rootmode [ 501.639069][ T26] Process accounting resumed [ 502.719285][ T5967] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 502.884991][ T5967] usb 3-1: Using ep0 maxpacket: 16 [ 502.918067][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 506.606077][ T5967] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 506.639334][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.732138][ T5967] usb 3-1: config 0 descriptor?? [ 506.755135][ T5967] usb 3-1: can't set config #0, error -71 [ 506.808006][ T5967] usb 3-1: USB disconnect, device number 11 [ 506.867207][ T9389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.734'. [ 506.959890][ T5912] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 507.257848][ T9395] netlink: 48 bytes leftover after parsing attributes in process `syz.7.735'. [ 507.720093][ T5912] usb 6-1: config 0 has no interfaces? [ 507.846707][ T5912] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 507.891012][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.159448][ T5912] usb 6-1: Product: syz [ 508.163661][ T5912] usb 6-1: Manufacturer: syz [ 508.919996][ T5912] usb 6-1: SerialNumber: syz [ 508.951572][ T5912] usb 6-1: config 0 descriptor?? [ 509.226618][ T9381] @: renamed from vlan0 (while UP) [ 509.359666][ T5895] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 510.019283][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 510.059711][ T5895] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 510.079258][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 510.164250][ T5895] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.223038][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 510.301266][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 510.383631][ T5895] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 510.423379][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 510.467547][ T5895] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.513329][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 510.551228][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 511.098676][ T5895] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 511.107417][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 511.232211][ T5895] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.457180][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 511.495878][ T5895] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 511.867346][ T5895] usb 3-1: string descriptor 0 read error: -22 [ 511.908309][ T5895] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 511.918896][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.938544][ T5895] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 512.114690][ T5912] usb 3-1: USB disconnect, device number 12 [ 513.882483][ T5897] usb 6-1: USB disconnect, device number 8 [ 515.944402][ T9462] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 520.124344][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 520.309257][ T5895] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 520.478862][ T9508] openvswitch: netlink: Multiple metadata blocks provided [ 520.500091][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 520.517073][ T5895] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.527936][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 520.588064][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 520.607538][ T5895] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.636507][ T5895] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.657960][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.948800][ T5895] usb 1-1: GET_CAPABILITIES returned 0 [ 520.980208][ T5895] usbtmc 1-1:16.0: can't read capabilities [ 521.158216][ T5912] usb 1-1: USB disconnect, device number 4 [ 524.356895][ T9559] o2cb: This node has not been configured. [ 524.362890][ T9559] o2cb: Cluster check failed. Fix errors before retrying. [ 524.370078][ T9559] (syz.5.767,9559,1):user_dlm_register:674 ERROR: status = -22 [ 524.377652][ T9559] (syz.5.767,9559,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 525.739259][ T5967] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 532.909245][ T972] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 533.119283][ T972] usb 3-1: Using ep0 maxpacket: 8 [ 533.208254][ T5967] usb 1-1: unable to read config index 0 descriptor/start: -110 [ 533.231528][ T972] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.249262][ T5967] usb 1-1: can't read configurations, error -110 [ 533.278316][ T9645] netdevsim netdevsim7: Direct firmware load for . [ 533.278316][ T9645] failed with error -2 [ 533.289175][ T9645] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 533.289175][ T9645] [ 533.401014][ T972] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.545738][ T972] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.565744][ T972] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.589255][ T5967] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 533.594839][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 533.609562][ T972] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 533.631276][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.663623][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 533.970291][ T9648] ceph: No mds server is up or the cluster is laggy [ 534.000020][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 534.011732][ T5967] usb 1-1: device descriptor read/64, error -32 [ 534.026241][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 534.069786][ T9654] Driver unsupported XDP return value 0 on prog (id 139) dev N/A, expect packet loss! [ 534.149827][ T5967] usb usb1-port1: attempt power cycle [ 534.260136][ T972] usb 3-1: GET_CAPABILITIES returned 0 [ 534.342125][ T972] usbtmc 3-1:16.0: can't read capabilities [ 534.466480][ T972] usb 3-1: USB disconnect, device number 13 [ 534.549987][ T5967] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 534.674135][ T5967] usb 1-1: device descriptor read/8, error -32 [ 534.696723][ T9665] netlink: 48 bytes leftover after parsing attributes in process `syz.8.783'. [ 534.950113][ T5967] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 534.972561][ T9575] raw-gadget.0 gadget.0: failed to queue disconnect event [ 534.984031][ T5967] usb 1-1: device descriptor read/8, error -71 [ 534.990835][ T5895] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 535.120862][ T5967] usb usb1-port1: unable to enumerate USB device [ 535.153697][ T5895] usb 8-1: Using ep0 maxpacket: 16 [ 535.721740][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 535.751972][ T5895] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 535.951431][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.302718][ T5895] usb 8-1: Product: syz [ 536.319527][ T5895] usb 8-1: Manufacturer: syz [ 536.324167][ T5895] usb 8-1: SerialNumber: syz [ 536.346192][ T5895] usb 8-1: config 0 descriptor?? [ 536.358040][ T5895] hub 8-1:0.0: bad descriptor, ignoring hub [ 536.365194][ T5895] hub 8-1:0.0: probe with driver hub failed with error -5 [ 537.608350][ T5895] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input7 [ 537.679866][ T5895] usb 8-1: USB disconnect, device number 6 [ 539.011454][ T9704] netlink: 'syz.5.791': attribute type 1 has an invalid length. [ 539.069315][ T9704] netlink: 'syz.5.791': attribute type 4 has an invalid length. [ 539.077231][ T9704] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.791'. [ 539.141043][ T9705] netlink: 24 bytes leftover after parsing attributes in process `syz.7.792'. [ 539.244409][ T9708] netdevsim netdevsim8: Direct firmware load for . [ 539.244409][ T9708] failed with error -2 [ 539.256438][ T9708] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 539.256438][ T9708] [ 539.527392][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 539.533888][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 540.031278][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 540.049305][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 540.414633][ T9721] openvswitch: netlink: Multiple metadata blocks provided [ 541.037587][ T9728] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 541.612337][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 541.618459][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 541.770541][ T9709] ceph: No mds server is up or the cluster is laggy [ 543.599746][ T5848] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 544.106932][ T5848] usb 1-1: config 0 has no interfaces? [ 544.132176][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.803'. [ 544.258453][ T5848] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 544.316991][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.406190][ T5848] usb 1-1: Product: syz [ 544.427284][ T5848] usb 1-1: Manufacturer: syz [ 544.449053][ T5848] usb 1-1: SerialNumber: syz [ 544.485776][ T5848] usb 1-1: config 0 descriptor?? [ 544.922867][ T9768] netlink: 48 bytes leftover after parsing attributes in process `syz.8.805'. [ 544.959230][ T5848] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 546.469193][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 546.675297][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 546.865577][ T9788] netdevsim netdevsim8: Direct firmware load for . [ 546.865577][ T9788] failed with error -2 [ 546.876358][ T9788] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 546.876358][ T9788] [ 547.041390][ T5848] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.081196][ T5848] usb 3-1: config 1 interface 0 has no altsetting 0 [ 547.120786][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 547.359587][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 547.552471][ T9789] ceph: No mds server is up or the cluster is laggy [ 547.579572][ T5967] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 547.649232][ T5895] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 547.649795][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 547.783082][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.919338][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.932046][ T5967] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 547.941805][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.957063][ T5895] usb 8-1: config 0 has no interfaces? [ 547.964977][ T5967] usb 6-1: config 0 descriptor?? [ 547.977062][ T5895] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 547.986531][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.995026][ T5895] usb 8-1: Product: syz [ 548.004893][ T5895] usb 8-1: Manufacturer: syz [ 548.005010][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 548.211285][ T5895] usb 8-1: SerialNumber: syz [ 548.236425][ T5895] usb 8-1: config 0 descriptor?? [ 548.480187][ T5967] usbhid 6-1:0.0: can't add hid device: -71 [ 548.486350][ T5967] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 548.506332][ T5967] usb 6-1: USB disconnect, device number 9 [ 548.640119][ T9793] @: renamed from vlan0 (while UP) [ 548.989463][ T5932] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 549.201395][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.212664][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.539187][ T5932] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 549.810384][ T5932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.868899][ T972] usb 1-1: USB disconnect, device number 9 [ 549.876420][ T5932] usb 9-1: config 0 descriptor?? [ 550.341521][ T5932] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 550.445057][ T5932] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 550.610348][ T5932] cp2112 0003:10C4:EA90.0003: error requesting version [ 551.178559][ T5932] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -5 [ 551.284503][ T5932] usb 9-1: USB disconnect, device number 2 [ 551.406104][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 551.776339][ T5848] usb 3-1: string descriptor 0 read error: -71 [ 551.783357][ T5848] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 551.826831][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.844372][ T9843] fuse: Unknown parameter '0x0000000000000003' [ 551.888327][ T5932] Process accounting resumed [ 551.914028][ T5848] usb 3-1: can't set config #1, error -71 [ 551.945607][ T5848] usb 3-1: USB disconnect, device number 14 [ 552.063124][ T9843] Process accounting resumed [ 553.667376][ T26] usb 8-1: USB disconnect, device number 7 [ 556.945116][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.834'. [ 560.151067][ T9914] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 562.159349][ T5897] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 562.169179][ T5848] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 562.405226][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.411626][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.447304][ T5848] usb 8-1: Using ep0 maxpacket: 16 [ 562.471733][ T5897] usb 3-1: config 0 has no interfaces? [ 562.480948][ T5848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.707852][ T5848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.979409][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 563.153122][ T5848] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 563.178105][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.290037][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.354595][ T5897] usb 3-1: Product: syz [ 563.358780][ T5897] usb 3-1: Manufacturer: syz [ 563.363795][ T5848] usb 8-1: config 0 descriptor?? [ 563.420534][ T5897] usb 3-1: SerialNumber: syz [ 563.522415][ T5897] usb 3-1: config 0 descriptor?? [ 563.798459][ T5848] input: HID 05ac:8241 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:05AC:8241.0004/input/input8 [ 564.298201][ T5848] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 565.399806][ T5932] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 565.592189][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.636481][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.705254][ T5932] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 565.754770][ T5912] usb 8-1: USB disconnect, device number 8 [ 565.868601][ T5932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.955150][ T5932] usb 9-1: config 0 descriptor?? [ 566.379434][ T5932] usbhid 9-1:0.0: can't add hid device: -71 [ 566.387852][ T5932] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 566.508015][ T5932] usb 9-1: USB disconnect, device number 3 [ 566.807332][T10008] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 566.996660][T10008] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 567.933902][ T5895] usb 3-1: USB disconnect, device number 15 [ 568.614408][T10033] netdevsim netdevsim2: Direct firmware load for . [ 568.614408][T10033] failed with error -2 [ 568.625440][T10033] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 568.625440][T10033] [ 568.859913][ T5912] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 568.863655][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 568.911975][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 569.293720][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 569.306561][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 569.410304][T10034] ceph: No mds server is up or the cluster is laggy [ 569.477573][ T5912] usb 8-1: Using ep0 maxpacket: 8 [ 569.508140][ T5912] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 569.600461][ T8345] Bluetooth: hci0: command 0x0406 tx timeout [ 569.640544][ T8345] Bluetooth: hci4: command 0x0406 tx timeout [ 569.747935][T10050] netdevsim netdevsim0: Direct firmware load for . [ 569.747935][T10050] failed with error -2 [ 569.758872][T10050] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 569.758872][T10050] [ 569.929922][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 570.186151][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 570.198966][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 570.259317][ T5912] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.439221][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 570.469708][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 570.497370][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 570.517133][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 570.586726][ T5912] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 570.617640][T10051] ceph: No mds server is up or the cluster is laggy [ 570.657892][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 571.289220][ T5912] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.654483][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 572.801024][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 573.417069][ T5912] usb 8-1: unable to read config index 2 descriptor/start: -71 [ 573.769948][ T5912] usb 8-1: can't read configurations, error -71 [ 573.849577][T10099] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 575.253816][T10115] netlink: 43 bytes leftover after parsing attributes in process `syz.0.880'. [ 575.263149][T10115] tipc: Started in network mode [ 575.268093][T10115] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 575.275725][T10115] tipc: Enabled bearer , priority 10 [ 576.744225][ T5949] tipc: Node number set to 10005162 [ 578.358742][T10134] netlink: 43 bytes leftover after parsing attributes in process `syz.5.885'. [ 578.369501][T10134] tipc: Enabling of bearer rejected, failed to enable media [ 579.160532][T10150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 579.181961][T10150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 579.442373][T10150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 579.542978][T10150] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 581.119205][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 581.519409][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 582.706162][T10204] overlayfs: failed to get index nlink (file2/file1, err=-61) [ 583.199177][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 583.600188][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 583.933237][T10214] openvswitch: netlink: Multiple metadata blocks provided [ 586.167577][T10241] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 586.175262][T10241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 587.879308][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 588.242677][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 589.409276][ T5967] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 589.614567][ T5967] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 589.629497][ T5967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.659181][ T5967] usb 8-1: Product: syz [ 589.683149][ T5967] usb 8-1: Manufacturer: syz [ 589.687769][ T5967] usb 8-1: SerialNumber: syz [ 589.737209][ T5967] usb 8-1: config 0 descriptor?? [ 589.799468][ T5848] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 590.328796][ T5848] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 590.344731][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.358313][ T5848] usb 10-1: Product: syz [ 590.368904][ T5967] usb-storage 8-1:0.0: USB Mass Storage device detected [ 590.384776][ T5848] usb 10-1: Manufacturer: syz [ 590.394940][ T5848] usb 10-1: SerialNumber: syz [ 590.421835][ T5848] usb 10-1: config 0 descriptor?? [ 590.643664][ T5848] usb-storage 10-1:0.0: USB Mass Storage device detected [ 590.673428][ T6014] usb 8-1: USB disconnect, device number 11 [ 590.710502][ T5848] usb 10-1: USB disconnect, device number 2 [ 591.465957][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.9.916'. [ 591.958292][T10335] netdevsim netdevsim7: Direct firmware load for . [ 591.958292][T10335] failed with error -2 [ 591.969534][T10335] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 591.969534][T10335] [ 592.653790][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 592.777510][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 592.915106][T10336] ceph: No mds server is up or the cluster is laggy [ 593.394722][T10351] netlink: 'syz.7.921': attribute type 1 has an invalid length. [ 597.630114][ T5967] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 597.663206][ T26] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 597.793845][ T5967] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 597.833138][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.856319][ T5967] usb 3-1: Product: syz [ 597.878387][ T5967] usb 3-1: Manufacturer: syz [ 598.010467][ T26] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 598.043267][ T26] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 598.043472][ T5967] usb 3-1: SerialNumber: syz [ 598.055866][ T26] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.993923][ T5967] usb 3-1: config 0 descriptor?? [ 599.091882][ T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 599.200376][T10405] overlayfs: failed to get index nlink (file2/file1, err=-61) [ 600.009893][ T5967] usb-storage 3-1:0.0: USB Mass Storage device detected [ 600.059425][ T26] usb 9-1: SerialNumber: syz [ 600.092662][ T26] usb 9-1: can't set config #1, error -71 [ 600.105826][ T26] usb 9-1: USB disconnect, device number 4 [ 600.149514][ T5949] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 600.324532][ T5967] usb 3-1: USB disconnect, device number 16 [ 600.364850][ T5949] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.459303][ T5949] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.494136][ T5949] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 601.011902][ T5949] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.156033][T10416] netdevsim netdevsim8: Direct firmware load for . [ 601.156033][T10416] failed with error -2 [ 601.167161][T10416] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 601.167161][T10416] [ 601.399880][ T5949] usb 10-1: config 0 descriptor?? [ 601.499648][ T55] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 601.687579][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 601.771204][ T5949] usb 10-1: can't set config #0, error -71 [ 601.849377][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 601.856271][ T5949] usb 10-1: USB disconnect, device number 3 [ 601.928803][T10418] ceph: No mds server is up or the cluster is laggy [ 602.419358][ T5967] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 602.641615][ T5967] usb 8-1: Using ep0 maxpacket: 16 [ 602.657249][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 602.677512][ T26] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 602.689150][ T5967] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 602.714838][ T5967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.749475][ T5967] usb 8-1: Product: syz [ 602.753660][ T5967] usb 8-1: Manufacturer: syz [ 602.789616][ T5967] usb 8-1: SerialNumber: syz [ 602.833634][ T5967] usb 8-1: config 0 descriptor?? [ 602.843950][ T5967] hub 8-1:0.0: bad descriptor, ignoring hub [ 602.855877][ T5967] hub 8-1:0.0: probe with driver hub failed with error -5 [ 602.896968][ T5967] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input9 [ 602.921018][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 603.070343][ T26] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 603.099982][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.179285][ T5848] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 604.214523][ T26] usb 6-1: config 0 descriptor?? [ 604.714391][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 604.929674][ T5848] usb 1-1: unable to get BOS descriptor or descriptor too short [ 604.940367][ T5848] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.959276][ T5848] usb 1-1: config 1 interface 0 has no altsetting 0 [ 604.991366][ T5848] usb 1-1: string descriptor 0 read error: -22 [ 604.997865][ T5848] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 605.007406][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.531658][ T5967] usb 8-1: USB disconnect, device number 12 [ 606.127772][ T5967] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 607.237039][ T5967] usb 8-1: Using ep0 maxpacket: 8 [ 607.252117][ T5967] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 607.269511][ T5967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 607.289272][ T5967] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.335683][ T26] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 607.357632][ T5967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 607.399776][ T26] asix 6-1:0.0: probe with driver asix failed with error -71 [ 607.406483][ T5967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 607.925304][ T5967] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 607.938856][ T5967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 607.985774][ T5967] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.059250][ T5967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 608.074501][ T26] usb 6-1: USB disconnect, device number 10 [ 608.136195][ T5967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 608.210732][ T5967] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 608.270625][ T5967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 608.339869][ T5967] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.559258][ T5967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 608.940550][ T5967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 609.137090][ T5967] usb 8-1: string descriptor 0 read error: -71 [ 609.150073][ T5967] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 609.229781][ T5967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.259905][ T26] libceph: connect (1)[c::]:6789 error -101 [ 609.265944][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 609.343644][ T5967] usb 8-1: can't set config #168, error -71 [ 609.401238][ T5967] usb 8-1: USB disconnect, device number 13 [ 609.471293][T10484] ceph: No mds server is up or the cluster is laggy [ 609.754260][ T26] libceph: connect (1)[c::]:6789 error -101 [ 610.162417][T10493] openvswitch: netlink: Multiple metadata blocks provided [ 610.219478][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 610.295788][ T5848] usbhid 1-1:1.0: can't add hid device: -32 [ 610.349654][ T5848] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 610.623271][ T5848] usb 1-1: USB disconnect, device number 10 [ 610.882824][ T26] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 611.406847][T10515] netlink: 'syz.7.954': attribute type 1 has an invalid length. [ 612.029168][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 612.036331][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 612.049180][ T26] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 612.060374][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.068575][ T26] usb 3-1: Product: syz [ 612.073607][ T26] usb 3-1: Manufacturer: syz [ 612.078393][ T26] usb 3-1: SerialNumber: syz [ 612.134423][ T26] usb 3-1: config 0 descriptor?? [ 612.672390][ T26] hub 3-1:0.0: bad descriptor, ignoring hub [ 612.695302][ T26] hub 3-1:0.0: probe with driver hub failed with error -5 [ 612.784842][ T26] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 616.279276][ T5949] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 616.286313][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.7.964'. [ 616.379249][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.7.964'. [ 616.434154][T10570] team0: entered promiscuous mode [ 616.469705][ T5949] usb 10-1: Using ep0 maxpacket: 8 [ 616.471525][T10570] team_slave_0: entered promiscuous mode [ 616.499623][T10570] team_slave_1: entered promiscuous mode [ 616.499793][ T5949] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 616.519027][T10570] team0: left promiscuous mode [ 616.540874][ T5949] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 616.546179][T10570] team_slave_0: left promiscuous mode [ 616.579169][ T5949] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 616.608116][ T5949] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 616.620449][ T5949] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 616.633892][ T5949] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 616.642507][ T5949] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 616.654139][T10570] team_slave_1: left promiscuous mode [ 616.654498][ T5949] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 616.682457][ T5949] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 616.694131][ T5949] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 616.714076][ T5949] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 616.731957][ T5949] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 616.964626][ T5949] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 617.039613][ T5949] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 617.169251][ T5949] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 617.228635][ T5949] usb 10-1: string descriptor 0 read error: -22 [ 617.235255][ T5949] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 617.309158][ T5949] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.569690][ T5949] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 617.875220][ T5895] usb 10-1: USB disconnect, device number 4 [ 618.730014][ T5895] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 618.911516][ T5895] usb 9-1: Using ep0 maxpacket: 8 [ 618.952729][ T5895] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 618.990871][ T5895] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 619.014232][ T5897] usb 3-1: USB disconnect, device number 17 [ 619.036343][ T5895] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.084154][ T5895] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 619.110482][ T5895] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 619.137670][ T5895] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 619.157163][ T5895] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 619.210460][ T5895] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.267053][ T5895] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 619.402353][ T5895] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 619.453192][ T5895] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 619.489333][ T5895] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 619.546879][ T5895] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.633371][ T5848] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 619.657438][ T5895] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 619.678738][ T5895] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 619.742618][ T5895] usb 9-1: string descriptor 0 read error: -22 [ 619.748892][ T5895] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 619.784264][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.892768][ T5895] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 619.949567][ T5848] usb 1-1: config 0 has no interfaces? [ 619.962809][ T5848] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 619.973028][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.009248][ T5848] usb 1-1: Product: syz [ 620.017363][ T5848] usb 1-1: Manufacturer: syz [ 620.057542][ T5848] usb 1-1: SerialNumber: syz [ 620.090233][ T5848] usb 1-1: config 0 descriptor?? [ 620.254819][ T5848] usb 9-1: USB disconnect, device number 5 [ 620.361055][T10618] @: renamed from vlan0 (while UP) [ 620.378401][T10618] tipc: Disabling bearer [ 622.464936][T10661] netdevsim netdevsim5: Direct firmware load for . [ 622.464936][T10661] failed with error -2 [ 622.476019][T10661] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 622.476019][T10661] [ 623.316686][ T26] libceph: connect (1)[c::]:6789 error -101 [ 623.339239][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 623.396423][T10663] ceph: No mds server is up or the cluster is laggy [ 623.613722][ T26] libceph: connect (1)[c::]:6789 error -101 [ 623.635590][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 623.846449][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.852864][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.160462][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.8.982'. [ 624.220852][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.8.982'. [ 624.338334][T10676] team0: entered promiscuous mode [ 624.359796][T10676] team_slave_0: entered promiscuous mode [ 624.373528][ T26] usb 1-1: USB disconnect, device number 11 [ 624.402111][T10676] team_slave_1: entered promiscuous mode [ 624.470725][T10676] team0: left promiscuous mode [ 624.475723][T10676] team_slave_0: left promiscuous mode [ 624.529333][T10676] team_slave_1: left promiscuous mode [ 625.231961][ T26] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 625.506785][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 625.551060][ T26] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 625.599275][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.634084][ T26] usb 1-1: config 0 descriptor?? [ 628.554482][ T26] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 628.578713][ T26] asix 1-1:0.0: probe with driver asix failed with error -71 [ 628.637982][ T26] usb 1-1: USB disconnect, device number 12 [ 631.449541][T10763] netlink: 43 bytes leftover after parsing attributes in process `syz.5.998'. [ 631.458770][T10763] tipc: Enabling of bearer rejected, failed to enable media [ 632.563215][T10770] openvswitch: netlink: Multiple metadata blocks provided [ 634.685113][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 634.860144][T10788] openvswitch: netlink: Multiple metadata blocks provided [ 635.776970][T10798] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1007'. [ 635.786309][T10798] tipc: Started in network mode [ 635.791395][T10798] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 635.799253][T10798] tipc: Enabled bearer , priority 10 [ 636.713009][T10801] netdevsim netdevsim7: Direct firmware load for . [ 636.713009][T10801] failed with error -2 [ 636.724566][T10801] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 636.724566][T10801] [ 636.951480][ T5932] tipc: Node number set to 10005162 [ 638.419757][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 638.438411][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 638.470340][ T5897] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 638.513665][T10802] ceph: No mds server is up or the cluster is laggy [ 639.019634][ T5897] usb 9-1: Using ep0 maxpacket: 16 [ 639.061272][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 639.066826][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 639.098452][ T5897] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 639.113438][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.121405][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 639.132680][ T5897] usb 9-1: Product: syz [ 639.200027][ T5897] usb 9-1: Manufacturer: syz [ 639.230816][ T5897] usb 9-1: SerialNumber: syz [ 639.252890][ T5897] usb 9-1: config 0 descriptor?? [ 639.469686][ T5912] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 639.808029][ T5897] hub 9-1:0.0: bad descriptor, ignoring hub [ 639.849967][ T5897] hub 9-1:0.0: probe with driver hub failed with error -5 [ 639.881995][ T5897] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input11 [ 639.934431][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.020335][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.045757][ T5912] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 641.092876][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.242462][ T5912] usb 6-1: config 0 descriptor?? [ 641.911056][ T5912] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 641.993724][ T5912] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 642.129477][ T9] usb 9-1: USB disconnect, device number 6 [ 642.159145][ T5912] cp2112 0003:10C4:EA90.0005: error requesting version [ 642.194309][ T5912] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 642.294463][ T5912] usb 6-1: USB disconnect, device number 11 [ 646.656461][T10905] netdevsim netdevsim9: Direct firmware load for . [ 646.656461][T10905] failed with error -2 [ 646.670793][T10905] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 646.670793][T10905] [ 646.838792][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 647.286561][ T55] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 648.041011][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 648.429601][T10908] ceph: No mds server is up or the cluster is laggy [ 648.550155][T10925] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 649.364884][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 649.389292][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 649.699679][ T5895] IPVS: starting estimator thread 0... [ 649.699778][T10931] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.859317][T10936] IPVS: using max 25 ests per chain, 60000 per kthread [ 650.054040][T10946] netlink: 666 bytes leftover after parsing attributes in process `syz.9.1043'. [ 650.165020][T10946] netlink: 'syz.9.1043': attribute type 1 has an invalid length. [ 650.173252][T10946] netlink: 216 bytes leftover after parsing attributes in process `syz.9.1043'. [ 651.279871][T10957] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 651.305008][T10957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 652.110718][T10952] 9pnet_fd: Insufficient options for proto=fd [ 652.371888][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1049'. [ 658.586180][T11032] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 665.474747][T11081] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 667.049479][T11088] xt_hashlimit: max too large, truncated to 1048576 [ 667.068763][T11088] xt_limit: Overflow, try lower: 0/0 [ 668.529211][ T5848] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 668.812441][ T5848] usb 9-1: config 0 has no interfaces? [ 668.829211][ T5848] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 668.853618][ T5848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.892214][ T5848] usb 9-1: Product: syz [ 668.896490][ T5848] usb 9-1: Manufacturer: syz [ 668.947868][ T5848] usb 9-1: SerialNumber: syz [ 668.973838][ T5848] usb 9-1: config 0 descriptor?? [ 671.529479][T11097] @: renamed from vlan0 (while UP) [ 673.309430][T11143] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 673.730280][T11148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1087'. [ 676.465514][T11165] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1092'. [ 676.586417][T11165] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 676.594709][T11165] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1092'. [ 679.369483][T11185] xt_hashlimit: max too large, truncated to 1048576 [ 679.386658][T11185] xt_limit: Overflow, try lower: 0/0 [ 679.735479][ T6006] usb 9-1: USB disconnect, device number 7 [ 679.816258][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.830917][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.998609][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 680.007339][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 680.015857][ T5140] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 680.023746][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.136913][ T5140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 682.145966][ T5140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 682.154380][ T5140] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 682.164518][ T5140] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 682.171614][ T8346] Bluetooth: hci5: command tx timeout [ 682.178589][ T8346] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 682.191438][ T8346] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 682.210761][T11193] capability: warning: `syz.9.1097' uses deprecated v2 capabilities in a way that may be insecure [ 684.013712][ T6437] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.240450][ T55] Bluetooth: hci5: command tx timeout [ 684.247826][ T8346] Bluetooth: hci6: command tx timeout [ 684.722671][T11216] openvswitch: netlink: Multiple metadata blocks provided [ 685.075465][ T6437] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.352283][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.419350][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.599871][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1105'. [ 686.188183][ T6437] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.003172][ T8346] Bluetooth: hci6: command tx timeout [ 687.010735][ T8346] Bluetooth: hci5: command tx timeout [ 687.463829][T11213] syz.5.1102 (11213): drop_caches: 2 [ 687.515703][ T6437] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.793277][T11245] fuse: Unknown parameter 'user00000000000000000000' [ 687.877354][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1110'. [ 688.677131][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1110'. [ 688.891544][T11243] team0: entered promiscuous mode [ 688.896626][T11243] team_slave_0: entered promiscuous mode [ 688.989619][T11243] team_slave_1: entered promiscuous mode [ 689.016561][T11243] erspan0: entered promiscuous mode [ 689.042070][ T55] Bluetooth: hci5: command tx timeout [ 689.047508][ T55] Bluetooth: hci6: command tx timeout [ 689.505316][T11186] chnl_net:caif_netlink_parms(): no params data found [ 689.546995][T11257] netlink: 666 bytes leftover after parsing attributes in process `syz.9.1113'. [ 689.793303][T11257] netlink: 'syz.9.1113': attribute type 1 has an invalid length. [ 689.801568][T11257] netlink: 216 bytes leftover after parsing attributes in process `syz.9.1113'. [ 691.129160][ T55] Bluetooth: hci6: command tx timeout [ 691.412353][ T6437] bridge_slave_1: left allmulticast mode [ 691.562014][ T6437] bridge_slave_1: left promiscuous mode [ 691.667976][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.623747][ T6437] bridge_slave_0: left allmulticast mode [ 692.748533][ T6437] bridge_slave_0: left promiscuous mode [ 692.862752][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.070986][ T5894] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 694.232596][ T5894] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 694.241429][ T5894] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.268365][ T5894] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 694.318562][ T5894] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 694.372579][ T5894] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 694.405030][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 694.567666][ T5894] usb 9-1: Product: syz [ 694.598564][ T5894] usb 9-1: Manufacturer: syz [ 694.636998][ T5894] cdc_wdm 9-1:1.0: skipping garbage [ 694.649395][ T5894] cdc_wdm 9-1:1.0: skipping garbage [ 694.654688][ T5894] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 694.925815][ T9] usb 9-1: USB disconnect, device number 8 [ 694.995112][T11306] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 696.495188][T11318] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 697.389770][ T6437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.446336][ T6437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.517308][ T6437] bond0 (unregistering): Released all slaves [ 697.536972][T11321] random: crng reseeded on system resumption [ 698.940952][ T6437] bond1 (unregistering): Released all slaves [ 698.967269][ T6437] bond2 (unregistering): Released all slaves [ 699.206610][ T6437] bond3 (unregistering): Released all slaves [ 700.334156][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.391826][T11186] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.435022][T11186] bridge_slave_0: entered allmulticast mode [ 700.457460][T11186] bridge_slave_0: entered promiscuous mode [ 700.482286][T11198] chnl_net:caif_netlink_parms(): no params data found [ 701.010311][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.018143][T11186] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.027919][T11186] bridge_slave_1: entered allmulticast mode [ 701.077767][T11186] bridge_slave_1: entered promiscuous mode [ 702.206911][T11360] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 703.162268][T11186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.568951][ T5897] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 704.669254][ T5897] usb 9-1: Using ep0 maxpacket: 8 [ 704.700162][ T5897] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 704.729669][ T5897] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 704.755520][ T5897] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 704.774800][ T5897] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.796885][ T5897] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 704.807006][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.954336][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.962889][T11362] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.037731][ T5897] usb 9-1: usb_control_msg returned -71 [ 705.069149][ T5912] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 705.069552][ T5897] usbtmc 9-1:16.0: can't read capabilities [ 705.109684][ T5897] usb 9-1: USB disconnect, device number 9 [ 705.241021][ T5912] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 705.264753][ T5912] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 705.289161][ T5912] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 705.314853][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 705.328277][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 705.336397][ T5912] usb 3-1: SerialNumber: syz [ 705.345495][T11373] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 705.360819][T11373] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 705.383523][ T5912] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 705.391600][ T5912] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 705.398053][ T5912] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 705.619463][T10468] usb 3-1: USB disconnect, device number 18 [ 705.893626][T11362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.085739][T11362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.092939][T11389] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1142'. [ 707.345718][T11362] tipc: Resetting bearer [ 707.580328][T11362] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.589482][T11362] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.604686][T11362] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.620755][T11362] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.795282][T11186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.617631][T11404] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1147'. [ 709.565593][T11186] team0: Port device team_slave_0 added [ 709.856275][ T6437] hsr_slave_0: left promiscuous mode [ 709.883556][ T6437] hsr_slave_1: left promiscuous mode [ 709.893097][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.909652][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.921249][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.930616][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.477476][ T6437] veth1_macvtap: left promiscuous mode [ 710.587712][ T6437] veth0_macvtap: left promiscuous mode [ 710.625642][ T6437] veth1_vlan: left promiscuous mode [ 710.653588][ T6437] veth0_vlan: left promiscuous mode [ 716.991965][ T6437] team0 (unregistering): Port device team_slave_1 removed [ 717.216944][ T6437] team0 (unregistering): Port device team_slave_0 removed [ 718.345250][ T8346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 718.354277][ T8346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 718.373330][ T8346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 718.389958][ T8346] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 718.397642][ T8346] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 718.405091][ T8346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.821697][T11464] fuse: Bad value for 'group_id' [ 718.826745][T11464] fuse: Bad value for 'group_id' [ 720.479810][ T55] Bluetooth: hci1: command tx timeout [ 720.838496][T11186] team0: Port device team_slave_1 added [ 720.864060][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.878642][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.907065][T11198] bridge_slave_0: entered allmulticast mode [ 720.925676][T11198] bridge_slave_0: entered promiscuous mode [ 721.151182][T11186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.579668][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.649819][T11186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.724449][T11186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.772698][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.054570][T11486] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 722.059950][T11186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.066254][T11486] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1167'. [ 722.487147][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.533099][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.560005][ T55] Bluetooth: hci1: command tx timeout [ 722.571143][T11198] bridge_slave_1: entered allmulticast mode [ 722.612778][T11198] bridge_slave_1: entered promiscuous mode [ 722.938545][T11491] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 724.090244][T11484] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1167'. [ 724.647961][ T55] Bluetooth: hci1: command tx timeout [ 724.687005][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.828178][T11507] dns_resolver: Unsupported server list version (0) [ 727.427021][ T55] Bluetooth: hci1: command tx timeout [ 729.779607][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.373647][T11186] hsr_slave_0: entered promiscuous mode [ 730.401993][T11186] hsr_slave_1: entered promiscuous mode [ 730.416546][T11186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 730.442167][T11186] Cannot create hsr debugfs directory [ 730.532001][T11530] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1178'. [ 730.648426][T11198] team0: Port device team_slave_0 added [ 730.697250][T11198] team0: Port device team_slave_1 added [ 730.820495][ T5895] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 730.943076][ T6437] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.435284][ T5895] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.483292][ T5895] usb 9-1: config 0 has no interfaces? [ 731.576767][ T5895] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 731.592246][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.592422][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.607680][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.635233][ T5895] usb 9-1: Product: syz [ 731.685975][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.695172][ T5895] usb 9-1: Manufacturer: syz [ 731.757523][ T5895] usb 9-1: SerialNumber: syz [ 731.761228][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.765061][ T5895] usb 9-1: config 0 descriptor?? [ 731.823500][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.969997][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.070795][ T6437] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.540422][ T6437] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.019204][ T5895] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 733.102633][T11459] chnl_net:caif_netlink_parms(): no params data found [ 733.234091][T11198] hsr_slave_0: entered promiscuous mode [ 733.245311][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.267559][T11198] hsr_slave_1: entered promiscuous mode [ 733.288381][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.303807][T11198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.325896][T11198] Cannot create hsr debugfs directory [ 733.337070][ T5895] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 733.368434][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.384194][ T5848] usb 9-1: USB disconnect, device number 10 [ 733.430437][ T5895] usb 10-1: config 0 descriptor?? [ 733.480102][ T6437] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.570873][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 733.725601][T11459] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.733808][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.741048][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 733.746719][T11459] bridge_slave_0: entered allmulticast mode [ 733.749491][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 733.760328][T11459] bridge_slave_0: entered promiscuous mode [ 733.761437][ T9] usb 3-1: config 179 has no interface number 0 [ 733.773638][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 733.777821][T11459] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.793100][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.800373][T11459] bridge_slave_1: entered allmulticast mode [ 733.800680][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 733.807716][T11459] bridge_slave_1: entered promiscuous mode [ 733.834616][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 733.848752][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 733.873617][ T5895] usbhid 10-1:0.0: can't add hid device: -71 [ 733.879823][ T5895] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 733.889623][ T5895] usb 10-1: USB disconnect, device number 5 [ 733.896346][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 733.916430][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.938576][T11554] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 734.762911][T11459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.832958][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.881695][T11459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.891414][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.940902][ T5895] usb 3-1: USB disconnect, device number 19 [ 736.113906][T11459] team0: Port device team_slave_0 added [ 736.151337][T11459] team0: Port device team_slave_1 added [ 736.549681][ T6437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.851026][ T8346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 736.881360][ T8346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 736.922773][ T8346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 737.020826][ T8346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 737.041175][ T8346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 737.049980][ T8346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 737.866484][ T8346] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 737.879239][ T8346] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 737.887016][ T8346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 737.898105][ T8346] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 737.906462][ T8346] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 737.913967][ T8346] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 738.078673][T11573] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1189'. [ 738.562911][ T6437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.590038][T11578] bridge0: port 3(team0) entered blocking state [ 738.596603][T11578] bridge0: port 3(team0) entered disabled state [ 738.606712][T11578] team0: entered allmulticast mode [ 738.614810][T11578] team_slave_0: entered allmulticast mode [ 738.628831][T11578] team_slave_1: entered allmulticast mode [ 738.710699][T11578] team0: entered promiscuous mode [ 738.715778][T11578] team_slave_0: entered promiscuous mode [ 738.840910][T11578] team_slave_1: entered promiscuous mode [ 738.851007][T11459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.867159][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.894466][T11459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.177882][T11459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.199914][ T55] Bluetooth: hci3: command tx timeout [ 739.268628][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.521781][T11459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.699136][ T5895] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 739.759560][ T6437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.940471][T11598] random: crng reseeded on system resumption [ 740.439521][T11377] IPVS: starting estimator thread 0... [ 740.538852][ T55] Bluetooth: hci6: command tx timeout [ 740.549486][T11599] IPVS: using max 19 ests per chain, 45600 per kthread [ 740.564242][T11375] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 740.679501][ T5895] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.699090][ T5895] usb 10-1: config 0 has no interfaces? [ 740.710882][ T5895] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 740.737734][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.759117][ T5895] usb 10-1: Product: syz [ 740.763417][ T5895] usb 10-1: Manufacturer: syz [ 740.768118][ T5895] usb 10-1: SerialNumber: syz [ 740.782082][T11375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.812059][T11375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.813030][ T5895] usb 10-1: config 0 descriptor?? [ 740.837102][ T6437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.847505][T11375] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 740.847538][T11375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.877480][T11375] usb 9-1: config 0 descriptor?? [ 741.001391][T11459] hsr_slave_0: entered promiscuous mode [ 741.007928][T11459] hsr_slave_1: entered promiscuous mode [ 741.020388][T11459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.027966][T11459] Cannot create hsr debugfs directory [ 741.319309][ T55] Bluetooth: hci3: command tx timeout [ 741.612400][T11375] usbhid 9-1:0.0: can't add hid device: -71 [ 742.334796][T11375] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 742.367605][T11375] usb 9-1: USB disconnect, device number 11 [ 742.560828][ T55] Bluetooth: hci6: command tx timeout [ 743.409539][ T55] Bluetooth: hci3: command tx timeout [ 743.417205][T11375] usb 10-1: USB disconnect, device number 6 [ 744.640115][ T55] Bluetooth: hci6: command tx timeout [ 745.217862][T11632] netlink: 666 bytes leftover after parsing attributes in process `syz.9.1203'. [ 745.294808][ T6437] bridge_slave_1: left allmulticast mode [ 745.359832][ T6437] bridge_slave_1: left promiscuous mode [ 745.439339][ T55] Bluetooth: hci3: command tx timeout [ 745.476630][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.781520][ T6437] bridge_slave_0: left allmulticast mode [ 745.801433][ T6437] bridge_slave_0: left promiscuous mode [ 745.807186][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.936997][ T6437] bridge_slave_1: left allmulticast mode [ 745.971773][ T6437] bridge_slave_1: left promiscuous mode [ 745.977489][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.015052][ T6437] bridge_slave_0: left allmulticast mode [ 746.035248][ T6437] bridge_slave_0: left promiscuous mode [ 746.206960][T11656] random: crng reseeded on system resumption [ 746.715558][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.739901][ T55] Bluetooth: hci6: command tx timeout [ 746.746261][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.755016][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.763068][T11672] 9pnet_fd: Insufficient options for proto=fd [ 748.953602][ T6437] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 749.169117][ T5895] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 749.340850][ T5895] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.352835][ T5895] usb 9-1: config 0 has no interfaces? [ 749.364502][ T5895] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 749.373953][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.383363][ T5895] usb 9-1: Product: syz [ 749.387790][ T5895] usb 9-1: Manufacturer: syz [ 749.392750][ T5895] usb 9-1: SerialNumber: syz [ 749.407593][ T5895] usb 9-1: config 0 descriptor?? [ 749.491879][ T6437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.502691][ T6437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.513219][ T6437] bond0 (unregistering): Released all slaves [ 749.597403][ T6437] bond1 (unregistering): Released all slaves [ 749.796524][ T6437] bond2 (unregistering): Released all slaves [ 750.147529][ T6437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.235273][ T6437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.315866][ T6437] bond0 (unregistering): Released all slaves [ 750.668844][ T6437] bond1 (unregistering): Released all slaves [ 750.681174][ T6437] bond2 (unregistering): Released all slaves [ 750.693223][ T6437] bond3 (unregistering): Released all slaves [ 750.838551][T11582] chnl_net:caif_netlink_parms(): no params data found [ 750.919939][ T6437] tipc: Left network mode [ 751.235355][T11575] chnl_net:caif_netlink_parms(): no params data found [ 752.054753][ T5894] usb 9-1: USB disconnect, device number 12 [ 755.307645][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'. [ 755.331395][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'. [ 756.031159][T11719] team0: entered promiscuous mode [ 756.059102][T11719] team_slave_0: entered promiscuous mode [ 756.065050][T11719] team_slave_1: entered promiscuous mode [ 756.080478][T11719] erspan0: entered promiscuous mode [ 756.091307][T11719] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 756.109619][T11719] Cannot create hsr debugfs directory [ 756.278842][T11730] 9pnet_fd: Insufficient options for proto=fd [ 756.293593][T11582] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.300947][T11582] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.308140][T11582] bridge_slave_0: entered allmulticast mode [ 756.323110][T11582] bridge_slave_0: entered promiscuous mode [ 756.461668][T11733] random: crng reseeded on system resumption [ 756.972268][T11582] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.131668][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.155391][T11582] bridge_slave_1: entered allmulticast mode [ 757.170276][T11582] bridge_slave_1: entered promiscuous mode [ 757.334413][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.343410][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.351710][T11575] bridge_slave_0: entered allmulticast mode [ 757.360044][T11575] bridge_slave_0: entered promiscuous mode [ 757.582128][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.596937][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.660510][T11575] bridge_slave_1: entered allmulticast mode [ 757.667902][T11575] bridge_slave_1: entered promiscuous mode [ 757.710684][T11582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.737510][T11582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.940799][T11582] team0: Port device team_slave_0 added [ 757.977677][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.017806][T11582] team0: Port device team_slave_1 added [ 758.380401][T11773] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 759.098179][T11752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 759.120358][T11752] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 759.126369][T11752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 759.134613][T11752] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 759.157171][T11752] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 759.168387][T11752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 759.176600][ T6437] hsr_slave_0: left promiscuous mode [ 759.182714][T11752] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 759.189773][ T6437] hsr_slave_1: left promiscuous mode [ 759.196499][T11752] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 759.206271][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.215900][T11752] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 759.222065][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.227514][T11752] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 759.238063][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.250034][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.267595][T11752] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 759.283740][ T6437] hsr_slave_0: left promiscuous mode [ 759.308713][ T6437] hsr_slave_1: left promiscuous mode [ 759.320929][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.328383][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.336577][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.346837][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.388105][ T6437] veth1_macvtap: left promiscuous mode [ 759.393724][ T6437] veth0_macvtap: left promiscuous mode [ 759.399430][ T6437] veth1_vlan: left promiscuous mode [ 759.404735][ T6437] veth0_vlan: left promiscuous mode [ 759.411412][ T6437] veth1_macvtap: left promiscuous mode [ 759.417012][ T6437] veth1_vlan: left promiscuous mode [ 759.422540][ T6437] veth0_vlan: left promiscuous mode [ 759.792525][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 761.205303][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 761.211553][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 761.217575][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 761.275220][ T6437] team0 (unregistering): Port device team_slave_1 removed [ 761.284566][ T55] Bluetooth: hci6: command 0x0c1a tx timeout [ 761.323022][ T6437] team0 (unregistering): Port device team_slave_0 removed [ 762.642817][ T6437] team0 (unregistering): Port device team_slave_1 removed [ 762.682382][ T6437] team0 (unregistering): Port device team_slave_0 removed [ 763.007872][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.040095][T11582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.047069][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.079265][T11582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.180812][T11575] team0: Port device team_slave_0 added [ 763.223051][T11575] team0: Port device team_slave_1 added [ 763.301843][T11459] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 763.321500][T11459] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 763.333987][T11791] 9pnet_fd: Insufficient options for proto=fd [ 763.340256][ T8346] Bluetooth: hci3: command 0x0c1a tx timeout [ 763.346368][ T8346] Bluetooth: hci1: command 0x0c1a tx timeout [ 763.360649][ T8346] Bluetooth: hci6: command 0x0c1a tx timeout [ 763.464944][T11582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.500543][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.533620][T11582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.645115][T11795] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 764.348649][T11459] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 764.387158][T11459] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 764.572779][T11459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.594813][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.613735][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.663066][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.710577][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.333300][T11803] trusted_key: encrypted_key: insufficient parameters specified [ 765.346521][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.374336][ T8346] Bluetooth: hci1: command 0x0c1a tx timeout [ 765.447340][ T8346] Bluetooth: hci3: command 0x0c1a tx timeout [ 765.453716][ T55] Bluetooth: hci6: command 0x0c1a tx timeout [ 765.516266][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.760191][T11582] hsr_slave_0: entered promiscuous mode [ 765.778365][T11582] hsr_slave_1: entered promiscuous mode [ 767.356005][T11575] hsr_slave_0: entered promiscuous mode [ 767.390219][T11575] hsr_slave_1: entered promiscuous mode [ 767.396438][T11575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.041622][T11575] Cannot create hsr debugfs directory [ 768.385393][T11459] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.349498][T11838] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1244'. [ 769.406844][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.414021][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.474818][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.481998][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.702451][T11845] bridge0: port 3(team0) entered blocking state [ 769.713264][T11845] bridge0: port 3(team0) entered disabled state [ 769.729467][T11845] team0: entered allmulticast mode [ 769.734639][T11845] team_slave_0: entered allmulticast mode [ 769.741688][T11845] team_slave_1: entered allmulticast mode [ 769.767336][T11845] team0: left allmulticast mode [ 769.778068][T11845] team_slave_0: left allmulticast mode [ 769.819094][T11845] team_slave_1: left allmulticast mode [ 769.826804][T11850] 9pnet_fd: Insufficient options for proto=fd [ 769.987708][T11459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 770.039488][ T5894] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 770.117890][T11855] trusted_key: encrypted_key: insufficient parameters specified [ 770.671737][T11856] sd 0:0:1:0: device reset [ 771.085062][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.099085][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.129327][ T5894] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 771.143296][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.182851][ T5894] usb 10-1: config 0 descriptor?? [ 771.263757][T11582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 771.688420][T11863] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 771.862575][ T5894] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 772.329767][ T5894] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 772.615211][T11582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 772.622774][ T5894] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 772.668754][T11582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 772.743540][T11582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 772.828582][ T5894] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 772.855372][ T5894] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 772.890366][ T5894] usb 10-1: USB disconnect, device number 7 [ 773.003540][ T6437] bridge_slave_1: left allmulticast mode [ 773.017730][ T6437] bridge_slave_1: left promiscuous mode [ 773.024894][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.042379][ T6437] bridge_slave_0: left allmulticast mode [ 773.048031][ T6437] bridge_slave_0: left promiscuous mode [ 773.054670][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.231117][ T5848] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 773.238265][ T6437] bridge_slave_1: left allmulticast mode [ 773.678747][ T6437] bridge_slave_1: left promiscuous mode [ 773.696423][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.713169][ T6437] bridge_slave_0: left allmulticast mode [ 773.727471][ T6437] bridge_slave_0: left promiscuous mode [ 773.739383][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.760219][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 773.801166][ T5848] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 773.813054][ T5848] usb 3-1: config 179 has no interface number 0 [ 773.829656][ T5848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 773.852217][ T5848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 773.883483][ T5848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 773.900488][ T5848] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 773.912378][ T5848] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 773.927675][ T5848] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 773.938274][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.160687][T11869] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 774.382637][ T6437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.474650][ T6437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.529506][ T6437] bond0 (unregistering): Released all slaves [ 774.551956][T11869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.623408][T11869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.633828][ T6437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.667434][ T6437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.680396][ T6437] bond0 (unregistering): Released all slaves [ 774.895547][ T5893] usb 3-1: USB disconnect, device number 20 [ 774.895548][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 774.895689][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 775.865862][T11891] netlink: 'syz.8.1259': attribute type 1 has an invalid length. [ 775.874109][T11891] netlink: 216 bytes leftover after parsing attributes in process `syz.8.1259'. [ 776.222263][ T6437] hsr_slave_0: left promiscuous mode [ 776.239375][ T6437] hsr_slave_1: left promiscuous mode [ 776.245254][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.300302][T11893] 9pnet_fd: Insufficient options for proto=fd [ 776.320836][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.628327][ T6437] hsr_slave_0: left promiscuous mode [ 776.641635][ T6437] hsr_slave_1: left promiscuous mode [ 776.651035][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.914981][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.040539][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 778.054693][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 778.065375][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 778.082545][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 778.095291][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 778.105057][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 778.545057][ T6437] team0 (unregistering): Port device team_slave_1 removed [ 778.620734][ T6437] team0 (unregistering): Port device team_slave_0 removed [ 778.817822][T11915] random: crng reseeded on system resumption [ 780.159161][ T5140] Bluetooth: hci1: command tx timeout [ 780.223358][ T6437] team0 (unregistering): Port device team_slave_1 removed [ 780.257065][ T6437] team0 (unregistering): Port device team_slave_0 removed [ 780.387601][T11889] netlink: 666 bytes leftover after parsing attributes in process `syz.8.1259'. [ 782.011762][T11582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.145824][T11582] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.239741][ T5140] Bluetooth: hci1: command tx timeout [ 782.334432][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.341575][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.401329][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.408510][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.441523][T11575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 782.620494][T11575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 782.660417][T11575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 782.749699][T11575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 784.162804][T11907] chnl_net:caif_netlink_parms(): no params data found [ 784.250026][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 784.320188][ T5140] Bluetooth: hci1: command tx timeout [ 785.459723][T11962] netlink: 'syz.8.1278': attribute type 1 has an invalid length. [ 785.469195][T11962] netlink: 216 bytes leftover after parsing attributes in process `syz.8.1278'. [ 785.863878][T11961] netlink: 666 bytes leftover after parsing attributes in process `syz.8.1278'. [ 786.400529][ T5140] Bluetooth: hci1: command tx timeout [ 786.429400][T11380] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 786.601340][T11380] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.634932][T11380] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.687859][T11380] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 786.707911][T11907] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.767740][T11907] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.767908][T11380] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.792831][T11907] bridge_slave_0: entered allmulticast mode [ 786.807801][T11380] usb 9-1: config 0 descriptor?? [ 786.808064][T11907] bridge_slave_0: entered promiscuous mode [ 786.840857][T11907] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.847954][T11907] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.867962][T11907] bridge_slave_1: entered allmulticast mode [ 786.878867][T11907] bridge_slave_1: entered promiscuous mode [ 788.195273][T11380] usbhid 9-1:0.0: can't add hid device: -71 [ 788.236308][T11380] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 788.417489][T11380] usb 9-1: USB disconnect, device number 13 [ 788.436280][T11907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.707423][T11582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.886929][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.245358][T11907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.560867][T11907] team0: Port device team_slave_0 added [ 789.626323][T11907] team0: Port device team_slave_1 added [ 789.836144][T11907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.868019][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.028004][T11907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.088683][T11907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.154056][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.295726][T11907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.496929][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.854759][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.861910][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.876210][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.883425][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.932227][ T8977] bridge_slave_1: left allmulticast mode [ 791.938056][ T8977] bridge_slave_1: left promiscuous mode [ 791.946986][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.661488][ T8977] bridge_slave_0: left allmulticast mode [ 792.667183][ T8977] bridge_slave_0: left promiscuous mode [ 792.690055][ T8977] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.162009][ T8977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.186812][ T8977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.207444][ T8977] bond0 (unregistering): Released all slaves [ 793.348427][T11582] veth0_vlan: entered promiscuous mode [ 793.357448][T11907] hsr_slave_0: entered promiscuous mode [ 793.416150][T11907] hsr_slave_1: entered promiscuous mode [ 793.455993][T11907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.505900][T11907] Cannot create hsr debugfs directory [ 793.749083][T12013] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1291'. [ 794.266941][ T8977] hsr_slave_0: left promiscuous mode [ 794.361188][ T8977] hsr_slave_1: left promiscuous mode [ 794.483905][ T8977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.527142][ T8977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.225381][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 796.235783][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 796.245265][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 796.253739][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 796.261590][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 796.270822][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 796.397040][ T8977] team0 (unregistering): Port device team_slave_1 removed [ 796.435890][ T5140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 796.455188][ T5967] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 796.458620][ T5140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 796.473561][ T5140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 796.527535][ T5140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 796.550857][ T5140] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 796.611368][ T5140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 796.676962][ T5967] usb 10-1: Using ep0 maxpacket: 8 [ 796.754616][ T8977] team0 (unregistering): Port device team_slave_0 removed [ 796.769221][ T5967] usb 10-1: unable to get BOS descriptor or descriptor too short [ 796.826088][ T5967] usb 10-1: config 3 has an invalid interface number: 182 but max is 0 [ 796.892453][ T5967] usb 10-1: config 3 has no interface number 0 [ 796.917387][ T5967] usb 10-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 796.972461][ T5967] usb 10-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10 [ 796.998492][ T5967] usb 10-1: config 3 interface 182 has no altsetting 0 [ 797.077194][ T5967] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 797.086453][ T5967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.094993][ T5967] usb 10-1: Product: syz [ 797.100701][ T5967] usb 10-1: Manufacturer: syz [ 797.105397][ T5967] usb 10-1: SerialNumber: syz [ 797.770321][ T5967] usbtest 10-1:3.182: couldn't get endpoints, -71 [ 797.837847][ T5967] usbtest 10-1:3.182: probe with driver usbtest failed with error -71 [ 797.879199][ T5967] usb 10-1: USB disconnect, device number 8 [ 798.179504][T12047] netlink: 'syz.2.1300': attribute type 7 has an invalid length. [ 798.187270][T12047] netlink: 'syz.2.1300': attribute type 8 has an invalid length. [ 798.330033][ T5140] Bluetooth: hci5: command tx timeout [ 798.810241][ T5140] Bluetooth: hci7: command tx timeout [ 800.399313][ T5140] Bluetooth: hci5: command tx timeout [ 800.879222][ T5140] Bluetooth: hci7: command tx timeout [ 801.666318][T12039] chnl_net:caif_netlink_parms(): no params data found [ 802.268102][T12042] chnl_net:caif_netlink_parms(): no params data found [ 802.484209][ T5140] Bluetooth: hci5: command tx timeout [ 802.606019][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.621748][T12039] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.636297][T12039] bridge_slave_0: entered allmulticast mode [ 802.660030][T12039] bridge_slave_0: entered promiscuous mode [ 802.676899][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.696661][T12039] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.959235][ T5140] Bluetooth: hci7: command tx timeout [ 802.959718][T12039] bridge_slave_1: entered allmulticast mode [ 803.162084][T12039] bridge_slave_1: entered promiscuous mode [ 803.500643][T12039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.576167][T12039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.957049][T12039] team0: Port device team_slave_0 added [ 803.975588][T11907] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 804.034952][T11907] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 804.270085][T11377] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 804.500754][T11377] usb 3-1: Using ep0 maxpacket: 8 [ 804.533783][T12042] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.549439][T12042] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.556637][T12042] bridge_slave_0: entered allmulticast mode [ 804.569412][T11377] usb 3-1: unable to get BOS descriptor or descriptor too short [ 804.579537][T12042] bridge_slave_0: entered promiscuous mode [ 804.585268][ T5140] Bluetooth: hci5: command tx timeout [ 804.606850][T11377] usb 3-1: config 3 has an invalid interface number: 182 but max is 0 [ 804.616070][T11377] usb 3-1: config 3 has no interface number 0 [ 804.633098][T11377] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 804.649221][T11377] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10 [ 804.670957][T11377] usb 3-1: config 3 interface 182 has no altsetting 0 [ 804.680830][T11377] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 804.691087][T11377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.699855][T11377] usb 3-1: Product: syz [ 804.704125][T11377] usb 3-1: Manufacturer: syz [ 804.708871][T11377] usb 3-1: SerialNumber: syz [ 804.725949][T12039] team0: Port device team_slave_1 added [ 804.809698][T11907] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 804.835220][T12042] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.849266][T12042] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.864729][T12042] bridge_slave_1: entered allmulticast mode [ 804.931834][T12042] bridge_slave_1: entered promiscuous mode [ 805.012324][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1315'. [ 805.021630][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1315'. [ 805.041678][ T5140] Bluetooth: hci7: command tx timeout [ 805.193523][T11377] usbtest 3-1:3.182: couldn't get endpoints, -71 [ 805.205511][T11377] usbtest 3-1:3.182: probe with driver usbtest failed with error -71 [ 805.215282][T11907] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 805.218708][T11377] usb 3-1: USB disconnect, device number 21 [ 805.921712][T12042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.142330][T12039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.150797][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.208932][T12039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.345346][T12042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.591118][T12039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.633742][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.868717][T12039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.058264][T12042] team0: Port device team_slave_0 added [ 807.090197][T12039] hsr_slave_0: entered promiscuous mode [ 807.096436][T12039] hsr_slave_1: entered promiscuous mode [ 807.110752][T12039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.118326][T12039] Cannot create hsr debugfs directory [ 807.132635][ T5894] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 807.142538][T12042] team0: Port device team_slave_1 added [ 807.262990][T12042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.279658][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.333050][ T5894] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 807.339699][T12042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.342610][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.619612][ T5894] usb 9-1: Product: syz [ 807.644777][ T5894] usb 9-1: Manufacturer: syz [ 807.665796][ T5894] usb 9-1: SerialNumber: syz [ 807.732312][ T5894] usb 9-1: config 0 descriptor?? [ 807.735464][T12042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.783643][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.982146][T12042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.163811][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.181185][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.887100][T12042] hsr_slave_0: entered promiscuous mode [ 808.930043][T12042] hsr_slave_1: entered promiscuous mode [ 808.941597][T12042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.969288][T12042] Cannot create hsr debugfs directory [ 810.012196][ T5894] usb 9-1: USB disconnect, device number 14 [ 810.426825][ T8977] bridge_slave_1: left allmulticast mode [ 810.436361][ T8977] bridge_slave_1: left promiscuous mode [ 810.565948][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.001185][ T8977] bridge_slave_0: left allmulticast mode [ 811.018710][ T8977] bridge_slave_0: left promiscuous mode [ 811.042207][ T8977] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.168913][ T8977] bridge_slave_1: left allmulticast mode [ 811.190475][ T8977] bridge_slave_1: left promiscuous mode [ 811.196314][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.245365][ T8977] bridge_slave_0: left allmulticast mode [ 811.259098][ T8977] bridge_slave_0: left promiscuous mode [ 812.339283][ T8977] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.762272][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1337'. [ 815.436591][ T8977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.467117][ T8977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.480746][ T8977] bond0 (unregistering): Released all slaves [ 815.721762][ T8977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.751334][ T8977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.790828][ T8977] bond0 (unregistering): Released all slaves [ 816.114573][T11377] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 816.160485][T12188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1339'. [ 816.765739][ T8977] hsr_slave_0: left promiscuous mode [ 816.804782][ T8977] hsr_slave_1: left promiscuous mode [ 816.818661][ T8977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.842235][T11377] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 816.859265][T11377] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.876509][T11377] usb 10-1: Product: syz [ 816.898052][ T8977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.927527][T11377] usb 10-1: Manufacturer: syz [ 816.932378][T11377] usb 10-1: SerialNumber: syz [ 816.953278][ T8977] hsr_slave_0: left promiscuous mode [ 816.955738][T11377] usb 10-1: config 0 descriptor?? [ 816.979247][ T8977] hsr_slave_1: left promiscuous mode [ 817.012362][ T8977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.054311][ T8977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.112939][ T8977] veth0_vlan: left promiscuous mode [ 818.950286][ T5894] usb 10-1: USB disconnect, device number 9 [ 819.498933][ T8977] team0 (unregistering): Port device team_slave_1 removed [ 820.124814][T12214] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1347'. [ 820.512658][ T8977] team0 (unregistering): Port device team_slave_0 removed [ 822.887214][ T0] ================================================================== [ 822.895337][ T0] BUG: KASAN: wild-memory-access in __lock_acquire+0xc94/0x2100 [ 822.902999][ T0] Read of size 8 at addr 1fffffff8b706080 by task swapper/0/0 [ 822.910460][ T0] [ 822.912781][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 822.912803][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 822.912814][ T0] Call Trace: [ 822.912822][ T0] [ 822.912829][ T0] dump_stack_lvl+0x241/0x360 [ 822.912853][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.912873][ T0] ? __pfx__printk+0x10/0x10 [ 822.912891][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.912921][ T0] ? _printk+0xd5/0x120 [ 822.912939][ T0] print_report+0xe3/0x5b0 [ 822.912963][ T0] ? __lock_acquire+0x1397/0x2100 [ 822.912996][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.913024][ T0] ? __virt_addr_valid+0x58/0x530 [ 822.913043][ T0] ? __lock_acquire+0xc94/0x2100 [ 822.913071][ T0] kasan_report+0x143/0x180 [ 822.913094][ T0] ? __lock_acquire+0xc94/0x2100 [ 822.913125][ T0] kasan_check_range+0x282/0x290 [ 822.913150][ T0] __lock_acquire+0xc94/0x2100 [ 822.913184][ T0] lock_acquire+0x1ed/0x550 [ 822.913211][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 822.913244][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 822.913271][ T0] ? rcu_note_context_switch+0xd44/0x1060 [ 822.913302][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.913331][ T0] ? hrtimer_get_next_event+0x1a5/0x220 [ 822.913352][ T0] ? __get_next_timer_interrupt+0x6dd/0x8b0 [ 822.913382][ T0] _raw_spin_lock_nested+0x31/0x40 [ 822.913410][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 822.913432][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 822.913457][ T0] __schedule+0x357/0x4c90 [ 822.913485][ T0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.913512][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.913540][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 822.913568][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.913599][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 822.913628][ T0] ? __pfx___schedule+0x10/0x10 [ 822.913653][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 822.913676][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.913707][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 822.913729][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 822.913753][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.913783][ T0] schedule_idle+0x56/0x90 [ 822.913809][ T0] do_idle+0x567/0x5c0 [ 822.913835][ T0] ? __pfx_do_idle+0x10/0x10 [ 822.913858][ T0] ? poll_idle+0x60/0xb0 [ 822.913881][ T0] ? rest_init+0x31/0x300 [ 822.913900][ T0] cpu_startup_entry+0x42/0x60 [ 822.913923][ T0] rest_init+0x2dc/0x300 [ 822.913942][ T0] ? __pfx_x86_late_time_init+0x10/0x10 [ 822.913963][ T0] start_kernel+0x484/0x510 [ 822.913988][ T0] x86_64_start_reservations+0x2a/0x30 [ 822.914019][ T0] x86_64_start_kernel+0x66/0x70 [ 822.914048][ T0] common_startup_64+0x13e/0x147 [ 822.914072][ T0] [ 822.914079][ T0] ================================================================== [ 823.195307][ T0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 823.202495][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 823.212840][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 823.222890][ T0] Call Trace: [ 823.226162][ T0] [ 823.229089][ T0] dump_stack_lvl+0x241/0x360 [ 823.233769][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 823.238967][ T0] ? __pfx__printk+0x10/0x10 [ 823.243556][ T0] ? rcu_is_watching+0x15/0xb0 [ 823.248320][ T0] ? lock_release+0xbf/0xa30 [ 823.252931][ T0] ? common_startup_64+0x13e/0x147 [ 823.258041][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.263687][ T0] ? vscnprintf+0x5d/0x90 [ 823.268032][ T0] panic+0x349/0x880 [ 823.271935][ T0] ? check_panic_on_warn+0x21/0xb0 [ 823.277055][ T0] ? __pfx_panic+0x10/0x10 [ 823.281467][ T0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 823.286673][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.292319][ T0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 823.298219][ T0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 823.304556][ T0] ? print_report+0xe3/0x5b0 [ 823.309152][ T0] check_panic_on_warn+0x86/0xb0 [ 823.314098][ T0] ? __lock_acquire+0xc94/0x2100 [ 823.319044][ T0] end_report+0x77/0x160 [ 823.323290][ T0] kasan_report+0x154/0x180 [ 823.327793][ T0] ? __lock_acquire+0xc94/0x2100 [ 823.332743][ T0] kasan_check_range+0x282/0x290 [ 823.337685][ T0] __lock_acquire+0xc94/0x2100 [ 823.342464][ T0] lock_acquire+0x1ed/0x550 [ 823.346974][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 823.352528][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 823.357559][ T0] ? rcu_note_context_switch+0xd44/0x1060 [ 823.363289][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.368934][ T0] ? hrtimer_get_next_event+0x1a5/0x220 [ 823.374484][ T0] ? __get_next_timer_interrupt+0x6dd/0x8b0 [ 823.380389][ T0] _raw_spin_lock_nested+0x31/0x40 [ 823.385509][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 823.391056][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 823.396439][ T0] __schedule+0x357/0x4c90 [ 823.400894][ T0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 823.407059][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.412725][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 823.417932][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.423578][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 823.429913][ T0] ? __pfx___schedule+0x10/0x10 [ 823.434771][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 823.440060][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.445702][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 823.451855][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 823.457501][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.463152][ T0] schedule_idle+0x56/0x90 [ 823.467576][ T0] do_idle+0x567/0x5c0 [ 823.471652][ T0] ? __pfx_do_idle+0x10/0x10 [ 823.476249][ T0] ? poll_idle+0x60/0xb0 [ 823.480582][ T0] ? rest_init+0x31/0x300 [ 823.484911][ T0] cpu_startup_entry+0x42/0x60 [ 823.489676][ T0] rest_init+0x2dc/0x300 [ 823.493916][ T0] ? __pfx_x86_late_time_init+0x10/0x10 [ 823.499462][ T0] start_kernel+0x484/0x510 [ 823.503973][ T0] x86_64_start_reservations+0x2a/0x30 [ 823.509447][ T0] x86_64_start_kernel+0x66/0x70 [ 823.514394][ T0] common_startup_64+0x13e/0x147 [ 823.519342][ T0] [ 823.522570][ T0] Kernel Offset: disabled [ 823.526891][ T0] Rebooting in 86400 seconds..