last executing test programs: 20m50.719921861s ago: executing program 32 (id=1020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 17m30.617084775s ago: executing program 33 (id=1470): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x5c, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x18) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x800) 17m25.427964807s ago: executing program 34 (id=1488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$ax25(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=interleave=stotic:,']) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) 16m50.854964784s ago: executing program 35 (id=1514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xe, 0x1, 0x2, "000000400000000905f887f80000eeff590b00000000000000000000040400", 0x50424752}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x6, &(0x7f0000000380)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0xd1, 0x0, 0x6, 0x6], 0x0, 0x8340}) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r7, 0x1, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) 16m33.168791584s ago: executing program 6 (id=1566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettfilter={0x64, 0x2e, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x8}, {0x0, 0xfff3}, {0x0, 0xffe0}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x32}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 16m32.8134432s ago: executing program 6 (id=1567): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ff21ff00ffffffff00000100a60e4349ddb95d534bb6878c793d00080006040001ffffffff00000000868fb85597ed0260855fc74cdf44e4f300000000aa367cd5fa38f07bb8dd767992eef6e01c60f9ddf321fc32fbf443ab217ee8c67511"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x3, {0x0, 0xf1, 0x4}, 0xfe}, 0x18) bind$can_j1939(r2, &(0x7f0000001200), 0x18) sendmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x1d, 0x0, 0x3, {0xdbc3898a7c48bff3, 0xff, 0x2}, 0xfe}, 0x18, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8800) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 16m31.861840145s ago: executing program 6 (id=1569): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, 0x0, 0x0) syz_io_uring_setup(0x4090, 0x0, &(0x7f00000006c0), &(0x7f00000001c0)) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000200)=0x32) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r6, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x3, 0x3, 0xac, "ac9cbb6edd7cf9b6c793b8910faebf06fc858fa2bcd78d1fd85225434ec09e677d3cc271fa7e8390f26242b9e2bc8535743be38f8ce838f214fa9305322735", 0x2d}, 0x60) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8, 0x1}, &(0x7f00000000c0)=0x8) 16m30.728268702s ago: executing program 6 (id=1571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x7, &(0x7f0000001040)={0x3, 0x10}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 16m29.548833931s ago: executing program 36 (id=1555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$ax25(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=interleave=stotic:,']) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) 16m29.527271461s ago: executing program 6 (id=1574): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x3ffffffffffffe, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r3, &(0x7f0000000100)='./file1\x00', 0xb1, 0x700) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d6e643998ff8a0a2c7266646e6f3d18664736835b523b60c4743b23c85b64cb88447591593b", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r1}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 16m28.497072908s ago: executing program 6 (id=1576): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x8c5f49850670a6da, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 16m24.127165897s ago: executing program 7 (id=1582): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e", 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)=ANY=[@ANYBLOB="1000000025f3440000000000"], 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003d40)=""/166, 0xa6}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0x800}], 0x1, 0x18142, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x14, 0x110, 0xd, {[@rr={0x7, 0x3, 0xba}]}}}], 0x38}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 16m23.93759337s ago: executing program 7 (id=1583): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) 16m23.799787892s ago: executing program 7 (id=1584): r0 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lstat(0x0, &(0x7f0000000280)) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x102c41, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') fanotify_init(0xf00, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 16m23.30546943s ago: executing program 7 (id=1585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = open(0x0, 0x14167e, 0xa0) fallocate(r2, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x1001, 0x1}, @flat=@handle={0x77682a85, 0xb}, @flat=@binder={0x73622a85, 0x1008, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x4124, 0x61830}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x19}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x48}}, 0x0) 16m20.525703724s ago: executing program 7 (id=1589): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x3ffffffffffffe, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r3, &(0x7f0000000100)='./file1\x00', 0xb1, 0x700) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d6e643998ff8a0a2c7266646e6f3d18664736835b523b60c4743b23c85b64cb88447591593b", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r1}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 16m20.373609956s ago: executing program 7 (id=1590): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e", 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)=ANY=[@ANYBLOB="1000000025f3440000000000"], 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003d40)=""/166, 0xa6}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0x800}], 0x1, 0x18142, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x14, 0x110, 0xd, {[@rr={0x7, 0x3, 0xba}]}}}], 0x38}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 16m12.949236814s ago: executing program 37 (id=1576): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x8c5f49850670a6da, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 16m4.695307684s ago: executing program 38 (id=1590): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e", 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)=ANY=[@ANYBLOB="1000000025f3440000000000"], 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003d40)=""/166, 0xa6}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0x800}], 0x1, 0x18142, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x14, 0x110, 0xd, {[@rr={0x7, 0x3, 0xba}]}}}], 0x38}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 15m18.269953459s ago: executing program 3 (id=1692): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x3ffffffffffffe, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r3, &(0x7f0000000100)='./file1\x00', 0xb1, 0x700) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d6e643998ff8a0a2c7266646e6f3d18664736835b523b60c4743b23c85b64cb88447591593b", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r1}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 15m16.679620203s ago: executing program 3 (id=1698): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 15m15.580124551s ago: executing program 3 (id=1701): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000540)={0x1, @vbi={0x2, 0xb99e, 0x1, 0x20343059, [0x8, 0x6], [0x40, 0x81f], 0x13a}}) ioctl$sock_netdev_private(r3, 0x8923, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, 0x0, 0x2000c084) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) 15m13.73609718s ago: executing program 3 (id=1704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 15m12.181827175s ago: executing program 3 (id=1706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x3ffffffffffffe, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r3, &(0x7f0000000100)='./file1\x00', 0xb1, 0x700) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d6e643998ff8a0a2c7266646e6f3d18664736835b523b60c4743b23c85b64cb88447591593b", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r1}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 15m10.58678832s ago: executing program 3 (id=1709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) accept$nfc_llcp(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) 14m55.491622599s ago: executing program 39 (id=1709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) accept$nfc_llcp(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) 6m40.721465943s ago: executing program 8 (id=2921): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001800000008000a00", @ANYRES64=r2], 0x24}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000", 0x2c}], 0x1}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000240)="94", 0x1) tee(r3, r5, 0x8f5, 0x100000000000000) write$cgroup_type(r5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x400, 0x360, 0x556, 0x2000, 0xbdf2, 0xb, 0xa, 0x1, {0x8000, 0x569, 0x1}, {0x6, 0x1}, {0x8, 0x36, 0x1}, {0x8001, 0x80000001, 0x800001}, 0x1, 0x40, 0x6, 0x6, 0x0, 0xfffffff2, 0x5, 0x73a, 0x8, 0x90, 0x6, 0x3ff, 0x55, 0x1, 0x3, 0xa}) 6m39.680971829s ago: executing program 8 (id=2924): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/118, 0x76}], 0x1) 6m35.761487691s ago: executing program 8 (id=2931): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x2) shutdown(r5, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001e000100", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000400)={0xf04601c4a2f46e46}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 6m34.143730857s ago: executing program 8 (id=2934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) connect$phonet_pipe(r1, &(0x7f0000000280)={0x23, 0x0, 0x4, 0xf}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = msgget$private(0x0, 0x624) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) msgrcv(r4, 0x0, 0x0, 0xd9481726d31966ee, 0x0) msgsnd(r4, &(0x7f0000000140)={0x3}, 0x8, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x60, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "107b961fe0"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x810) 6m31.182169663s ago: executing program 8 (id=2941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x3ffffffffffffe, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r2, &(0x7f0000000100)='./file1\x00', 0xb1, 0x700) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000500)=ANY=[]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r1}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 6m29.866473054s ago: executing program 8 (id=2945): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)) 6m13.863158148s ago: executing program 40 (id=2945): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)) 3m5.912905083s ago: executing program 0 (id=3360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000b40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000c3ae66dada18aca911786cb22dd58340ad3fdb8287bc9d2b8624f0"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000680)={'syz1\x00', {0xc, 0x0, 0x8, 0x9}, 0x50, [0x1, 0x0, 0x0, 0x401, 0x4, 0x0, 0x3, 0x2, 0x2, 0xebbf, 0xffff, 0x9fe, 0x3, 0x3, 0xfffffffd, 0x80000000, 0x7, 0x8001, 0x2000000, 0x1, 0x84, 0x5b, 0x2, 0x9a, 0x6, 0x9, 0x3587, 0x9, 0x8, 0xfffffff7, 0x7, 0x9, 0xffffffff, 0x0, 0xfff, 0xfffffff5, 0x14, 0x1, 0x5, 0x7, 0xfffffffc, 0x1f, 0x0, 0x581, 0x1b8000, 0x800, 0x1, 0x1, 0x2, 0x10, 0x9, 0x4c5c056b, 0x7, 0xb, 0xcb8f, 0x9, 0xa2, 0x8, 0x42, 0x6, 0x8, 0x5, 0x5c8, 0x3], [0xe, 0x8, 0x3e, 0x8, 0xb06b, 0x7, 0x5, 0x9, 0xd, 0x1000, 0x2, 0xa9, 0x695c, 0x604f, 0x80000000, 0x4, 0x0, 0x7f8, 0x6, 0x1000, 0x2, 0xfffffffa, 0x7ff, 0x9, 0x7fffffff, 0x2, 0x5, 0xa, 0x7, 0xb04, 0x9ed, 0x1, 0x2, 0x8, 0x874, 0xd, 0x7, 0x6, 0x5, 0xfffffbff, 0x9, 0x8569, 0xfffffffa, 0x0, 0x5, 0x6, 0x80000001, 0x3, 0x252, 0x0, 0x10000, 0x9, 0x4, 0xff, 0x3, 0xfffffff9, 0x52400000, 0xca, 0x5, 0x26, 0x1000, 0x80, 0x3, 0xfffffffe], [0x2, 0xa, 0x40, 0x5c9, 0x5, 0x2, 0x7fffffff, 0x3, 0x0, 0x2, 0xfffffffc, 0x9, 0xf7d, 0x5, 0x2, 0x2, 0x2, 0x0, 0x1ff, 0x4, 0xec, 0x2, 0x8, 0x73, 0x0, 0x2, 0x7, 0x4, 0x3, 0x1, 0xc5, 0x9cb, 0x6dca, 0x3a7, 0xc, 0x1, 0x9, 0x8, 0x7fffffff, 0x7, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3cc7, 0x5, 0x7f, 0xb, 0x9290, 0xb, 0x5, 0x0, 0x9, 0x40, 0x0, 0x0, 0x9, 0x7, 0x3, 0x4, 0x6, 0x9, 0x4], [0x0, 0x0, 0xffff8000, 0x2, 0x40, 0x164, 0x9, 0x2, 0x0, 0x10000, 0x7, 0x400, 0x5777, 0x8, 0xcfad, 0x2, 0x3ff, 0x200, 0x1ff, 0x401, 0xfffffffb, 0x8, 0x9, 0x0, 0x5, 0x81, 0x1, 0x8, 0xb6, 0x1b, 0x8, 0x1, 0x9, 0x8, 0x7, 0x3, 0x0, 0x9, 0x3, 0x1, 0x4, 0x3, 0x1, 0x9, 0x6, 0x0, 0x1ff00, 0x3, 0x6, 0x7, 0x1, 0xfffffffd, 0x7fec, 0x0, 0x2, 0x9, 0xfe4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x6, 0x6]}, 0x45c) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, 0xffffffffffffffff, 0xf6a5d000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0x1, @dev, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x2, @local}, {0xa, 0xfffd, 0x0, @empty}, 0x1, {[0x0, 0x1]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x9, @local}, {0xa, 0x0, 0x0, @empty}, 0xfffd, {[0x0, 0x0, 0x0, 0x0, 0x4, 0xe3]}}, 0x5c) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 3m4.323048707s ago: executing program 0 (id=3363): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c0000000800", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m3.489633441s ago: executing program 0 (id=3366): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m2.990629829s ago: executing program 0 (id=3368): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x1, 0x1000, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x300}}) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) setsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000700)=0x9, 0x4) 3m2.060940803s ago: executing program 0 (id=3370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x3ffffffffffffe, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r3, &(0x7f0000000100)='./file1\x00', 0xb1, 0x700) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d6e643998ff8a0a2c7266646e6f3d18664736835b523b60c4743b23c85b64cb8844759159", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r1}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 3m1.274006156s ago: executing program 0 (id=3374): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100)=0xfffffffc, 0x56) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x6, 0x370, [0x0, 0x2000000002c0, 0x20000000053c, 0x2000000006a8], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x7f3ad46531a296be, 0x1, 0xfac6, 'veth0_to_hsr\x00', 'pim6reg\x00', 'caif0\x00', 'pimreg\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x2, "12b9915ead9bb2fe9c095d865f1dd13d526960f00cf3abf7b8ec6468eec3", 0x4}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x11, 0x8, 0x6000, 'batadv0\x00', 'veth0_macvtap\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', @multicast, [0x0, 0xff, 0xff], @random="ce3bdd4e8c29", [0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}, {0x3, 0x33, 0x8847, 'bond_slave_1\x00', 'bridge_slave_0\x00', 'veth0_virt_wifi\x00', 'virt_wifi0\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0x8e1c68f7a68146ea], @empty, [0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0xa, 0x56, 0x3, 'macvtap0\x00', 'veth0_virt_wifi\x00', 'xfrm0\x00', 'ip6erspan0\x00', @multicast, [0x0, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xb6, 0xe6, [], [@common=@ERROR={'ERROR\x00', 0x20, {"160f3b94065c2eaecdd34e6b6e163509a89b0a6394ef44502a71e407d818"}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}]}]}, 0x3e8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 2m52.445476976s ago: executing program 4 (id=3398): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) gettid() ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f0000001300)={'nr0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) utimensat(r4, 0x0, 0x0, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r3, &(0x7f0000002a40), 0x0, 0x0) 2m51.363214323s ago: executing program 4 (id=3400): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d8000000000201030000000000000000070000028800018006000340000300002c00018014000300fe80000000000000000000000000000d14000400fc02000000000000000000000000000006000340000200000c000280050001003a0000000c000280050001002f00000014000180080001000080000008000200ac14142306000340000000000c000280050001000600000006000340000319000800044000006b0506000740007369702d32303030300000000900060073797a31000000000e0006007369702d3230303030000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='nmi_noise\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x21bb, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000ff57ff57b9000000000000008500000041000000a20005ae7dac94c8769f7b937bc4593a7c567efdf6d6f52fe6a325"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000500), 0x20, 0x400) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) 2m50.456103007s ago: executing program 4 (id=3401): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d8000000000201030000000000000000070000028800018006000340000300002c00018014000300fe80000000000000000000000000000d14000400fc02000000000000000000000000000006000340000200000c000280050001003a0000000c000280050001002f00000014000180080001000080000008000200ac14142306000340000000000c000280050001000600000006000340000319000800044000006b0506000740007369702d32303030300000000900060073797a31000000000e0006007369702d3230303030000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='nmi_noise\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x21bb, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000ff57ff57b9000000000000008500000041000000a20005ae7dac94c8769f7b937bc4593a7c567efdf6d6f52fe6a325"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000500), 0x20, 0x400) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) 2m48.600608417s ago: executing program 4 (id=3405): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x3ffffffffffffe, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r3, &(0x7f0000000100)='./file1\x00', 0xb1, 0x700) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d6e643998ff8a0a2c7266646e6f3d18664736835b523b60c4743b23c85b64cb88447591593b", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) mkdir(0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r1}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 2m47.867913358s ago: executing program 4 (id=3407): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000001000f0e00"}}}]}, 0x48}}, 0x0) 2m46.809666675s ago: executing program 4 (id=3411): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x17, r3, 0x1, 0x24, 0x6, @broadcast}, 0x14) bind$packet(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000400), 0x0, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x800) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9) r5 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@initdev}, &(0x7f00000003c0)=0xc) sendmsg$inet(r5, 0x0, 0x8000) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r0, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r1, 0xffffffffffffffff) 2m45.440214857s ago: executing program 41 (id=3411): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x17, r3, 0x1, 0x24, 0x6, @broadcast}, 0x14) bind$packet(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000400), 0x0, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x800) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9) r5 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@initdev}, &(0x7f00000003c0)=0xc) sendmsg$inet(r5, 0x0, 0x8000) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r0, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r1, 0xffffffffffffffff) 2m45.346993178s ago: executing program 42 (id=3374): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100)=0xfffffffc, 0x56) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x6, 0x370, [0x0, 0x2000000002c0, 0x20000000053c, 0x2000000006a8], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x7f3ad46531a296be, 0x1, 0xfac6, 'veth0_to_hsr\x00', 'pim6reg\x00', 'caif0\x00', 'pimreg\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x2, "12b9915ead9bb2fe9c095d865f1dd13d526960f00cf3abf7b8ec6468eec3", 0x4}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x11, 0x8, 0x6000, 'batadv0\x00', 'veth0_macvtap\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', @multicast, [0x0, 0xff, 0xff], @random="ce3bdd4e8c29", [0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}, {0x3, 0x33, 0x8847, 'bond_slave_1\x00', 'bridge_slave_0\x00', 'veth0_virt_wifi\x00', 'virt_wifi0\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0x8e1c68f7a68146ea], @empty, [0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0xa, 0x56, 0x3, 'macvtap0\x00', 'veth0_virt_wifi\x00', 'xfrm0\x00', 'ip6erspan0\x00', @multicast, [0x0, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xb6, 0xe6, [], [@common=@ERROR={'ERROR\x00', 0x20, {"160f3b94065c2eaecdd34e6b6e163509a89b0a6394ef44502a71e407d818"}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}]}]}, 0x3e8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 8.364166077s ago: executing program 5 (id=3779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x6) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32], 0x50) 7.197575716s ago: executing program 2 (id=3780): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d8000000000201030000000000000000070000028800018006000340000300002c00018014000300fe80000000000000000000000000000d14000400fc02000000000000000000000000000006000340000200000c000280050001003a0000000c000280050001002f00000014000180080001000080000008000200ac14142306000340000000000c0002800500010006000000060003400003190008"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='nmi_noise\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x21bb, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000ff57ff57b9000000000000008500000041000000a20005ae7dac94c8769f7b937bc4593a7c567efdf6d6f52fe6a325"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000500), 0x20, 0x400) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) 6.722748193s ago: executing program 1 (id=3781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000b40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000c3ae66dada18aca911786cb22dd58340ad3fdb8287bc9d2b8624f0"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000680)={'syz1\x00', {0xc, 0x0, 0x8, 0x9}, 0x50, [0x1, 0x0, 0x0, 0x401, 0x4, 0x0, 0x3, 0x2, 0x2, 0xebbf, 0xffff, 0x9fe, 0x3, 0x3, 0xfffffffd, 0x80000000, 0x7, 0x8001, 0x2000000, 0x1, 0x84, 0x5b, 0x2, 0x9a, 0x6, 0x9, 0x3587, 0x9, 0x8, 0xfffffff7, 0x7, 0x9, 0xffffffff, 0x0, 0xfff, 0xfffffff5, 0x14, 0x1, 0x5, 0x7, 0xfffffffc, 0x1f, 0x0, 0x581, 0x1b8000, 0x800, 0x1, 0x1, 0x2, 0x10, 0x9, 0x4c5c056b, 0x7, 0xb, 0xcb8f, 0x9, 0xa2, 0x8, 0x42, 0x6, 0x8, 0x5, 0x5c8, 0x3], [0xe, 0x8, 0x3e, 0x8, 0xb06b, 0x7, 0x5, 0x9, 0xd, 0x1000, 0x2, 0xa9, 0x695c, 0x604f, 0x80000000, 0x4, 0x0, 0x7f8, 0x6, 0x1000, 0x2, 0xfffffffa, 0x7ff, 0x9, 0x7fffffff, 0x2, 0x5, 0xa, 0x7, 0xb04, 0x9ed, 0x1, 0x2, 0x8, 0x874, 0xd, 0x7, 0x6, 0x5, 0xfffffbff, 0x9, 0x8569, 0xfffffffa, 0x0, 0x5, 0x6, 0x80000001, 0x3, 0x252, 0x0, 0x10000, 0x9, 0x4, 0xff, 0x3, 0xfffffff9, 0x52400000, 0xca, 0x5, 0x26, 0x1000, 0x80, 0x3, 0xfffffffe], [0x2, 0xa, 0x40, 0x5c9, 0x5, 0x2, 0x7fffffff, 0x3, 0x0, 0x2, 0xfffffffc, 0x9, 0xf7d, 0x5, 0x2, 0x2, 0x2, 0x0, 0x1ff, 0x4, 0xec, 0x2, 0x8, 0x73, 0x0, 0x2, 0x7, 0x4, 0x3, 0x1, 0xc5, 0x9cb, 0x6dca, 0x3a7, 0xc, 0x1, 0x9, 0x8, 0x7fffffff, 0x7, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3cc7, 0x5, 0x7f, 0xb, 0x9290, 0xb, 0x5, 0x0, 0x9, 0x40, 0x0, 0x0, 0x9, 0x7, 0x3, 0x4, 0x6, 0x9, 0x4], [0x0, 0x0, 0xffff8000, 0x2, 0x40, 0x164, 0x9, 0x2, 0x0, 0x10000, 0x7, 0x400, 0x5777, 0x8, 0xcfad, 0x2, 0x3ff, 0x200, 0x1ff, 0x401, 0xfffffffb, 0x8, 0x9, 0x0, 0x5, 0x81, 0x1, 0x8, 0xb6, 0x1b, 0x8, 0x1, 0x9, 0x8, 0x7, 0x3, 0x0, 0x9, 0x3, 0x1, 0x4, 0x3, 0x1, 0x9, 0x6, 0x0, 0x1ff00, 0x3, 0x6, 0x7, 0x1, 0xfffffffd, 0x7fec, 0x0, 0x2, 0x9, 0xfe4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x6, 0x6]}, 0x45c) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r3, 0xf6a5d000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0x1, @dev, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x4) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x2, @local}, {0xa, 0xfffd, 0x0, @empty}, 0x1, {[0x0, 0x1]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x9, @local}, {0xa, 0x0, 0x0, @empty}, 0xfffd, {[0x0, 0x0, 0x0, 0x0, 0x4, 0xe3]}}, 0x5c) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 6.451140807s ago: executing program 9 (id=3782): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000005740)={0x0, 0xea60}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, r0, 0xffffc000) 5.991136005s ago: executing program 5 (id=3783): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000540)=0xe) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x7) syz_emit_ethernet(0xd1, &(0x7f0000000340)={@local, @multicast, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x4, 0x1, 0x3}}, {@x25={0x805, {0x3, 0xf9, 0x23, "aed6272d2d8038d8eec9fdecf41014d709c8dfdcf7789447e3d23e005b5bdb9653e89ed727aa048a29f747185479b4109da5f448da7ed4f6aa044c40d338742db0fef1c61af735db7ad1af2eec0d98b370d2cc7fa418f733cf9e50c502eeaf75e147fa889d4b4af790296de5cb65ccc3c427125dc67d484793ce25276b59b03b1379a655232e24edff197da31b26931c7918e075981b0c6f116381cb6dcbc3d441151561a4740051bc18889348b963ad0a70fb2fffaf9bd2"}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) sendmsg$unix(r5, &(0x7f0000001f00)={&(0x7f0000001700)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001ec0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4840}, 0x20004010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010005e6b3d97bc66c7a2d46c5b45fb2641f5ff00000000000000", @ANYRES32], 0x3}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x10d00, 0xf) 5.889337886s ago: executing program 1 (id=3784): socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xb8, 0x8, 0xfa04, 0xb8, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x90, 0xb8, 0x0, {0x0, 0x74020000}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r6, &(0x7f00000003c0)) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x8020000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x40) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) ioctl$KVM_NMI(r8, 0xae9a) 5.449584404s ago: executing program 9 (id=3785): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) futex_waitv(&(0x7f0000001a40)=[{0x3, &(0x7f0000000000)=0x800, 0x82}, {0x9, &(0x7f0000000300)=0x6, 0x82}, {0x6, &(0x7f0000000340)=0x100, 0x2}, {0x7fff, &(0x7f00000003c0)=0x200, 0x2}, {0x7, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0xffffffffffffff8a, &(0x7f00000005c0)=0x3, 0x2}, {0x6, &(0x7f0000000640)=0x8000000000000000, 0x2}, {0x7fffffffffffffff, 0x0, 0x82}, {0x5, &(0x7f0000000740)=0x3}, {0x7, &(0x7f00000007c0)=0x4, 0x2}, {0xe234, &(0x7f0000000880)=0x9, 0x82}, {0x799, &(0x7f00000008c0)=0x6, 0x2}, {0x200, &(0x7f0000000940)=0x9, 0x2}, {0x7, &(0x7f0000000980)=0x5, 0x2}, {0x9, &(0x7f00000009c0)=0x1, 0x82}, {0x20000000003, &(0x7f0000000a00)=0x5, 0x82}, {0x40000000000000, &(0x7f0000000a40)=0xed, 0x82}, {0x2, &(0x7f0000000b00)=0xb, 0x82}, {0x6b4, &(0x7f0000000b80)=0x3}, {0x6, &(0x7f0000000bc0)=0x7b, 0x2}, {0x3, &(0x7f0000000c00)=0x8, 0x82}, {0x1, 0x0, 0x2}, {0x9, &(0x7f0000000d40)=0xfffffffffffff396, 0x80}, {0x265a, &(0x7f0000000d80)=0x9, 0x2}, {0x60, &(0x7f0000000e00)=0x8000, 0x2}, {0x0, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x5, &(0x7f0000001340)=0x93ac, 0x82}, {0xffffffff, 0x0, 0x2}], 0x1f, 0x0, 0x0, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.877516793s ago: executing program 2 (id=3786): io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) dup(r1) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x2, 0x80000000, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x9, 0x5, 0x0, 0x7fffffff}, 0x0, 0x0) 4.780935964s ago: executing program 1 (id=3787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0x3}, {0xf, 0xffff}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) 4.082827385s ago: executing program 9 (id=3788): socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x401, 0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$join(0x1, 0x0) 4.071869415s ago: executing program 5 (id=3789): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = memfd_create(0x0, 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES8=r2, @ANYRES64=r4, @ANYRES32=r2, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x85, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1000000, 0x3}) 4.030093076s ago: executing program 2 (id=3790): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) write$dsp(r4, &(0x7f0000000440)="024922acde319b3a7cac20447312ad1f7c62000000090000c83b899897a7ef9ccb3e45e10e93ded8367d55f030e634d42bc8b951c7b7fcbb7ef4041ad10b0b", 0x3f) close(r4) 4.029468976s ago: executing program 1 (id=3791): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0xffd, 0x4) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x105, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xa}}}}}]}}]}}, 0x0) 2.661393808s ago: executing program 9 (id=3792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x6) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32], 0x50) 2.394460342s ago: executing program 2 (id=3793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2.364132272s ago: executing program 5 (id=3794): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d8000000000201030000000000000000070000028800018006000340000300002c00018014000300fe80000000000000000000000000000d14000400fc02000000000000000000000000000006000340000200000c000280050001003a0000000c000280050001002f00000014000180080001000080000008000200ac14142306000340000000000c000280050001000600000006000340000319000800044000006b0506000740007369702d32303030300000000900"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='nmi_noise\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x21bb, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000ff57ff57b9000000000000008500000041000000a20005ae7dac94c8769f7b937bc4593a7c567efdf6d6f52fe6a325"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000500), 0x20, 0x400) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) 1.122203712s ago: executing program 9 (id=3795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.014386534s ago: executing program 2 (id=3796): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d8000000000201030000000000000000070000028800018006000340000300002c00018014000300fe80000000000000000000000000000d14000400fc02000000000000000000000000000006000340000200000c000280050001003a0000000c000280050001002f00000014000180080001000080000008000200ac14142306000340000000000c000280050001000600000006000340000319000800044000006b0506000740007369702d32303030300000000900060073797a31000000000e0006007369702d3230"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='nmi_noise\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x21bb, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000ff57ff57b9000000000000008500000041000000a20005ae7dac94c8769f7b937bc4593a7c567efdf6d6f52fe6a325"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_POLL(r1, 0x640f) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000500), 0x20, 0x400) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) 913.809365ms ago: executing program 5 (id=3797): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) futex_waitv(&(0x7f0000001a40)=[{0x3, &(0x7f0000000000)=0x800, 0x82}, {0x9, &(0x7f0000000300)=0x6, 0x82}, {0x6, &(0x7f0000000340)=0x100, 0x2}, {0x7fff, &(0x7f00000003c0)=0x200, 0x2}, {0x7, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0xffffffffffffff8a, &(0x7f00000005c0)=0x3, 0x2}, {0x6, &(0x7f0000000640)=0x8000000000000000, 0x2}, {0x7fffffffffffffff, 0x0, 0x82}, {0x5, &(0x7f0000000740)=0x3}, {0x7, &(0x7f00000007c0)=0x4, 0x2}, {0xe234, &(0x7f0000000880)=0x9, 0x82}, {0x799, &(0x7f00000008c0)=0x6, 0x2}, {0x200, &(0x7f0000000940)=0x9, 0x2}, {0x7, &(0x7f0000000980)=0x5, 0x2}, {0x9, &(0x7f00000009c0)=0x1, 0x82}, {0x20000000003, &(0x7f0000000a00)=0x5, 0x82}, {0x40000000000000, &(0x7f0000000a40)=0xed, 0x82}, {0x2, &(0x7f0000000b00)=0xb, 0x82}, {0x6b4, &(0x7f0000000b80)=0x3}, {0x6, &(0x7f0000000bc0)=0x7b, 0x2}, {0x3, &(0x7f0000000c00)=0x8, 0x82}, {0x8, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x9, &(0x7f0000000d40)=0xfffffffffffff396, 0x80}, {0x265a, &(0x7f0000000d80)=0x9, 0x2}, {0x60, &(0x7f0000000e00)=0x8000, 0x2}, {0x0, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x5, &(0x7f0000001340)=0x93ac, 0x82}, {0xffffffff, 0x0, 0x2}], 0x20, 0x0, 0x0, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 902.982216ms ago: executing program 1 (id=3798): io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) dup(r1) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x2, 0x80000000, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x9, 0x5, 0x0, 0x7fffffff}, 0x0, 0x0) 81.645558ms ago: executing program 1 (id=3799): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_dev$vim2m(0x0, 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000005c0)={'pcl812\x00', [0x2f00, 0x1000, 0x3, 0x2, 0x0, 0x1, 0x2, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x8006, 0xffffffa7, 0x10001, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x3, 0x7, 0x70f]}) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec57f979171331d77806578f7db21dc0b308a31b95340ec3afde72d05bd07a588540372b7037132e5333e4ff000000"], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 73.119209ms ago: executing program 5 (id=3800): socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x401, 0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$chown(0x4, 0x0, 0xee01, 0x0) keyctl$join(0x1, 0x0) 62.982479ms ago: executing program 2 (id=3801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) write$dsp(r4, &(0x7f0000000440)="024922acde319b3a7cac20447312ad1f7c62000000090000c83b899897a7ef9ccb3e45e10e93ded8367d55f030e634d42bc8b951c7b7fcbb7ef4041ad10b0b", 0x3f) close(r4) 0s ago: executing program 9 (id=3802): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) kernel console output (not intermixed with test programs): 0 [ 760.986817][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.006191][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.017702][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.031093][T12023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.047381][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.059250][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.077384][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.098533][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.114923][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.126604][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.143858][T12023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.163360][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 761.270327][T12023] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.334817][T12023] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.402570][T12023] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.483336][T12023] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.069259][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.098466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.153750][ T9938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.168167][ T9938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.436026][T12204] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1572'. [ 765.445645][T12228] blktrace: Concurrent blktraces are not allowed on loop7 [ 766.093802][ T164] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.188798][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 766.201836][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 766.211468][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 766.219787][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 766.229079][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 766.237389][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 766.327753][ T164] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.549549][ T164] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.710106][ T164] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.166183][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1605'. [ 768.203488][T12245] chnl_net:caif_netlink_parms(): no params data found [ 768.358705][ T5800] Bluetooth: hci1: command tx timeout [ 769.504535][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1609'. [ 770.144535][T12245] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.164763][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.195379][T12245] bridge_slave_0: entered allmulticast mode [ 770.209460][T12245] bridge_slave_0: entered promiscuous mode [ 770.255727][T12294] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 770.276685][T12245] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.293817][T12245] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.323650][T12245] bridge_slave_1: entered allmulticast mode [ 770.339207][T12245] bridge_slave_1: entered promiscuous mode [ 770.365547][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1612'. [ 770.428897][ T5800] Bluetooth: hci1: command tx timeout [ 770.834996][T12245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.905207][T12245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.992177][ T164] hsr_slave_0: left promiscuous mode [ 771.009763][ T164] hsr_slave_1: left promiscuous mode [ 771.030247][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.038695][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.050835][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.059740][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.067911][ T164] bridge_slave_1: left allmulticast mode [ 771.081126][ T164] bridge_slave_1: left promiscuous mode [ 771.099486][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.114629][ T164] bridge_slave_0: left allmulticast mode [ 771.123852][ T164] bridge_slave_0: left promiscuous mode [ 771.132047][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.193678][ T164] veth1_macvtap: left promiscuous mode [ 771.202675][ T164] veth0_macvtap: left promiscuous mode [ 771.209197][ T164] veth1_vlan: left promiscuous mode [ 771.215331][ T164] veth0_vlan: left promiscuous mode [ 772.508333][ T5800] Bluetooth: hci1: command tx timeout [ 773.239667][ T164] team0 (unregistering): Port device team_slave_1 removed [ 773.469025][ T164] team0 (unregistering): Port device team_slave_0 removed [ 774.177401][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.590014][ T5800] Bluetooth: hci1: command tx timeout [ 774.720775][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.252892][T11370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 775.297739][T11370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 775.316557][T11370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 775.327242][T11370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 775.339524][T11370] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 775.348429][T11370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 775.806071][ T164] bond0 (unregistering): Released all slaves [ 775.884430][T12245] team0: Port device team_slave_0 added [ 775.896538][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1616'. [ 776.049516][T12245] team0: Port device team_slave_1 added [ 776.594778][T12245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.635706][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.751515][T12245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.817808][T12245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.857444][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.958551][T12245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.184868][T12245] hsr_slave_0: entered promiscuous mode [ 777.195327][T12245] hsr_slave_1: entered promiscuous mode [ 777.203046][T12245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.218226][T12245] Cannot create hsr debugfs directory [ 777.337491][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1620'. [ 777.468631][T11370] Bluetooth: hci3: command tx timeout [ 778.451985][T12324] chnl_net:caif_netlink_parms(): no params data found [ 778.760564][ T164] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.973506][ T164] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.035463][T12245] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 779.064223][T12245] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 779.141669][ T164] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.264513][T12245] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 779.293053][T12245] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 779.387908][T12389] Bluetooth: MGMT ver 1.22 [ 779.393506][ T164] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.394302][T12389] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 779.420092][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 779.431540][T12324] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.438944][T12324] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.464552][T12324] bridge_slave_0: entered allmulticast mode [ 779.489923][T12324] bridge_slave_0: entered promiscuous mode [ 779.548847][T11370] Bluetooth: hci3: command tx timeout [ 779.559281][T12324] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.566483][T12324] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.574087][T12324] bridge_slave_1: entered allmulticast mode [ 779.581594][T12324] bridge_slave_1: entered promiscuous mode [ 779.729812][T12324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.824043][T12324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.954685][T12403] tmpfs: Bad value for 'mpol' [ 780.915309][T12324] team0: Port device team_slave_0 added [ 781.083245][T12324] team0: Port device team_slave_1 added [ 781.276610][T12324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.308488][T12324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.335228][T12324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.353696][T12324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.360833][T12324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.458754][T12421] UBIFS error (pid: 12421): cannot open "ubifs", error -22 [ 781.628275][T11370] Bluetooth: hci3: command tx timeout [ 782.065107][T12324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.815980][T12429] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1635'. [ 783.346401][T12324] hsr_slave_0: entered promiscuous mode [ 783.449461][T12324] hsr_slave_1: entered promiscuous mode [ 783.486825][T12324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.774583][T12440] tmpfs: Bad value for 'mpol' [ 783.830080][T11370] Bluetooth: hci3: command tx timeout [ 784.638204][T12324] Cannot create hsr debugfs directory [ 784.749315][T12435] netlink: 'syz.3.1636': attribute type 10 has an invalid length. [ 786.006492][T12245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.360417][T12461] UBIFS error (pid: 12461): cannot open "ubifs", error -22 [ 787.867143][T12245] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.997399][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.004705][ T6167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.073057][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.080374][ T6167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.328792][T12473] tmpfs: Bad value for 'mpol' [ 789.963032][T12476] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 790.214701][ T164] hsr_slave_0: left promiscuous mode [ 790.222109][ T164] hsr_slave_1: left promiscuous mode [ 790.235081][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.278241][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.299617][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.326572][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.345796][ T164] bridge_slave_1: left allmulticast mode [ 790.351682][ T164] bridge_slave_1: left promiscuous mode [ 790.357584][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.367830][ T164] bridge_slave_0: left allmulticast mode [ 790.373997][ T164] bridge_slave_0: left promiscuous mode [ 790.379889][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.422504][ T164] veth1_macvtap: left promiscuous mode [ 790.428615][ T164] veth0_macvtap: left promiscuous mode [ 790.434438][ T164] veth1_vlan: left promiscuous mode [ 790.440192][ T164] veth0_vlan: left promiscuous mode [ 791.274756][T12491] UBIFS error (pid: 12491): cannot open "ubifs", error -22 [ 792.366915][ T164] team0 (unregistering): Port device team_slave_1 removed [ 792.461527][ T164] team0 (unregistering): Port device team_slave_0 removed [ 792.546025][T12499] tmpfs: Bad value for 'mpol' [ 792.561851][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.151715][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.174201][ T164] bond0 (unregistering): Released all slaves [ 794.336373][T12245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 794.363564][T12245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 794.531315][T12503] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1652'. [ 795.296047][T12245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.546874][T12324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 795.601856][T12324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 795.642129][T12324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 795.662568][T12324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 795.793044][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1654'. [ 796.013821][T12324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.092442][T12324] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.153151][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.160425][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.215584][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.222842][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.401436][T12324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 796.430312][T12324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 797.330902][T12245] veth0_vlan: entered promiscuous mode [ 797.489764][T12245] veth1_vlan: entered promiscuous mode [ 797.613809][T12245] veth0_macvtap: entered promiscuous mode [ 797.660791][T12245] veth1_macvtap: entered promiscuous mode [ 797.878850][T12547] UBIFS error (pid: 12547): cannot open "ubifs", error -22 [ 798.458946][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.480854][T12543] dlm: plock device version mismatch: kernel (1.2.0), user (4.0.16777355) [ 798.533952][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.572931][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.613963][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.654106][T12245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.762552][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.777945][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.790540][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.801836][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.813645][T12245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.835545][T12245] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.849839][T12245] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.859036][T12245] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.868332][T12245] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.189398][T12324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.240833][T12557] tmpfs: Bad value for 'mpol' [ 800.803147][T12324] veth0_vlan: entered promiscuous mode [ 800.853390][T12324] veth1_vlan: entered promiscuous mode [ 801.091466][T12324] veth0_macvtap: entered promiscuous mode [ 801.151533][T12324] veth1_macvtap: entered promiscuous mode [ 801.176314][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.225300][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.390587][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1661'. [ 801.903622][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.911649][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.921088][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.937389][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.955485][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.966761][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.986193][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.997207][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.027143][T12324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.084032][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.138856][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.159819][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.225138][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.235668][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.246924][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.273289][T12324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.293590][T12324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.309840][T12324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.323619][T12324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.334655][T12324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.591012][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.648443][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.298009][ T6971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.411181][ T6971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.048463][T12596] tmpfs: Bad value for 'mpol' [ 806.884663][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 807.954831][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1668'. [ 808.761953][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.771364][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.960198][T12645] netlink: 'syz.8.1677': attribute type 10 has an invalid length. [ 811.171219][T12645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.195241][T12645] team0: Port device bond0 added [ 811.645350][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1678'. [ 814.158740][T12676] UBIFS error (pid: 12676): cannot open "ubifs", error -22 [ 814.919712][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1679'. [ 816.652934][T12699] tipc: Started in network mode [ 816.665202][T12699] tipc: Node identity 7216ad944fdd, cluster identity 4711 [ 816.692151][T12699] tipc: Enabled bearer , priority 0 [ 816.952032][T12708] syzkaller0: entered promiscuous mode [ 816.957789][T12708] syzkaller0: entered allmulticast mode [ 817.116147][T12710] netlink: 'syz.3.1687': attribute type 10 has an invalid length. [ 817.701512][ T5837] tipc: Node number set to 1036758420 [ 818.234921][T12709] tipc: Resetting bearer [ 818.448437][T12698] tipc: Resetting bearer [ 818.787507][T12723] UBIFS error (pid: 12723): cannot open "ubifs", error -22 [ 819.562904][T12698] tipc: Disabling bearer [ 820.086300][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1693'. [ 820.838971][T12741] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 821.388405][T12757] netlink: 'syz.9.1699': attribute type 10 has an invalid length. [ 821.828247][T12757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.991365][T12757] team0: Port device bond0 added [ 822.040251][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'. [ 823.340067][T12779] UBIFS error (pid: 12779): cannot open "(null)", error -22 [ 824.317434][T12777] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1702'. [ 824.861617][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 827.482053][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1705'. [ 829.071426][T12829] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1713'. [ 829.483124][T12837] autofs4:pid:12837:autofs_fill_super: called with bogus options [ 832.978409][T12881] 9pnet_fd: Insufficient options for proto=fd [ 833.844823][T12887] autofs4:pid:12887:autofs_fill_super: called with bogus options [ 834.453687][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1726'. [ 837.758559][T12932] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 837.870634][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1737'. [ 837.974778][T12936] 9pnet_fd: Insufficient options for proto=fd [ 838.567609][T12939] autofs4:pid:12939:autofs_fill_super: called with bogus options [ 839.318600][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1739'. [ 842.277783][T12984] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 844.387065][T13012] tmpfs: Bad value for 'mpol' [ 845.407703][T13024] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 845.423139][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.932823][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 845.947745][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 845.959060][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 845.976079][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 845.990113][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 846.000038][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 846.752582][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.939981][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.189855][T11370] Bluetooth: hci2: command tx timeout [ 848.798002][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.174425][T13058] tmpfs: Bad value for 'mpol' [ 849.848229][T13063] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 850.268230][T11370] Bluetooth: hci2: command tx timeout [ 850.336723][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1766'. [ 850.374621][T13029] chnl_net:caif_netlink_parms(): no params data found [ 852.382196][T11370] Bluetooth: hci2: command tx timeout [ 853.813885][T13103] tmpfs: Bad value for 'mpol' [ 854.395531][T13029] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.403921][T13029] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.411435][T13029] bridge_slave_0: entered allmulticast mode [ 854.419993][T13029] bridge_slave_0: entered promiscuous mode [ 854.430648][T11370] Bluetooth: hci2: command tx timeout [ 854.810063][T13029] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.948550][T13029] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.956230][T13029] bridge_slave_1: entered allmulticast mode [ 854.966172][T13029] bridge_slave_1: entered promiscuous mode [ 855.037619][T13116] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 855.407174][T13029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.559193][T13029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.805830][T13029] team0: Port device team_slave_0 added [ 857.630850][T13029] team0: Port device team_slave_1 added [ 858.692201][T13146] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1781'. [ 858.732428][T13029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.741123][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.816546][T13029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.400536][T13029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.408429][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.441094][T13029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.580221][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 860.039387][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 860.098230][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.353086][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 860.393621][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.410956][ T9] usb 3-1: Product: syz [ 860.417151][ T9] usb 3-1: Manufacturer: syz [ 860.428453][ T9] usb 3-1: SerialNumber: syz [ 860.518400][ T9] usb 3-1: config 0 descriptor?? [ 860.544374][ T9] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 860.601131][T13029] hsr_slave_0: entered promiscuous mode [ 860.658052][T13029] hsr_slave_1: entered promiscuous mode [ 860.708623][T13029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.743714][T13029] Cannot create hsr debugfs directory [ 861.648972][ T9] usb 3-1: USB disconnect, device number 6 [ 861.747880][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1789'. [ 861.909957][ T12] hsr_slave_0: left promiscuous mode [ 861.935218][ T12] hsr_slave_1: left promiscuous mode [ 861.956665][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.080890][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.096395][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.108442][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.179223][ T12] bridge_slave_1: left allmulticast mode [ 863.184946][ T12] bridge_slave_1: left promiscuous mode [ 863.260137][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.447176][ T12] bridge_slave_0: left allmulticast mode [ 863.542996][ T12] bridge_slave_0: left promiscuous mode [ 863.662765][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.237471][T13206] autofs4:pid:13206:autofs_fill_super: called with bogus options [ 865.079526][ T12] veth1_macvtap: left promiscuous mode [ 865.085184][ T12] veth0_macvtap: left promiscuous mode [ 865.126832][ T12] veth1_vlan: left promiscuous mode [ 865.132536][ T12] veth0_vlan: left promiscuous mode [ 866.249418][T13228] ubi31: attaching mtd0 [ 867.917959][T13228] ubi31: scanning is finished [ 867.927737][T13228] ubi31: empty MTD device detected [ 868.321860][T13228] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 868.331022][T13228] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 868.398280][T13228] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 868.412754][T13228] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 868.421785][T13228] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 868.437262][T13228] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 868.446325][T13228] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3707342206 [ 868.471264][T13228] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 868.496923][T13247] ubi31: background thread "ubi_bgt31d" started, PID 13247 [ 869.862777][ T12] team0 (unregistering): Port device team_slave_1 removed [ 869.945195][ T12] team0 (unregistering): Port device team_slave_0 removed [ 870.013562][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.084893][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.199395][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.205942][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.518749][ T12] team0 (unregistering): Port device bond0 removed [ 870.681484][ T12] bond0 (unregistering): Released all slaves [ 870.796133][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1799'. [ 870.816502][T13243] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1800'. [ 872.268221][T11370] Bluetooth: hci0: command 0x0406 tx timeout [ 873.569137][T13269] autofs4:pid:13269:autofs_fill_super: called with bogus options [ 874.457552][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1805'. [ 874.656356][T13287] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 875.226643][T13295] blktrace: Concurrent blktraces are not allowed on loop5 [ 876.168192][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 876.496448][ T12] IPVS: stop unused estimator thread 0... [ 878.055256][T13308] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1810'. [ 881.102049][T13329] autofs4:pid:13329:autofs_fill_super: called with bogus options [ 881.193114][T13331] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 882.296824][T13029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 882.526753][T13029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 882.597438][T13347] blktrace: Concurrent blktraces are not allowed on loop19 [ 883.227803][T13029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 883.299932][T13029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 884.604932][T13029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.246489][T13029] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.329934][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.337165][ T6971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.410545][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.417708][ T6971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.633683][T13029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.448557][T13389] blktrace: Concurrent blktraces are not allowed on loop19 [ 888.576457][T13398] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1827'. [ 888.845945][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1829'. [ 889.643271][T13029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.561404][T13029] veth0_vlan: entered promiscuous mode [ 890.611090][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'. [ 890.641380][T13029] veth1_vlan: entered promiscuous mode [ 890.848929][T13029] veth0_macvtap: entered promiscuous mode [ 890.874559][T13426] ubi: mtd0 is already attached to ubi31 [ 890.923065][T13029] veth1_macvtap: entered promiscuous mode [ 890.995842][T13430] blktrace: Concurrent blktraces are not allowed on loop19 [ 891.571812][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.698259][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.758258][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.798279][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.843698][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.868164][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.901613][T13029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.962520][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.002086][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.038273][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.068868][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.107058][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.132474][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.166032][T13029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.406620][T13443] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1837'. [ 892.431737][T13029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.857272][T11370] Bluetooth: hci1: command 0x0406 tx timeout [ 893.125631][T13029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.225584][T13029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.347162][T13029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.692577][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1842'. [ 894.918745][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.965903][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.104358][T13481] blktrace: Concurrent blktraces are not allowed on loop19 [ 895.824148][ T6167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.863978][ T6167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.503128][T11370] Bluetooth: hci3: command 0x0406 tx timeout [ 898.543920][T13505] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1849'. [ 900.013554][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1852'. [ 900.093717][T13539] blktrace: Concurrent blktraces are not allowed on loop5 [ 901.407633][T13555] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1860'. [ 904.345083][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1868'. [ 904.449083][T13592] blktrace: Concurrent blktraces are not allowed on loop19 [ 908.909322][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 908.981095][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1878'. [ 911.532644][T13676] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1884'. [ 914.316982][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1890'. [ 915.722515][T13733] trusted_key: encrypted_key: insufficient parameters specified [ 918.607045][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1901'. [ 919.082179][T13778] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1904'. [ 926.364281][T13872] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1925'. [ 930.132586][T13921] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1935'. [ 931.683396][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.689905][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.090957][T13976] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1947'. [ 941.249268][T14021] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1959'. [ 947.051220][T14088] ubi: mtd0 is already attached to ubi31 [ 949.560087][T14124] blktrace: Concurrent blktraces are not allowed on loop5 [ 950.947718][T14131] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1985'. [ 952.563382][T14155] dlm: plock device version mismatch: kernel (1.2.0), user (4.0.16777355) [ 954.352518][T14169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 954.360524][T14169] IPv6: NLM_F_CREATE should be set when creating new route [ 954.368122][T14169] IPv6: NLM_F_CREATE should be set when creating new route [ 954.375487][T14169] IPv6: NLM_F_CREATE should be set when creating new route [ 954.862126][T14167] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1990'. [ 955.047266][T14169] sctp: failed to load transform for md5: -2 [ 955.568139][T14186] blktrace: Concurrent blktraces are not allowed on loop17 [ 958.630629][T14215] 9pnet_fd: Insufficient options for proto=fd [ 959.784827][T14211] dlm: plock device version mismatch: kernel (1.2.0), user (4.0.16777355) [ 960.121681][T14234] blktrace: Concurrent blktraces are not allowed on loop17 [ 962.245732][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 962.613715][T14269] 9pnet_fd: Insufficient options for proto=fd [ 965.043789][T14292] tmpfs: Bad value for 'mpol' [ 969.896297][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 971.193027][T14336] blktrace: Concurrent blktraces are not allowed on loop17 [ 972.377276][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2027'. [ 976.573988][T14391] blktrace: Concurrent blktraces are not allowed on loop5 [ 981.347658][T14430] ubi: mtd0 is already attached to ubi31 [ 981.380304][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2048'. [ 987.479624][T14508] syz.2.2063: attempt to access beyond end of device [ 987.479624][T14508] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 987.537199][T14508] syz.2.2063: attempt to access beyond end of device [ 987.537199][T14508] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 987.556176][T14508] Mount JFS Failure: -5 [ 993.075800][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.028886][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.039395][T14601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1000.046747][T14601] IPv6: NLM_F_CREATE should be set when creating new route [ 1000.054324][T14601] IPv6: NLM_F_CREATE should be set when creating new route [ 1000.061863][T14601] IPv6: NLM_F_CREATE should be set when creating new route [ 1000.589258][T14601] sctp: failed to load transform for md5: -2 [ 1000.749521][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'. [ 1004.010395][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2096'. [ 1006.343554][T14674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1007.628380][T14673] sctp: failed to load transform for md5: -2 [ 1010.996255][T14716] ubi: mtd0 is already attached to ubi31 [ 1011.619860][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2110'. [ 1018.949552][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2122'. [ 1020.237922][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2127'. [ 1020.425604][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2128'. [ 1023.569772][T14834] ubi: mtd0 is already attached to ubi31 [ 1025.307919][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'. [ 1025.652772][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2138'. [ 1025.692678][T14849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1025.934573][T14854] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2137'. [ 1026.059003][T14849] sctp: failed to load transform for md5: -2 [ 1029.809685][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 1030.914474][T14928] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2148'. [ 1037.181555][T14976] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1037.228357][T11370] Bluetooth: hci2: command 0x0406 tx timeout [ 1038.356449][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2161'. [ 1042.655620][T15020] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1043.152486][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2170'. [ 1044.140439][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2173'. [ 1048.419287][T15086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2182'. [ 1048.782680][T15092] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2179'. [ 1052.040715][T15146] syz.0.2195: attempt to access beyond end of device [ 1052.040715][T15146] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1052.153750][T15146] syz.0.2195: attempt to access beyond end of device [ 1052.153750][T15146] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1052.298529][T15146] Mount JFS Failure: -5 [ 1054.581027][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.587380][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.263300][T15195] syz.0.2206: attempt to access beyond end of device [ 1055.263300][T15195] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1055.329493][T15195] syz.0.2206: attempt to access beyond end of device [ 1055.329493][T15195] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1055.435681][T15195] Mount JFS Failure: -5 [ 1057.743275][T15219] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2205'. [ 1058.760703][T15245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1058.797773][T15245] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2218'. [ 1060.726970][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2221'. [ 1062.587413][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'. [ 1062.849360][T15288] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2225'. [ 1063.587189][T15311] syz.0.2230: attempt to access beyond end of device [ 1063.587189][T15311] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1063.614740][T15311] syz.0.2230: attempt to access beyond end of device [ 1063.614740][T15311] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1063.630026][T15311] Mount JFS Failure: -5 [ 1069.434638][T15378] overlayfs: missing 'lowerdir' [ 1069.639635][T15382] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2237'. [ 1073.624914][T15412] overlayfs: missing 'lowerdir' [ 1075.482429][T15430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2256'. [ 1078.155523][T15452] overlayfs: missing 'lowerdir' [ 1080.206417][T15469] tmpfs: Bad value for 'mpol' [ 1083.079697][T15481] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2270'. [ 1084.769742][T15509] overlayfs: missing 'workdir' [ 1085.844494][T15526] tmpfs: Bad value for 'mpol' [ 1090.498236][ T5838] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1090.690415][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.768435][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.804290][ T5838] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1090.866005][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.905133][ T5838] usb 1-1: config 0 descriptor?? [ 1090.970668][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2295'. [ 1091.373762][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2297'. [ 1091.403450][ T5838] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 1091.678942][ T5838] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1092.419341][ T5838] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 1092.986738][T15568] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 1092.998117][ T5838] cp2112 0003:10C4:EA90.0001: error reading lock byte: -32 [ 1094.118477][ T5838] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 1095.169849][ T27] usb 1-1: USB disconnect, device number 6 [ 1095.742000][T15646] ubi: mtd0 is already attached to ubi31 [ 1099.999217][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2313'. [ 1101.090760][T15697] overlayfs: missing 'lowerdir' [ 1101.278077][T15701] ubi: mtd0 is already attached to ubi31 [ 1105.067143][T15741] overlayfs: missing 'lowerdir' [ 1106.635552][T15751] ubi: mtd0 is already attached to ubi31 [ 1106.978341][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 1109.035405][T15780] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1109.121023][T15780] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1109.704636][T15791] tmpfs: Bad value for 'mpol' [ 1111.838080][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2345'. [ 1113.094842][T15829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1113.161519][T15829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1113.835693][T15846] tmpfs: Bad value for 'mpol' [ 1113.887152][T15847] blktrace: Concurrent blktraces are not allowed on loop1 [ 1115.019504][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2354'. [ 1115.955738][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.020727][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.952957][T15880] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1117.051000][T15880] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1117.873416][T15894] blktrace: Concurrent blktraces are not allowed on loop19 [ 1121.266333][T15942] blktrace: Concurrent blktraces are not allowed on loop5 [ 1125.034030][T15984] blktrace: Concurrent blktraces are not allowed on loop19 [ 1125.654937][T15994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2392'. [ 1127.826148][T16017] autofs4:pid:16017:autofs_fill_super: called with bogus options [ 1129.713595][T16043] blktrace: Concurrent blktraces are not allowed on loop17 [ 1130.235791][T16046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1131.436470][T16058] autofs4:pid:16058:autofs_fill_super: called with bogus options [ 1131.769778][T16067] ubi: mtd0 is already attached to ubi31 [ 1132.887674][T16104] random: crng reseeded on system resumption [ 1134.090267][T16109] blktrace: Concurrent blktraces are not allowed on loop19 [ 1134.418615][T10447] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1134.612447][T10447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.706916][T10447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.727435][T10447] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1134.779781][T10447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.848461][T10447] usb 3-1: config 0 descriptor?? [ 1135.964594][T10447] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 1136.042098][T10447] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1136.202547][T16135] autofs4:pid:16135:autofs_fill_super: called with bogus options [ 1136.210844][T10447] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 1136.814150][T16112] cp2112 0003:10C4:EA90.0002: Error starting transaction: -38 [ 1136.840335][T10447] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 1137.076413][T16148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.083850][T16148] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.091457][T16148] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.099051][T16148] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.119774][T16148] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2423'. [ 1137.977417][T10447] usb 3-1: USB disconnect, device number 7 [ 1138.361061][T16162] blktrace: Concurrent blktraces are not allowed on loop17 [ 1139.320537][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2428'. [ 1139.956142][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2429'. [ 1140.213964][T16185] autofs4:pid:16185:autofs_fill_super: called with bogus options [ 1140.527355][T16193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1140.569552][T16193] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2434'. [ 1141.889425][T16204] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2435'. [ 1143.973881][T16229] tipc: Enabled bearer , priority 0 [ 1144.018511][T16229] syzkaller0: entered promiscuous mode [ 1144.038391][T16229] syzkaller0: entered allmulticast mode [ 1144.133464][T16229] tipc: Resetting bearer [ 1144.159264][T16228] tipc: Resetting bearer [ 1144.190959][T16228] tipc: Disabling bearer [ 1145.126102][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 1145.386535][T16255] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2442'. [ 1147.989636][T16284] tmpfs: Bad value for 'mpol' [ 1150.619452][T16289] autofs4:pid:16289:autofs_fill_super: called with bogus options [ 1152.270709][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2455'. [ 1153.256101][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 1153.672598][T16342] autofs4:pid:16342:autofs_fill_super: called with bogus options [ 1155.318114][T16362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1155.347803][T16362] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2467'. [ 1156.522560][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2468'. [ 1157.136912][T16394] autofs4:pid:16394:autofs_fill_super: called with bogus options [ 1157.818393][T14044] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1158.140347][T14044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.161839][T14044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.288116][T14044] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1158.313315][T14044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.330785][T14044] usb 1-1: config 0 descriptor?? [ 1158.377374][T16426] tmpfs: Bad value for 'mpol' [ 1159.530745][T14044] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 1159.562643][T14044] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1159.616379][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2481'. [ 1159.724046][T14044] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 1159.913102][T16445] autofs4:pid:16445:autofs_fill_super: called with bogus options [ 1160.383130][T16455] netlink: 'syz.2.2485': attribute type 10 has an invalid length. [ 1160.443651][T14044] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 1160.485056][T14044] usb 1-1: USB disconnect, device number 7 [ 1160.748252][T16455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.114417][T16455] team0: Port device bond0 added [ 1161.858841][T16475] tmpfs: Bad value for 'mpol' [ 1163.882540][T16482] autofs4:pid:16482:autofs_fill_super: called with bogus options [ 1163.954280][T16484] ubi: mtd0 is already attached to ubi31 [ 1164.759836][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2495'. [ 1165.506305][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2498'. [ 1165.783082][T16504] tipc: Started in network mode [ 1165.825773][T16504] tipc: Node identity 567ec56dcb26, cluster identity 4711 [ 1165.868710][T16504] tipc: Enabled bearer , priority 0 [ 1165.902533][T16512] syzkaller0: entered promiscuous mode [ 1165.959828][T16512] syzkaller0: entered allmulticast mode [ 1166.276875][T16515] tipc: Resetting bearer [ 1166.287102][T16503] tipc: Resetting bearer [ 1166.583995][T16503] tipc: Disabling bearer [ 1167.101435][ T9] tipc: Node number set to 2639840621 [ 1167.146830][T16519] netlink: 'syz.8.2501': attribute type 10 has an invalid length. [ 1168.547486][T16534] autofs4:pid:16534:autofs_fill_super: called with bogus options [ 1169.612969][T16548] ubi: mtd0 is already attached to ubi31 [ 1170.191709][T16559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1170.199054][T16559] IPv6: NLM_F_CREATE should be set when creating new route [ 1170.206274][T16559] IPv6: NLM_F_CREATE should be set when creating new route [ 1170.213507][T16559] IPv6: NLM_F_CREATE should be set when creating new route [ 1170.225950][T16559] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2508'. [ 1171.697354][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'. [ 1172.825435][T16579] netlink: 'syz.2.2514': attribute type 10 has an invalid length. [ 1173.564779][T16588] autofs4:pid:16588:autofs_fill_super: called with bogus options [ 1177.408499][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.414901][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.638366][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1179.218236][T16630] tmpfs: Bad value for 'mpol' [ 1179.426322][T16621] netlink: 'syz.2.2526': attribute type 10 has an invalid length. [ 1179.938204][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2527'. [ 1180.028531][T16636] autofs4:pid:16636:autofs_fill_super: called with bogus options [ 1182.880233][T16664] tmpfs: Bad value for 'mpol' [ 1183.389764][T16656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2532'. [ 1184.557305][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2539'. [ 1184.645214][T16686] tmpfs: Bad value for 'mpol' [ 1185.670747][T16693] autofs4:pid:16693:autofs_fill_super: called with bogus options [ 1186.129319][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1186.425446][T16708] blktrace: Concurrent blktraces are not allowed on loop5 [ 1187.282811][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.403045][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.450468][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1187.494725][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1187.799882][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 1187.949547][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.091281][ T9] usb 1-1: config 0 descriptor?? [ 1188.113667][T16712] netlink: 'syz.2.2544': attribute type 10 has an invalid length. [ 1188.445941][T16721] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2545'. [ 1189.110809][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 1189.128143][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1189.135693][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1189.159898][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1189.231301][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1189.323533][ T9] usb 1-1: USB disconnect, device number 8 [ 1189.636205][T16730] fido_id[16730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1191.579987][T16747] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2550'. [ 1192.062003][T16749] autofs4:pid:16749:autofs_fill_super: called with bogus options [ 1192.345995][T16755] blktrace: Concurrent blktraces are not allowed on loop5 [ 1193.280507][T16763] random: crng reseeded on system resumption [ 1194.574565][T16776] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2555'. [ 1196.504116][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2558'. [ 1197.045882][T16805] syz.9.2561: attempt to access beyond end of device [ 1197.045882][T16805] nbd9: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1197.080952][T16805] syz.9.2561: attempt to access beyond end of device [ 1197.080952][T16805] nbd9: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1197.096331][T16805] Mount JFS Failure: -5 [ 1199.249933][T16831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1201.456344][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2570'. [ 1203.269323][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'. [ 1204.838078][T16911] overlayfs: failed to resolve './file0': -2 [ 1206.269304][T16927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1206.277817][T16927] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2584'. [ 1206.637768][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'. [ 1207.290357][T16960] random: crng reseeded on system resumption [ 1210.625241][T16985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1210.636923][T16985] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2597'. [ 1211.357777][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2599'. [ 1211.450941][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 1213.838390][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 1213.905785][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 1217.104903][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 1217.594979][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 1219.398161][T17163] tipc: Started in network mode [ 1219.416211][T17163] tipc: Node identity 560592dfb886, cluster identity 4711 [ 1219.584129][T17163] tipc: Enabled bearer , priority 0 [ 1219.798739][T17171] syzkaller0: entered promiscuous mode [ 1219.808695][T17171] syzkaller0: entered allmulticast mode [ 1220.175169][T17163] tipc: Resetting bearer [ 1220.217636][T17162] tipc: Resetting bearer [ 1220.462277][T17162] tipc: Disabling bearer [ 1221.612291][T17186] netlink: 'syz.0.2634': attribute type 10 has an invalid length. [ 1222.247826][T17186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.350157][T17186] team0: Port device bond0 added [ 1222.981800][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2638'. [ 1223.401399][T17233] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2643'. [ 1225.025766][T17259] random: crng reseeded on system resumption [ 1226.064862][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2650'. [ 1226.246044][T17276] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2652'. [ 1226.687403][T17288] tipc: Enabled bearer , priority 0 [ 1226.709292][T17288] syzkaller0: entered promiscuous mode [ 1226.714959][T17288] syzkaller0: entered allmulticast mode [ 1226.764552][T17285] tipc: Resetting bearer [ 1226.805066][T17285] tipc: Disabling bearer [ 1227.594128][T17309] vivid-000: disconnect [ 1228.108183][T17302] vivid-000: reconnect [ 1228.679940][T17332] random: crng reseeded on system resumption [ 1229.836224][T17350] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2664'. [ 1229.879240][T17355] tipc: Enabled bearer , priority 0 [ 1229.918910][T17355] syzkaller0: entered promiscuous mode [ 1229.924423][T17355] syzkaller0: entered allmulticast mode [ 1230.014988][T17354] tipc: Resetting bearer [ 1230.207094][T17354] tipc: Disabling bearer [ 1230.429264][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 1231.121583][T17383] random: crng reseeded on system resumption [ 1232.799860][T17406] tipc: Enabled bearer , priority 0 [ 1232.825367][T17406] syzkaller0: entered promiscuous mode [ 1232.851584][T17406] syzkaller0: entered allmulticast mode [ 1232.947376][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2679'. [ 1233.217654][T17417] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2676'. [ 1233.323255][T17405] tipc: Resetting bearer [ 1233.479963][T17405] tipc: Disabling bearer [ 1235.702746][T17466] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2688'. [ 1236.306281][T17475] tmpfs: Bad value for 'mpol' [ 1238.039474][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2692'. [ 1239.186231][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.192736][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.501771][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2695'. [ 1240.520117][T17517] random: crng reseeded on system resumption [ 1242.076243][T17541] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2699'. [ 1242.765093][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2703'. [ 1243.636865][T17563] tipc: Enabled bearer , priority 0 [ 1243.644676][T17563] syzkaller0: entered promiscuous mode [ 1243.652603][T17563] syzkaller0: entered allmulticast mode [ 1243.687034][T17562] tipc: Resetting bearer [ 1243.847644][T17562] tipc: Disabling bearer [ 1244.388654][ T8839] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1244.820918][ T8839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.850856][ T8839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.914082][ T8839] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1244.951993][ T8839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.005527][ T8839] usb 10-1: config 0 descriptor?? [ 1245.437225][ T8839] usbhid 10-1:0.0: can't add hid device: -71 [ 1245.466386][ T8839] usbhid: probe of 10-1:0.0 failed with error -71 [ 1245.536612][ T8839] usb 10-1: USB disconnect, device number 2 [ 1245.887648][T17596] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2710'. [ 1248.011103][T17610] tmpfs: Bad value for 'mpol' [ 1248.081047][T17626] tipc: Started in network mode [ 1248.085986][T17626] tipc: Node identity d2513060074e, cluster identity 4711 [ 1248.119178][T17626] tipc: Enabled bearer , priority 0 [ 1248.145009][T17626] syzkaller0: entered promiscuous mode [ 1248.208067][T17626] syzkaller0: entered allmulticast mode [ 1248.882456][T17619] tipc: Resetting bearer [ 1248.966003][T17619] tipc: Disabling bearer [ 1249.288498][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 1250.687235][T17657] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2721'. [ 1256.907363][T17738] tipc: Enabled bearer , priority 0 [ 1256.933713][T17738] tipc: Resetting bearer [ 1257.014743][T17737] tipc: Disabling bearer [ 1257.030572][T17745] tmpfs: Bad value for 'mpol' [ 1266.125090][T17846] random: crng reseeded on system resumption [ 1267.101019][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 1267.616446][T17865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1267.658183][T17865] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2765'. [ 1270.008731][T17882] syzkaller0: entered promiscuous mode [ 1270.088767][T17882] syzkaller0: entered allmulticast mode [ 1271.197284][T17902] random: crng reseeded on system resumption [ 1271.570998][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 1274.796974][T17944] syzkaller0: entered promiscuous mode [ 1274.819572][T17944] syzkaller0: entered allmulticast mode [ 1275.914148][T17957] random: crng reseeded on system resumption [ 1276.867050][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'. [ 1282.569996][T18034] overlayfs: missing 'lowerdir' [ 1286.354795][T18094] overlayfs: missing 'lowerdir' [ 1292.168042][T12148] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1293.120345][T12148] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.168118][T12148] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.245190][T12148] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1293.275554][T12148] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.313737][T12148] usb 10-1: config 0 descriptor?? [ 1293.957932][T12148] usbhid 10-1:0.0: can't add hid device: -32 [ 1294.046734][T12148] usbhid: probe of 10-1:0.0 failed with error -32 [ 1294.106138][T12148] usb 10-1: USB disconnect, device number 3 [ 1296.721135][T18237] random: crng reseeded on system resumption [ 1300.276926][ T5838] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1300.339423][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.346219][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.512759][ T5838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.056613][ T5838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.070980][ T5838] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1301.080962][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.093933][ T5838] usb 9-1: config 0 descriptor?? [ 1301.493797][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2850'. [ 1301.540517][ T5838] usbhid 9-1:0.0: can't add hid device: -32 [ 1301.558904][ T5838] usbhid: probe of 9-1:0.0 failed with error -32 [ 1301.585255][ T5838] usb 9-1: USB disconnect, device number 2 [ 1306.530847][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2862'. [ 1306.978007][T14114] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1307.622417][T14114] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.676904][T14114] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.705642][T14114] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1307.778177][T14114] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.935616][T14114] usb 9-1: config 0 descriptor?? [ 1309.166182][T18401] tmpfs: Bad value for 'mpol' [ 1309.328094][T18404] vivid-000: disconnect [ 1309.599035][T18395] vivid-000: reconnect [ 1309.860821][T14114] usbhid 9-1:0.0: can't add hid device: -32 [ 1309.988037][T14114] usbhid: probe of 9-1:0.0 failed with error -32 [ 1310.005403][T14114] usb 9-1: USB disconnect, device number 3 [ 1312.992979][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2873'. [ 1315.730695][ T5794] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1316.466123][ T5794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.482693][ T5794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.494083][ T5794] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1316.504097][ T5794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.535935][ T5794] usb 10-1: config 0 descriptor?? [ 1318.065625][ T5794] usbhid 10-1:0.0: can't add hid device: -32 [ 1318.091716][ T5794] usbhid: probe of 10-1:0.0 failed with error -32 [ 1318.126069][ T5794] usb 10-1: USB disconnect, device number 4 [ 1318.270884][T18509] overlayfs: missing 'workdir' [ 1322.688162][ T27] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1323.026730][T18568] overlayfs: missing 'lowerdir' [ 1323.918020][ T27] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.958224][ T27] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.998647][ T27] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1324.007817][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.053666][ T27] usb 10-1: config 0 descriptor?? [ 1325.467259][ T27] usbhid 10-1:0.0: can't add hid device: -32 [ 1325.486604][ T27] usbhid: probe of 10-1:0.0 failed with error -32 [ 1325.525572][ T27] usb 10-1: USB disconnect, device number 5 [ 1326.645400][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2903'. [ 1329.368216][T18640] overlayfs: missing 'lowerdir' [ 1332.808261][T12148] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1333.001500][T12148] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.015078][T12148] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.027664][T12148] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1333.038782][T12148] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.055505][T12148] usb 9-1: config 0 descriptor?? [ 1334.082102][T12148] usbhid 9-1:0.0: can't add hid device: -32 [ 1334.088442][T12148] usbhid: probe of 9-1:0.0 failed with error -32 [ 1334.100733][T12148] usb 9-1: USB disconnect, device number 4 [ 1334.421567][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2915'. [ 1335.879911][T18707] overlayfs: missing 'lowerdir' [ 1338.770725][T12148] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1338.988556][T12148] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.007695][T12148] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.020901][T12148] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1339.048414][T12148] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.084706][T12148] usb 9-1: config 0 descriptor?? [ 1339.437593][T18743] tmpfs: Bad value for 'mpol' [ 1339.992664][T12148] usbhid 9-1:0.0: can't add hid device: -32 [ 1340.007195][T12148] usbhid: probe of 9-1:0.0 failed with error -32 [ 1340.141374][T12148] usb 9-1: USB disconnect, device number 5 [ 1342.445744][T18773] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2931'. [ 1345.194445][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2936'. [ 1345.586101][T18803] tipc: Enabling of bearer rejected, failed to enable media [ 1347.020465][T12148] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1347.248184][T18825] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1347.454467][T12148] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.574501][T18815] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2940'. [ 1347.668453][T12148] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.734565][T12148] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1347.757931][T12148] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.833879][T12148] usb 10-1: config 0 descriptor?? [ 1348.719134][T12148] usbhid 10-1:0.0: can't add hid device: -32 [ 1348.731983][T12148] usbhid: probe of 10-1:0.0 failed with error -32 [ 1348.762749][T12148] usb 10-1: USB disconnect, device number 6 [ 1349.613555][T18871] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1349.622649][T18871] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1350.272417][T18876] tipc: Enabling of bearer rejected, failed to enable media [ 1350.990951][T18890] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2951'. [ 1351.161445][T18897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1351.205313][T18897] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2952'. [ 1354.048082][T10447] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1354.273738][T10447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.285306][T10447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.306080][T10447] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1354.315632][T10447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.341425][T10447] usb 3-1: config 0 descriptor?? [ 1354.886863][T18953] tipc: Enabling of bearer rejected, failed to enable media [ 1354.987513][T10447] usbhid 3-1:0.0: can't add hid device: -32 [ 1355.004122][T10447] usbhid: probe of 3-1:0.0 failed with error -32 [ 1355.020945][T10447] usb 3-1: USB disconnect, device number 8 [ 1355.624266][T18975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1355.673001][T18975] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2962'. [ 1356.265756][T18981] random: crng reseeded on system resumption [ 1359.152753][T19015] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1360.837983][ T5794] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1361.084738][ T5794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.110915][ T5794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.276121][ T5794] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1361.350159][ T5794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.675705][ T5794] usb 10-1: config 0 descriptor?? [ 1361.780523][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.792539][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.935830][T19073] random: crng reseeded on system resumption [ 1363.294807][ T5794] usbhid 10-1:0.0: can't add hid device: -32 [ 1363.363735][ T5794] usbhid: probe of 10-1:0.0 failed with error -32 [ 1363.673950][ T5794] usb 10-1: USB disconnect, device number 7 [ 1365.128266][T19091] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1365.506049][T19100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1365.517012][T19100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1365.525621][T19100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1365.534550][T19100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1365.545881][T19100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1365.555695][T19100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1366.392108][ T1143] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.807405][ T1143] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.638127][T11370] Bluetooth: hci4: command tx timeout [ 1367.681069][ T1143] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.225691][ T1143] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.885752][T11370] Bluetooth: hci4: command tx timeout [ 1369.972698][T19099] chnl_net:caif_netlink_parms(): no params data found [ 1370.095608][T19149] tipc: Enabling of bearer rejected, failed to enable media [ 1370.115499][ T1143] tipc: Left network mode [ 1370.406940][T19099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.414648][T19099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.422061][T19099] bridge_slave_0: entered allmulticast mode [ 1370.433338][T19099] bridge_slave_0: entered promiscuous mode [ 1370.461886][T19099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.469301][T19099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.476537][T19099] bridge_slave_1: entered allmulticast mode [ 1370.485276][T19099] bridge_slave_1: entered promiscuous mode [ 1370.553929][T19099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1370.587415][T19099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.682951][T19099] team0: Port device team_slave_0 added [ 1370.694488][T19099] team0: Port device team_slave_1 added [ 1370.847798][T19099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.861099][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.891266][T19099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.905378][T19099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.916265][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.942223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.950423][T19099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.994045][T19172] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2990'. [ 1371.484093][T19099] hsr_slave_0: entered promiscuous mode [ 1371.949041][T11370] Bluetooth: hci4: command tx timeout [ 1372.310206][T19099] hsr_slave_1: entered promiscuous mode [ 1372.345990][T19099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1372.373221][T19099] Cannot create hsr debugfs directory [ 1372.488047][ T1143] hsr_slave_0: left promiscuous mode [ 1372.494126][ T1143] hsr_slave_1: left promiscuous mode [ 1372.527608][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1372.538629][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.791109][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.416603][T19100] Bluetooth: hci4: command tx timeout [ 1374.498079][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.511686][ T1143] bridge_slave_1: left allmulticast mode [ 1374.527961][ T1143] bridge_slave_1: left promiscuous mode [ 1374.533718][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.559978][ T1143] bridge_slave_0: left allmulticast mode [ 1374.565648][ T1143] bridge_slave_0: left promiscuous mode [ 1374.572771][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.625214][ T1143] veth1_macvtap: left promiscuous mode [ 1374.637033][ T1143] veth0_macvtap: left promiscuous mode [ 1374.648706][ T1143] veth1_vlan: left promiscuous mode [ 1374.654226][ T1143] veth0_vlan: left promiscuous mode [ 1375.823659][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 1376.217065][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 1376.502837][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.568572][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.500239][ T1143] team0 (unregistering): Port device bond0 removed [ 1377.714904][ T1143] bond0 (unregistering): Released all slaves [ 1377.796967][T19182] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2992'. [ 1382.517537][T19225] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3002'. [ 1383.064106][T19246] random: crng reseeded on system resumption [ 1385.185755][T19099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1385.411608][T19099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1386.391713][T19099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1386.508920][T19099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1386.891400][T19271] vivid-000: disconnect [ 1387.422533][T19263] vivid-000: reconnect [ 1387.752979][T19277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1387.768747][T19277] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3015'. [ 1388.928295][T19099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.985908][T19099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.061994][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.069200][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.079153][T19295] random: crng reseeded on system resumption [ 1390.000887][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.008105][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.771437][T19099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1390.795258][T19099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1391.338894][T19312] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3021'. [ 1392.599236][T19099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.899644][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3023'. [ 1395.851142][T19099] veth0_vlan: entered promiscuous mode [ 1395.873822][T19099] veth1_vlan: entered promiscuous mode [ 1396.890512][T19099] veth0_macvtap: entered promiscuous mode [ 1396.918913][T19099] veth1_macvtap: entered promiscuous mode [ 1396.944932][T19099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.955625][T19099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.000494][T19099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.012414][T19099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.035066][T19099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.076496][T19099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.107702][T19099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1397.144392][T19099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.156531][T19099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.170312][T19099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.241998][T19099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.252446][T19099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.263030][T19099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.275680][T19099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1397.302685][T19099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.311649][T19099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.331343][T19099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.341731][T19099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.540087][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.591721][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.625825][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.676978][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.775809][T19377] random: crng reseeded on system resumption [ 1402.159330][T19409] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3036'. [ 1407.351611][T19467] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1408.326553][T19459] tipc: Enabled bearer , priority 0 [ 1411.650501][T19514] random: crng reseeded on system resumption [ 1411.940341][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3062'. [ 1413.213694][T19538] vivid-000: disconnect [ 1414.083374][T19531] vivid-000: reconnect [ 1415.078863][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3067'. [ 1417.801735][T19598] vivid-000: disconnect [ 1418.417627][T19587] vivid-000: reconnect [ 1421.065544][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3081'. [ 1422.573392][T19662] vivid-000: disconnect [ 1423.121892][T19651] vivid-000: reconnect [ 1423.199434][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.205790][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.961234][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3096'. [ 1427.023758][T19720] vivid-000: disconnect [ 1427.539198][T19710] vivid-000: reconnect [ 1428.775106][T19733] syzkaller0: entered promiscuous mode [ 1428.790015][T19733] syzkaller0: entered allmulticast mode [ 1430.659156][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 1433.609993][T19803] vivid-000: disconnect [ 1433.783422][T19784] vivid-000: reconnect [ 1433.991363][T19807] syzkaller0: entered promiscuous mode [ 1433.997104][T19807] syzkaller0: entered allmulticast mode [ 1435.401021][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3119'. [ 1442.799406][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3132'. [ 1448.745385][T19953] vivid-000: disconnect [ 1448.851914][T19944] vivid-000: reconnect [ 1455.806174][T20016] tipc: Enabled bearer , priority 0 [ 1457.208449][T20026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1457.368460][T20026] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3162'. [ 1457.472434][T20032] tmpfs: Bad value for 'mpol' [ 1462.049401][T20080] tmpfs: Bad value for 'mpol' [ 1464.001468][T20092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1464.009874][T20092] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3173'. [ 1465.508489][T20117] tmpfs: Bad value for 'mpol' [ 1467.764710][T20144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1467.772085][T20144] IPv6: NLM_F_CREATE should be set when creating new route [ 1467.779439][T20144] IPv6: NLM_F_CREATE should be set when creating new route [ 1467.786678][T20144] IPv6: NLM_F_CREATE should be set when creating new route [ 1467.796565][T20144] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3185'. [ 1469.145489][T20171] tmpfs: Bad value for 'mpol' [ 1469.214053][T19978] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1471.188350][T19978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.240023][T19978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.254296][T19978] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1471.277415][T19978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.309892][T19978] usb 3-1: config 0 descriptor?? [ 1471.318352][T20186] tipc: Enabling of bearer rejected, already enabled [ 1471.448917][T19100] Bluetooth: hci4: link tx timeout [ 1471.455135][T19100] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1471.876103][T19978] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1471.919115][T19978] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1472.161485][T19978] cp2112 0003:10C4:EA90.0005: error requesting version [ 1472.214847][T19978] cp2112: probe of 0003:10C4:EA90.0005 failed with error -5 [ 1472.829848][T20210] syzkaller0: entered promiscuous mode [ 1472.835383][T20210] syzkaller0: entered allmulticast mode [ 1473.548228][T11370] Bluetooth: hci4: command 0x0406 tx timeout [ 1474.214457][T19978] usb 3-1: USB disconnect, device number 9 [ 1479.134410][T20284] netlink: 'syz.4.3211': attribute type 3 has an invalid length. [ 1485.007091][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.019803][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.276430][T20412] syzkaller0: entered promiscuous mode [ 1492.302525][T20412] syzkaller0: entered allmulticast mode [ 1495.878135][T20438] tmpfs: Bad value for 'mpol' [ 1499.193081][T20467] syzkaller0: entered promiscuous mode [ 1499.252748][T20467] syzkaller0: entered allmulticast mode [ 1500.784308][T20494] tmpfs: Bad value for 'mpol' [ 1500.888839][T20495] vivid-000: disconnect [ 1501.291961][T20489] vivid-000: reconnect [ 1503.060434][T20521] random: crng reseeded on system resumption [ 1504.914205][T20548] vivid-000: disconnect [ 1505.648836][T20542] vivid-000: reconnect [ 1507.621806][T20576] random: crng reseeded on system resumption [ 1507.844548][T20580] tipc: Enabling of bearer rejected, already enabled [ 1510.540939][T19978] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1510.891301][T19978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.907884][T19978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.923911][T19978] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1510.933125][T19978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.948601][T19978] usb 1-1: config 0 descriptor?? [ 1511.397184][T19978] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1511.416163][T19978] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1511.642253][T19978] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 1511.798308][T19978] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 1511.848638][T19978] cp2112: probe of 0003:10C4:EA90.0006 failed with error -32 [ 1513.654586][T14044] usb 1-1: USB disconnect, device number 9 [ 1514.444755][T20665] random: crng reseeded on system resumption [ 1519.701751][T20726] syzkaller0: entered promiscuous mode [ 1520.552001][T20726] syzkaller0: entered allmulticast mode [ 1526.450134][T20785] vivid-000: disconnect [ 1526.471783][T20780] vivid-000: reconnect [ 1532.287500][T20843] vivid-000: disconnect [ 1532.444766][T20834] vivid-000: reconnect [ 1539.873851][T20925] netlink: 'syz.9.3335': attribute type 1 has an invalid length. [ 1540.494279][T20925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1540.525267][T20930] bond1: (slave gretap2): making interface the new active one [ 1540.541429][T20930] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1545.779115][T20994] vivid-000: disconnect [ 1545.784742][T20993] vivid-000: reconnect [ 1545.937412][T20996] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3345'. [ 1546.358621][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.364972][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.988319][T21000] syzkaller0: entered promiscuous mode [ 1547.008011][T21000] syzkaller0: entered allmulticast mode [ 1548.930204][T21020] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3351'. [ 1551.499525][T21049] vivid-000: disconnect [ 1551.511579][T21045] vivid-000: reconnect [ 1551.672295][T21053] fuseblk: Bad value for 'fd' [ 1554.730800][T21095] syzkaller0: entered promiscuous mode [ 1554.736319][T21095] syzkaller0: entered allmulticast mode [ 1555.278179][T21103] vivid-000: disconnect [ 1555.506370][T21100] vivid-000: reconnect [ 1559.128830][T21151] tipc: Enabling of bearer rejected, failed to enable media [ 1559.140873][T21151] syzkaller0: entered promiscuous mode [ 1559.154602][T21151] syzkaller0: entered allmulticast mode [ 1563.568148][T21209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1564.193261][T21210] random: crng reseeded on system resumption [ 1568.002886][T21269] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3403'. [ 1570.948847][ T1069] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.626673][ T1069] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.216430][ T1069] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.544250][ T1069] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.520497][T11370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1574.537695][T11370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1574.579925][T11370] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1574.622889][T11370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1574.643039][T11370] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1574.660869][T11370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1575.843823][T19100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1575.867325][T19100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1575.877095][T19100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1575.889546][T19100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1575.905425][T19100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1575.915145][T19100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1576.751812][T19100] Bluetooth: hci0: command tx timeout [ 1578.029900][T19100] Bluetooth: hci2: command tx timeout [ 1578.838072][T19100] Bluetooth: hci0: command tx timeout [ 1580.108043][T19100] Bluetooth: hci2: command tx timeout [ 1580.414471][T21338] chnl_net:caif_netlink_parms(): no params data found [ 1580.437405][T21352] chnl_net:caif_netlink_parms(): no params data found [ 1580.918180][T19100] Bluetooth: hci0: command tx timeout [ 1581.771692][ T1069] hsr_slave_0: left promiscuous mode [ 1581.802698][ T1069] hsr_slave_1: left promiscuous mode [ 1581.830998][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.847519][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.028593][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1582.054032][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.122906][T21439] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1582.130991][T21439] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1582.188054][T19100] Bluetooth: hci2: command tx timeout [ 1582.819740][ T1069] bridge_slave_1: left allmulticast mode [ 1582.825501][ T1069] bridge_slave_1: left promiscuous mode [ 1582.854011][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.878650][ T1069] bridge_slave_0: left allmulticast mode [ 1582.884382][ T1069] bridge_slave_0: left promiscuous mode [ 1582.937302][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.987893][T19100] Bluetooth: hci0: command tx timeout [ 1583.174743][ T1069] veth1_macvtap: left promiscuous mode [ 1583.203970][ T1069] veth0_macvtap: left promiscuous mode [ 1583.221519][ T1069] veth1_vlan: left promiscuous mode [ 1583.226887][ T1069] veth0_vlan: left promiscuous mode [ 1584.267991][T19100] Bluetooth: hci2: command tx timeout [ 1585.345997][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 1585.390855][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 1585.433560][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.484420][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.949102][ T1069] bond0 (unregistering): Released all slaves [ 1586.135354][T21468] tipc: Enabling of bearer rejected, failed to enable media [ 1586.240682][T21352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.284305][T21352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.314289][T21352] bridge_slave_0: entered allmulticast mode [ 1586.357502][T21352] bridge_slave_0: entered promiscuous mode [ 1586.429783][T21338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.438140][T21338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.445348][T21338] bridge_slave_0: entered allmulticast mode [ 1586.462122][T21338] bridge_slave_0: entered promiscuous mode [ 1587.222141][T21338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.329146][T21338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.461909][T21338] bridge_slave_1: entered allmulticast mode [ 1587.585447][T21338] bridge_slave_1: entered promiscuous mode [ 1587.621165][T21352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.641459][T21352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.666325][T21352] bridge_slave_1: entered allmulticast mode [ 1587.705238][T21352] bridge_slave_1: entered promiscuous mode [ 1587.918882][T21352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.951134][T21338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.970575][T21352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.056946][T21338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.193775][T21338] team0: Port device team_slave_0 added [ 1588.203283][T21338] team0: Port device team_slave_1 added [ 1588.218968][T21352] team0: Port device team_slave_0 added [ 1588.345827][T21338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.355678][T21338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.388456][T21338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.409099][T21352] team0: Port device team_slave_1 added [ 1588.426627][T21338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.447083][T21338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.478375][T21338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.660023][T21352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.679211][T21352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.753108][T21352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.892143][T21352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.918714][T21352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.004898][T21352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1590.131730][T21352] hsr_slave_0: entered promiscuous mode [ 1590.163584][T21352] hsr_slave_1: entered promiscuous mode [ 1590.181734][T21338] hsr_slave_0: entered promiscuous mode [ 1590.204648][T21338] hsr_slave_1: entered promiscuous mode [ 1590.212917][T21338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1590.221703][T21338] Cannot create hsr debugfs directory [ 1590.328257][ T1069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.393544][T21534] tipc: Enabling of bearer rejected, failed to enable media [ 1590.404061][T21542] syzkaller0: entered promiscuous mode [ 1590.413297][T21542] syzkaller0: entered allmulticast mode [ 1590.493781][ T1069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.691919][ T1069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.836721][ T1069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.922593][ T1069] tipc: Disabling bearer [ 1592.989043][ T1069] tipc: Left network mode [ 1593.304812][T21597] tipc: Enabling of bearer rejected, failed to enable media [ 1593.316365][T21597] syzkaller0: entered promiscuous mode [ 1593.325546][T21597] syzkaller0: entered allmulticast mode [ 1597.738501][ T1069] hsr_slave_0: left promiscuous mode [ 1597.760665][ T1069] hsr_slave_1: left promiscuous mode [ 1597.771153][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.780103][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.798779][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.806294][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.826291][ T1069] bridge_slave_1: left allmulticast mode [ 1597.835551][ T1069] bridge_slave_1: left promiscuous mode [ 1597.841462][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.850614][ T1069] bridge_slave_0: left allmulticast mode [ 1597.856284][ T1069] bridge_slave_0: left promiscuous mode [ 1597.865856][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.903477][ T1069] veth1_macvtap: left promiscuous mode [ 1597.913992][ T1069] veth0_macvtap: left promiscuous mode [ 1597.922748][ T1069] veth1_vlan: left promiscuous mode [ 1597.932582][ T1069] veth0_vlan: left promiscuous mode [ 1600.537521][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 1600.592894][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 1600.683386][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.762706][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.338953][ T1069] team0 (unregistering): Port device bond0 removed [ 1601.560423][ T1069] bond0 (unregistering): Released all slaves [ 1601.835009][T21352] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1602.036008][T21352] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1602.058102][T21352] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1602.087386][T21352] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1602.623774][T21352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.681022][T21352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.735089][T18095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.742261][T18095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.817561][T18095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.824817][T18095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.140566][T21338] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1603.664489][T21352] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1603.697910][T21352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1603.807923][T21338] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1603.888517][T21338] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1603.916706][T21338] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1604.616885][T21338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.733210][T21338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.755989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.763310][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.839281][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.846434][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.932945][T21352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.204227][T21338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.321676][T21338] veth0_vlan: entered promiscuous mode [ 1606.373383][T21338] veth1_vlan: entered promiscuous mode [ 1606.418695][T21352] veth0_vlan: entered promiscuous mode [ 1606.504503][T21352] veth1_vlan: entered promiscuous mode [ 1606.513525][T21338] veth0_macvtap: entered promiscuous mode [ 1606.536622][T21338] veth1_macvtap: entered promiscuous mode [ 1606.609824][T21338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.621031][T21338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.635845][T21338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.646794][T21338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.664298][T21338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.686731][T21352] veth0_macvtap: entered promiscuous mode [ 1606.711233][T21338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.726951][T21338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.746903][T21338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.765767][T21338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.779630][T21338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.805048][T21338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.815822][T21338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.826888][T21338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.838554][T21338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.859891][T21352] veth1_macvtap: entered promiscuous mode [ 1606.947070][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.972721][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.012096][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.032889][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.053396][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.082923][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.120940][T21352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1607.172409][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.209325][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.228522][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.248240][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.272698][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.293407][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.319253][T21352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1607.355659][T21352] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.388044][T21352] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.417101][T21352] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.440082][T21352] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.472805][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.479301][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.565653][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.619856][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.718397][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.753209][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.800035][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.810739][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.466934][T18095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.553192][T18095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.115802][T21774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3412'. [ 1615.738605][T21839] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1615.745473][T21839] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1619.088361][ T5830] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1619.333849][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.351055][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1619.389059][ T5830] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1619.414532][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.466624][ T5830] usb 2-1: config 0 descriptor?? [ 1619.929538][ T5830] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1619.960873][ T5830] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1620.129507][ T5830] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 1620.594469][T21897] kvm: pic: non byte write [ 1620.735901][ T5830] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 1620.792481][ T5830] usb 2-1: USB disconnect, device number 13 [ 1623.207393][T21936] syzkaller0: entered promiscuous mode [ 1623.207464][T21936] syzkaller0: entered allmulticast mode [ 1624.277938][T10447] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1624.509726][T10447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.619268][T10447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.704753][T10447] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1624.745151][T10447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.979060][T10447] usb 3-1: config 0 descriptor?? [ 1625.023963][T21961] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1625.031006][T21961] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1626.141565][T10447] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 1626.369556][T10447] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1626.594783][T10447] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 1627.345570][T10447] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 1627.715580][T10447] usb 3-1: USB disconnect, device number 10 [ 1631.182423][T10447] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1631.677878][T10447] usb 2-1: Using ep0 maxpacket: 8 [ 1631.686310][T10447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1631.727888][T10447] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1631.761594][T10447] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1631.775820][T10447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.792517][T10447] usb 2-1: Product: syz [ 1631.796867][T10447] usb 2-1: Manufacturer: syz [ 1631.801946][T10447] usb 2-1: SerialNumber: syz [ 1631.810061][T10447] usb 2-1: config 0 descriptor?? [ 1631.820629][T22042] vivid-000: disconnect [ 1631.931383][T22026] vivid-000: reconnect [ 1632.034898][T10447] usb 2-1: USB disconnect, device number 14 [ 1632.117990][T12025] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1632.340778][T12025] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.376998][T12025] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.401176][T12025] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1632.434878][T12025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.460441][T12025] usb 10-1: config 0 descriptor?? [ 1632.691683][T22065] tipc: Started in network mode [ 1632.696620][T22065] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1632.703912][T22065] tipc: Enabled bearer , priority 0 [ 1632.899764][T12025] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1632.927582][T12025] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1633.089782][T12025] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 1633.817852][T20188] tipc: Node number set to 11578026 [ 1634.117962][T12025] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 1635.306808][T12025] usb 10-1: USB disconnect, device number 8 [ 1638.765043][T22140] vivid-000: disconnect [ 1638.913922][T22116] vivid-000: reconnect [ 1639.960213][T10447] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1640.351358][T10447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.427990][T10447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.451820][T10447] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1640.473152][T10447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.497222][T10447] usb 2-1: config 0 descriptor?? [ 1641.110299][T10447] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1641.218269][T10447] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1641.360277][T10447] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 1641.745713][ T5156] udevd[5156]: worker [16293] terminated by signal 33 (Unknown signal 33) [ 1641.790076][ T5156] udevd[5156]: worker [16293] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:10C4:EA90.000A/hidraw/hidraw0' [ 1642.170163][T10447] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 1642.341914][T10447] usb 2-1: USB disconnect, device number 15 [ 1648.507959][T12025] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1648.748866][ T28] audit: type=1326 audit(1753224439.465:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22275 comm="syz.1.3580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d8d78e9a9 code=0x0 [ 1648.930064][T12025] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.952136][T12025] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.968421][T12025] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1648.977590][T12025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.016124][T12025] usb 10-1: config 0 descriptor?? [ 1649.494073][T12025] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1649.618725][T12025] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1649.741866][T12025] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 1649.917591][T22294] tipc: Enabling of bearer rejected, already enabled [ 1650.754018][T12025] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71 [ 1650.852709][T12025] usb 10-1: USB disconnect, device number 9 [ 1651.460152][T22311] tipc: Started in network mode [ 1651.465396][T22311] tipc: Node identity ee46d1a12736, cluster identity 4711 [ 1651.491436][T22311] tipc: Enabled bearer , priority 0 [ 1651.546700][T22311] tipc: Resetting bearer [ 1651.579169][T22309] tipc: Disabling bearer [ 1654.386141][T22349] tipc: Enabling of bearer rejected, already enabled [ 1655.977853][ T5794] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1656.170608][T22363] tipc: Enabled bearer , priority 0 [ 1656.402240][T22365] tipc: Resetting bearer [ 1656.511053][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.604361][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.637156][T22362] tipc: Disabling bearer [ 1656.677057][ T5794] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1656.687269][ T5794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.726753][ T5794] usb 3-1: config 0 descriptor?? [ 1657.280013][ T5794] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1657.481658][ T5794] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1657.787933][ T5794] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE [ 1658.222743][ T5794] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 1658.337955][ T5794] usb 3-1: USB disconnect, device number 11 [ 1659.698525][T22416] tipc: Enabled bearer , priority 0 [ 1659.750280][T22416] tipc: Resetting bearer [ 1659.841913][T22415] tipc: Disabling bearer [ 1661.029722][T22435] random: crng reseeded on system resumption [ 1661.728014][T20188] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1661.943846][T20188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.997336][T20188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1662.104599][T20188] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1662.115360][T20188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.143071][T20188] usb 6-1: config 0 descriptor?? [ 1662.656358][T20188] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1662.695184][T20188] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1662.836743][T20188] cp2112 0003:10C4:EA90.000D: Part Number: 0x82 Device Version: 0xFE [ 1663.452435][T20188] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 1663.492526][T20188] usb 6-1: USB disconnect, device number 2 [ 1664.437886][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3620'. [ 1666.056539][T22482] random: crng reseeded on system resumption [ 1668.897919][T22529] random: crng reseeded on system resumption [ 1669.038313][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.132431][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.187902][ T5830] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1675.387876][ T5830] usb 10-1: Using ep0 maxpacket: 8 [ 1675.396546][ T5830] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1675.416743][ T5830] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1675.461816][ T5830] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1675.484586][ T5830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.541331][ T5830] usb 10-1: Product: syz [ 1675.545630][ T5830] usb 10-1: Manufacturer: syz [ 1675.810240][T22605] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1675.810400][T22605] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1675.967446][ T5830] usb 10-1: SerialNumber: syz [ 1676.048038][ T5830] usb 10-1: config 0 descriptor?? [ 1676.760223][ T5794] usb 10-1: USB disconnect, device number 10 [ 1680.285811][T22677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3662'. [ 1681.748530][T22712] vivid-000: disconnect [ 1681.894749][T22687] vivid-000: reconnect [ 1682.304730][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3671'. [ 1683.151332][T22733] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3672'. [ 1685.073756][T22748] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1685.080662][T22748] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1685.342936][T22752] random: crng reseeded on system resumption [ 1685.895900][T22768] netlink: 'syz.5.3680': attribute type 1 has an invalid length. [ 1685.957211][T22768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1688.669423][T22815] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1688.676244][T22815] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1688.832571][T22821] random: crng reseeded on system resumption [ 1690.277273][ T9328] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1690.903851][ T9328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.918601][ T9328] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1690.958218][ T9328] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1690.991265][ T9328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.022111][ T9328] usb 6-1: config 0 descriptor?? [ 1691.054795][ T9328] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1691.080496][ T9328] dvb-usb: bulk message failed: -22 (3/0) [ 1691.141648][ T9328] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1691.164729][ T9328] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1691.184350][ T9328] usb 6-1: media controller created [ 1691.209986][ T9328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1691.283950][ T9328] dvb-usb: bulk message failed: -22 (6/0) [ 1691.314787][ T9328] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1691.891050][ T9328] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 1692.003821][ T9328] dvb-usb: schedule remote query interval to 150 msecs. [ 1692.047655][ T9328] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1692.088102][ T9328] usb 6-1: USB disconnect, device number 3 [ 1693.239481][ T9328] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1697.175396][T22922] kvm: pic: non byte write [ 1698.109196][T22933] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1698.116041][T22933] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1701.708004][T22943] Bluetooth: hci0: command 0x0406 tx timeout [ 1708.728828][T19100] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1712.750974][T19100] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1712.760184][T19100] Bluetooth: hci2: Injecting HCI hardware error event [ 1712.770642][T22943] Bluetooth: hci2: hardware error 0x00 [ 1714.989584][T22943] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1716.360092][T23067] syz_tun: entered promiscuous mode [ 1716.366324][T23067] vlan2: entered promiscuous mode [ 1721.818610][T23114] netlink: 'syz.1.3762': attribute type 11 has an invalid length. [ 1721.826563][T23114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3762'. [ 1722.737065][T23122] random: crng reseeded on system resumption [ 1728.497556][T23164] random: crng reseeded on system resumption [ 1730.356368][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.362925][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.257577][T23189] xt_TCPMSS: Only works on TCP SYN packets [ 1733.778401][T23203] random: crng reseeded on system resumption [ 1736.088107][T12148] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1736.445908][T12148] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1736.466475][T12148] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1736.588198][T12148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.604993][T12148] usb 2-1: config 0 descriptor?? [ 1736.719487][T23225] tipc: Enabled bearer , priority 0 [ 1736.772451][T12148] usbhid 2-1:0.0: can't add hid device: -71 [ 1736.778668][T12148] usbhid: probe of 2-1:0.0 failed with error -71 [ 1736.830515][T23225] syzkaller0: entered promiscuous mode [ 1736.836151][T23225] syzkaller0: entered allmulticast mode [ 1736.891642][T12148] usb 2-1: USB disconnect, device number 16 [ 1736.991453][T23225] tipc: Resetting bearer [ 1737.066672][T23224] tipc: Resetting bearer [ 1737.482949][T23224] tipc: Disabling bearer [ 1737.752083][T23243] ================================================================================ [ 1737.761765][T23243] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 1737.770285][T23243] shift exponent 4096 is too large for 32-bit type 'int' [ 1737.777499][T23243] CPU: 0 PID: 23243 Comm: syz.1.3799 Not tainted 6.6.99-syzkaller #0 [ 1737.785619][T23243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1737.795776][T23243] Call Trace: [ 1737.799091][T23243] [ 1737.802073][T23243] dump_stack_lvl+0x16c/0x230 [ 1737.806846][T23243] ? show_regs_print_info+0x20/0x20 [ 1737.812108][T23243] ? load_image+0x3b0/0x3b0 [ 1737.816687][T23243] ubsan_epilogue+0xa/0x30 [ 1737.821157][T23243] __ubsan_handle_shift_out_of_bounds+0x380/0x400 [ 1737.827647][T23243] pcl812_attach+0x1cd1/0x2440 [ 1737.832483][T23243] comedi_device_attach+0x519/0x660 [ 1737.837741][T23243] comedi_unlocked_ioctl+0x68d/0xf00 [ 1737.843084][T23243] ? tomoyo_path_number_perm+0x477/0x590 [ 1737.848794][T23243] ? comedi_poll+0x8c0/0x8c0 [ 1737.853504][T23243] ? __fget_files+0x28/0x4d0 [ 1737.858163][T23243] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1737.863150][T23243] ? security_file_ioctl+0x80/0xa0 [ 1737.868442][T23243] ? comedi_poll+0x8c0/0x8c0 [ 1737.873087][T23243] __se_sys_ioctl+0xfd/0x170 [ 1737.877731][T23243] do_syscall_64+0x55/0xb0 [ 1737.882198][T23243] ? clear_bhb_loop+0x40/0x90 [ 1737.886923][T23243] ? clear_bhb_loop+0x40/0x90 [ 1737.891640][T23243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.897584][T23243] RIP: 0033:0x7f5d8d78e9a9 [ 1737.902053][T23243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1737.921706][T23243] RSP: 002b:00007f5d8e54f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.930384][T23243] RAX: ffffffffffffffda RBX: 00007f5d8d9b6080 RCX: 00007f5d8d78e9a9 [ 1737.938404][T23243] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000008 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1737.946414][T23243] RBP: 00007f5d8d810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1737.954426][T23243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1737.962442][T23243] R13: 0000000000000000 R14: 00007f5d8d9b6080 R15: 00007ffddd2c31c8 [ 1737.970474][T23243] [ 1737.973592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1738.021107][T23243] ================================================================================ [ 1738.031070][T23243] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1738.038394][T23243] CPU: 0 PID: 23243 Comm: syz.1.3799 Not tainted 6.6.99-syzkaller #0 [ 1738.046499][T23243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1738.056799][T23243] Call Trace: [ 1738.060130][T23243] [ 1738.063205][T23243] dump_stack_lvl+0x16c/0x230 [ 1738.067945][T23243] ? show_regs_print_info+0x20/0x20 [ 1738.073191][T23243] ? load_image+0x3b0/0x3b0 [ 1738.077770][T23243] panic+0x2c0/0x710 [ 1738.081735][T23243] ? bpf_jit_dump+0xd0/0xd0 [ 1738.086333][T23243] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1738.092341][T23243] ? check_panic_on_warn+0x70/0xa0 [ 1738.097532][T23243] check_panic_on_warn+0x84/0xa0 [ 1738.102522][T23243] __ubsan_handle_shift_out_of_bounds+0x380/0x400 [ 1738.109012][T23243] pcl812_attach+0x1cd1/0x2440 [ 1738.113860][T23243] comedi_device_attach+0x519/0x660 [ 1738.119128][T23243] comedi_unlocked_ioctl+0x68d/0xf00 [ 1738.124486][T23243] ? tomoyo_path_number_perm+0x477/0x590 [ 1738.130285][T23243] ? comedi_poll+0x8c0/0x8c0 [ 1738.135005][T23243] ? __fget_files+0x28/0x4d0 [ 1738.139653][T23243] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1738.144633][T23243] ? security_file_ioctl+0x80/0xa0 [ 1738.149800][T23243] ? comedi_poll+0x8c0/0x8c0 [ 1738.154447][T23243] __se_sys_ioctl+0xfd/0x170 [ 1738.159096][T23243] do_syscall_64+0x55/0xb0 [ 1738.163547][T23243] ? clear_bhb_loop+0x40/0x90 [ 1738.168255][T23243] ? clear_bhb_loop+0x40/0x90 [ 1738.172975][T23243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1738.178924][T23243] RIP: 0033:0x7f5d8d78e9a9 [ 1738.183389][T23243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.203366][T23243] RSP: 002b:00007f5d8e54f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.211847][T23243] RAX: ffffffffffffffda RBX: 00007f5d8d9b6080 RCX: 00007f5d8d78e9a9 [ 1738.219885][T23243] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000008 [ 1738.227909][T23243] RBP: 00007f5d8d810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1738.235941][T23243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1738.244060][T23243] R13: 0000000000000000 R14: 00007f5d8d9b6080 R15: 00007ffddd2c31c8 [ 1738.252116][T23243] [ 1738.255404][T23243] Kernel Offset: disabled [ 1738.259838][T23243] Rebooting in 86400 seconds..