last executing test programs: 2m26.021492498s ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20040014) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f00000100c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x70ffb53cc4dd4bc0, 0x8, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000200025a727bd705e024b1dc5d27780cdff00000109000000000000000000000008000d00ffffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1000, 0x2d3, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) getsockopt(r4, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m25.307890695s ago: executing program 0 (id=5): sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0x7, "f25e87", 0x2, 0x9}) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x48b83, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) gettid() openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 2m24.368821105s ago: executing program 0 (id=7): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r2 = syz_io_uring_setup(0x6026, &(0x7f0000000640)={0x0, 0x7e0e, 0x40, 0x2, 0x2aa}, &(0x7f00000006c0), &(0x7f0000000240)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000028a69a8433ef60916e6e713f1eeb0b725ad99b817fd98cd8244989490000faac8a6f770600dcca55f21f3cc1e822d18200"/80], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x3, 0x8201, 0xe, 0xff, 0x3, 0x57, 0x9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x1f, 0x0, @val=@tracing={0x0, 0x7}}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2a, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x7, 0x4, 0x10, @dev={0xfe, 0x80, '\x00', 0x24}, @private0, 0x1, 0x8, 0x5, 0x5}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x68, 0x0, r2, 0x0, &(0x7f00000003c0)="08bbbd16f7a19bb219c0848e2800235daff4af0e9eb5eb7e0125ca9556b0b1bcb2170a62ed7034728117c4af", 0x2c, 0x1}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000340)=@req3={0x6872a365, 0x9, 0x2, 0x7, 0x4, 0xa, 0x4}, 0x1c) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0xe82) 2m9.251248758s ago: executing program 32 (id=7): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r2 = syz_io_uring_setup(0x6026, &(0x7f0000000640)={0x0, 0x7e0e, 0x40, 0x2, 0x2aa}, &(0x7f00000006c0), &(0x7f0000000240)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000028a69a8433ef60916e6e713f1eeb0b725ad99b817fd98cd8244989490000faac8a6f770600dcca55f21f3cc1e822d18200"/80], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x3, 0x8201, 0xe, 0xff, 0x3, 0x57, 0x9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x1f, 0x0, @val=@tracing={0x0, 0x7}}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2a, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x7, 0x4, 0x10, @dev={0xfe, 0x80, '\x00', 0x24}, @private0, 0x1, 0x8, 0x5, 0x5}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x68, 0x0, r2, 0x0, &(0x7f00000003c0)="08bbbd16f7a19bb219c0848e2800235daff4af0e9eb5eb7e0125ca9556b0b1bcb2170a62ed7034728117c4af", 0x2c, 0x1}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000340)=@req3={0x6872a365, 0x9, 0x2, 0x7, 0x4, 0xa, 0x4}, 0x1c) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0xe82) 57.256531603s ago: executing program 2 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x11, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0xfff, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="d0000000010105000000000000000000080000020800074000008001340002800c000280050001002f00000006000340000300000c000280050001003a000000060003400002000006000340000042f9000008001a40000000012c00028006000340000400000c00028005000100880000000c000280050001003a000000060003400001000008001a4000000008280016406349e3b8000005290000000800000000000008000000000500000002000000000000007708000840000804000c000580050001000000000008000c400000"], 0xd0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 56.254274813s ago: executing program 2 (id=447): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd28, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x62010}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x0) 56.126108434s ago: executing program 2 (id=449): r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x8003, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) ioctl$RTC_AIE_OFF(r0, 0x7002) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x400000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xed, "876c4ae475dbcc764cd6301bbe69fccfe1fdcf7e1430fda6ef8f2c540217f3a65a38221a9e00e0fc553dd725242a9fb24ba2786358bb1b4ff01543f9e763bd55ae9e8354752e1a7dd361f0195c1dc6e4c1591e7bc56844d8dfadc0e843da962c15ec06447f0b59295608dc1a6a6f9383f6e506c40153e479a4842417134d71d3c17071cb11a559d54c0297924fc8b2f909da3e3433731d5fcea9edbb4ea8a2704ab0e31364a6b6f58ac76dcad791e7621330c07bf83bb2ae75f1ab0ba04507918e62b56967b12f1cb6815f565987edebfc2d2711774787a03d317d4a4ef02b131383a2fc826567b93b4d3daa07"}, &(0x7f00000001c0)=0xf5) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x977, 0x400}, &(0x7f0000000240)=0x8) (async) splice(r1, &(0x7f0000000280)=0x5, r1, &(0x7f00000002c0)=0x86b7, 0x6, 0xc) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r0, 0x101, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x18, "f92020b829179482f41f5a4b0fbf8df3a29c8b07cd3df22765510acbfd4f29869d8a08c256dc265b1a6c688aa93217c793f16f96cb86e2a190e3d6fa6674a11a", "c537c2c1485c36527094e73f01cc368e954b44331dbec1af1ce0776c724e171555f68a8de5ac9390205b5a491a5d3839f6e2fe86365f7cf8376f0f94ea47ccd7", "2a6dac0e4b7e0c0141161846ba1ad56b99fd9db9dda12ce82002593822b3fd2d", [0x3, 0xc]}}) (async) r3 = openat$snapshot(0xffffff9c, 0x0, 0x10040, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001500)={0x0, 0x0}) (async) fstat(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000001600)='.\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r0, &(0x7f00000016c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r8 = getuid() (async) lstat(&(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe2(&(0x7f00000037c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003800)={0x0}, &(0x7f0000003840)=0xc) (async) fstat(r0, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003900)=0x0, &(0x7f0000003940), &(0x7f0000003980)) sendmsg$unix(r0, &(0x7f0000003a40)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000004c0)="9b7b91529e0a035671e7875685696a1c32bdce44556f457e6b5f912e59d412fae5f177a90817185fa3c6a6631c89ea1431019f24291ec6a8b843e9840b1201a547e1a891a27c875d0b14184c8ff0bc179fc78ddf58a658b26c1f1f437e29bd3947b56b3dc20ced692d76fbfeadaabbbcc0921cdf7c75d3a5e583a98c36cd7e8680ed8380d890b7eb53204e882d553213c67e3074a2fc8ef97aaea4f8f90563e2cccb142b03920e42e5951985282ff241494dc81dbbe937ce0569e5bc55b0bcc8bde4547abefcafa49cd964d52ea140b45ca99bfb94ebd028efd9afb38b9a3eeb7f2e6a5200a3a9574d3f52ec593e753b7622a24b8adee633a06cdc6335e4d80032d13f7a027e052871b8e215f0697251daf296799b4206e1972ee4080b062229ac5dcc95e3b14199d4dda3d666806571ca95e5423c882238d540a85ae6ba77880506f2b785f9b3dba45a5b315be6328730ca25cc8ad41aaf0d87eca9e251443861a545d3edf6122025efa58068f1a264cb7be2b7ded6d883f5d1298818e0deedddd18c3dff349eeb3a6777c9e781dc3d147390200be05ef4de7b869f92f952813c4c1cbb7d64536b1fd6c9106184af95f9945f069a995e95248626fd5c229666e36361f9188020fa8f4ec51c0ec545a308bfb18b095448f4d8ba9726844b82b820cff7b310e9e15bb6d4854343abf69935998ca38bf686a7de839ecfe591ad84cf616a6e22893a625e0d19eaafb4f0d94248e986341c5371c26f559cf391955b71dd4ccf9b4e3f3385aa7477b568229a2a97ab4021847d219567aff460a5c961029ed73c8832f710caea85601fd369a6cbfda30903721d2e13b2086da8d9bbce02c11dc3d68d2b8c9795de71124d6d76f52fea9a4332747d7fb71efe557aec87554325ebcff7367c4a9b35461102f40fef7df6b65bc6dc572e23eb83dbe826241fbc05329d933d6909f7c816904e11f249c92b7562d517bf8b3e1948391fbdf74b64d1221288038b0c2084d3a717df56f9ff43dd6eec25067d39dafbe98d4cc5918b3f891cc13f9c142642c57bb65e483651439aaf9fe35b0a5bcc7f48a78dc36449c58f359a396b3df809c6fed7d3f7d2987e25585a5840cb43ca6e9b6b7caebd97c3a883e4c1f04a2644833d3346f2040dd8e0ba6c762f0c355eff11f354a2c995e9abe3cbdcca60e8540933d6e04083a5ea611b6e66977da64ebb44f7d49c780b77a687089a8fe6f6c8f8d61b2b96c0993bb806dc6ec2ba7b9dea7734761ad3c1c5cd4c84cb495a228d847fbaebb71c3a856274f1300bbcf2f61b00888bfa16e2357baf0ea281b28a5447690e7056ee44889007b8424af1f5a0aa67d48772988e9d186b74f63daf30be813adb8389722d1caff8eb0bf85d36a99db48605bd27863d43120dd75f6df502c17dc6cb603921ac4b697bb61e179bc5d5bece389b94530cc1fe030a0232d36c2d03f83d8757c44f5f29942f5df163f565e9943eb65b349297a67954e78e905fd833e00e856d6e23ccfcccd89aaae24cc8cfbfeb67c2fbc0e9ca9bc72c039278a1ab078c893c553875a26a72ba4effb73a9be05bb0a1ee130deb56d0c4a59690fe6f35d116e56292acc3db795cfe3b92bb8a6c769d730c68d7064610f46d2ff253529acfa1b17f02e751c9a661b10a17ee29491bed56f4770e956b02faf6425216ee6a2f57f7baeb39edcd3cb534baf7fd2025dc72180b085f1d3244dae0d067b3f7d54a7ca28229e04be0f175f4cd2e13fc2663d8cc9819eba72f675694937cbaa0a896f53a1e3c980aef6506835978deaaa3eaea1d3f5449dea7e5bf15e0b15624d0c18265c0c96e9616c295404b1ba64cc1ef88eb28e662e82d203c7e76379d7dc9eb38b69f110084cb7fd121698c49667fa5a010adf83f8e3c68edc0eda7c87f2e0822b806967088adf7d188cf11c14939cbf1d301e56e0fdbd5afb257c6b5126ed82d4920136c6743969c086f042b69ece38fada90a159085cbc48343bfd0eed05f7aaa4bed23437c751d29cb2f0447a73d98379b2be6b22d94074905134ac40a8a9f924056927dfb037fa044fd970ec307a7626f607341875c23acfcb3cd184cbb9d0b53c30e3b8cf5ff557dbadfe86df01e3e684f766417294c988251aecee7de7f1252fa8ddcd73a24488bae7d422ba2acd77099eca6ac701791d8a0e2ed1afad82ea6cf5b0221f2d6b4b58a192aab43591102d934e28d5372c5ffcd5582cf4a62b607d8df4df3257e722713eb23838613bef3e2240e5c2becc6242b090f31e0dfc1bdf861bb445a808886c26696b7c99d75c5c7957392b02aa5f4fd15b986c022b523610e033f39c713a8bdb04a50243361dbb8b9e5bb2b252d6748380b787151fdd07607e1681f76a7d00b8f90da3821766b34b8bf0ba978afa26dda0cd33079ee6f10cd5025e8e206003fae2b20bb2c8da64d41e84ebfa81630426dcddfd9ec09f41c244ebbe45b5e3eb83d3a8fea2eaa742ac9554c80632f48d10d7ab70fa29e404fa0400b78db56b0717bf8ead5347489608ff9ded130669ba19de771829a67c2a986b9e362a5d288d5c107c98d13e43705ec8e47fbd2a71c6881ef7528e6db3ae22415d402483ff413c97ce5a817facff37f0eb449ba11eee2b394b978c131fb8bed137362ae463f03d5adfa1bfd1e1506d709a00370603adce63757392f5d3e335eab3627f176c19a4ad6a90eac4b9c85493b237bb83d4a453b793688dad373db3c85648d4d8ebab1aeb8b11882fef61004444a56df634e988bbd98fcf0270cdbbd65b7dd3248c063b714d7c5037bd3de20a925d49b3acdb6521c044d044ca113b4857feac7171a5cac59b16e8696130aaca91a80689e1e0ea70e9909947a97986e46ca69aa2f5e4c18b4b750463dc92602ced512c2e16afb368582896874ca1cde8bfc5e71756433af60ef19e40ac736eb0e16060ea28556ee0dc3679967a74640798446505061fc50efdf93664e2bb1473c3f209bca91a2e1b15b65ba69f55ccf5649d89245c06b24de37664f31cae7319a848bf487e722f0f0a8d24aa3ed7109f8fb77b825ea5307927ab14b31377316ebffa8edf043171c1a210bc4b4247cd23d61a2eedf513569beff4a47cdb597e999b1515471bac3c1df9890da3ff758cb489fcade6626b52f43873572b5efa14e4f16e1822646d51d3dd4f97b26dce2e260e2ece843f87e01a24138afdf055bf870b1a4182f60526824ca026c570c1bec15c8912738aaad9e8146ba7f00af4f587af043194c9c3958ece4313eb64e977727b7b819c32119265640ae170fc20b042d4aa574a2b8d1008f3adc22d926ec85a7f272654d5ac3907df7f1110e92719b8cf9e87698216f7608fe8131a79eccf152b41a774b3b0c9bcb878fd944ca8556ae27793f2de75d539661d1ce12db50a115fc295d7c5da82ab97dbcb682a8da0050f3cd1ed48e6c427cba608d86145c88ebee47e7e1030d9402c2380693a7a48b87871cb4dcc104ca2336c07b4258a3aa5dfb609893748f71bbfb96aff046ce616b4c0f2a19430dec877db693b0e94d4d8577075744c091acc64b804518ac261e05db9a2a328933f7372b1b0b22bb42e15dfdfe33d2e10e0a193d4c016267105f366ca8f476d1356b377d37e28bdb6cb50f57228bd9b0534d2fb1e8ad12946e409cfc52f2e67a73362ba345fbb9227791841812bc8efe642ab1fdc07236e4d3959f275a10845c01d129878c6ca8a601b765f6a417d4e439232e5945befbcea19bc76477fbe24771921d55f004a360a810520c99efa36097be43af46dc9649c65eb81c0bcbe3d24bb6ed2117235ec8e9538596441e80d1df5b211021afb9375b98c80c89117884e5bfef677da1fcf076fad46019617448e6e3018a86f2462a8a3d2ee8f0e77fb664801a8e46399d624fc65de30435156c4a9f6739c8e8ca2400384c2d65f79a5bddabcdd2103469947f6380a8ca7a7b68f3f1f78173e9c1baa5db92ae5170ed96a3eea3aa178cf8bb3359ff014b0e1b2b0179f26cf0edd12c2abccbf0da48d2afce9122292d0f8af576ce2289e496ea647b157763532400141ae7422930421de16689f5b36a187e51d1e95d304f93bb31fb8317e4068d1bf8fe7ba8a80ff1b40e3d26086097fb0c9245c8527f7d3a1cfb6dc8d3cb6dffc7af65d65bf7803ba7746126f81fd11f0382ce6d512a815826a663c9aedf3225b6cf63764d6d0ddd3fef47e75aa342c94e8529ae4de284d54d851fb0467f40c16c814724224e9f4749d29c7d44d25899cd97cba03a57466c4427e01efed745c8e277629fba2b01d9c381aec65ac8c64efc27adec26931546fba8efdf6e05d8a4db0d2006ea9c5ca63c80321628b8fdb542646402d7f346e5e57d085eea395907d2c71c9fa50e2b6451281888f6a900a1d71e7ab033d2471e09635c95dda26e45bcb0137caabdb4171f1e5cb341926e76df42f678e5415c02232bec80c642b5cd808eb108550525c565f19d32014fc6926988ad0dd2ca34e9a1085c6cd8f10daa907bd2e2c5a47164b48f31996b18c726223e40e9ee6eb40f390b9f1224b9910804d6176e95ac3b06b428788d513b4bdbcbb787c96cf184e1c2791276409f623d98ef20f012c4dd661cbf173d063684e32115929a30bc3d43a8e090df2c8aafeee294f683bc46232a3f90dece3f15faa490cccae836ff4981aaa2dcd0d67b777f8557bf75f9b0a58ecbe067de46eba7d4955208f46704fed0ef236433a1afaa43dfcca293eac7dac69c49fe22ed3073f669218e7a82a94341d09bc87fc1be91cac5d757c6dd99cae279e60f2967edd6d8da3b1493257437307f13105335b47c2f30841e892636b14a99c71a8f2addcead88b3e8b009a01441f1666a8f9ff13c98bf934479fead13069970997e950501979f0749f46ca93a5cc92fa5a8fcbf3cc83b3c2682121eb0d1f0a09494c68ed10f59d5c0749fe440f637b0ab907257c867d3ca322f717ce239f0ff9f1bd6d89b6ecfdeb8726f90fefa618a87ea0973364b9286ebed92b1f7e4b7090788fffeaab270b10247ad3e9e49d0a25a8cad723bb173f342185543dc8971f28a37731844c605af050d577d86f213eb91ad5e87ad1356dc772b42074b47a28ca0a806f94878dbaa6dddeb31331fee7c68fcf933f8556eccc048a5838307c27f622247880c8df172c47e59f2e0c68b69c67d2f4091b2e5fa42ff2f811b74b0b229380b326abe939587f57c6d1c96c7a12504c884e5a074a5528dbf3504666a09ee61399f9213b73943784b46cb1c6af5057620044abd47b384f4b221c05a7b25e3e63b6a351c0b31b40bc36f21d4fddc205bd67b5b529e0bdd167ac5a9a5e8d4e2acdf38ea31ef81d805faa66684414c6b770ce3832ceaa2c07d17e1f5b3899323f303d0995889d370d95b47c031f0561b2b429007af89871f97f4e84453714930abc7f94d0768fbbcaf09da249e028368cad7d555dcb5259f18d135e3a3b12a2897e4e26ace28e876a8e7804af328336ccd33b6e72b0dd12e29230f5b73afcc4aa812f4d7892139b5f647ee052daa9f50399ebf0792e5b1e8bd2efe80aba6f2480d69d6152604eeefa9032d520a9714e6cbe7b676498b362872bc5633b8e0c5c413353b7b4fc2031fd5370376d5023289b01fca6a58eb0eff211116294503791f6c63f7dc25f85c47a968e951406d8b79189bb79965a129badb4275b9ba9b186b4b38a528e30587bce7b68f069a0b5364819e1bd1a9c533fbd6b20dadfff4daca017d0d7b223334972d26513ebfe32e3b20b23f98d5", 0x1000}], 0x1, &(0x7f00000039c0)=[@cred={{0x18, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x18, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x28, 0x1, 0x1, [r11, r0, r3, r0, r1, 0xffffffffffffffff, r1]}}, @cred={{0x18, 0x1, 0x2, {r12, r13, r14}}}], 0x70, 0x200c004}, 0x14) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000003a80)={0x5, 0x9, 0x2}) (async) r15 = add_key(&(0x7f0000003ac0)='asymmetric\x00', &(0x7f0000003b00)={'syz', 0x3}, &(0x7f0000003b40)="e5c615768ae75ca3074abb19f219e1168df2e0c25c15663f6c625f768325d9c851e6c9b9dbedc150a3aaa024d592715461091aab22259e2fc77bebb0f09f84b8d8512c1802a572b7d0c6ed314f19105659185afefcd38df2dffba60dc4ac15c97546b520f168540e4639145be55fc27afa88fead99a7bf3b32e20490751e58a3bfc0d08488ffe51353792401b2fb429d270305f1a3ac5b3c2222223623ff6325ee7ff1d4b21eb7b323d17a93b35ee8b4d8a49df39040bf3d0d", 0xb9, 0xfffffffffffffffd) (async) r16 = add_key$keyring(&(0x7f0000003c00), &(0x7f0000003c40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r17 = add_key$keyring(&(0x7f0000003c80), &(0x7f0000003cc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r15, r16, r17, 0x0) fsetxattr(r1, &(0x7f0000003d00)=@known='user.incfs.size\x00', &(0x7f0000003d40)='keyring\x00', 0x8, 0x2) (async) ioctl$VIDIOC_G_EDID(r10, 0xc0245628, &(0x7f0000003dc0)={0x0, 0xfffff9b0, 0x0, '\x00', &(0x7f0000003d80)=0xc}) (async) socket$kcm(0x29, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r11, 0xc010f508, &(0x7f0000003e00)={0x39c5, 0x5}) mmap(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x2000001, 0x8010, 0xffffffffffffffff, 0x92270000) 56.114016012s ago: executing program 2 (id=450): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000d0000001a0008"]) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) pwritev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00!', 0x2}], 0x1, 0x1000000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b52, &(0x7f0000000000)={0x2, 0x1000, 0x2, 0xfffffffc, 0x0, 0x0}) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, 0x0) 55.944374387s ago: executing program 2 (id=453): mq_open(&(0x7f00000005c0)='.pending_reads\x00', 0x40, 0x40, 0x0) r0 = socket(0x28, 0x4, 0xfffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1, 0x1e, 0x60, 0x10, 0x6e}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x48}}, 0x0) 55.938586896s ago: executing program 2 (id=455): userfaultfd(0x801) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20044010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0xfffffffffffffdd0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$l2tp6(r3, &(0x7f0000000240)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x20}, 0xa}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) (async) read$dsp(r5, &(0x7f0000000100)=""/94, 0xfffffcf7) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) 48.308064583s ago: executing program 4 (id=486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) r0 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000003000000a00800000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000c2b5840cdae4f24dbc793b4a1a10bb94ee94432a42c321a725a7eff92d42b45404fe0598096214c5907996f07289342421142c390a4350c4f838de9d58cbf3997e0cd06b3fb51b58cee36d597e504dcdd301c24dd1edb28e58802939f386ce123bf9dbaba67dc6138daeb41d86acbeec78d3fa545df42cb0083e8feabbcb0b5e"], 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) syz_usbip_server_init(0x6) (async, rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a300000000014000780080012000000000005001500040000000500050000"], 0x5c}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) (async) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x954, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) 48.1041954s ago: executing program 4 (id=488): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,cache=loose,fscache,timeout=0xfffffffffffffffc,smackfstransmute={,euid>', @ANYRESDEC=0xee00, @ANYBLOB='&\x00']) r1 = socket(0x28, 0x801, 0x0) r2 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x5358, 0x10100, 0x1}, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'bridge_slave_1\x00'}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x1}}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001007ffb0000000000000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x9, 0x4, 0x4, 0x1, 0x4, 0x7, 0x9208, 0x2, 0x5, 0x9, 0xdab9, 0x1, 0xffffff80, 0xffff, 0x5b7fca3a, 0x0, 0x6, 0xef, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x40, 0xff, 0x8, 0x9, 0x3, 0x2, 0x9, 0x1, 0xc, 0x1, 0x9f3, 0x7000, 0x846, 0x2c1735fd, 0xcbd4, 0x800000, 0x9, 0x8, 0x8, 0x8001, 0x3, 0xfffffffc, 0x6f494e20, 0xe5, 0x3fc, 0xe, 0x8, 0x7, 0xa5, 0x4c8, 0xffffffff, 0x81, 0x2, 0x47, 0xc838, 0x8, 0x9, 0x4, 0x800, 0x8, 0x7, 0x3, 0x4, 0x5, 0x5, 0xe, 0x78e3, 0x7, 0x7, 0x8, 0x8, 0x2, 0x0, 0x4, 0xb0, 0xfffffffe, 0x4, 0xac04, 0x5, 0xc, 0x1, 0x3, 0x6, 0xfffe0000, 0x4, 0xa, 0xd71b, 0x7, 0x67a3, 0x0, 0x5, 0x4, 0x2, 0x0, 0x1, 0x8, 0x0, 0x6, 0xfffffffd, 0x9, 0x0, 0x9ff, 0x6, 0x3ff, 0x7, 0xffff, 0x3, 0x5, 0x0, 0x9, 0x2, 0x200, 0x3ff, 0x4, 0x5, 0x1000, 0x5a, 0x1000, 0x8, 0x5, 0x4, 0x8, 0x5, 0x594d, 0x120000, 0x6, 0x0, 0x3, 0x0, 0xbc, 0x96, 0x6, 0x6, 0x0, 0x1000, 0x2, 0x800, 0x35, 0x7, 0xcb200, 0x1, 0x5, 0x4, 0x8, 0x9, 0x2, 0x2, 0x3, 0x6, 0x5, 0xfffffff6, 0xffffff00, 0x8, 0xffff, 0x400, 0xfffffbff, 0xfffffffd, 0x3c, 0x2, 0x8, 0x6, 0x3, 0x7ff, 0x80000001, 0xf, 0x7ff, 0x729, 0x4, 0xb6, 0x2, 0xfffffff7, 0x6, 0x8, 0x1, 0x3f9, 0x40, 0x7, 0x6, 0x3, 0x8000, 0x0, 0x9e2e, 0x10001, 0x7f, 0x0, 0x10001, 0x7ff, 0x1, 0xe000, 0x0, 0xfffffffc, 0x10, 0x0, 0x5, 0x7fffffff, 0x6, 0x5e7f, 0x8, 0x100, 0x1, 0x7f, 0x200, 0x7fff, 0x8, 0x3, 0x10001, 0x77, 0x40, 0x4, 0x2, 0xd, 0x5, 0x8, 0x1, 0x6, 0x2, 0xfffffffb, 0x5, 0x9, 0x4, 0x200040, 0x1, 0x9, 0x7ff, 0x32bf, 0x9, 0x8, 0xcbc2, 0x9, 0x5, 0x1, 0x1, 0x8, 0x3, 0x98, 0x5, 0x3, 0x3, 0x7, 0xd, 0x84, 0x0, 0x4, 0x3, 0x4, 0x10001, 0x8, 0x318, 0x100, 0xa9, 0x6, 0x3, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r6}, 0x18) r14 = openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r14, &(0x7f00000002c0)={0x18, 0x0, r15, {0xfb3}}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) shutdown(r1, 0x1) connect$inet6(r1, 0x0, 0x0) 46.903488696s ago: executing program 4 (id=492): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000a80)=""/246) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="840000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30000000000000480016804400018040000c8014000104ff0300ff88a8000014000100390e00003f0000000d000000810000001400010006000000af0600000700000088a8000005001100060000000000000000000000337289ae8504346600e663960b2466b8aeb6d543ca7b0ab342095dd8aa80a9436ac2f322cd6bb964e3248157af44c58b53fb284ad18ee521b78b0b06ef2dad6158b7e9a5a099c23ff2e5a4f76b865a82818641f06dd6e5a447eed69dd0eb0c356e744afe52ad9e3f7a4ee55afa2316f56ff79b8928a92f1afe8c6d0077f0960092ad769d4294fff153"], 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r8 = msgget$private(0x0, 0x4a0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r8, 0x2, 0x0) msgsnd(r8, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) 45.95059014s ago: executing program 4 (id=498): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="7c020000210001000000000000000000ff020000000000000000000000000001fe8000000000000000000000000000bb4e2100"/64, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000100000000000cc011100e0000001000000000000000000000000ac1414aa000000000900000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000bc020000000000000000000000000000000076b50000000000000000fc00000000000000000000000000000100000000000000000000ffffe000000200000000000005000000000000000000ac141400000000000000000000000000000000000000000000000000ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a00100000000000000000004000170009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d05001900000000000c001500000000000000000085a9387f7185e3d82491b6fae3feb55b7f45"], 0x27c}}, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r1 = syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) mkdirat(0xffffffffffffffff, 0x0, 0xa629a24beed625ae) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) execve(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000640)={[&(0x7f0000000140)='lowerdir', &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='+%+/.\x00', &(0x7f0000000600)='\x00']}, &(0x7f0000000880)={[&(0x7f00000006c0)='-./\'#&/-\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='.#(%!}{\x00', &(0x7f0000000780)='workdir', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00']}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x4000000) gettid() writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000680)={'ipvlan0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0xf, 0xc8, 0x6, 0x1000, 0xffff, 0x3, 0x7fffffff, 0x81, 0x4, 0x18, 0x8, 0x9, 0x3, 0xfffffff2, 0x0, 0x1e, 0x0, 0x8008, 0x3, 0x5, 0x0, 0x1, 0x4}}) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 45.847199011s ago: executing program 4 (id=499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 45.291317071s ago: executing program 4 (id=503): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010006000000000000000000000a2be75e0bc5806bfaa8af7f0164e0dc2d0102c72fdccffcf3a5a4778705031e3ebc2b5412a6a14b44dfdba0e2b6166aa846dd66954d4cc327dc84e67d1f6c07c93020f590c1e961e5823434f9d43981427fba63d7e21f28938e84f06e9f3d36e73711b5b53299d32575921a51866e481462c0e6ca90"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$kvm(0xffffff9c, &(0x7f0000000300), 0x70000, 0x0) setgroups(0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe19, 0x4e, 0x2}, {0x802, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) 45.041667042s ago: executing program 33 (id=503): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010006000000000000000000000a2be75e0bc5806bfaa8af7f0164e0dc2d0102c72fdccffcf3a5a4778705031e3ebc2b5412a6a14b44dfdba0e2b6166aa846dd66954d4cc327dc84e67d1f6c07c93020f590c1e961e5823434f9d43981427fba63d7e21f28938e84f06e9f3d36e73711b5b53299d32575921a51866e481462c0e6ca90"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$kvm(0xffffff9c, &(0x7f0000000300), 0x70000, 0x0) setgroups(0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe19, 0x4e, 0x2}, {0x802, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) 40.450293445s ago: executing program 34 (id=455): userfaultfd(0x801) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20044010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0xfffffffffffffdd0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$l2tp6(r3, &(0x7f0000000240)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x20}, 0xa}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) (async) read$dsp(r5, &(0x7f0000000100)=""/94, 0xfffffcf7) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) 11.305777761s ago: executing program 5 (id=630): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() (async) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540)=0x1, 0x4) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) open$dir(0x0, 0x400080, 0x386) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) 8.821410129s ago: executing program 5 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 1) 8.336234908s ago: executing program 5 (id=639): syz_clone3(&(0x7f0000000080)={0xb6ba3000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) mkdirat(0xffffffffffffffff, 0x0, 0xa629a24beed625ae) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff00c}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000006c0)={'geneve1\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x4, 0x6, 0x29, 0xc, 0x6, 0xfffff001, 0x8, 0x2, 0xe70c, 0xf, 0x6ed4, 0x2, 0x1000, 0xfff, 0x34b, 0x23, 0x1, 0x6, 0x7, 0x1, 0x11, 0x0, 0x1, 0xfff, 0x6, 0x200008, 0x3, 0x6, 0x5, 0xc4, 0x1e000000, 0x8, 0xfffffe32, 0x8, 0x575, 0x7f, 0x2, 0x6cc, 0x0, 0x3, 0x101, 0x4, 0x6, 0x7, 0x3d, 0xd7, 0x9, 0x3, 0x8001, 0x3ff, 0x6b61, 0x7, 0x8f20, 0x7f, 0x6, 0x0, 0x0, 0xfffff5d0, 0x2, 0x800, 0x5, 0x8001, 0x5, 0xffff, 0xffff, 0x80, 0x5, 0x932, 0x3, 0x7699, 0x34f, 0x22, 0x200, 0x1, 0xfffffffd, 0x6, 0x2, 0x0, 0xbd6, 0xffffffff, 0x7, 0x4, 0x7ff, 0xfffffffc, 0x5, 0x8, 0x5, 0x9, 0xff, 0x10000, 0x3, 0x4, 0x5, 0x8, 0x401, 0xe, 0x1, 0xfe000000, 0x613, 0x9, 0x0, 0x1000, 0x6, 0x7, 0x7, 0x4d, 0x9, 0xa, 0x2, 0x7, 0xd, 0x5, 0x9, 0x4, 0x3, 0xf6a, 0x800, 0x4, 0x8001, 0x3, 0x9, 0x11e, 0xbc4, 0x8a, 0xfffffffd, 0x2d, 0xfffffff9]}}) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="e1083f0904221f0001ffffffffffe6f0c78febbe67"], 0x22) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup2(r0, r6) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="07005ed2be955da5e72dbb2063bc200ee35d942d87c6c750379d257439f61aed4c939599b0eaa4fad848e32b7645b9044ed03172709d78c49d499a662107c1357d017f83d6724588d9c682", @ANYRESDEC, @ANYBLOB="00022bbd7000ffdbdf250200000006001d00eb00000008001800e00000020500050000000000060001000400000005001200080000000500050000000000"], 0x44}, 0x1, 0x0, 0x0, 0x404c004}, 0xc001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x2000c850) 6.956411871s ago: executing program 6 (id=643): r0 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x400caeaa, &(0x7f0000000040)={0x4, 0x80000000}) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000080)) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000100)) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x8001, 0x80002) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x34}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x8000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000700)={0x72, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000480)=""/2, 0x2}, {&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000600)=""/96, 0x60}], &(0x7f00000006c0)=[0x5, 0x0, 0x0], 0x7}, 0x20) r5 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x1407, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000880)={{0x58000, 0x8000000, 0x4, 0x4, 0x7, 0x3, 0x3, 0xe, 0xa, 0x0, 0xa, 0x10}, {0xeeee8000, 0xa000, 0xc, 0x2, 0x6, 0x3, 0xfe, 0x6, 0x8, 0x4, 0x9, 0x2}, {0x1, 0x30000, 0x4, 0xeb, 0x4, 0x8, 0x7, 0xf6, 0x1, 0x10, 0xb8, 0xea}, {0x2000, 0x2000, 0x10, 0x30, 0xd, 0x9, 0x3, 0x5d, 0x6, 0xd0, 0x0, 0xb5}, {0x2, 0x1000, 0x0, 0x1, 0x9, 0x0, 0x80, 0x4, 0xd8, 0x1, 0xfc, 0x40}, {0x6000, 0x70000, 0xa, 0x5, 0x7, 0x60, 0xc, 0x96, 0x6, 0x6, 0x3, 0x3}, {0xffff1000, 0x70000, 0xe, 0x8, 0x9, 0xa, 0xf7, 0x1, 0xec, 0x92, 0xd, 0x3}, {0xe6ee3001, 0x0, 0x0, 0x3d, 0x29, 0x4, 0xa7, 0x40, 0xf8, 0x1b, 0x4, 0x2}, {0xeeee0000, 0x11}, {0xffff1000, 0x2}, 0x1003f, 0x0, 0x99aa9dde7402c222, 0x90, 0x8, 0x2100, 0xe000, [0x7fff, 0x8, 0xffffffff]}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000a00)=@arm64_fw={0x6030000000140003, &(0x7f00000009c0)}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {r1}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r8) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x190, r9, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa360}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @mcast1, 0xc5d7}}}}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044081) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = getuid() sendmsg$nl_netfilter(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x7, 0x4, 0x101, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x6}, [@typed={0x8, 0x7b, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x88, 0x0, 0x0, @uid=r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NFT_BATCH(r10, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x801) syz_open_dev$video(&(0x7f0000000f80), 0x1, 0x1410c0) r12 = syz_genetlink_get_family_id$team(&(0x7f0000001000), r8) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001100)={r7, 0x58, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000011c0)={'ip6tnl0\x00', &(0x7f0000001140)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x6, 0x3, 0x4, @loopback, @remote, 0x7, 0x7, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000001280)={'ip6tnl0\x00', &(0x7f0000001200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xc, 0x9, 0x52, @mcast2, @mcast2, 0x20, 0x700, 0x9, 0xb8}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001840)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001800)={&(0x7f0000001500)={0x2fc, r12, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r17}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 6.828945987s ago: executing program 6 (id=646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) mlockall(0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) mlockall(0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 6.445562739s ago: executing program 5 (id=648): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 2) 6.106272148s ago: executing program 5 (id=650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}], 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [{@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_user={'subj_user', 0x3d, '+'}}], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r5], 0x5c}, 0x1, 0xba01}, 0xc814) close(r3) (async) close(r3) 5.033746047s ago: executing program 3 (id=652): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x3, 0x6, @broadcast}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x11, r5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_getvlan={0x58, 0x72, 0x200, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000021}, 0x0) 4.777173776s ago: executing program 3 (id=655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4.420831418s ago: executing program 6 (id=656): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/tcp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x82, 0x3, 0x4, 0x2, "e8ab3537a1389b6d"}, 0x48}}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4.237666733s ago: executing program 3 (id=657): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (fail_nth: 2) 3.706558897s ago: executing program 1 (id=658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.62676724s ago: executing program 6 (id=659): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0xc, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0xce, '\x00', 0x4, 0x4}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x4, 0x2, 0xff, 0x3, 0x9}, &(0x7f0000000040)=0x20) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$get_security(0x11, r5, &(0x7f0000000880)=""/4096, 0x1000) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4105, 0x1009}, {&(0x7f00000006c0)=""/117, 0x75}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) openat$cachefiles(0xffffff9c, &(0x7f0000000080), 0x210000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x28, 0x7, 0x0, 0x0) 3.542801316s ago: executing program 1 (id=660): syz_open_procfs(0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001000000f8ffffffffffffff000a"], 0x64}}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, r5, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.436685575s ago: executing program 1 (id=661): sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0x7, "f25e87", 0x2, 0x9}) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x48b83, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) 3.435934123s ago: executing program 3 (id=662): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0xd0000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1ac, 0x2a8, 0x2a8, 0x1ac, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xff000000, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0xbc, 0x11c, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0xd1}}, @common=@unspec=@addrtype1={{0x28}, {0x80e, 0x40, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x2, 0x6, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x5], 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) 3.345578176s ago: executing program 5 (id=663): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30d5e, 0x200}, [@IFLA_GROUP={0x8, 0x1b, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40810) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB="0700727d45025f29643d17edac4f26753570bf5c98011f743419d10fc19c", @ANYRESDEC=r1]) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x8002, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) mount$fuse(0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x10, &(0x7f0000002780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030313830302c626c6b73697ab8dfa82fb9367b2c97dd4b761b44002f9580000078303030303030303030303030313430b53faf5d765afc523221c71a7d39ff0b1aace444c913caca0f"]) syz_usb_connect(0x3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r8, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r9 = syz_open_pts(r8, 0x103100) dup3(r9, r8, 0x0) splice(r8, 0x0, r7, 0x0, 0x7ffff000, 0x0) sendmsg$rds(r7, &(0x7f0000000640)={&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000580)=""/168, 0xa8}, {0x0}], 0x2, 0x0, 0x0, 0x80}, 0x24000080) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r2, 0x1, 0x8000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.34459141s ago: executing program 3 (id=664): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5e, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfe5e) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20842, 0x2) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r0], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x0, @default, @bpq0, 0x6, 'syz0\x00', @default, 0x0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf08529efbc42d1f5480d3566ad9641ff9bb6e941cec7e3725bf80bf4d13b68565a3550331415ae7a7b4e7ca6b7fd9f2955386239a19d85c1365ab694f4e61adb3f587e9e3c52c80cc4963f98925ae3b90abbca611a5aa0382b8b3987bca657f75ee544a603c933cfde81723fc76c77399160461f904a3ad54810a72cb0ecc6415d49ee370dcbe2227bba806c6fea43715d3c666d7e6d730dbdbd27a6835ce84f38af0481079d1a71160585b58c4fd35ae80041e9232ee3fb25baba8fca4774f3cfa5e3a7d52ece27b2fb93b5ba58a47eaa2c89ed06722b55826e1ee82de88f52157b455"], 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfff9b32c0}, 0x4011) socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x6f6) socket$inet_mptcp(0x2, 0x1, 0x106) 2.395780529s ago: executing program 6 (id=665): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r3 = syz_io_uring_setup(0x100, &(0x7f0000000140)={0x0, 0xf193, 0x10800, 0x3}, &(0x7f0000000000), &(0x7f0000000100)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20c10840}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000000101020000000023bab3540000000700000008000c000308004c40000000000000000000000000cdd5655940a30091593108eb55a4a17d517ddc80f91411f2191080df7baa57ddf3252a0335346fd1df53d8dffbcd332f8422b265c8fd34dabd729341ff971c0f96c4857380e81863e2cd299dc1b980fe6bb2716c393e63d9e1746addb1319a6fed904e0696b136f04aa7ef7779a0689779bb449c8632d598439e0421aa11a2e552ddb942ffd20c2296aa8deb9377e2819a80e6177d47fb0633a99557e9c7b180204e33ecbe6561de5b7e82f7998820124d774ff9c3a5c690a800253b"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24000810) r7 = openat$random(0xffffff9c, &(0x7f0000000040), 0x42400, 0x0) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000080)) r8 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) write(r8, &(0x7f0000000040)="1c0000001a", 0x5) close(r5) io_uring_enter(r3, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 865.223462ms ago: executing program 6 (id=666): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x3, 0x102, 0x2, {0xdf, 0x81, 0x3, 0xc4ea}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x8000000000000001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x20000000) sendmsg$key(r6, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) mlockall(0x7) r8 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x103080, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) 576.050344ms ago: executing program 1 (id=667): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 335.678634ms ago: executing program 1 (id=668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket(0x22, 0xa, 0x8) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="2400330000280900ffffffffffffbfb239b20000f71ef89b6bf037c12fcfcbb851000100080057002f2000"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3, 0xfffff587}}, './file0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f"], 0x3c}}, 0x10) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r11, 0x400, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20008000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000040a01010000000000000008c3000002"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 584.104µs ago: executing program 3 (id=669): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000640)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) openat$cgroup_root(0xffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x560}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r11, 0x0, 0x0) (async) read$char_usb(r11, 0x0, 0x0) syz_io_uring_setup(0x3a1f, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x0, 0x7f}, &(0x7f0000000240), &(0x7f0000000100)=0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd71, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002cbd7000fedbdf25010000001400020064760000000000000000000000000000050004000100000005000400020000000c3c4c473df064bd45a02006a043207d5d28e86537625ac74521"], 0x38}, 0x1, 0x0, 0x0, 0x48804}, 0x4008040) 0s ago: executing program 1 (id=670): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, 0x0) memfd_create(&(0x7f00000004c0)='\xe8\xd6\xf9\nX\x7f\xc8\xfe\x94%+\xe1Z2\x99\x1d\xb89\x9e\xce\x0f\x85rT\\\xf6J{u\xc1{\x9c\x92\x90[/\xf8\x10\x9eU\xe0X\xe9;X\x8e\xee: \x8b\xfb\x86\x11en\xe6\x06kj0\x90\x1f1\xf2\xaa\x98\x02\x7f\xc3\xa6\xb9\xb6\xa7\x96\xf08\x9e\x83\xc2\xd0\xc2\n0\xe4\xb9\xf2\xa9\xabN\x0e\\\x01\xa3\x95u\xa8\xa6P\xc8\xaf\xc0@s_\xcd\xc7e3\xc9\x84C\xc5\x82\x8f\x7f\xc0\x8a\x86\v\x0f\xc5\xc7\xc1\xf4\x90]#@:\x99R\x89{\xe4E\xd7qp;\xb8[m\xb9u\xdd\xedo\xaf2R#\xac8e\xd7r\xd0\x1f\x11\x85\t\xaa\vV\xe0i\x7f\x17\x9a\x9c\x9a\xc6\xaf\xa3Gz\xf2\xd9\x1c\xc9\x86\xa1,\xedA\xe4\xfa-Dj\x84\x94\xa9}>\xd5xTl/8\x0e\xd7\xbe\xebQk\xaa\x12\xd3k\x14\f\xc0f0e\xb0\xb8g\x9d\x7f\x11j\x97K\xd9\xf6\x19Dk#e\xa2\xc0\xe6\x8d\xd9j\xb2\x90\xc8\xd1j;<\xe5|\x97r\fF \xa4\xc8!\\\x96\x10\xbc\x8c}\xb9\xda\xf9\x0f\xac\xa5\xf9\xfe\xb6[\xd1\x1a\"\t\x12p\xb4\xbf\xd6o\rKe\xa15\x94O\x8f\x95\xb7\xdbT*\x90X\xd6C\x12\xf1\xdb\xfd\xdf?\xd3\xe1\xb4', 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) arch_prctl$ARCH_SET_CPUID(0x1012, 0x10201) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x6, 0xd, 0x24, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x20, 0x10000, 0x4}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) fchdir(r3) syz_io_uring_setup(0x107, &(0x7f0000000140)={0x0, 0x747f, 0x0, 0x4, 0xae}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x29c780}) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x15, &(0x7f0000000b40)=@raw=[@ldst={0x0, 0x1da7e5f433c1c660, 0x0, 0x9, 0x7, 0x80, 0x1}, @map_fd, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @ldst={0x0, 0x3, 0x2, 0x6, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x3, 0x0, 0x3, 0x8, 0x6, 0xffffffffffffffe0, 0x1}, @call={0x85, 0x0, 0x0, 0xc2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit], &(0x7f0000000c00)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x21, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x4, 0x4, 0x2, 0xa18}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000dc0)=[{0x0, 0x5, 0x2, 0x2}, {0x2, 0x5, 0x4, 0x2}, {0x2, 0x5, 0xc}, {0x0, 0x2, 0x1, 0xc}, {0x4, 0x2, 0xd, 0x3}, {0x5, 0x4, 0x10, 0x2}], 0x10, 0x3}, 0x94) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r2, @loopback, @multicast1}, 0xc) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r7, 0x4, 0x2800) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r9 = syz_clone(0x1000, &(0x7f0000000280)="4f0fe569ad12eb8ea5ee259f29f11d36aeefb26c9a6c9872e1260584d4fae86edbdfe7632ef59cb28e1520becea374292a0f28ac1a40440eef9b1fa08d572f3dc09f5d01a41332be4e7de144d86318f97a2e5f69efefd8417bc1ebbb03cfa38257ad152ae0fe0c637bb74e4fe0840de2558b1c4e59adb0286bc3d8f87f23da254bd885e54217a9391fbc173f05d5aa2d935b7a6fb438ef23904f0e9f85fcc29b7a637eeda8f357d606ac3f2c888f32ab34275826228020f9baf94f26", 0xbc, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000680)="748ec53c38de3866a74486a62f0387cea5b821468a5f48564b11c1eeda317b3d58ff229eeac119cc97f2be8b80ca2f7749a488360a44ccc675f315c03cd06397d6f758ead8a19967f5fc99d34c4e81c14e1b3ccbd5bf7de0905616ea73290eccbaed9f1249e8e060869e02a99401c7102b4cf07b5279b98336a2becf81aca050c1373a40eb2518baaf2e43fc0e7ee4bd224089da72c1865463ff19b62527313c8344ed0e878609ec273af1f3b6882e8cfd5a735249e4fc1bc50d9b5835d2465958ef0e718d84cf52d606d06287c63d7fb14a5e96096582cda7c92d") ioctl$BLKTRACESETUP(r8, 0xc0401273, &(0x7f0000000780)={'\x00', 0x3000, 0xde, 0x2, 0xf, 0x7fffffff, r9}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000008c0)=0xe4) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000009c0)={r10, r11, r12}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r8, 0x36, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=[0x6, 0x6], &(0x7f0000000240)=[0x0], 0x9, 0x2, 0x1, r9}}, 0x3c) kernel console output (not intermixed with test programs): 27][ T6207] team0: entered allmulticast mode [ 64.873541][ T6207] team_slave_0: entered allmulticast mode [ 64.876125][ T6207] team_slave_1: entered allmulticast mode [ 64.881118][ T6207] team0: entered promiscuous mode [ 64.882934][ T6207] team_slave_0: entered promiscuous mode [ 64.884961][ T6207] team_slave_1: entered promiscuous mode [ 64.888333][ T6207] bridge0: port 3(team0) entered blocking state [ 64.891343][ T6207] bridge0: port 3(team0) entered forwarding state [ 64.895537][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 64.899413][ T6207] team0: left allmulticast mode [ 64.901517][ T6207] team_slave_0: left allmulticast mode [ 64.903839][ T6207] team_slave_1: left allmulticast mode [ 64.905765][ T6207] team0: left promiscuous mode [ 64.907902][ T6207] team_slave_0: left promiscuous mode [ 64.910336][ T6207] team_slave_1: left promiscuous mode [ 64.914194][ T6207] bridge0: port 3(team0) entered disabled state [ 64.927039][ T6207] bridge_slave_1: left allmulticast mode [ 64.929607][ T6207] bridge_slave_1: left promiscuous mode [ 64.932242][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.939886][ T6207] bridge_slave_0: left allmulticast mode [ 64.942400][ T6207] bridge_slave_0: left promiscuous mode [ 64.944527][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.998781][ T6023] usb usb40-port1: attempt power cycle [ 65.477553][ T5939] Bluetooth: hci2: command 0x0401 tx timeout [ 65.557911][ T6023] usb usb40-port1: unable to enumerate USB device [ 65.897810][ T6222] blkio.reset_stats is deprecated [ 65.901252][ T6222] 9p: Bad value for 'wfdno' [ 66.465063][ T6218] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 67.171597][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 67.171611][ T40] audit: type=1326 audit(1766689227.514:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.1.48" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 67.717719][ T5939] Bluetooth: hci2: command 0x0401 tx timeout [ 68.347996][ T6264] netlink: 56 bytes leftover after parsing attributes in process `syz.1.51'. [ 68.510512][ T6268] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 68.512818][ T6268] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 68.515724][ T6268] vhci_hcd vhci_hcd.0: Device attached [ 68.728771][ T6269] vhci_hcd: connection closed [ 68.729054][ T6057] vhci_hcd vhci_hcd.2: stop threads [ 68.732469][ T6057] vhci_hcd vhci_hcd.2: release socket [ 68.734327][ T6057] vhci_hcd vhci_hcd.2: disconnect device [ 68.787563][ T63] usb 42-1: enqueue for inactive port 0 [ 69.277984][ T63] usb usb42-port1: attempt power cycle [ 69.366105][ T6283] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.447449][ T5938] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 69.610790][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 69.617891][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 69.659208][ T6290] ceph: No mds server is up or the cluster is laggy [ 69.734993][ T5938] usb 8-1: device descriptor read/64, error -71 [ 69.848199][ T63] usb usb42-port1: unable to enumerate USB device [ 69.977429][ T5938] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.117688][ T5938] usb 8-1: device descriptor read/64, error -71 [ 70.237876][ T5938] usb usb8-port1: attempt power cycle [ 70.515233][ T6300] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 70.517517][ T6300] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 70.522102][ T6300] vhci_hcd vhci_hcd.0: Device attached [ 70.667444][ T5938] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.684310][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 70.698007][ T5938] usb 8-1: device descriptor read/8, error -71 [ 70.797550][ T63] usb 40-1: SetAddress Request (6) to port 0 [ 70.799864][ T63] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 70.937506][ T5938] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 70.957821][ T5938] usb 8-1: device descriptor read/8, error -71 [ 71.068451][ T5938] usb usb8-port1: unable to enumerate USB device [ 71.188975][ T6301] vhci_hcd: connection reset by peer [ 71.191447][ T6057] vhci_hcd vhci_hcd.1: stop threads [ 71.193829][ T6057] vhci_hcd vhci_hcd.1: release socket [ 71.196277][ T6057] vhci_hcd vhci_hcd.1: disconnect device [ 72.622256][ T5948] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.625522][ T5948] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.638351][ T5948] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.641298][ T5948] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.643979][ T5948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.757776][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 72.761005][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 72.910015][ T6323] chnl_net:caif_netlink_parms(): no params data found [ 72.968188][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.974195][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976628][ T6323] bridge_slave_0: entered allmulticast mode [ 72.979978][ T6323] bridge_slave_0: entered promiscuous mode [ 72.986447][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.990085][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.993145][ T6323] bridge_slave_1: entered allmulticast mode [ 72.996978][ T6323] bridge_slave_1: entered promiscuous mode [ 73.016665][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.021208][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.035632][ T6323] team0: Port device team_slave_0 added [ 73.039216][ T6323] team0: Port device team_slave_1 added [ 73.056451][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.058904][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.067843][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.072816][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.075110][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.083931][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.124630][ T6323] hsr_slave_0: entered promiscuous mode [ 73.127024][ T6323] hsr_slave_1: entered promiscuous mode [ 73.129536][ T6323] debugfs: 'hsr0' already exists in 'hsr' [ 73.131421][ T6323] Cannot create hsr debugfs directory [ 73.145118][ T6342] sp0: Synchronizing with TNC [ 73.174907][ T6342] 9pnet_fd: Insufficient options for proto=fd [ 73.294454][ T6323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.300211][ T6323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.300364][ T6334] process 'syz.1.66' launched './file0' with NULL argv: empty string added [ 73.306787][ T6338] futex_wake_op: syz.2.65 tries to shift op by 144; fix this program [ 73.310238][ T6323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.313291][ T6334] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 73.319408][ T6338] netlink: 'syz.2.65': attribute type 3 has an invalid length. [ 73.320787][ T6323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.322180][ T6338] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 73.328411][ T6338] netlink: 224 bytes leftover after parsing attributes in process `syz.2.65'. [ 73.394058][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.397229][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.400598][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.403709][ T6323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.430539][ T6057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.477115][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.485790][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.488729][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.495502][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.502644][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.505100][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.515692][ T6057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.527290][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.529735][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.567839][ T6057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.607409][ T6004] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 73.629726][ T6057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.688586][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.738530][ T6057] bridge_slave_1: left allmulticast mode [ 73.741088][ T6057] bridge_slave_1: left promiscuous mode [ 73.744118][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.749238][ T6057] bridge_slave_0: left allmulticast mode [ 73.751652][ T6057] bridge_slave_0: left promiscuous mode [ 73.754041][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.761276][ T6004] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.765280][ T6004] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.769108][ T6004] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.773530][ T6004] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.777675][ T6004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.786747][ T6004] usb 8-1: config 0 descriptor?? [ 73.980540][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.988537][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.994423][ T6057] bond0 (unregistering): Released all slaves [ 74.084968][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.088889][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.094082][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.097209][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.212804][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.217733][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.220521][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.223331][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.226216][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.231023][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.233714][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.236782][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.240654][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.243577][ T6004] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.264926][ T6004] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 74.345711][ T6323] veth0_vlan: entered promiscuous mode [ 74.378095][ T6323] veth1_vlan: entered promiscuous mode [ 74.422645][ T6346] syz.3.68 uses obsolete (PF_INET,SOCK_PACKET) [ 74.447792][ T6057] hsr_slave_0: left promiscuous mode [ 74.452844][ T6057] hsr_slave_1: left promiscuous mode [ 74.459662][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.463164][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.471546][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.474905][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.511883][ T6057] veth1_macvtap: left promiscuous mode [ 74.514211][ T6057] veth0_macvtap: left promiscuous mode [ 74.516508][ T6057] veth1_vlan: left promiscuous mode [ 74.520756][ T6057] veth0_vlan: left promiscuous mode [ 74.687513][ T5939] Bluetooth: hci5: command tx timeout [ 75.044795][ T6057] team0 (unregistering): Port device team_slave_1 removed [ 75.075010][ T6057] team0 (unregistering): Port device team_slave_0 removed [ 75.298475][ T6323] veth0_macvtap: entered promiscuous mode [ 75.305193][ T6323] veth1_macvtap: entered promiscuous mode [ 75.322606][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.335466][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.349091][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.352667][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.356648][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.361445][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.409911][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.421342][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.435793][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.438497][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.516300][ T6385] usb 8-1: string descriptor 0 read error: -2 [ 75.519854][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 75.648243][ T9] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 75.721221][ T6408] [U]  [ 75.722611][ T6408] [U] K{‘ [ 75.724151][ T6408] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 75.728833][ T6408] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 75.735793][ T6408] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 75.740652][ T6408] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 75.758215][ T6408] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 75.768893][ T6408] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 75.774036][ T6408] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 75.780366][ T6408] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 75.827300][ T6408] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 75.831446][ T6408] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 75.837540][ T6408] [U] 22½“Æ©Ðû©x?0;3u± [ 75.839633][ T6408] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 75.850488][ T6408] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 75.854522][ T6408] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 75.858454][ T6408] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 75.861060][ T6408] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 75.866522][ T6408] [U] ¹ ec [ 75.867981][ T6408] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 75.877489][ T63] usb 40-1: device descriptor read/8, error -110 [ 75.961444][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.964331][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.165129][ T6396] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 76.268847][ T63] usb usb40-port1: attempt power cycle [ 76.430969][ T10] usb 8-1: USB disconnect, device number 6 [ 76.757535][ T5939] Bluetooth: hci5: command tx timeout [ 76.877886][ T63] usb usb40-port1: unable to enumerate USB device [ 77.061140][ T6446] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.081593][ T6446] overlayfs: missing 'lowerdir' [ 78.838890][ T5939] Bluetooth: hci5: command tx timeout [ 79.248168][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.372838][ T6491] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 79.375298][ T6491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.399381][ T6491] vhci_hcd vhci_hcd.0: Device attached [ 79.667505][ T6272] usb 46-1: SetAddress Request (2) to port 0 [ 79.670151][ T6272] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.785233][ T6496] netlink: 'syz.2.91': attribute type 21 has an invalid length. [ 79.788012][ T6496] netlink: 152 bytes leftover after parsing attributes in process `syz.2.91'. [ 80.038830][ T6492] vhci_hcd: connection reset by peer [ 80.042808][ T1174] vhci_hcd vhci_hcd.4: stop threads [ 80.045142][ T1174] vhci_hcd vhci_hcd.4: release socket [ 80.047881][ T1174] vhci_hcd vhci_hcd.4: disconnect device [ 80.275043][ T61] libceph: connect (1)[c::]:6789 error -101 [ 80.277981][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 80.426906][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.92'. [ 80.438098][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 80.538619][ T61] libceph: connect (1)[c::]:6789 error -101 [ 80.546779][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 80.874463][ T6511] ceph: No mds server is up or the cluster is laggy [ 80.927499][ T5939] Bluetooth: hci5: command tx timeout [ 80.930710][ T6520] capability: warning: `syz.4.96' uses deprecated v2 capabilities in a way that may be insecure [ 81.171446][ T6525] netlink: 'syz.2.97': attribute type 10 has an invalid length. [ 81.229869][ T6528] syzkaller0: entered promiscuous mode [ 81.231931][ T6528] syzkaller0: entered allmulticast mode [ 82.099510][ T6553] warning: `syz.2.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.984354][ T6542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 82.986747][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 82.989659][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 83.204969][ T6545] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 83.204993][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.206193][ T6545] vhci_hcd vhci_hcd.0: Device attached [ 83.212466][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 83.212493][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'. [ 83.212504][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'. [ 83.257528][ T63] usb 44-1: SetAddress Request (2) to port 0 [ 83.257563][ T63] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 83.479933][ T6563] openvswitch: netlink: IP tunnel dst address not specified [ 83.643066][ T6557] vhci_hcd: connection closed [ 83.644043][ T1141] vhci_hcd vhci_hcd.4: stop threads [ 83.647199][ T6566] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.650585][ T1141] vhci_hcd vhci_hcd.4: release socket [ 83.661874][ T1141] vhci_hcd vhci_hcd.4: disconnect device [ 83.676000][ T6555] vhci_hcd: connection reset by peer [ 83.678446][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 83.680829][ T1141] vhci_hcd vhci_hcd.3: release socket [ 83.683440][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 84.757729][ T6272] usb 46-1: device descriptor read/8, error -110 [ 85.144261][ T6584] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 85.158527][ T6272] usb usb46-port1: attempt power cycle [ 85.192299][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 85.198864][ T6584] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 85.296701][ T6578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.299436][ T6578] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.306128][ T6578] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.311412][ T6578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.314505][ T6578] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.320977][ T6578] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.324918][ T6578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.328588][ T6578] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.333274][ T6578] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.337646][ T6578] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 85.341127][ T6578] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 85.345750][ T6578] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 85.415017][ T6587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.113'. [ 85.538697][ T6590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.541218][ T6590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.543295][ T6590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.545427][ T6590] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 85.745561][ T6272] usb usb46-port1: unable to enumerate USB device [ 85.788329][ T6600] mmap: syz.1.116 (6600) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.213884][ T59] cfg80211: failed to load regulatory.db [ 86.381097][ T6606] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.103791][ T6616] syz.4.119 (6616): /proc/6609/oom_adj is deprecated, please use /proc/6609/oom_score_adj instead. [ 87.380823][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.389729][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.542577][ T3627] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.555917][ T6636] netlink: 100 bytes leftover after parsing attributes in process `syz.4.122'. [ 87.559470][ T5950] Bluetooth: hci2: command 0x0401 tx timeout [ 87.559510][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.561615][ T5948] Bluetooth: hci5: command 0x0c1a tx timeout [ 87.565772][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.568318][ T6632] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 87.570496][ T6632] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.573952][ T3627] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.584877][ T6632] vhci_hcd vhci_hcd.0: Device attached [ 87.594345][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.606951][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.662832][ T6634] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 87.664991][ T6634] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.668018][ T6634] vhci_hcd vhci_hcd.0: Device attached [ 87.973720][ T29] usb 40-1: SetAddress Request (10) to port 0 [ 87.984559][ T29] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 88.149395][ T6637] vhci_hcd: connection closed [ 88.149843][ T3627] vhci_hcd vhci_hcd.3: stop threads [ 88.165887][ T3627] vhci_hcd vhci_hcd.3: release socket [ 88.172890][ T6649] vhci_hcd: connection reset by peer [ 88.176714][ T3627] vhci_hcd vhci_hcd.3: disconnect device [ 88.194419][ T3627] vhci_hcd vhci_hcd.1: stop threads [ 88.196784][ T3627] vhci_hcd vhci_hcd.1: release socket [ 88.203000][ T3627] vhci_hcd vhci_hcd.1: disconnect device [ 88.358585][ T63] usb 44-1: device descriptor read/8, error -110 [ 88.764203][ T63] usb usb44-port1: attempt power cycle [ 88.881003][ T6668] use of bytesused == 0 is deprecated and will be removed in the future, [ 88.884397][ T6668] use the actual size instead. [ 89.034663][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.126'. [ 89.038212][ T6677] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 89.078435][ T6677] bond1: entered promiscuous mode [ 89.080358][ T6677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.123259][ T6674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.126502][ T6674] bond1: (slave bond2): making interface the new active one [ 89.140089][ T6674] bond2: entered promiscuous mode [ 89.142396][ T6674] bond1: (slave bond2): Enslaving as an active interface with an up link [ 89.145831][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 89.370910][ T63] usb usb44-port1: unable to enumerate USB device [ 89.637500][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.637565][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.640174][ T5953] Bluetooth: hci5: command 0x0c1a tx timeout [ 89.643537][ T5950] Bluetooth: hci2: command 0x0401 tx timeout [ 90.066713][ T6717] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 90.069487][ T6717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.087646][ T6717] vhci_hcd vhci_hcd.0: Device attached [ 90.101399][ T6718] random: crng reseeded on system resumption [ 90.538418][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 90.712954][ T6719] vhci_hcd: connection closed [ 90.717496][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 90.721990][ T1141] vhci_hcd vhci_hcd.1: release socket [ 90.747558][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 90.769265][ T6729] tmpfs: Unknown parameter 'quot' [ 91.390977][ T6741] sp0: Synchronizing with TNC [ 91.394877][ T6741] [U] è [ 91.454496][ T6747] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 91.457286][ T6747] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 91.460396][ T6747] vhci_hcd vhci_hcd.0: Device attached [ 91.589414][ T6755] QAT: Invalid ioctl 21531 [ 91.683057][ T6764] Bluetooth: MGMT ver 1.23 [ 91.717668][ T5953] Bluetooth: hci5: command 0x0c1a tx timeout [ 91.720352][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.722955][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.725442][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 91.737531][ T63] usb 44-1: SetAddress Request (6) to port 0 [ 91.741335][ T63] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 91.837108][ T6748] vhci_hcd: connection reset by peer [ 91.857426][ T1140] vhci_hcd vhci_hcd.3: stop threads [ 91.859784][ T1140] vhci_hcd vhci_hcd.3: release socket [ 91.862552][ T1140] vhci_hcd vhci_hcd.3: disconnect device [ 92.557750][ T6780] kvm: kvm [6779]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ff [ 92.717707][ T6781] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 92.719860][ T6781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.735761][ T6781] vhci_hcd vhci_hcd.0: Device attached [ 92.997677][ T59] usb 42-1: SetAddress Request (10) to port 0 [ 93.000546][ T59] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 93.009896][ T6788] vhci_hcd: connection closed [ 93.010258][ T60] vhci_hcd vhci_hcd.2: stop threads [ 93.013735][ T60] vhci_hcd vhci_hcd.2: release socket [ 93.015640][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 93.081278][ T29] usb 40-1: device descriptor read/8, error -110 [ 93.217439][ T6074] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 93.230714][ T6801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.156'. [ 93.378604][ T6074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.383119][ T6074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.390880][ T6074] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.396164][ T6074] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.400195][ T6074] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.404714][ T6074] usb 9-1: config 0 descriptor?? [ 93.490326][ T29] usb usb40-port1: attempt power cycle [ 93.691061][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.694435][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.700659][ T6819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.700938][ T6818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.708914][ T6819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.882257][ T6074] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 93.978023][ T6835] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 93.980249][ T6835] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.983298][ T6835] vhci_hcd vhci_hcd.0: Device attached [ 94.065664][ T6839] input: syz1 as /devices/virtual/input/input6 [ 94.148919][ T29] usb usb40-port1: unable to enumerate USB device [ 94.234274][ T6845] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 94.236473][ T6845] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.241202][ T6845] vhci_hcd vhci_hcd.0: Device attached [ 94.538224][ T6836] vhci_hcd: connection closed [ 94.539981][ T1140] vhci_hcd vhci_hcd.2: stop threads [ 94.547654][ T1140] vhci_hcd vhci_hcd.2: release socket [ 94.551958][ T6852] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 94.554164][ T6852] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.559819][ T1140] vhci_hcd vhci_hcd.2: disconnect device [ 94.565212][ T5292] usb 46-1: SetAddress Request (6) to port 0 [ 94.567541][ T6852] vhci_hcd vhci_hcd.0: Device attached [ 94.596168][ T5292] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 94.847503][ T6261] usb 40-1: SetAddress Request (14) to port 0 [ 94.849802][ T6261] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 95.108493][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 95.115289][ T6846] vhci_hcd: connection reset by peer [ 95.120335][ T1181] vhci_hcd vhci_hcd.4: stop threads [ 95.127058][ T1181] vhci_hcd vhci_hcd.4: release socket [ 95.134534][ T1181] vhci_hcd vhci_hcd.4: disconnect device [ 95.241298][ T6853] vhci_hcd: connection reset by peer [ 95.258095][ T1181] vhci_hcd vhci_hcd.1: stop threads [ 95.260395][ T1181] vhci_hcd vhci_hcd.1: release socket [ 95.263009][ T1181] vhci_hcd vhci_hcd.1: disconnect device [ 95.349912][ T6870] netlink: 'syz.2.171': attribute type 6 has an invalid length. [ 95.357312][ T6870] netlink: 'syz.2.171': attribute type 12 has an invalid length. [ 95.360258][ T6870] netlink: 'syz.2.171': attribute type 29 has an invalid length. [ 95.362989][ T6870] netlink: 148 bytes leftover after parsing attributes in process `syz.2.171'. [ 95.366609][ T6870] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 95.369855][ T6870] netlink: 31 bytes leftover after parsing attributes in process `syz.2.171'. [ 95.797465][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.248690][ T29] usb 9-1: USB disconnect, device number 2 [ 96.307889][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 96.697461][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 96.838497][ T63] usb 44-1: device descriptor read/8, error -110 [ 96.849790][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.854793][ T29] usb 9-1: config 0 has no interfaces? [ 96.857607][ T29] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 96.862940][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.880917][ T29] usb 9-1: config 0 descriptor?? [ 97.094392][ T5938] usb 9-1: USB disconnect, device number 3 [ 97.237992][ T63] usb usb44-port1: attempt power cycle [ 97.839198][ T63] usb usb44-port1: unable to enumerate USB device [ 98.056929][ T59] usb 42-1: device descriptor read/8, error -110 [ 98.110610][ T6891] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 98.462050][ T59] usb usb42-port1: attempt power cycle [ 98.591730][ T6004] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 98.705228][ T6913] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 98.709827][ T6913] netlink: 224 bytes leftover after parsing attributes in process `syz.4.182'. [ 98.714703][ T6914] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 98.720447][ T6914] netlink: 224 bytes leftover after parsing attributes in process `syz.4.182'. [ 99.315809][ T6931] netlink: 'syz.2.187': attribute type 12 has an invalid length. [ 99.318001][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 99.647473][ T5292] usb 46-1: device descriptor read/8, error -110 [ 99.887487][ T6261] usb 40-1: device descriptor read/8, error -110 [ 100.025820][ T6983] 9p: Bad value for 'rfdno' [ 100.047746][ T6932] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 100.078826][ T5292] usb usb46-port1: attempt power cycle [ 100.298274][ T59] usb usb42-port1: unable to enumerate USB device [ 100.298623][ T6261] usb usb40-port1: attempt power cycle [ 100.512850][ T7005] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 100.515091][ T7005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 100.522745][ T7005] vhci_hcd vhci_hcd.0: Device attached [ 100.537825][ T7007] vhci_hcd: connection closed [ 100.539243][ T1181] vhci_hcd vhci_hcd.2: stop threads [ 100.543475][ T1181] vhci_hcd vhci_hcd.2: release socket [ 100.545529][ T1181] vhci_hcd vhci_hcd.2: disconnect device [ 100.662735][ T5292] usb usb46-port1: unable to enumerate USB device [ 100.667576][ T6004] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 100.827422][ T6004] usb 9-1: Using ep0 maxpacket: 8 [ 100.831033][ T6004] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 132, changing to 11 [ 100.835682][ T6004] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 100.839735][ T6004] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 100.845697][ T6004] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.849932][ T6004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.852665][ T6004] usb 9-1: Product: syz [ 100.854455][ T6004] usb 9-1: Manufacturer: syz [ 100.856087][ T6004] usb 9-1: SerialNumber: syz [ 100.868653][ T6261] usb usb40-port1: unable to enumerate USB device [ 101.004812][ T7011] i2c i2c-1: Invalid block write size 34 [ 101.073046][ T6004] cdc_ncm 9-1:1.0: bind() failure [ 101.078988][ T6004] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 101.081899][ T6004] cdc_ncm 9-1:1.1: bind() failure [ 101.087053][ T6004] usb 9-1: USB disconnect, device number 4 [ 101.397671][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 101.402035][ T7017] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 101.730204][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 102.358048][ T7064] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 102.360613][ T7064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.363623][ T7064] vhci_hcd vhci_hcd.0: Device attached [ 102.707420][ T5292] usb 42-1: SetAddress Request (14) to port 0 [ 102.709549][ T5292] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 103.222906][ T7078] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.307677][ T40] audit: type=1326 audit(1766689263.644:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.315095][ T40] audit: type=1326 audit(1766689263.644:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.342068][ T40] audit: type=1326 audit(1766689263.664:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.350360][ T40] audit: type=1326 audit(1766689263.694:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.364798][ T40] audit: type=1326 audit(1766689263.704:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.407469][ T40] audit: type=1326 audit(1766689263.704:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.447572][ T40] audit: type=1326 audit(1766689263.704:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.461837][ T40] audit: type=1326 audit(1766689263.704:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.473256][ T7081] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 103.475282][ T7065] vhci_hcd: connection reset by peer [ 103.475422][ T7081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.480679][ T7081] vhci_hcd vhci_hcd.0: Device attached [ 103.482816][ T40] audit: type=1326 audit(1766689263.704:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.486742][ T212] vhci_hcd vhci_hcd.2: stop threads [ 103.494805][ T40] audit: type=1326 audit(1766689263.704:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.218" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 103.495187][ T212] vhci_hcd vhci_hcd.2: release socket [ 103.499603][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 103.503290][ T212] vhci_hcd vhci_hcd.2: disconnect device [ 103.780088][ T6004] usb 46-1: SetAddress Request (10) to port 0 [ 103.782878][ T6004] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 104.300245][ T7083] vhci_hcd: connection reset by peer [ 104.302949][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 104.305289][ T1148] vhci_hcd vhci_hcd.4: release socket [ 104.307824][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 104.626146][ T7125] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 104.629601][ T7125] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 104.980445][ T7136] bond3 (unregistering): Released all slaves [ 105.052982][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 105.139404][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.142288][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.320343][ T7160] Process accounting resumed [ 105.680633][ T7148] bond1: left promiscuous mode [ 105.682838][ T7148] bond2: left promiscuous mode [ 105.696567][ T1181] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.707930][ T6057] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.713255][ T6057] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.717651][ T6057] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.747465][ T7176] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 105.750449][ T7176] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.754321][ T7176] vhci_hcd vhci_hcd.0: Device attached [ 105.860125][ T7182] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 105.863049][ T7182] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.867247][ T7182] vhci_hcd vhci_hcd.0: Device attached [ 105.932292][ T7188] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 106.027622][ T6272] usb 40-1: SetAddress Request (18) to port 0 [ 106.030511][ T6272] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 106.077922][ T7180] vhci_hcd: connection reset by peer [ 106.081212][ T60] vhci_hcd vhci_hcd.1: stop threads [ 106.083751][ T60] vhci_hcd vhci_hcd.1: release socket [ 106.089431][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 106.311334][ T7184] vhci_hcd: connection closed [ 106.311558][ T12] vhci_hcd vhci_hcd.4: stop threads [ 106.315024][ T12] vhci_hcd vhci_hcd.4: release socket [ 106.316934][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 106.437481][ T5968] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 106.597549][ T5968] usb 8-1: Using ep0 maxpacket: 16 [ 106.601018][ T5968] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.605624][ T5968] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.609981][ T5968] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 106.613780][ T5968] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.619070][ T5968] usb 8-1: config 0 descriptor?? [ 106.950594][ T7207] comedi comedi1: dt2817: I/O port conflict (0xffffffffffffffff,5) [ 106.954635][ T7207] delete_channel: no stack [ 107.037973][ T5968] kye 0003:0458:5016.0004: control desc unexpectedly large [ 107.046633][ T5968] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5016.0004/input/input9 [ 107.082457][ T7219] netlink: 224 bytes leftover after parsing attributes in process `syz.1.251'. [ 107.111274][ T5968] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5016.0004/input/input10 [ 107.186031][ T5968] kye 0003:0458:5016.0004: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 107.615018][ T7229] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 107.617314][ T7229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 107.621912][ T7229] vhci_hcd vhci_hcd.0: Device attached [ 107.658674][ T7238] overlayfs: unescaped trailing colons in lowerdir mount option. [ 107.671598][ T7239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.677905][ T7239] block device autoloading is deprecated and will be removed. [ 107.797500][ T5292] usb 42-1: device descriptor read/8, error -110 [ 108.188275][ T5292] usb usb42-port1: attempt power cycle [ 108.245302][ T7230] vhci_hcd: connection closed [ 108.245620][ T12] vhci_hcd vhci_hcd.4: stop threads [ 108.250303][ T12] vhci_hcd vhci_hcd.4: release socket [ 108.252833][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 108.267631][ T6074] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 108.447639][ T6074] usb 8-1: device descriptor read/64, error -32 [ 108.748334][ T5292] usb usb42-port1: unable to enumerate USB device [ 108.787952][ T6074] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 108.987563][ T6074] usb 8-1: device descriptor read/64, error -32 [ 109.098376][ T6004] usb 46-1: device descriptor read/8, error -110 [ 109.497878][ T6004] usb usb46-port1: attempt power cycle [ 109.868821][ T29] usb 8-1: USB disconnect, device number 7 [ 110.086878][ T6004] usb usb46-port1: unable to enumerate USB device [ 111.091190][ T6272] usb 40-1: device descriptor read/8, error -110 [ 111.134531][ T7286] 9p: Bad value for 'wfdno' [ 111.179640][ T7291] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 111.193479][ T7291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.218412][ T7291] bond3: (slave gretap1): making interface the new active one [ 111.222434][ T7291] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 111.276092][ T7294] 9p: Could not find request transport: vi'.rt 4 [ 111.339063][ T7299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.371744][ T7299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.487974][ T6272] usb usb40-port1: attempt power cycle [ 112.048476][ T6272] usb usb40-port1: unable to enumerate USB device [ 112.141497][ T7312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 112.425161][ T7318] kvm: pic: level sensitive irq not supported [ 112.425503][ T7318] kvm: pic: non byte read [ 112.430258][ T7318] kvm: pic: level sensitive irq not supported [ 112.430508][ T7318] kvm: pic: non byte read [ 112.435171][ T7318] kvm: pic: level sensitive irq not supported [ 112.435420][ T7318] kvm: pic: non byte read [ 112.440145][ T7318] kvm: pic: level sensitive irq not supported [ 112.440415][ T7318] kvm: pic: non byte read [ 112.445020][ T7318] kvm: pic: level sensitive irq not supported [ 112.445273][ T7318] kvm: pic: non byte read [ 112.450053][ T7318] kvm: pic: level sensitive irq not supported [ 112.450302][ T7318] kvm: pic: non byte read [ 112.454843][ T7318] kvm: pic: level sensitive irq not supported [ 112.455091][ T7318] kvm: pic: non byte read [ 112.460641][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 112.681799][ T7324] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 112.898553][ T5953] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 113.198192][ T7341] No source specified [ 114.677480][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 114.798009][ T7353] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.800175][ T7353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.802400][ T7353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.804594][ T7353] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 115.227280][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 115.573530][ T63] libceph: connect (1)[c::]:6789 error -101 [ 115.576566][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 115.760897][ T7380] ceph: No mds server is up or the cluster is laggy [ 115.837179][ T7391] 9p: Unknown Cache mode or invalid value fscach [ 115.934083][ T7394] vlan2: entered promiscuous mode [ 115.936183][ T7394] vlan2: entered allmulticast mode [ 115.938329][ T7394] hsr_slave_1: entered allmulticast mode [ 116.113042][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 116.113053][ T40] audit: type=1326 audit(1766689276.454:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.138160][ T40] audit: type=1326 audit(1766689276.464:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.150864][ T40] audit: type=1326 audit(1766689276.464:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.160733][ T40] audit: type=1326 audit(1766689276.464:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.168016][ T40] audit: type=1326 audit(1766689276.464:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.176226][ T40] audit: type=1326 audit(1766689276.464:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.184253][ T40] audit: type=1326 audit(1766689276.464:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.191909][ T40] audit: type=1326 audit(1766689276.464:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.210066][ T40] audit: type=1326 audit(1766689276.464:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.223762][ T40] audit: type=1326 audit(1766689276.474:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 116.357410][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.661463][ T7401] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 116.715781][ T7401] bond4: (slave geneve2): making interface the new active one [ 116.719229][ T7401] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 116.722328][ T6103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 116.725468][ T6103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 116.729519][ T6103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 116.733364][ T6103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 116.837562][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.840442][ T5948] Bluetooth: hci2: command 0x0401 tx timeout [ 116.843205][ T5953] Bluetooth: hci5: command 0x0c1a tx timeout [ 117.634075][ T7407] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 117.685927][ T7424] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 117.961693][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 117.964716][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 118.270240][ T7441] xt_TCPMSS: Only works on TCP SYN packets [ 118.316201][ T7443] fuseblk: Bad value for 'user_id' [ 118.318999][ T7443] fuseblk: Bad value for 'user_id' [ 118.321771][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 118.394220][ T7443] input: syz1 as /devices/virtual/input/input11 [ 118.508612][ T7425] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 118.715052][ T7456] CIFS: iocharset name too long [ 118.917525][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.717456][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 120.573642][ T7485] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 120.576227][ T7485] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 120.579719][ T7485] vhci_hcd vhci_hcd.0: Device attached [ 120.710340][ T7473] netlink: 44 bytes leftover after parsing attributes in process `syz.2.317'. [ 120.847463][ T63] usb 40-1: SetAddress Request (22) to port 0 [ 120.851058][ T63] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 121.198240][ T7483] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 121.248394][ T7486] vhci_hcd: connection reset by peer [ 121.287461][ T1174] vhci_hcd vhci_hcd.1: stop threads [ 121.289245][ T1174] vhci_hcd vhci_hcd.1: release socket [ 121.294671][ T1174] vhci_hcd vhci_hcd.1: disconnect device [ 121.348824][ T7522] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 121.378615][ T7522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.419964][ T7522] bond5: (slave veth3): Enslaving as an active interface with a down link [ 121.431369][ T7523] bond5: (slave dummy0): making interface the new active one [ 121.434621][ T7523] dummy0: entered promiscuous mode [ 121.436748][ T7523] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 121.439982][ T7522] netlink: 'syz.2.326': attribute type 10 has an invalid length. [ 121.444067][ T7522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.326'. [ 121.528892][ T7522] bond5: (slave dummy0): Releasing active interface [ 121.552017][ T7532] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.357591][ T5948] Bluetooth: hci5: command 0x0c1a tx timeout [ 122.437404][ T5948] Bluetooth: hci2: command 0x0401 tx timeout [ 122.598914][ T7541] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 122.601137][ T7541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.603887][ T7541] vhci_hcd vhci_hcd.0: Device attached [ 122.774860][ T7544] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 122.777712][ T7544] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 122.785782][ T7544] vhci_hcd vhci_hcd.0: Device attached [ 122.793064][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.323'. [ 122.849789][ T6047] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 122.859231][ T7542] vhci_hcd: connection reset by peer [ 122.864036][ T1181] vhci_hcd vhci_hcd.2: stop threads [ 122.865858][ T1181] vhci_hcd vhci_hcd.2: release socket [ 122.867811][ T1181] vhci_hcd vhci_hcd.2: disconnect device [ 122.905642][ T7545] vhci_hcd: connection closed [ 122.906019][ T12] vhci_hcd vhci_hcd.4: stop threads [ 122.909469][ T12] vhci_hcd vhci_hcd.4: release socket [ 122.911283][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 123.164022][ T7556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 123.166813][ T7556] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.183475][ T7556] vhci_hcd vhci_hcd.0: Device attached [ 123.219448][ T7560] /dev/nullb0: Can't open blockdev [ 123.222975][ T7560] netlink: 280 bytes leftover after parsing attributes in process `syz.3.331'. [ 123.791931][ T7558] vhci_hcd: connection closed [ 123.793059][ T60] vhci_hcd vhci_hcd.1: stop threads [ 123.796531][ T60] vhci_hcd vhci_hcd.1: release socket [ 123.798481][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 124.172481][ T7573] netlink: 52 bytes leftover after parsing attributes in process `syz.3.334'. [ 124.176555][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 124.378615][ T7575] Illegal XDP return value 4294967282 on prog (id 50) dev syz_tun, expect packet loss! [ 124.491493][ T7582] netlink: 'syz.2.337': attribute type 21 has an invalid length. [ 124.494741][ T7567] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 124.624782][ T7596] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 124.627396][ T7596] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 124.680228][ T7598] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 124.851479][ T7604] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 125.717522][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 126.057480][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 126.057493][ T40] audit: type=1326 audit(1766689285.794:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.343" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x0 [ 126.127448][ T63] usb 40-1: device descriptor read/8, error -110 [ 126.758380][ T63] usb usb40-port1: attempt power cycle [ 127.026433][ T7642] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 127.028671][ T7642] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 127.047871][ T7642] vhci_hcd vhci_hcd.0: Device attached [ 127.111903][ T7642] wg2 speed is unknown, defaulting to 1000 [ 127.115169][ T7642] wg2 speed is unknown, defaulting to 1000 [ 127.118142][ T7642] wg2 speed is unknown, defaulting to 1000 [ 127.406596][ T7642] infiniband syz2: set down [ 127.408611][ T7642] infiniband syz2: added wg2 [ 127.427838][ T6074] wg2 speed is unknown, defaulting to 1000 [ 127.437958][ T63] usb usb40-port1: unable to enumerate USB device [ 127.561195][ T7642] RDS/IB: syz2: added [ 127.564282][ T7642] smc: adding ib device syz2 with port count 1 [ 127.567437][ T7642] smc: ib device syz2 port 1 has no pnetid [ 127.572367][ T7642] wg2 speed is unknown, defaulting to 1000 [ 127.658316][ T6023] wg2 speed is unknown, defaulting to 1000 [ 127.673936][ T7643] vhci_hcd: connection closed [ 127.674978][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 127.676595][ T7642] wg2 speed is unknown, defaulting to 1000 [ 127.680615][ T1143] vhci_hcd vhci_hcd.2: release socket [ 127.682564][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 127.815661][ T7642] wg2 speed is unknown, defaulting to 1000 [ 127.922134][ T7642] wg2 speed is unknown, defaulting to 1000 [ 127.947448][ T6047] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 128.343239][ T7675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.346987][ T7675] batadv_slave_0: entered promiscuous mode [ 128.462865][ T7681] netlink: 48 bytes leftover after parsing attributes in process `syz.1.354'. [ 128.958962][ T40] audit: type=1326 audit(1766689289.214:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.2.359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 128.966177][ T40] audit: type=1326 audit(1766689289.214:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.2.359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 128.966238][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.973452][ T40] audit: type=1326 audit(1766689289.274:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.2.359" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 128.983560][ T40] audit: type=1326 audit(1766689289.274:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.2.359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 128.993923][ T40] audit: type=1326 audit(1766689289.314:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.2.359" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 129.117925][ T40] audit: type=1326 audit(1766689289.314:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.2.359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 129.125185][ T40] audit: type=1326 audit(1766689289.314:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.2.359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 129.132711][ T40] audit: type=1326 audit(1766689289.314:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.2.359" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 129.140764][ T40] audit: type=1326 audit(1766689289.334:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.2.359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 129.197429][ T6047] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 129.308174][ T6272] usb usb42-port1: attempt power cycle [ 129.350512][ T6047] usb 9-1: Using ep0 maxpacket: 32 [ 129.388357][ T29] usb 6-1: config 0 has no interfaces? [ 129.390197][ T29] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 129.393198][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.423584][ T29] usb 6-1: config 0 descriptor?? [ 129.585677][ T7727] max out of range [ 129.743349][ T6047] usb 9-1: unable to get BOS descriptor or descriptor too short [ 129.746710][ T6047] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 129.763542][ T6047] usb 9-1: can't read configurations, error -71 [ 129.877987][ T6272] usb usb42-port1: unable to enumerate USB device [ 129.883416][ T7747] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 129.886377][ T7747] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.890408][ T7747] vhci_hcd vhci_hcd.0: Device attached [ 130.187488][ T6022] usb 44-1: SetAddress Request (10) to port 0 [ 130.189665][ T6022] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 130.233830][ T7760] batadv_slave_0: entered promiscuous mode [ 130.483640][ T7748] vhci_hcd: connection reset by peer [ 130.619202][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 130.621127][ T1148] vhci_hcd vhci_hcd.3: release socket [ 130.623014][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 131.192262][ T6926] usb 6-1: USB disconnect, device number 2 [ 131.564247][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 131.564263][ T40] audit: type=1326 audit(1766689291.884:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.577468][ T40] audit: type=1326 audit(1766689291.884:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.607625][ T40] audit: type=1326 audit(1766689291.884:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.624532][ T7805] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 131.624805][ T40] audit: type=1326 audit(1766689291.884:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.626843][ T7805] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 131.627088][ T7805] vhci_hcd vhci_hcd.0: Device attached [ 131.646768][ T40] audit: type=1326 audit(1766689291.884:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.657553][ T40] audit: type=1326 audit(1766689291.884:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.681250][ T40] audit: type=1326 audit(1766689291.894:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.690919][ T40] audit: type=1326 audit(1766689291.894:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.698538][ T40] audit: type=1326 audit(1766689291.894:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.705971][ T40] audit: type=1326 audit(1766689291.894:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.380" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 131.907447][ T6272] usb 46-1: SetAddress Request (14) to port 0 [ 131.915328][ T6272] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 131.921721][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 131.964435][ T7811] pim6reg: entered allmulticast mode [ 132.308523][ T7806] vhci_hcd: connection reset by peer [ 132.311526][ T1181] vhci_hcd vhci_hcd.4: stop threads [ 132.313453][ T1181] vhci_hcd vhci_hcd.4: release socket [ 132.315602][ T1181] vhci_hcd vhci_hcd.4: disconnect device [ 133.018078][ T7837] comedi comedi1: das16m1: a I/O base address must be specified [ 133.025102][ T7837] netlink: 'syz.1.390': attribute type 2 has an invalid length. [ 133.077056][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 133.241916][ T7839] netlink: 164 bytes leftover after parsing attributes in process `syz.1.391'. [ 133.245981][ T7839] netlink: 164 bytes leftover after parsing attributes in process `syz.1.391'. [ 133.367499][ T6926] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 133.450123][ T7857] vivid-002: disconnect [ 133.473774][ T7856] : renamed from bond_slave_0 (while UP) [ 133.559331][ T6926] usb 7-1: config 1 interface 0 has no altsetting 0 [ 133.563692][ T6926] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 133.566669][ T6926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.569348][ T6926] usb 7-1: Product: syz [ 133.570874][ T6926] usb 7-1: Manufacturer: syz [ 133.572965][ T6926] usb 7-1: SerialNumber: syz [ 134.231202][ T7855] vivid-002: reconnect [ 134.423177][ T6926] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 134.428496][ T6926] usb 7-1: USB disconnect, device number 2 [ 134.433253][ T6926] usblp0: removed [ 134.511093][ T7875] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 134.513287][ T7875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 134.516399][ T7875] vhci_hcd vhci_hcd.0: Device attached [ 134.777459][ T5968] usb 40-1: SetAddress Request (26) to port 0 [ 134.780455][ T5968] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 134.780617][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 134.863029][ T7863] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 135.237543][ T6022] usb 44-1: device descriptor read/8, error -110 [ 135.247536][ T63] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 135.248530][ T7876] vhci_hcd: connection reset by peer [ 135.254506][ T13] vhci_hcd vhci_hcd.1: stop threads [ 135.256887][ T13] vhci_hcd vhci_hcd.1: release socket [ 135.259503][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 135.321266][ T7898] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 135.324213][ T7898] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 135.328232][ T7898] vhci_hcd vhci_hcd.0: Device attached [ 135.339367][ T7898] netlink: 'syz.2.402': attribute type 15 has an invalid length. [ 135.344870][ T7898] random: crng reseeded on system resumption [ 135.418221][ T63] usb 9-1: Using ep0 maxpacket: 32 [ 135.422289][ T63] usb 9-1: config 0 has no interfaces? [ 135.426776][ T63] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 135.430929][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.434389][ T63] usb 9-1: Product: syz [ 135.436293][ T63] usb 9-1: Manufacturer: syz [ 135.438447][ T63] usb 9-1: SerialNumber: syz [ 135.478727][ T63] usb 9-1: config 0 descriptor?? [ 135.628355][ T6022] usb usb44-port1: attempt power cycle [ 135.744916][ T6004] usb 42-1: SetAddress Request (22) to port 0 [ 135.744968][ T6004] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 135.858485][ T63] usb 9-1: USB disconnect, device number 7 [ 135.883016][ T7899] vhci_hcd: connection reset by peer [ 135.886349][ T6103] vhci_hcd vhci_hcd.2: stop threads [ 135.888214][ T6103] vhci_hcd vhci_hcd.2: release socket [ 135.895768][ T6103] vhci_hcd vhci_hcd.2: disconnect device [ 135.908508][ T7908] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 135.910701][ T7908] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 135.913664][ T7908] vhci_hcd vhci_hcd.0: Device attached [ 136.010130][ T7912] kvm: pic: non byte read [ 136.014492][ T7912] kvm: pic: non byte read [ 136.037810][ T5948] Bluetooth: hci2: command 0x0401 tx timeout [ 136.057493][ T6022] usb 44-1: SetAddress Request (12) to port 0 [ 136.060043][ T6022] usb 44-1: new SuperSpeed USB device number 12 using vhci_hcd [ 136.215479][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 136.380442][ T7888] Process accounting paused [ 136.404268][ T7918] overlayfs: failed to resolve './file1': -2 [ 136.852717][ T7920] FAT-fs (sr0): bogus number of reserved sectors [ 136.855029][ T7920] FAT-fs (sr0): Can't find a valid FAT filesystem [ 136.961930][ T7909] vhci_hcd: connection reset by peer [ 136.964252][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 136.966075][ T1148] vhci_hcd vhci_hcd.3: release socket [ 136.968814][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 137.401364][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.404192][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.521519][ T6272] usb 46-1: device descriptor read/8, error -110 [ 137.907954][ T6272] usb usb46-port1: attempt power cycle [ 138.012775][ T6047] kernel read not supported for file /rfkill (pid: 6047 comm: kworker/3:5) [ 138.363390][ T7939] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 138.365716][ T7939] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 138.365877][ T7939] vhci_hcd vhci_hcd.0: Device attached [ 138.537470][ T6272] usb 46-1: SetAddress Request (17) to port 0 [ 138.541602][ T6272] usb 46-1: new SuperSpeed USB device number 17 using vhci_hcd [ 138.749424][ T6023] libceph: connect (1)[c::]:6789 error -101 [ 138.751913][ T6023] libceph: mon0 (1)[c::]:6789 connect error [ 138.803744][ T7945] ceph: No mds server is up or the cluster is laggy [ 139.068502][ T7941] vhci_hcd: connection reset by peer [ 139.070704][ T6103] vhci_hcd vhci_hcd.4: stop threads [ 139.073185][ T6103] vhci_hcd vhci_hcd.4: release socket [ 139.075662][ T6103] vhci_hcd vhci_hcd.4: disconnect device [ 139.217658][ T6926] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 139.356273][ T7953] random: crng reseeded on system resumption [ 139.380416][ T6926] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 139.383317][ T6926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.387836][ T6926] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 139.391102][ T6926] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 139.393732][ T6926] usb 8-1: Manufacturer: syz [ 139.397216][ T6926] usb 8-1: config 0 descriptor?? [ 139.467500][ T6926] rc_core: IR keymap rc-hauppauge not found [ 139.474323][ T6926] Registered IR keymap rc-empty [ 139.477268][ T6926] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 139.483608][ T6926] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input13 [ 139.878068][ T5968] usb 40-1: device descriptor read/8, error -110 [ 140.268034][ T5968] usb usb40-port1: attempt power cycle [ 140.481721][ T6926] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 140.629262][ T6926] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.629279][ T6926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.629289][ T6926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.629310][ T6926] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.630867][ T6926] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.654321][ T6926] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.663489][ T6926] usb 6-1: Product: syz [ 140.663501][ T6926] usb 6-1: Manufacturer: syz [ 140.670972][ T6926] cdc_wdm 6-1:1.0: skipping garbage [ 140.670990][ T6926] cdc_wdm 6-1:1.0: skipping garbage [ 140.675540][ T6926] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 140.679986][ T6926] cdc_wdm 6-1:1.0: Unknown control protocol [ 140.837440][ T6004] usb 42-1: device descriptor read/8, error -110 [ 140.860597][ T5968] usb usb40-port1: unable to enumerate USB device [ 141.167479][ T6022] usb 44-1: device descriptor read/8, error -110 [ 141.251624][ T6004] usb usb42-port1: attempt power cycle [ 141.411165][ T8004] ufs: You didn't specify the type of your ufs filesystem [ 141.411165][ T8004] [ 141.411165][ T8004] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 141.411165][ T8004] [ 141.411165][ T8004] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 141.421565][ T8004] ufs: ufstype=old is supported read-only [ 141.558910][ T6022] usb usb44-port1: unable to enumerate USB device [ 141.609418][ T8003] netlink: 72 bytes leftover after parsing attributes in process `syz.2.425'. [ 141.679717][ T6023] usb 8-1: USB disconnect, device number 9 [ 141.817921][ T6004] usb usb42-port1: unable to enumerate USB device [ 143.159051][ T6024] usb 6-1: USB disconnect, device number 3 [ 143.335849][ T8035] "syz.1.433" (8035) uses obsolete ecb(arc4) skcipher [ 143.630491][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 143.630502][ T40] audit: type=1326 audit(1766689303.974:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.649105][ T6272] usb 46-1: device descriptor read/8, error -110 [ 143.655412][ T40] audit: type=1326 audit(1766689303.974:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.673586][ T40] audit: type=1326 audit(1766689303.974:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.687951][ T40] audit: type=1326 audit(1766689304.024:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.695697][ T40] audit: type=1326 audit(1766689304.024:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.701510][ T8055] cgroup: Unknown subsys name 'rlimit' [ 143.705462][ T40] audit: type=1326 audit(1766689304.044:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.714226][ T40] audit: type=1326 audit(1766689304.054:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.723513][ T40] audit: type=1326 audit(1766689304.054:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.732527][ T40] audit: type=1326 audit(1766689304.074:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.741296][ T40] audit: type=1326 audit(1766689304.074:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.434" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 143.757682][ T6272] usb usb46-port1: unable to enumerate USB device [ 143.901715][ T8055] wg2 speed is unknown, defaulting to 1000 [ 144.283359][ T8075] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 144.292762][ T8081] lo speed is unknown, defaulting to 1000 [ 144.294911][ T8081] lo speed is unknown, defaulting to 1000 [ 144.409954][ T8081] lo speed is unknown, defaulting to 1000 [ 144.419174][ T8081] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.437450][ T8081] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 144.489486][ T8081] lo speed is unknown, defaulting to 1000 [ 144.493906][ T8086] cgroup: No subsys list or none specified [ 144.497695][ T8081] lo speed is unknown, defaulting to 1000 [ 144.504121][ T8081] lo speed is unknown, defaulting to 1000 [ 144.513704][ T8081] lo speed is unknown, defaulting to 1000 [ 144.622359][ T8091] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 144.624782][ T8091] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 144.630756][ T8091] vhci_hcd vhci_hcd.0: Device attached [ 144.739369][ T8097] netlink: 200 bytes leftover after parsing attributes in process `syz.2.442'. [ 144.743376][ T8097] netlink: 200 bytes leftover after parsing attributes in process `syz.2.442'. [ 144.898617][ T6023] usb 44-1: SetAddress Request (14) to port 0 [ 144.900790][ T6023] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 145.144206][ T8104] "syz.4.445" (8104) uses obsolete ecb(arc4) skcipher [ 145.170513][ T8092] vhci_hcd: connection reset by peer [ 145.172626][ T13] vhci_hcd vhci_hcd.3: stop threads [ 145.174387][ T13] vhci_hcd vhci_hcd.3: release socket [ 145.176272][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 145.563180][ T8112] wg2 speed is unknown, defaulting to 1000 [ 145.656932][ T8112] lo speed is unknown, defaulting to 1000 [ 145.661569][ T8121] program syz.2.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.651128][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 147.786089][ T8170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.463'. [ 147.917616][ T8177] wg2 speed is unknown, defaulting to 1000 [ 148.246732][ T8177] lo speed is unknown, defaulting to 1000 [ 148.597949][ T8197] program syz.4.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.729080][ T1110] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 148.737747][ T1110] ata1.00: irq_stat 0x40000000 [ 148.741972][ T1110] ata1.00: failed command: ZAC MANAGEMENT OUT [ 148.749608][ T1110] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 14 [ 148.749608][ T1110] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 148.776552][ T1110] ata1.00: status: { DRDY ERR } [ 148.785453][ T1110] ata1.00: error: { ABRT } [ 148.793753][ T1110] ata1.00: device reported invalid CHS sector 0 [ 149.962463][ T8208] netlink: 'syz.4.470': attribute type 4 has an invalid length. [ 149.974641][ T29] lo speed is unknown, defaulting to 1000 [ 149.980262][ T8208] netlink: 'syz.4.470': attribute type 4 has an invalid length. [ 149.983741][ T29] syz0: Port: 1 Link DOWN [ 149.990456][ T29] lo speed is unknown, defaulting to 1000 [ 149.998170][ T29] syz0: Port: 1 Link ACTIVE [ 150.037763][ T6023] usb 44-1: device descriptor read/8, error -110 [ 150.439094][ T6023] usb usb44-port1: attempt power cycle [ 150.806873][ T8219] wg2 speed is unknown, defaulting to 1000 [ 151.037132][ T6023] usb usb44-port1: unable to enumerate USB device [ 151.063958][ T8219] lo speed is unknown, defaulting to 1000 [ 151.071959][ T8222] kvm: pic: level sensitive irq not supported [ 151.072232][ T8222] kvm: pic: non byte read [ 151.080943][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 151.760275][ T8235] tipc: Started in network mode [ 151.761952][ T8235] tipc: Node identity , cluster identity 4711 [ 151.763979][ T8235] tipc: Failed to obtain node identity [ 151.765836][ T8235] tipc: Enabling of bearer rejected, failed to enable media [ 151.771351][ T8235] syzkaller0: entered promiscuous mode [ 151.773210][ T8235] syzkaller0: entered allmulticast mode [ 152.487312][ T8248] tipc: Started in network mode [ 152.489461][ T8248] tipc: Node identity 4, cluster identity 4711 [ 152.492061][ T8248] tipc: Node number set to 4 [ 153.887513][ T8264] netlink: 'syz.3.487': attribute type 30 has an invalid length. [ 154.869745][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 154.869760][ T40] audit: type=1326 audit(1766689315.214:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 154.883376][ T40] audit: type=1326 audit(1766689315.214:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 154.900968][ T40] audit: type=1326 audit(1766689315.224:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 154.910547][ T40] audit: type=1326 audit(1766689315.224:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 154.917848][ T40] audit: type=1326 audit(1766689315.224:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 154.924795][ T40] audit: type=1326 audit(1766689315.224:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 154.935323][ T40] audit: type=1326 audit(1766689315.224:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 154.942479][ T40] audit: type=1326 audit(1766689315.224:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 154.952659][ T8283] fuse: Bad value for 'fd' [ 154.987895][ T40] audit: type=1326 audit(1766689315.224:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 154.994975][ T40] audit: type=1326 audit(1766689315.224:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.4.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 155.028873][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 155.031881][ T8286] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 155.050908][ T8286] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 155.283419][ T8289] netlink: 'syz.3.493': attribute type 1 has an invalid length. [ 156.109725][ T8305] /dev/sr0: Can't open blockdev [ 156.511569][ T1141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.670499][ T1141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.769647][ T1141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.850122][ T1141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.987236][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.993153][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.996409][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.000745][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.004067][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.129481][ T8318] wg2 speed is unknown, defaulting to 1000 [ 157.149659][ T1141] bridge_slave_1: left allmulticast mode [ 157.151686][ T1141] bridge_slave_1: left promiscuous mode [ 157.153756][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.163591][ T1141] bridge_slave_0: left allmulticast mode [ 157.165807][ T1141] bridge_slave_0: left promiscuous mode [ 157.168240][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.260208][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 157.349775][ T8325] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 157.482681][ T1141] bond0 (unregistering): (slave 30): Releasing backup interface [ 157.486959][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.492993][ T1141] bond0 (unregistering): Released all slaves [ 157.504348][ T8324] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 157.514889][ T8318] lo speed is unknown, defaulting to 1000 [ 157.559156][ T8331] syz.3.508 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 157.938370][ T8318] chnl_net:caif_netlink_parms(): no params data found [ 158.226294][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.245394][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.248919][ T8318] bridge_slave_0: entered allmulticast mode [ 158.254632][ T8318] bridge_slave_0: entered promiscuous mode [ 158.276356][ T1141] hsr_slave_0: left promiscuous mode [ 158.279689][ T1141] hsr_slave_1: left promiscuous mode [ 158.282822][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.286391][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.290798][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.293855][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.307170][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 158.308131][ T1141] veth1_macvtap: left promiscuous mode [ 158.312927][ T1141] veth0_macvtap: left promiscuous mode [ 158.315682][ T1141] veth1_vlan: left promiscuous mode [ 158.319673][ T1141] veth0_vlan: left promiscuous mode [ 159.003278][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 159.033614][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 159.078188][ T5948] Bluetooth: hci3: command tx timeout [ 159.365810][ T8318] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.368319][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.370775][ T8318] bridge_slave_1: entered allmulticast mode [ 159.375865][ T8318] bridge_slave_1: entered promiscuous mode [ 159.380700][ T6023] lo speed is unknown, defaulting to 1000 [ 159.382692][ T6023] infiniband syz0: ib_query_port failed (-19) [ 159.406728][ T8318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.428356][ T8318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.478915][ T8318] team0: Port device team_slave_0 added [ 159.483732][ T8318] team0: Port device team_slave_1 added [ 159.507066][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.509693][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.518765][ T8318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.523254][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.525554][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.535052][ T8318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.600916][ T8318] hsr_slave_0: entered promiscuous mode [ 159.604194][ T8318] hsr_slave_1: entered promiscuous mode [ 159.606727][ T8318] debugfs: 'hsr0' already exists in 'hsr' [ 159.611892][ T8318] Cannot create hsr debugfs directory [ 159.827109][ T8318] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.842105][ T8318] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.880804][ T8318] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.904791][ T8318] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.178156][ T8318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.228774][ T8318] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.267951][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.270968][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.300791][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.303869][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.723603][ T8389] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0400:0000 with DS=0x5 [ 161.051759][ T8318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.157598][ T5948] Bluetooth: hci3: command tx timeout [ 161.464585][ T5953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.472132][ T5953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.476658][ T5953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.483992][ T5953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.492632][ T5953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.523935][ T8414] wg2 speed is unknown, defaulting to 1000 [ 161.744142][ T8318] veth0_vlan: entered promiscuous mode [ 161.794045][ T8318] veth1_vlan: entered promiscuous mode [ 161.902766][ T8318] veth0_macvtap: entered promiscuous mode [ 161.912732][ T8318] veth1_macvtap: entered promiscuous mode [ 161.947138][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.955944][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.980179][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.998348][ T212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.001252][ T212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.023697][ T212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.033309][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 162.188311][ T8429] fuse: Bad value for 'fd' [ 162.796868][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.800312][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.803503][ T8414] bridge_slave_0: entered allmulticast mode [ 162.807817][ T8414] bridge_slave_0: entered promiscuous mode [ 162.818261][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.823085][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.002052][ T8414] bridge_slave_1: entered allmulticast mode [ 163.020174][ T8414] bridge_slave_1: entered promiscuous mode [ 163.199710][ T212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.205632][ T212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.249182][ T5948] Bluetooth: hci3: command tx timeout [ 163.266256][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.278913][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.302927][ T6103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.312954][ T6103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.333061][ T8414] team0: Port device team_slave_0 added [ 163.348351][ T8414] team0: Port device team_slave_1 added [ 163.462129][ T8445] netlink: 'syz.3.520': attribute type 21 has an invalid length. [ 163.472011][ T8445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.520'. [ 163.557573][ T5948] Bluetooth: hci4: command tx timeout [ 163.656581][ T8445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.673685][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.676246][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.685650][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.696864][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.700903][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.713141][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.760942][ T8445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.808860][ T8414] hsr_slave_0: entered promiscuous mode [ 163.814405][ T8414] hsr_slave_1: entered promiscuous mode [ 163.818299][ T8414] debugfs: 'hsr0' already exists in 'hsr' [ 163.822587][ T8414] Cannot create hsr debugfs directory [ 163.824082][ T5948] Bluetooth: hci3: SCO packet for unknown connection handle 172 [ 163.874744][ T8445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.020339][ T8445] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.097719][ T5968] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 164.228850][ T8414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.252724][ T8460] wg2 speed is unknown, defaulting to 1000 [ 164.252858][ T8414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.288632][ T5968] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 164.294253][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.299066][ T5968] usb 6-1: Product: syz [ 164.300540][ T5968] usb 6-1: Manufacturer: syz [ 164.302081][ T5968] usb 6-1: SerialNumber: syz [ 164.362309][ T8414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.389056][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.396784][ T8414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.463329][ T6103] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.503380][ T6103] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.548498][ T1148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.768956][ T8456] random: crng reseeded on system resumption [ 164.952923][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.002375][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.023022][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.025413][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.044340][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.046723][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.056744][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.5.523'. [ 165.158840][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.161854][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.317955][ T5948] Bluetooth: hci3: command tx timeout [ 165.475083][ T5968] rtl8150 6-1:1.0: couldn't reset the device [ 165.479452][ T5968] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 165.594474][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.638733][ T5948] Bluetooth: hci4: command tx timeout [ 165.675438][ T8487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.526'. [ 165.684484][ T8487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.526'. [ 165.692834][ T8487] fuse: Unknown parameter 'g' [ 165.802141][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.119179][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.218260][ T8414] veth0_vlan: entered promiscuous mode [ 166.224788][ T8414] veth1_vlan: entered promiscuous mode [ 166.252779][ T8414] veth0_macvtap: entered promiscuous mode [ 166.258906][ T8414] veth1_macvtap: entered promiscuous mode [ 166.273508][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.290880][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.329518][ T212] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.335547][ T212] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.339402][ T212] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.349123][ T212] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.558786][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.568799][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.592599][ T6103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.600175][ T6103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.751216][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.516'. [ 166.785650][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.866764][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.066935][ T8512] netlink: 56 bytes leftover after parsing attributes in process `syz.3.529'. [ 167.329933][ T8518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.332888][ T8518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.336291][ T8518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.340776][ T8518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.343497][ T8518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.346290][ T8518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.718039][ T5948] Bluetooth: hci4: command tx timeout [ 167.796420][ T5292] usb 6-1: USB disconnect, device number 4 [ 168.218381][ T8523] 9p: Bad value for 'rfdno' [ 168.415728][ T8526] netlink: 'syz.1.532': attribute type 21 has an invalid length. [ 168.818415][ T8537] kAFS: No cell specified [ 168.896758][ T8540] kAFS: No cell specified [ 169.205770][ T8546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.807483][ T5948] Bluetooth: hci4: command tx timeout [ 170.136365][ T8563] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 170.139502][ T8563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 170.159084][ T8563] vhci_hcd vhci_hcd.0: Device attached [ 170.438185][ T6047] usb 44-1: SetAddress Request (18) to port 0 [ 170.441281][ T6047] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 170.789947][ T8564] vhci_hcd: connection reset by peer [ 170.796421][ T6103] vhci_hcd vhci_hcd.3: stop threads [ 170.798119][ T6103] vhci_hcd vhci_hcd.3: release socket [ 170.800028][ T6103] vhci_hcd vhci_hcd.3: disconnect device [ 171.558581][ T8466] net_ratelimit: 3621 callbacks suppressed [ 171.561184][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.564611][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.598148][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.601451][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.605263][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.613678][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.186421][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 173.186436][ T40] audit: type=1800 audit(1766689333.524:316): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.553" name="file0" dev="9p" ino=71827719 res=0 errno=0 [ 173.238963][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.352999][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 173.586328][ T8634] x_tables: duplicate underflow at hook 2 [ 173.628351][ T8630] Bluetooth: MGMT ver 1.23 [ 173.721681][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.524223][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.762118][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.317536][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 175.318797][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 175.477950][ T6047] usb 44-1: device descriptor read/8, error -110 [ 175.794298][ T8669] "syz.6.565" (8669) uses obsolete ecb(arc4) skcipher [ 175.894537][ T6047] usb usb44-port1: attempt power cycle [ 176.373510][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.566'. [ 176.493331][ T8678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 176.533607][ T6047] usb usb44-port1: unable to enumerate USB device [ 176.842159][ T6047] net_ratelimit: 5 callbacks suppressed [ 176.842169][ T6047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.403425][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 177.418646][ T8691] team0: Port device batadv1 added [ 177.690097][ T8709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.877611][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.208722][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.928148][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.163881][ T8724] "syz.1.579" (8724) uses obsolete ecb(arc4) skcipher [ 179.298360][ T40] audit: type=1326 audit(1766689347.636:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.305488][ T40] audit: type=1326 audit(1766689347.636:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.328672][ T40] audit: type=1326 audit(1766689347.656:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.338446][ T40] audit: type=1326 audit(1766689347.656:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.358395][ T40] audit: type=1326 audit(1766689347.656:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.365405][ T40] audit: type=1326 audit(1766689347.656:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.418655][ T40] audit: type=1326 audit(1766689347.656:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.428067][ T40] audit: type=1326 audit(1766689347.656:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.436298][ T40] audit: type=1326 audit(1766689347.656:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.498118][ T40] audit: type=1326 audit(1766689347.656:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.6.578" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 179.637967][ T5948] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 179.640930][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.958515][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.582'. [ 179.967626][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.351500][ T8751] vlan4: entered promiscuous mode [ 180.353995][ T8751] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 181.007983][ T6047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.297690][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.364779][ T8754] wg2 speed is unknown, defaulting to 1000 [ 182.722969][ T6047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.349985][ T8775] netlink: 40 bytes leftover after parsing attributes in process `syz.5.592'. [ 183.371133][ T8774] wg2 speed is unknown, defaulting to 1000 [ 183.898293][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.128302][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.383198][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.397873][ T8779] "syz.6.593" (8779) uses obsolete ecb(arc4) skcipher [ 184.481547][ T8781] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 184.483765][ T8781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 184.486618][ T8781] vhci_hcd vhci_hcd.0: Device attached [ 184.768296][ T53] usb 40-1: SetAddress Request (30) to port 0 [ 184.773116][ T53] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 184.827313][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.058236][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.399120][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.524106][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.597'. [ 185.529279][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.597'. [ 185.871194][ T8809] mkiss: ax0: crc mode is auto. [ 185.903814][ T8782] vhci_hcd: connection reset by peer [ 185.906137][ T1181] vhci_hcd vhci_hcd.1: stop threads [ 185.908015][ T1181] vhci_hcd vhci_hcd.1: release socket [ 185.910454][ T1181] vhci_hcd vhci_hcd.1: disconnect device [ 186.118686][ T8816] 9p: Unknown Cache mode or invalid value fscach [ 186.470804][ T8818] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 186.485414][ T8818] netlink: 'syz.6.599': attribute type 29 has an invalid length. [ 186.491585][ T8818] netlink: 'syz.6.599': attribute type 29 has an invalid length. [ 186.866011][ T8823] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 186.911828][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.289613][ T8826] syz.1.603 (8826): drop_caches: 2 [ 187.705084][ T8841] 9p: Bad value for 'rfdno' [ 187.964763][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.998489][ T8848] tipc: Enabled bearer , priority 0 [ 188.002275][ T8848] syzkaller0: entered promiscuous mode [ 188.004348][ T8848] syzkaller0: entered allmulticast mode [ 188.014956][ T8848] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.041662][ T8848] tipc: Resetting bearer [ 188.050578][ T8847] tipc: Resetting bearer [ 188.067275][ T8847] tipc: Disabling bearer [ 188.521458][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.551642][ T8865] netlink: 10 bytes leftover after parsing attributes in process `syz.6.618'. [ 188.598040][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.784414][ T8875] Context (ID=0x1) not attached to queue pair (handle=0x1:0x81) [ 188.835759][ T8880] netlink: 'syz.3.623': attribute type 1 has an invalid length. [ 188.878089][ T8887] netlink: zone id is out of range [ 189.013425][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.797830][ T53] usb 40-1: device descriptor read/8, error -110 [ 189.878045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.898687][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.901577][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.040366][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.219229][ T53] usb usb40-port1: attempt power cycle [ 190.273118][ T8909] fuse: Bad value for 'user_id' [ 190.274825][ T8909] fuse: Bad value for 'user_id' [ 190.936929][ T53] usb usb40-port1: unable to enumerate USB device [ 191.096058][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.368477][ T8926] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 191.371340][ T8926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.374913][ T8926] vhci_hcd vhci_hcd.0: Device attached [ 191.383405][ T8926] overlayfs: failed to resolve './bus': -2 [ 191.617452][ T6023] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 191.942305][ T8931] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.972900][ T8927] vhci_hcd: connection reset by peer [ 191.975196][ T1174] vhci_hcd vhci_hcd.1: stop threads [ 191.978527][ T1174] vhci_hcd vhci_hcd.1: release socket [ 191.980740][ T1174] vhci_hcd vhci_hcd.1: disconnect device [ 192.033725][ T8931] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.105120][ T8931] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.183583][ T8931] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.352119][ T1140] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.376517][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.397638][ T46] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.417080][ T46] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.764381][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 192.764399][ T40] audit: type=1326 audit(1766689361.096:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 192.814370][ T40] audit: type=1326 audit(1766689361.096:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 192.832113][ T40] audit: type=1326 audit(1766689361.096:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 192.879170][ T40] audit: type=1326 audit(1766689361.096:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 192.887854][ T40] audit: type=1326 audit(1766689361.096:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 192.896029][ T40] audit: type=1326 audit(1766689361.096:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 192.907581][ T40] audit: type=1326 audit(1766689361.096:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 192.915662][ T40] audit: type=1326 audit(1766689361.096:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 192.927616][ T40] audit: type=1326 audit(1766689361.096:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 192.935810][ T40] audit: type=1326 audit(1766689361.096:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.3.635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 193.002182][ T8946] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 193.004552][ T8946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 193.007653][ T8946] vhci_hcd vhci_hcd.0: Device attached [ 193.087665][ T8951] FAULT_INJECTION: forcing a failure. [ 193.087665][ T8951] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 193.096552][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz.5.645 Not tainted syzkaller #0 PREEMPT(full) [ 193.096579][ T8951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.096597][ T8951] Call Trace: [ 193.096602][ T8951] [ 193.096607][ T8951] dump_stack_lvl+0x16c/0x1f0 [ 193.096633][ T8951] should_fail_ex+0x512/0x640 [ 193.096648][ T8951] _copy_from_user+0x2e/0xd0 [ 193.096661][ T8951] __sys_bpf+0x248/0x4980 [ 193.096674][ T8951] ? __pfx___sys_bpf+0x10/0x10 [ 193.096684][ T8951] ? find_held_lock+0x2b/0x80 [ 193.096702][ T8951] ? find_held_lock+0x2b/0x80 [ 193.096719][ T8951] ? __mutex_unlock_slowpath+0x161/0x790 [ 193.096744][ T8951] ? fput+0x70/0xf0 [ 193.096755][ T8951] ? ksys_write+0x1ac/0x250 [ 193.096770][ T8951] ? __pfx_ksys_write+0x10/0x10 [ 193.096788][ T8951] __ia32_sys_bpf+0x76/0xe0 [ 193.096798][ T8951] ? lockdep_hardirqs_on+0x7c/0x110 [ 193.096815][ T8951] __do_fast_syscall_32+0xe8/0x680 [ 193.096833][ T8951] do_fast_syscall_32+0x32/0x80 [ 193.096843][ T8951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.096857][ T8951] RIP: 0023:0xf701d579 [ 193.096866][ T8951] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 193.096877][ T8951] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 193.096888][ T8951] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 193.096895][ T8951] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.096902][ T8951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.096908][ T8951] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 193.096914][ T8951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.096928][ T8951] [ 193.168662][ T6047] net_ratelimit: 5 callbacks suppressed [ 193.168679][ T6047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.493209][ T8959] comedi comedi0: Minor 3 could not be opened [ 194.188387][ T8959] binder: 8954:8959 ioctl 40046205 0 returned -22 [ 194.233231][ T8965] mkiss: ax0: crc mode is auto. [ 194.508325][ T8947] vhci_hcd: connection closed [ 194.510214][ T3627] vhci_hcd vhci_hcd.1: stop threads [ 194.513863][ T3627] vhci_hcd vhci_hcd.1: release socket [ 194.521394][ T3627] vhci_hcd vhci_hcd.1: disconnect device [ 195.267715][ T6047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.433691][ T8991] FAULT_INJECTION: forcing a failure. [ 195.433691][ T8991] name failslab, interval 1, probability 0, space 0, times 1 [ 195.438040][ T8991] CPU: 0 UID: 0 PID: 8991 Comm: syz.5.648 Not tainted syzkaller #0 PREEMPT(full) [ 195.438065][ T8991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.438075][ T8991] Call Trace: [ 195.438079][ T8991] [ 195.438083][ T8991] dump_stack_lvl+0x16c/0x1f0 [ 195.438104][ T8991] should_fail_ex+0x512/0x640 [ 195.438117][ T8991] ? __kmalloc_noprof+0xca/0x910 [ 195.438131][ T8991] should_failslab+0xc2/0x120 [ 195.438149][ T8991] __kmalloc_noprof+0xeb/0x910 [ 195.438161][ T8991] ? bpf_test_init.isra.0+0x88/0x130 [ 195.438177][ T8991] ? bpf_test_init.isra.0+0x88/0x130 [ 195.438189][ T8991] bpf_test_init.isra.0+0x88/0x130 [ 195.438216][ T8991] bpf_prog_test_run_xdp+0x66c/0x1660 [ 195.438235][ T8991] ? __fget_files+0x204/0x3c0 [ 195.438252][ T8991] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 195.438268][ T8991] ? __might_fault+0xa0/0x190 [ 195.438283][ T8991] ? fput+0x70/0xf0 [ 195.438293][ T8991] ? __bpf_prog_get+0x97/0x2a0 [ 195.438308][ T8991] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 195.438323][ T8991] __sys_bpf+0x1035/0x4980 [ 195.438332][ T8991] ? do_user_addr_fault+0x926/0x1370 [ 195.438348][ T8991] ? __pfx___sys_bpf+0x10/0x10 [ 195.438357][ T8991] ? irqentry_exit+0x1dd/0x8c0 [ 195.438381][ T8991] ? copy_from_user_nofault+0xe8/0x190 [ 195.438395][ T8991] ? find_held_lock+0x2b/0x80 [ 195.438416][ T8991] ? __might_fault+0xe3/0x190 [ 195.438427][ T8991] ? __might_fault+0x13b/0x190 [ 195.438439][ T8991] ? find_held_lock+0x2b/0x80 [ 195.438453][ T8991] ? syscall_trace_enter+0x1cb/0x220 [ 195.438469][ T8991] __ia32_sys_bpf+0x76/0xe0 [ 195.438480][ T8991] __do_fast_syscall_32+0xe8/0x680 [ 195.438500][ T8991] do_fast_syscall_32+0x32/0x80 [ 195.438510][ T8991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.438523][ T8991] RIP: 0023:0xf701d579 [ 195.438532][ T8991] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 195.438543][ T8991] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 195.438554][ T8991] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 195.438561][ T8991] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.438567][ T8991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.438573][ T8991] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 195.438580][ T8991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.438597][ T8991] [ 195.525999][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.529292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.738924][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 196.277785][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.829345][ T6023] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 196.855715][ T9012] veth1_to_bridge: entered promiscuous mode [ 196.867209][ T9012] batadv0: entered promiscuous mode [ 196.910424][ T9006] batadv0: left promiscuous mode [ 196.918227][ T9006] veth1_to_bridge: left promiscuous mode [ 197.321648][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.731064][ T9024] FAULT_INJECTION: forcing a failure. [ 197.731064][ T9024] name failslab, interval 1, probability 0, space 0, times 0 [ 197.735600][ T9024] CPU: 3 UID: 0 PID: 9024 Comm: syz.3.657 Not tainted syzkaller #0 PREEMPT(full) [ 197.735626][ T9024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.735634][ T9024] Call Trace: [ 197.735638][ T9024] [ 197.735643][ T9024] dump_stack_lvl+0x16c/0x1f0 [ 197.735664][ T9024] should_fail_ex+0x512/0x640 [ 197.735676][ T9024] ? fs_reclaim_acquire+0xae/0x150 [ 197.735695][ T9024] should_failslab+0xc2/0x120 [ 197.735712][ T9024] __kmalloc_noprof+0xeb/0x910 [ 197.735724][ T9024] ? tomoyo_encode2+0x100/0x3e0 [ 197.735742][ T9024] ? tomoyo_encode2+0x100/0x3e0 [ 197.735756][ T9024] tomoyo_encode2+0x100/0x3e0 [ 197.735772][ T9024] tomoyo_encode+0x29/0x50 [ 197.735786][ T9024] tomoyo_realpath_from_path+0x18f/0x6e0 [ 197.735804][ T9024] tomoyo_path_number_perm+0x245/0x580 [ 197.735817][ T9024] ? tomoyo_path_number_perm+0x237/0x580 [ 197.735830][ T9024] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 197.735857][ T9024] ? find_held_lock+0x2b/0x80 [ 197.735871][ T9024] ? hook_file_ioctl_common+0x144/0x410 [ 197.735887][ T9024] ? __fget_files+0x20e/0x3c0 [ 197.735903][ T9024] ? __fput_deferred+0x480/0x480 [ 197.735917][ T9024] security_file_ioctl_compat+0x9b/0x240 [ 197.735932][ T9024] __ia32_compat_sys_ioctl+0xc3/0x370 [ 197.735948][ T9024] __do_fast_syscall_32+0xe8/0x680 [ 197.735967][ T9024] do_fast_syscall_32+0x32/0x80 [ 197.735976][ T9024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.735991][ T9024] RIP: 0023:0xf702d579 [ 197.736000][ T9024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 197.736011][ T9024] RSP: 002b:00000000f53fc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 197.736022][ T9024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005437 [ 197.736029][ T9024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.736035][ T9024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.736041][ T9024] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 197.736048][ T9024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.736061][ T9024] [ 197.736290][ T9024] ERROR: Out of memory at tomoyo_realpath_from_path. [ 198.146985][ T8466] usb usb40-port1: attempt power cycle [ 198.358950][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.389861][ T9039] Cannot find add_set index 0 as target [ 198.599171][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.602119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.759848][ T8466] usb usb40-port1: unable to enumerate USB device [ 198.881911][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.884380][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.478504][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.482247][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.559948][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.700589][ T9049] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.782407][ T9049] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.842096][ T9049] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.902574][ T9049] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.996366][ T76] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.006393][ T76] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.013684][ T76] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.020908][ T76] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.598814][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.520626][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 201.527659][ T9062] bond0: (slave bond_slave_0): Releasing backup interface [ 201.534892][ T9062] bond0: (slave bond_slave_1): Releasing backup interface [ 201.541796][ T9062] team0: Port device team_slave_0 removed [ 201.546998][ T9062] team0: Port device team_slave_1 removed [ 201.549737][ T9062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.553351][ T9062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.557022][ T9062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.587042][ T9062] netlink: 56 bytes leftover after parsing attributes in process `syz.1.668'. [ 201.640418][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.757873][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.877955][ T9063] batman_adv: batadv0: Adding interface: gretap1 [ 201.880650][ T9063] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.890351][ T9063] batman_adv: batadv0: Interface activated: gretap1 [ 201.911711][ T9065] [ 201.912810][ T9065] ====================================================== [ 201.912818][ T9065] WARNING: possible circular locking dependency detected [ 201.912825][ T9065] syzkaller #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 201.912834][ T9065] ------------------------------------------------------ [ 201.912840][ T9065] syz.3.669/9065 is trying to acquire lock: [ 201.912850][ T9065] ffff88805e803088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 201.929775][ T9065] [ 201.929775][ T9065] but task is already holding lock: [ 201.932919][ T9065] ffff88804cac8868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 201.936515][ T9065] [ 201.936515][ T9065] which lock already depends on the new lock. [ 201.936515][ T9065] [ 201.940995][ T9065] [ 201.940995][ T9065] the existing dependency chain (in reverse order) is: [ 201.944866][ T9065] [ 201.944866][ T9065] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 201.948046][ T9065] __mutex_lock+0x1aa/0x1ca0 [ 201.950284][ T9065] anon_pipe_write+0x15d/0x1bd0 [ 201.952648][ T9065] __kernel_write_iter+0x720/0xb10 [ 201.955083][ T9065] __kernel_write+0xf5/0x140 [ 201.957126][ T9065] autofs_notify_daemon+0x4db/0xd60 [ 201.959288][ T9065] autofs_wait+0x10f3/0x1ac0 [ 201.961244][ T9065] autofs_mount_wait+0x132/0x3c0 [ 201.963308][ T9065] autofs_d_automount+0x4b2/0x960 [ 201.965442][ T9065] __traverse_mounts+0x1b9/0x830 [ 201.967534][ T9065] step_into_slowpath+0x772/0xf50 [ 201.969669][ T9065] path_openat+0x10db/0x3140 [ 201.971632][ T9065] do_filp_open+0x20b/0x470 [ 201.973559][ T9065] do_sys_openat2+0x121/0x290 [ 201.975561][ T9065] __ia32_compat_sys_openat+0x16d/0x210 [ 201.977942][ T9065] __do_fast_syscall_32+0xe8/0x680 [ 201.980093][ T9065] do_fast_syscall_32+0x32/0x80 [ 201.982146][ T9065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.984735][ T9065] [ 201.984735][ T9065] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 201.987663][ T9065] __mutex_lock+0x1aa/0x1ca0 [ 201.989609][ T9065] autofs_notify_daemon+0x4a6/0xd60 [ 201.991771][ T9065] autofs_wait+0x10f3/0x1ac0 [ 201.993712][ T9065] autofs_mount_wait+0x132/0x3c0 [ 201.995797][ T9065] autofs_d_automount+0x4b2/0x960 [ 201.997899][ T9065] __traverse_mounts+0x1b9/0x830 [ 201.999966][ T9065] step_into_slowpath+0x772/0xf50 [ 202.002087][ T9065] path_lookupat+0x627/0xc40 [ 202.004051][ T9065] filename_lookup+0x224/0x5f0 [ 202.006065][ T9065] kern_path+0x35/0x50 [ 202.007879][ T9065] lookup_bdev+0xd8/0x280 [ 202.009735][ T9065] resume_store+0x1d6/0x490 [ 202.011589][ T9065] kobj_attr_store+0x58/0x80 [ 202.013594][ T9065] sysfs_kf_write+0xf2/0x150 [ 202.015563][ T9065] kernfs_fop_write_iter+0x3af/0x570 [ 202.017757][ T9065] vfs_write+0x7d3/0x11d0 [ 202.019646][ T9065] ksys_write+0x12a/0x250 [ 202.021530][ T9065] __do_fast_syscall_32+0xe8/0x680 [ 202.023686][ T9065] do_fast_syscall_32+0x32/0x80 [ 202.025763][ T9065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.028372][ T9065] [ 202.028372][ T9065] -> #0 (&of->mutex){+.+.}-{4:4}: [ 202.031140][ T9065] __lock_acquire+0x1669/0x2890 [ 202.033215][ T9065] lock_acquire+0x179/0x330 [ 202.035173][ T9065] __mutex_lock+0x1aa/0x1ca0 [ 202.037158][ T9065] kernfs_fop_write_iter+0x28f/0x570 [ 202.039496][ T9065] iter_file_splice_write+0xa24/0x12b0 [ 202.041840][ T9065] do_splice+0x1478/0x1fc0 [ 202.043693][ T9065] __do_splice+0x32a/0x360 [ 202.045521][ T9065] __ia32_sys_splice+0x189/0x250 [ 202.047640][ T9065] __do_fast_syscall_32+0xe8/0x680 [ 202.049782][ T9065] do_fast_syscall_32+0x32/0x80 [ 202.051855][ T9065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.054475][ T9065] [ 202.054475][ T9065] other info that might help us debug this: [ 202.054475][ T9065] [ 202.058298][ T9065] Chain exists of: [ 202.058298][ T9065] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 202.058298][ T9065] [ 202.062971][ T9065] Possible unsafe locking scenario: [ 202.062971][ T9065] [ 202.065795][ T9065] CPU0 CPU1 [ 202.067843][ T9065] ---- ---- [ 202.069872][ T9065] lock(&pipe->mutex); [ 202.071458][ T9065] lock(&sbi->pipe_mutex); [ 202.073993][ T9065] lock(&pipe->mutex); [ 202.076421][ T9065] lock(&of->mutex); [ 202.077894][ T9065] [ 202.077894][ T9065] *** DEADLOCK *** [ 202.077894][ T9065] [ 202.081003][ T9065] 2 locks held by syz.3.669/9065: [ 202.082906][ T9065] #0: ffff8880293e6420 (sb_writers#10){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 202.086300][ T9065] #1: ffff88804cac8868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 202.089534][ T9065] [ 202.089534][ T9065] stack backtrace: [ 202.091757][ T9065] CPU: 3 UID: 0 PID: 9065 Comm: syz.3.669 Not tainted syzkaller #0 PREEMPT(full) [ 202.091774][ T9065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.091787][ T9065] Call Trace: [ 202.091793][ T9065] [ 202.091799][ T9065] dump_stack_lvl+0x116/0x1f0 [ 202.091823][ T9065] print_circular_bug+0x275/0x340 [ 202.091847][ T9065] check_noncircular+0x146/0x160 [ 202.091871][ T9065] __lock_acquire+0x1669/0x2890 [ 202.091885][ T9065] ? __do_splice+0x32a/0x360 [ 202.091905][ T9065] ? __do_fast_syscall_32+0xe8/0x680 [ 202.091928][ T9065] lock_acquire+0x179/0x330 [ 202.091940][ T9065] ? kernfs_fop_write_iter+0x28f/0x570 [ 202.091962][ T9065] ? __pfx___might_resched+0x10/0x10 [ 202.091983][ T9065] __mutex_lock+0x1aa/0x1ca0 [ 202.092005][ T9065] ? kernfs_fop_write_iter+0x28f/0x570 [ 202.092026][ T9065] ? kernfs_fop_write_iter+0x28f/0x570 [ 202.092046][ T9065] ? __asan_memcpy+0x3c/0x60 [ 202.092063][ T9065] ? __pfx___mutex_lock+0x10/0x10 [ 202.092086][ T9065] ? __pfx__copy_from_iter+0x10/0x10 [ 202.092103][ T9065] ? trace_kmalloc+0x2b/0xb0 [ 202.092123][ T9065] ? __kmalloc_noprof+0x35d/0x910 [ 202.092138][ T9065] ? kernfs_fop_write_iter+0x237/0x570 [ 202.092159][ T9065] ? kernfs_fop_write_iter+0x28f/0x570 [ 202.092179][ T9065] kernfs_fop_write_iter+0x28f/0x570 [ 202.092200][ T9065] iter_file_splice_write+0xa24/0x12b0 [ 202.092226][ T9065] ? __pfx_iter_file_splice_write+0x10/0x10 [ 202.092254][ T9065] ? __pfx_iter_file_splice_write+0x10/0x10 [ 202.092275][ T9065] do_splice+0x1478/0x1fc0 [ 202.092295][ T9065] ? __lock_acquire+0x436/0x2890 [ 202.092308][ T9065] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.092330][ T9065] ? __pfx_do_splice+0x10/0x10 [ 202.092350][ T9065] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 202.092370][ T9065] ? find_held_lock+0x2b/0x80 [ 202.092388][ T9065] __do_splice+0x32a/0x360 [ 202.092409][ T9065] ? __pfx___do_splice+0x10/0x10 [ 202.092431][ T9065] __ia32_sys_splice+0x189/0x250 [ 202.092453][ T9065] __do_fast_syscall_32+0xe8/0x680 [ 202.092476][ T9065] do_fast_syscall_32+0x32/0x80 [ 202.092488][ T9065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.092505][ T9065] RIP: 0023:0xf702d579 [ 202.092516][ T9065] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 202.092530][ T9065] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 202.092543][ T9065] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 202.092552][ T9065] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000008 [ 202.092560][ T9065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.092568][ T9065] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 202.092581][ T9065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.092595][ T9065] [ 203.580784][ T8521] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.686692][ T8521] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.720934][ T5968] net_ratelimit: 2 callbacks suppressed [ 203.720946][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.819798][ T8521] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.901996][ T8521] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.046767][ T8521] bridge_slave_1: left allmulticast mode [ 204.050656][ T8521] bridge_slave_1: left promiscuous mode [ 204.052904][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.057637][ T8521] bridge_slave_0: left allmulticast mode [ 204.059556][ T8521] bridge_slave_0: left promiscuous mode [ 204.061573][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.272983][ T8521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.280068][ T8521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.286633][ T8521] bond0 (unregistering): Released all slaves [ 204.380984][ T8521] tipc: Left network mode [ 204.767967][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.789398][ T8521] hsr_slave_0: left promiscuous mode [ 204.792065][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.795066][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.803050][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.808867][ T8521] veth1_macvtap: left promiscuous mode [ 204.810712][ T8521] veth0_macvtap: left promiscuous mode [ 204.812571][ T8521] veth1_vlan: left promiscuous mode [ 204.814341][ T8521] veth0_vlan: left promiscuous mode [ 204.848859][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.851685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.069164][ T8521] team0 (unregistering): Port device team_slave_1 removed [ 205.094767][ T8521] team0 (unregistering): Port device team_slave_0 removed [ 205.237713][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.240620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.696573][ T8521] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.752823][ T8521] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.810569][ T8521] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.873870][ T8521] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.991927][ T8521] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.064535][ T8521] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.169177][ T8521] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.251078][ T8521] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.651935][ T8521] bridge_slave_1: left allmulticast mode [ 206.653852][ T8521] bridge_slave_1: left promiscuous mode [ 206.655832][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.660604][ T8521] bridge_slave_0: left allmulticast mode [ 206.662536][ T8521] bridge_slave_0: left promiscuous mode [ 206.664517][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.671026][ T8521] bridge_slave_1: left allmulticast mode [ 206.672985][ T8521] bridge_slave_1: left promiscuous mode [ 206.674948][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.678580][ T8521] bridge_slave_0: left allmulticast mode [ 206.680472][ T8521] bridge_slave_0: left promiscuous mode [ 206.682406][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.689386][ T8521] batman_adv: batadv0: Interface deactivated: gretap1 [ 206.864924][ T8521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.874322][ T8521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.881052][ T8521] bond0 (unregistering): Released all slaves [ 206.955156][ T8521] batman_adv: batadv0: Removing interface: gretap1 [ 207.113705][ T8521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.118638][ T8521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.122591][ T8521] bond0 (unregistering): Released all slaves [ 207.229520][ T8521] team0: Port device bridge1 removed [ 207.287399][ T8521] team0: Port device bridge2 removed [ 207.358914][ T8521] bond0 (unregistering): Released all slaves [ 208.232952][ T8521] hsr_slave_0: left promiscuous mode [ 208.235244][ T8521] hsr_slave_1: left promiscuous mode [ 208.237180][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.240125][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.243397][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.245878][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.250642][ T8521] hsr_slave_0: left promiscuous mode [ 208.253231][ T8521] hsr_slave_1: left promiscuous mode [ 208.255940][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.259413][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.267971][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.271014][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.280067][ T8521] hsr_slave_0: left promiscuous mode [ 208.284022][ T8521] hsr_slave_1: left promiscuous mode [ 208.296471][ T8521] veth1_macvtap: left promiscuous mode [ 208.298719][ T8521] veth0_macvtap: left promiscuous mode [ 208.301640][ T8521] veth1_vlan: left promiscuous mode [ 208.304281][ T8521] veth0_vlan: left promiscuous mode [ 208.308258][ T8521] veth1_macvtap: left promiscuous mode [ 208.310969][ T8521] veth0_macvtap: left promiscuous mode [ 208.313497][ T8521] veth1_vlan: left promiscuous mode [ 208.315791][ T8521] veth0_vlan: left promiscuous mode [ 208.536565][ T8521] team0 (unregistering): Port device team_slave_1 removed [ 208.552757][ T8521] team0 (unregistering): Port device team_slave_0 removed [ 208.628899][ T8521] team0 (unregistering): Port device batadv1 removed [ 208.709564][ T8521] team0 (unregistering): Port device team_slave_1 removed [ 208.725658][ T8521] team0 (unregistering): Port device team_slave_0 removed