last executing test programs: 49m24.640536882s ago: executing program 32 (id=404): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010102, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x28f, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 48m25.668690862s ago: executing program 33 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 46m51.335158905s ago: executing program 34 (id=665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x2000000, &(0x7f00000002c0)="f0ab970cc10eb01df442f9c4", 0xc, &(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000580)="936b4a3d267bfcc0c16aa3978c5dc6f72f2ee58f3e3200694151bbff6439af34b841e9d2c2ff7f297fc823624a0c4d8e4e49b41f00738cfecac41059f9c56e77b2b469e1dc638b5d34371fd426fd7043b95f300dc4a7309d29e9e97d850d2c9de2f5037a5bf3abd1e12fbfcf5acdcde6870827375b908efba64bb4bdc349108a173b0ac5961b2bfea3adfa679a5e587eaca04bc4c3ebfb55d7321f3fd6d00cfdf425b7e81c15ebaa51b2f56271d84e8b59868902d2cf96afdb677022682081ba21acdd4b2d5894a28be64fea225a4b08ecb654f31ad66f5a85dda4201175fb7b0a142c9c") prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r11 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r11, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r12, @ANYBLOB, @ANYBLOB="557803fa85aec1664d890b13e343762fc2d887220dcff30f"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 26m33.245956339s ago: executing program 35 (id=3774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x50, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000480)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, 0x3, 0x0, 0x0, 0x0, 0x6, 0x71, 0x5, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0xb, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc4c85513, &(0x7f0000000040)={0x2, 0x5, 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0xc1105511, &(0x7f0000000040)) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000f3788ac111023d32b6b1382b230052187e2aa830705184e71fb3670c87b0b964c5f45e7fbe4a859de955fa72", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000085000000070000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23m13.078236937s ago: executing program 7 (id=4236): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2000000000, &(0x7f0000000200), 0x2, 0x4}}, 0x20) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000080)=0x4) writev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 23m13.013233544s ago: executing program 7 (id=4237): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getrlimit(0x6, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) r8 = socket(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000140), 0x0, 0x0) getsockopt(r8, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 23m11.569282038s ago: executing program 7 (id=4240): openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x12042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1e4224, 0x1598cc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000005dc0)={{{0x2, 0x1}}, 0x0, 0x8, 0x0}) 23m7.045532024s ago: executing program 7 (id=4254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) write$vhost_msg_v2(r4, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) 23m5.494167877s ago: executing program 7 (id=4256): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000002c0), 0x0, 0x0, 0x0) 22m59.993735185s ago: executing program 7 (id=4264): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 22m44.944366288s ago: executing program 36 (id=4264): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 17m32.515381884s ago: executing program 1 (id=5100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r7, 0x4068aea3, &(0x7f0000000380)={0xed, 0x0, 0x4}) r8 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x461, 0x4e05, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xff, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x18, 0xfb}}]}}}]}}]}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="8100000000000000dfd8ba", @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0xee00, @ANYRES32=r4], 0x2c}], 0x1}, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40041c0000001c0f00430000007a5da01de3bf38b57a31e811eca3287c27a8425856"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 17m28.849176269s ago: executing program 1 (id=5113): openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x12042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1e4224, 0x1598cc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000005dc0)={{{0x2, 0x1}}, 0x0, 0x8, 0x0}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 17m27.585251849s ago: executing program 1 (id=5115): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x800) 17m27.359731674s ago: executing program 1 (id=5118): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 17m26.329063965s ago: executing program 1 (id=5121): r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x6}, 0x2) 17m26.188958962s ago: executing program 1 (id=5122): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17m10.249801475s ago: executing program 37 (id=5122): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13m51.070876462s ago: executing program 5 (id=5821): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4000) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 13m49.227405357s ago: executing program 5 (id=5831): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/5, 0x5}, {0x0, 0x500}], 0x2) 13m48.171303656s ago: executing program 5 (id=5841): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 13m47.962508599s ago: executing program 5 (id=5844): sendmsg$alg(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x34000041) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 13m46.427358671s ago: executing program 9 (id=5851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x44, &(0x7f00000001c0)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4}, 0x1c) 13m46.227235547s ago: executing program 9 (id=5854): openat(0xffffffffffffff9c, 0x0, 0x12042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1e4224, 0x1598cc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000005dc0)={{{0x2, 0x1}}, 0x0, 0x8, 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 13m45.525491384s ago: executing program 5 (id=5858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000380)={0xed, 0x0, 0x4}) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x461, 0x4e05, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xff, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x18, 0xfb}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="8100000000000000dfd8ba", @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0xee00, @ANYRES32], 0x2c}], 0x1}, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40041c0000001c0f00430000007a5da01de3bf38b57a31e811eca3287c27a8425856"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 13m43.130305297s ago: executing program 9 (id=5865): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 13m42.962804797s ago: executing program 9 (id=5867): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x3, 0x3e3}, 0x0) setuid(0xee00) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) 13m42.754790908s ago: executing program 9 (id=5868): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$dsp(0xffffffffffffffff, 0x0, 0x0) 13m42.426116346s ago: executing program 5 (id=5869): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) open$dir(0x0, 0x161c42, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) 13m41.698604323s ago: executing program 9 (id=5875): openat(0xffffffffffffff9c, 0x0, 0x12042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1e4224, 0x1598cc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000005dc0)={{{0x2, 0x1}}, 0x0, 0x8, 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 13m38.713804011s ago: executing program 2 (id=5885): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$dsp(r2, 0x0, 0x0) 13m38.215875462s ago: executing program 2 (id=5887): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m37.745864306s ago: executing program 2 (id=5888): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x8}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000) close_range(r1, r0, 0x0) 13m36.723863713s ago: executing program 2 (id=5892): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010001000000000004000400000000001000020000000000"], 0x24, 0x1) 13m36.59917874s ago: executing program 2 (id=5893): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) 13m36.383329618s ago: executing program 2 (id=5894): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 13m26.250714481s ago: executing program 38 (id=5869): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) open$dir(0x0, 0x161c42, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) 13m26.136877912s ago: executing program 39 (id=5875): openat(0xffffffffffffff9c, 0x0, 0x12042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1e4224, 0x1598cc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000005dc0)={{{0x2, 0x1}}, 0x0, 0x8, 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 13m21.272399487s ago: executing program 40 (id=5894): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 4m0.865209827s ago: executing program 3 (id=8718): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000e90000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x82, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x37f, 0xaef3, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x8, 0x13, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x3, 0x3, 0x40000000000002}], 0x9}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) cachestat(r4, &(0x7f0000000040), &(0x7f000009de80), 0x0) 4m0.689259078s ago: executing program 3 (id=8719): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) process_vm_writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/27, 0x1b}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000600)}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000640)}], 0x6, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x22, 0x5, 0x5, 0x101}, 0x50) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x5a, 0x99, 0xe6, 0x20, 0x13d3, 0x3393, 0x6bed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x6d, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8f, 0x47, 0xe1}}]}}]}}, 0x0) 4m0.435292251s ago: executing program 3 (id=8720): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) 4m0.242010068s ago: executing program 3 (id=8721): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="0500000000000000000002000000", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 4m0.019006073s ago: executing program 3 (id=8723): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000800000000000f700000300000a14000000180a0101000000000000000001000005140000001100010000000000000000000b"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10000030) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3m59.823069386s ago: executing program 3 (id=8725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x4, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_AF_SPEC={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) 3m13.525045777s ago: executing program 0 (id=8814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 3m12.127288585s ago: executing program 0 (id=8815): epoll_create1(0x80000) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r2, &(0x7f0000000500)=[{0x0}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(r2, 0x101) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r4, &(0x7f0000002440)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c6029455091676c214569a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d040700ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e99b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0xe24}}, 0xffffff5c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r7, 0x0, 0x0}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x0, 0x2}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x39, 0x6, [0x2, 0xf54, 0x0, 0x9, 0xfffffffe, 0xfffffffa]}}) 3m8.763214286s ago: executing program 0 (id=8820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000800)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 3m6.201086162s ago: executing program 0 (id=8823): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 3m2.236408908s ago: executing program 0 (id=8829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000800)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_UIE_ON(r5, 0x7003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000"], 0x110) 2m49.945518657s ago: executing program 0 (id=8834): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="400f1100000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "fc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) 2m33.751908081s ago: executing program 41 (id=8834): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="400f1100000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "fc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) 22.17112822s ago: executing program 6 (id=8993): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x2000000000903, 0x4}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0x50, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x42000) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) 20.776035911s ago: executing program 6 (id=8996): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e6400000000"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000"], 0x3c}}, 0x0) 17.189377681s ago: executing program 8 (id=8999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b000000", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 11.627449268s ago: executing program 8 (id=9002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x40}}, 0x0) 11.55555846s ago: executing program 8 (id=9003): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe6, 0x4, 0x3}], "", ['\x00']}, 0x178) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 10.22260243s ago: executing program 6 (id=9005): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 9.062953038s ago: executing program 4 (id=9006): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x2000000000903, 0x4}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0x50, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x42000) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 9.061617037s ago: executing program 8 (id=9007): poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa7f084dd5657bbb1, 0x14}) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x0) 7.373064602s ago: executing program 4 (id=9008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000000380)=""/112, 0x70}], 0x2}}], 0x3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @remote}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000040000000000010000000000ffff", @ANYRES32=r6, @ANYRES16=r6], 0x50}}, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdc}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 7.204759401s ago: executing program 6 (id=9009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 6.076163554s ago: executing program 4 (id=9010): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5.60417595s ago: executing program 8 (id=9011): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe6, 0x4, 0x3}], "", ['\x00']}, 0x178) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.354879623s ago: executing program 6 (id=9012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 3.874316585s ago: executing program 4 (id=9013): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x17d}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.767693531s ago: executing program 4 (id=9014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @remote}, &(0x7f0000000280)=0xc) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdc}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2.759309582s ago: executing program 6 (id=9015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000000380)=""/112, 0x70}], 0x2}}], 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @remote}, &(0x7f0000000280)=0xc) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdc}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2.657667399s ago: executing program 8 (id=9016): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) inotify_init1(0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 0s ago: executing program 4 (id=9017): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): 29013] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6732'. [ 2597.872108][T20016] Bluetooth: hci1: command tx timeout [ 2598.030612][T29019] overlayfs: failed to clone upperpath [ 2598.089729][T28852] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2598.234759][T29023] fuse: Bad value for 'group_id' [ 2598.234779][T29023] fuse: Bad value for 'group_id' [ 2598.446552][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2598.491642][T29030] overlayfs: failed to resolve './bus': -2 [ 2598.736743][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2598.871793][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2599.145282][T28852] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2599.764187][T29046] fuse: Unknown parameter 'group_id00000000000000000000' [ 2599.827248][T28852] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2599.888554][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2599.891730][T28852] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2599.952168][T20016] Bluetooth: hci1: command tx timeout [ 2599.957556][T28852] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2599.960950][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2600.057200][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2600.139997][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2600.357742][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2600.377123][T29070] loop2: detected capacity change from 0 to 7 [ 2600.400444][T29070] Dev loop2: unable to read RDB block 7 [ 2600.400495][T29070] loop2: unable to read partition table [ 2600.401527][T29070] loop2: partition table beyond EOD, truncated [ 2600.404701][T29070] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2600.447575][T27720] udevd[27720]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 2600.486797][T27720] udevd[27720]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 2600.966045][T28852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2601.075300][T28852] 8021q: adding VLAN 0 to HW filter on device team0 [ 2601.158419][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 2601.170793][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2601.182763][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2601.182914][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2602.273002][T28852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2602.518344][T29102] fuse: Bad value for 'fd' [ 2602.751232][T29111] loop2: detected capacity change from 0 to 7 [ 2602.758412][T29111] Dev loop2: unable to read RDB block 7 [ 2602.758457][T29111] loop2: unable to read partition table [ 2602.758706][T29111] loop2: partition table beyond EOD, truncated [ 2602.758723][T29111] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2603.249772][T28852] veth0_vlan: entered promiscuous mode [ 2603.261605][T28852] veth1_vlan: entered promiscuous mode [ 2603.645971][T28852] veth0_macvtap: entered promiscuous mode [ 2603.926752][T28852] veth1_macvtap: entered promiscuous mode [ 2603.974832][T28852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2603.997309][T28852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2604.021083][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2604.021360][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2604.021399][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2604.021435][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2604.228436][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2604.431509][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2604.544306][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2604.596503][T29141] fuse: Bad value for 'fd' [ 2604.674345][T29147] fuse: Bad value for 'fd' [ 2604.677838][T13779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2604.677857][T13779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2604.808046][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2604.835577][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2604.835598][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2605.090307][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2606.347385][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2606.737831][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2606.931205][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2606.960934][T29177] fuse: Bad value for 'fd' [ 2607.064582][T29179] fuse: Bad value for 'fd' [ 2607.149282][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2607.541187][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2608.912850][T21793] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2609.066613][T21793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2609.066650][T21793] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2609.066694][T21793] usb 4-1: New USB device found, idVendor=0461, idProduct=4e05, bcdDevice= 0.00 [ 2609.066718][T21793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.144509][T21793] usb 4-1: config 0 descriptor?? [ 2609.229325][T29204] fuse: Bad value for 'fd' [ 2609.490246][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2609.891037][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2611.880111][T21793] usb 4-1: string descriptor 0 read error: -71 [ 2611.908785][T21793] usbhid 4-1:0.0: can't add hid device: -71 [ 2611.908903][T21793] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2611.932053][T21793] usb 4-1: USB disconnect, device number 20 [ 2612.024402][T27991] udevd[27991]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2612.036730][T27646] udevd[27646]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2612.178222][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2612.230628][T29243] fuse: Bad value for 'fd' [ 2612.248932][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2612.263869][T29245] loop2: detected capacity change from 0 to 7 [ 2612.271879][T29245] Dev loop2: unable to read RDB block 7 [ 2612.273263][T29245] loop2: unable to read partition table [ 2612.273490][T29245] loop2: partition table beyond EOD, truncated [ 2612.273524][T29245] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2612.346283][T28674] udevd[28674]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 2612.400470][T27720] udevd[27720]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 2612.411883][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2612.509192][T27720] udevd[27720]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 2613.865916][T21793] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2614.036710][T21793] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2614.036745][T21793] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2614.036787][T21793] usb 9-1: New USB device found, idVendor=0461, idProduct=4e05, bcdDevice= 0.00 [ 2614.036811][T21793] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.130831][T21793] usb 9-1: config 0 descriptor?? [ 2614.664231][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2614.907830][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2615.646861][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2615.709035][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2616.542470][T29292] syz.4.6833 (29292) used greatest stack depth: 14224 bytes left [ 2616.597220][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 2616.629960][T21793] usb 9-1: string descriptor 0 read error: -71 [ 2616.672871][T29302] loop6: detected capacity change from 0 to 7 [ 2616.678577][T29302] Dev loop6: unable to read RDB block 7 [ 2616.678621][T29302] loop6: unable to read partition table [ 2616.678860][T29302] loop6: partition table beyond EOD, truncated [ 2616.678893][T29302] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2616.704445][T21793] usbhid 9-1:0.0: can't add hid device: -71 [ 2616.704564][T21793] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2616.727908][T21793] usb 9-1: USB disconnect, device number 21 [ 2616.741209][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/107.tmp-b7:6' failed: Read-only file system [ 2616.807636][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/107.tmp-b7:6' failed: Read-only file system [ 2616.849340][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/107.tmp-b7:6' failed: Read-only file system [ 2616.889069][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2617.006196][T29317] loop2: detected capacity change from 0 to 7 [ 2617.007369][T29317] Dev loop2: unable to read RDB block 7 [ 2617.007414][T29317] loop2: unable to read partition table [ 2617.007640][T29317] loop2: partition table beyond EOD, truncated [ 2617.007657][T29317] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2617.044750][T27720] udevd[27720]: symlink '../../loop2' '/dev/disk/by-diskseq/109.tmp-b7:2' failed: Read-only file system [ 2619.251152][T17967] page_pool_release_retry() stalled pool shutdown: id 251, 1 inflight 61 sec [ 2619.542263][T29222] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2619.704216][T29222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2619.704251][T29222] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2619.704294][T29222] usb 7-1: New USB device found, idVendor=0461, idProduct=4e05, bcdDevice= 0.00 [ 2619.704318][T29222] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2619.731324][T29222] usb 7-1: config 0 descriptor?? [ 2621.055040][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2622.086095][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6866'. [ 2622.328894][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2622.373527][T29222] usb 7-1: string descriptor 0 read error: -71 [ 2622.393252][T29222] usbhid 7-1:0.0: can't add hid device: -71 [ 2622.393368][T29222] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2622.429500][T29222] usb 7-1: USB disconnect, device number 14 [ 2622.527242][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2622.597721][T29392] kAFS: No cell specified [ 2622.702198][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2622.782972][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2622.810424][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2623.869359][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2624.024123][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2624.031701][ C1] vkms_vblank_simulate: vblank timer overrun [ 2624.041788][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2624.560936][ C1] vkms_vblank_simulate: vblank timer overrun [ 2625.213751][ C1] vkms_vblank_simulate: vblank timer overrun [ 2625.343398][ C1] vkms_vblank_simulate: vblank timer overrun [ 2625.417487][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2625.685051][T29437] kAFS: No cell specified [ 2626.038876][ C1] vkms_vblank_simulate: vblank timer overrun [ 2626.214111][T29454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6893'. [ 2626.380470][ C1] vkms_vblank_simulate: vblank timer overrun [ 2626.464836][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2627.260043][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2627.320275][ C1] vkms_vblank_simulate: vblank timer overrun [ 2627.440073][T29478] afs: Unknown parameter 'dy' [ 2627.527103][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2628.023653][ C1] vkms_vblank_simulate: vblank timer overrun [ 2628.145415][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2628.211583][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6908'. [ 2628.216291][ C1] vkms_vblank_simulate: vblank timer overrun [ 2628.631040][ C1] vkms_vblank_simulate: vblank timer overrun [ 2628.779418][ C1] vkms_vblank_simulate: vblank timer overrun [ 2628.879993][ C1] vkms_vblank_simulate: vblank timer overrun [ 2629.078431][ C1] vkms_vblank_simulate: vblank timer overrun [ 2629.373224][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2629.469921][ C1] vkms_vblank_simulate: vblank timer overrun [ 2629.703409][T29519] afs: Unknown parameter 'dy' [ 2629.761280][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2629.902591][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2630.101424][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2630.114247][T29538] overlayfs: failed to resolve './file0': -2 [ 2630.189309][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2630.300739][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2630.385424][ C1] vkms_vblank_simulate: vblank timer overrun [ 2630.498499][T29549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6923'. [ 2630.584045][ C1] vkms_vblank_simulate: vblank timer overrun [ 2630.920228][ C1] vkms_vblank_simulate: vblank timer overrun [ 2631.093525][ C1] vkms_vblank_simulate: vblank timer overrun [ 2631.283417][ C1] vkms_vblank_simulate: vblank timer overrun [ 2631.670163][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2631.720456][ C1] vkms_vblank_simulate: vblank timer overrun [ 2632.096724][T29572] overlayfs: failed to resolve './file0': -2 [ 2632.130546][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2632.240614][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2632.370555][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2632.519854][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2632.687474][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2632.716105][T29602] fuse: Bad value for 'fd' [ 2632.765447][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2632.830714][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2632.949178][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/108.tmp-b7:6' failed: Read-only file system [ 2633.136757][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2633.205609][T29628] fuse: Bad value for 'fd' [ 2633.524537][T29645] loop6: detected capacity change from 0 to 7 [ 2633.531389][T29645] Dev loop6: unable to read RDB block 7 [ 2633.531434][T29645] loop6: unable to read partition table [ 2633.531646][T29645] loop6: partition table beyond EOD, truncated [ 2633.531678][T29645] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2633.712244][T26385] Bluetooth: hci2: command 0x0406 tx timeout [ 2633.773106][T29653] loop2: detected capacity change from 0 to 7 [ 2633.780675][T29653] Dev loop2: unable to read RDB block 7 [ 2633.780721][T29653] loop2: unable to read partition table [ 2633.780941][T29653] loop2: partition table beyond EOD, truncated [ 2633.780980][T29653] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2633.853148][T29657] fuse: Bad value for 'fd' [ 2634.458681][T29681] loop6: detected capacity change from 0 to 7 [ 2634.468378][T27720] Dev loop6: unable to read RDB block 7 [ 2634.468545][T27720] loop6: unable to read partition table [ 2634.468787][T27720] loop6: partition table beyond EOD, truncated [ 2634.486816][T29681] Dev loop6: unable to read RDB block 7 [ 2634.486860][T29681] loop6: unable to read partition table [ 2634.487074][T29681] loop6: partition table beyond EOD, truncated [ 2634.489182][T29681] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2634.521741][ C1] vkms_vblank_simulate: vblank timer overrun [ 2634.852839][T29692] fuse: Bad value for 'fd' [ 2635.025326][T29699] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6990'. [ 2635.104994][T29705] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2635.287905][T29714] overlayfs: failed to resolve './file0': -2 [ 2635.385465][T29719] fuse: Unknown parameter 'use00000000000000000000' [ 2635.546597][T29728] fuse: Bad value for 'fd' [ 2636.226651][ C1] vkms_vblank_simulate: vblank timer overrun [ 2636.248119][T29748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7009'. [ 2636.486633][T29751] fuse: Unknown parameter 'user_i00000000000000000000' [ 2636.719119][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2636.748164][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2636.858809][T29762] fuse: Unknown parameter '0x0000000000000003' [ 2636.942912][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2637.032623][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2637.158616][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2637.469485][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2637.706667][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2637.838746][T29745] infiniband syz1: set active [ 2637.838768][T29745] infiniband syz1: added syz_tun [ 2637.863779][T29745] syz1: rxe_create_cq: returned err = -12 [ 2637.864028][T29745] infiniband syz1: Couldn't create ib_mad CQ [ 2637.864262][T29745] infiniband syz1: Couldn't open port 1 [ 2638.019171][T29745] RDS/IB: syz1: added [ 2638.031841][T29745] smc: adding ib device syz1 with port count 1 [ 2638.041540][T29745] smc: ib device syz1 port 1 has no pnetid [ 2638.152317][T29786] fuse: Unknown parameter 'user_i00000000000000000000' [ 2638.368975][T29788] fuse: Bad value for 'group_id' [ 2638.368998][T29788] fuse: Bad value for 'group_id' [ 2638.578719][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2638.675608][T17434] Bluetooth: hci6: command 0x0406 tx timeout [ 2638.675648][T17434] Bluetooth: hci3: command 0x0406 tx timeout [ 2638.748125][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2638.867691][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2639.137520][T29807] fuse: Unknown parameter '0x0000000000000003' [ 2639.315485][T26385] Bluetooth: hci6: unexpected event for opcode 0x0c03 [ 2639.352755][T29804] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 2639.630636][T29815] overlayfs: failed to resolve './file1': -2 [ 2639.833018][T29808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2639.833062][T29808] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2639.833263][T29809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2639.839141][T29809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2639.839379][T29809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2639.935015][T29819] fuse: Bad value for 'group_id' [ 2639.935035][T29819] fuse: Bad value for 'group_id' [ 2639.949269][T29808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2639.949293][T29808] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2639.950333][T29808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2639.950349][T29808] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2639.958511][T29809] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2639.958608][T29809] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2640.124551][T29809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2640.124830][T29809] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2640.125198][T29808] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2640.125217][T29808] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 2640.205712][T29809] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2640.314767][T29808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2640.314790][T29808] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2641.000144][T29842] fuse: Unknown parameter '0x0000000000000003' [ 2641.038179][T29844] fuse: Bad value for 'group_id' [ 2641.038200][T29844] fuse: Bad value for 'group_id' [ 2641.640519][T29859] bridge0: port 2(bridge_slave_1) entered disabled state [ 2641.674312][T29859] bridge0: port 1(bridge_slave_0) entered disabled state [ 2641.899757][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2642.191116][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2642.458442][T29878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7061'. [ 2642.475523][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2642.522164][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2642.740144][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2643.025263][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2643.242803][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2643.430216][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2643.651866][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2643.670430][T29902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7070'. [ 2643.827262][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2644.019919][T29919] fuse: Unknown parameter 'use00000000000000000000' [ 2644.995392][T29953] binder: 29948:29953 ioctl c0306201 0 returned -14 [ 2645.943043][T29962] netlink: 'syz.4.7094': attribute type 10 has an invalid length. [ 2645.976510][T29962] bridge0: port 2(bridge_slave_1) entered disabled state [ 2645.977291][T29962] bridge0: port 1(bridge_slave_0) entered disabled state [ 2646.009179][T29962] bridge0: port 2(bridge_slave_1) entered blocking state [ 2646.009460][T29962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2646.042982][T29962] bridge0: port 1(bridge_slave_0) entered blocking state [ 2646.043174][T29962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2646.059117][T29962] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2646.179654][T29968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7097'. [ 2646.243785][T29971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7097'. [ 2646.976596][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2647.058985][T29988] binder: 29986:29988 ioctl c0306201 0 returned -14 [ 2647.203876][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2647.416919][T29995] fuse: Unknown parameter 'user_i00000000000000000000' [ 2647.491221][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2647.706589][T30005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2647.759985][T29997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2647.763282][T29997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2647.955045][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2648.003286][T30016] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7116'. [ 2648.421619][T30024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7117'. [ 2648.502382][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2648.688665][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2648.871619][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2649.084302][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2649.230633][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2649.463643][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2650.688112][T30065] loop2: detected capacity change from 0 to 7 [ 2650.702381][T30065] Dev loop2: unable to read RDB block 7 [ 2650.702435][T30065] loop2: unable to read partition table [ 2650.702671][T30065] loop2: partition table beyond EOD, truncated [ 2650.702688][T30065] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2651.146473][T30086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7144'. [ 2651.199805][T30087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7144'. [ 2652.011320][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2652.024272][T30111] loop2: detected capacity change from 0 to 7 [ 2652.032651][T30111] Dev loop2: unable to read RDB block 7 [ 2652.032696][T30111] loop2: unable to read partition table [ 2652.033035][T30111] loop2: partition table beyond EOD, truncated [ 2652.033067][T30111] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2652.072172][T27720] udevd[27720]: symlink '../../loop2' '/dev/disk/by-diskseq/119.tmp-b7:2' failed: Read-only file system [ 2652.156542][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2652.175253][T27720] udevd[27720]: symlink '../../loop2' '/dev/disk/by-diskseq/119.tmp-b7:2' failed: Read-only file system [ 2652.207788][T27720] udevd[27720]: symlink '../../loop2' '/dev/disk/by-diskseq/119.tmp-b7:2' failed: Read-only file system [ 2652.256409][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2652.424125][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2652.499799][T30126] fuse: Unknown parameter '0x0000000000000003' [ 2652.712072][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2654.179359][T28674] udevd[28674]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2654.485963][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2655.492114][T29222] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2655.653539][T29222] usb 5-1: no configurations [ 2655.653559][T29222] usb 5-1: can't read configurations, error -22 [ 2655.792193][T29222] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2655.866814][T30193] bridge1: entered promiscuous mode [ 2655.866841][T30193] bridge1: entered allmulticast mode [ 2655.887576][T30193] team0: Port device bridge1 added [ 2655.906297][T30193] bridge0: port 3(team0) entered blocking state [ 2655.908936][T30193] bridge0: port 3(team0) entered disabled state [ 2655.909828][T30193] team0: entered allmulticast mode [ 2655.909847][T30193] team_slave_0: entered allmulticast mode [ 2655.910052][T30193] team_slave_1: entered allmulticast mode [ 2655.929316][T30193] team0: entered promiscuous mode [ 2655.929339][T30193] team_slave_0: entered promiscuous mode [ 2655.932703][T30193] team_slave_1: entered promiscuous mode [ 2655.957631][T29222] usb 5-1: no configurations [ 2655.957649][T29222] usb 5-1: can't read configurations, error -22 [ 2655.960814][T29222] usb usb5-port1: attempt power cycle [ 2655.971643][T30193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7187'. [ 2655.971729][T30193] team0: left allmulticast mode [ 2655.971745][T30193] team_slave_0: left allmulticast mode [ 2655.971765][T30193] team_slave_1: left allmulticast mode [ 2655.979814][T30193] team0: left promiscuous mode [ 2655.979839][T30193] team_slave_0: left promiscuous mode [ 2655.980078][T30193] team_slave_1: left promiscuous mode [ 2655.986002][T30193] bridge0: port 3(team0) entered disabled state [ 2656.073713][T30193] bridge_slave_1: left allmulticast mode [ 2656.073743][T30193] bridge_slave_1: left promiscuous mode [ 2656.075279][T30193] bridge0: port 2(bridge_slave_1) entered disabled state [ 2656.154007][T30193] bridge_slave_0: left allmulticast mode [ 2656.154037][T30193] bridge_slave_0: left promiscuous mode [ 2656.154312][T30193] bridge0: port 1(bridge_slave_0) entered disabled state [ 2656.229486][T30202] loop2: detected capacity change from 0 to 7 [ 2656.231858][T30202] Dev loop2: unable to read RDB block 7 [ 2656.231905][T30202] loop2: unable to read partition table [ 2656.236438][T30202] loop2: partition table beyond EOD, truncated [ 2656.236473][T30202] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2656.302091][T29222] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2656.374752][T29222] usb 5-1: no configurations [ 2656.374770][T29222] usb 5-1: can't read configurations, error -22 [ 2656.532132][T29222] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2656.563826][T29222] usb 5-1: no configurations [ 2656.563850][T29222] usb 5-1: can't read configurations, error -22 [ 2656.564459][T29222] usb usb5-port1: unable to enumerate USB device [ 2657.077303][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2657.179792][T30227] netlink: 'syz.3.7203': attribute type 10 has an invalid length. [ 2657.180580][T30227] bridge0: port 2(bridge_slave_1) entered disabled state [ 2657.201113][T30227] bridge0: port 1(bridge_slave_0) entered disabled state [ 2657.203923][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2657.245030][T30227] bridge0: port 2(bridge_slave_1) entered blocking state [ 2657.246385][T30227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2657.246850][T30227] bridge0: port 1(bridge_slave_0) entered blocking state [ 2657.247026][T30227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2657.288848][T30227] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2657.608016][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2657.751626][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2658.006784][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2658.250711][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2658.327135][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2658.357298][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2658.375283][T30257] fuse: Unknown parameter 'user_id00000000000000000000' [ 2658.402770][T30259] fuse: Unknown parameter '0x0000000000000003' [ 2658.506830][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2658.772828][T27720] udevd[27720]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 2658.885808][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2658.975552][T30280] overlayfs: failed to resolve './bus': -2 [ 2659.229554][T30287] fuse: Unknown parameter '0x0000000000000003' [ 2660.017137][T30313] fuse: Unknown parameter 'user_id00000000000000000000' [ 2660.018230][T30315] overlayfs: missing 'lowerdir' [ 2660.140079][T30317] fuse: Unknown parameter 'fd0x0000000000000003' [ 2660.980747][T30353] fuse: Unknown parameter 'fd0x0000000000000003' [ 2661.541751][T30373] fuse: Bad value for 'fd' [ 2661.593155][T30376] fuse: Unknown parameter 'fd0x0000000000000003' [ 2661.705732][T30382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7269'. [ 2662.295814][T30407] fuse: Bad value for 'fd' [ 2662.315248][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2662.429328][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2662.466067][T30416] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7282'. [ 2662.745221][T30434] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7290'. [ 2662.750029][T30434] unsupported nlmsg_type 40 [ 2663.079295][T30441] fuse: Bad value for 'fd' [ 2663.185989][T30445] fuse: Bad value for 'fd' [ 2663.401516][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2663.513417][T30462] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7301'. [ 2663.660944][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2663.930660][T30472] fuse: Bad value for 'fd' [ 2665.198311][T30484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7310'. [ 2665.516557][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2665.980770][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2666.010467][T30512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7321'. [ 2666.064225][T30513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7321'. [ 2666.235841][T30517] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7322'. [ 2667.384738][T30528] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7326'. [ 2667.714256][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2667.957639][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2668.190742][T30555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7340'. [ 2668.461488][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2668.501580][T30559] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7336'. [ 2668.501614][T30559] openvswitch: netlink: Flow key attr not present in new flow. [ 2669.582919][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7344'. [ 2669.844173][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2670.078479][T30592] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7355'. [ 2670.078504][T30592] openvswitch: netlink: Flow key attr not present in new flow. [ 2670.161083][T30587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7351'. [ 2670.313120][T28674] udevd[28674]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2670.889583][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2671.135574][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2671.194167][T30619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7366'. [ 2671.194191][T30619] openvswitch: netlink: Flow key attr not present in new flow. [ 2671.907179][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7369'. [ 2671.908889][T30625] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.909137][T30625] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.959658][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2672.021426][T30627] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7370'. [ 2672.276866][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2672.495545][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2672.739384][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2673.862642][T30674] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2673.862696][T30674] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2674.065998][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2674.146861][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2674.328395][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2674.332359][T30693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7395'. [ 2674.536786][T30707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7402'. [ 2674.693201][T30710] netlink: 'syz.8.7401': attribute type 10 has an invalid length. [ 2674.814769][T30714] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2674.814831][T30714] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2675.369147][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2675.590453][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2675.635031][T30737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7414'. [ 2675.796410][T30740] bridge1: entered promiscuous mode [ 2675.796437][T30740] bridge1: entered allmulticast mode [ 2675.799031][T30740] team0: Port device bridge1 added [ 2675.854075][T30744] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2675.854133][T30744] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2675.854424][T30740] bridge0: port 3(team0) entered blocking state [ 2675.857316][T30740] bridge0: port 3(team0) entered disabled state [ 2675.857561][T30740] team0: entered allmulticast mode [ 2675.857578][T30740] team_slave_0: entered allmulticast mode [ 2675.857597][T30740] team_slave_1: entered allmulticast mode [ 2675.861007][T30740] team0: entered promiscuous mode [ 2675.861024][T30740] team_slave_0: entered promiscuous mode [ 2675.861234][T30740] team_slave_1: entered promiscuous mode [ 2675.941849][T30740] bridge0: port 3(team0) entered blocking state [ 2675.968286][T30740] bridge0: port 3(team0) entered forwarding state [ 2676.112721][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2676.154037][T30740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7413'. [ 2676.154131][T30740] team0: left allmulticast mode [ 2676.154148][T30740] team_slave_0: left allmulticast mode [ 2676.154169][T30740] team_slave_1: left allmulticast mode [ 2676.154225][T30740] team0: left promiscuous mode [ 2676.154237][T30740] team_slave_0: left promiscuous mode [ 2676.154455][T30740] team_slave_1: left promiscuous mode [ 2676.294638][T30740] bridge0: port 3(team0) entered disabled state [ 2677.173456][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2677.190178][T30740] bridge_slave_1: left allmulticast mode [ 2677.190207][T30740] bridge_slave_1: left promiscuous mode [ 2677.190469][T30740] bridge0: port 2(bridge_slave_1) entered disabled state [ 2677.284638][T30740] bridge_slave_0: left allmulticast mode [ 2677.284669][T30740] bridge_slave_0: left promiscuous mode [ 2677.284933][T30740] bridge0: port 1(bridge_slave_0) entered disabled state [ 2677.298460][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2677.523568][T30740] bond0: (slave bridge0): Releasing backup interface [ 2677.526924][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2678.050955][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2679.059710][T30794] overlayfs: failed to clone upperpath [ 2680.188421][T30802] fuse: Unknown parameter '0x0000000000000003' [ 2680.655052][T30807] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7440'. [ 2680.786459][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2681.012304][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2681.214240][T30826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2681.276278][T30826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2681.280077][T30826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2681.331058][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2681.450255][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2681.509023][T30835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7451'. [ 2682.494768][T27720] udevd[27720]: symlink '../../loop3' '/dev/disk/by-diskseq/80.tmp-b7:3' failed: Read-only file system [ 2682.667219][T30843] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7455'. [ 2682.839185][T30851] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7453'. [ 2682.850820][T30850] fuse: Unknown parameter '0x0000000000000003' [ 2683.092149][T30863] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7462'. [ 2683.399987][T30869] netlink: 'syz.8.7465': attribute type 10 has an invalid length. [ 2683.470880][T30874] openvswitch: netlink: Flow actions attr not present in new flow. [ 2684.894181][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7474'. [ 2684.947188][T30893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7474'. [ 2685.228925][T30905] openvswitch: netlink: Flow actions attr not present in new flow. [ 2685.418800][T30912] overlayfs: failed to clone upperpath [ 2685.448976][T30911] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7482'. [ 2685.634415][T30920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2685.687772][T30920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2685.704478][T30920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2686.632152][T29222] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2686.886425][T29222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2686.886653][T29222] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2686.886899][T29222] usb 5-1: New USB device found, idVendor=0461, idProduct=4e05, bcdDevice= 0.00 [ 2686.914649][T29222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2687.585072][T29222] usb 5-1: config 0 descriptor?? [ 2687.841846][T30945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7494'. [ 2688.075496][T30951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7495'. [ 2688.730994][T30956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7497'. [ 2689.037555][T29222] usb 5-1: string descriptor 0 read error: -71 [ 2689.041649][T29222] usbhid 5-1:0.0: can't add hid device: -71 [ 2689.041728][T29222] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2689.044870][T29222] usb 5-1: USB disconnect, device number 14 [ 2689.240293][T30963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7500'. [ 2689.346886][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7500'. [ 2690.232375][T30973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2690.416509][T30981] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2690.450207][T30975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2690.484929][T30975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2690.510794][T23070] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 2690.510827][T23070] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 2690.570114][T30985] netlink: 'syz.3.7509': attribute type 10 has an invalid length. [ 2690.644099][T30989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2690.660995][T13779] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 2691.368490][T13779] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 2691.487029][T19849] wlan1: authentication with 08:02:11:00:00:00 timed out [ 2691.498590][T30993] fuse: Bad value for 'fd' [ 2691.726216][T30999] openvswitch: netlink: Flow actions attr not present in new flow. [ 2691.799505][T31002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7516'. [ 2691.961043][T31010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7518'. [ 2692.153479][T31012] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7520'. [ 2692.253782][T31013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7520'. [ 2693.511176][T31030] fuse: Bad value for 'fd' [ 2693.914822][T31048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7534'. [ 2693.988754][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7535'. [ 2693.993516][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7534'. [ 2696.871807][T31078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2696.946180][T31082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2696.953361][T31078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2696.979955][T31084] fuse: Bad value for 'fd' [ 2697.278850][T31094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7549'. [ 2697.355403][T31099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7549'. [ 2697.603921][T31105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7553'. [ 2698.158180][T31117] fuse: Invalid rootmode [ 2698.568706][T31129] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7565'. [ 2698.583531][T31129] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7565'. [ 2698.880679][ T37] audit: type=1804 audit(1761309156.213:398): pid=31137 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.7568" name="file0" dev="tmpfs" ino=1356 res=1 errno=0 [ 2699.151079][T31146] fuse: Invalid rootmode [ 2699.405076][T31152] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7576'. [ 2699.572665][T31158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2699.613981][T31148] wlan1: associating to AP 50:50:50:50:50:50 with corrupt probe response [ 2699.615033][T31148] wlan1: No legacy rates in association response [ 2699.727549][T20016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2699.741850][T20016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2699.757753][T20016] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2699.768464][T20016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2699.769199][T20016] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2699.800615][T26385] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2699.803113][T26385] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2699.887654][T26385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2699.905010][T26385] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2699.905971][T26385] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2700.188172][T31179] fuse: Invalid rootmode [ 2700.865759][T31184] fuse: Invalid rootmode [ 2700.939699][T31188] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7587'. [ 2701.433743][T31204] fuse: Bad value for 'rootmode' [ 2701.652916][T31210] netlink: 'syz.4.7595': attribute type 83 has an invalid length. [ 2701.716328][T31214] netlink: 'syz.4.7595': attribute type 83 has an invalid length. [ 2702.032098][T26385] Bluetooth: hci4: command tx timeout [ 2703.029510][T31227] fuse: Bad value for 'rootmode' [ 2703.032925][T31230] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7603'. [ 2703.164120][T31161] chnl_net:caif_netlink_parms(): no params data found [ 2703.273454][T31239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7609'. [ 2703.283558][T31240] fuse: Bad value for 'rootmode' [ 2704.280243][T26385] Bluetooth: hci4: command tx timeout [ 2704.573623][T31259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2704.626508][T31259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2704.628610][T31259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2704.695976][T31256] wlan1: No legacy rates in association response [ 2704.840455][T31271] fuse: Bad value for 'rootmode' [ 2704.855978][T31273] fuse: Bad value for 'rootmode' [ 2704.929913][T31275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7620'. [ 2705.000768][T31161] bridge0: port 1(bridge_slave_0) entered blocking state [ 2705.000920][T31161] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.001179][T31161] bridge_slave_0: entered allmulticast mode [ 2705.005638][T31161] bridge_slave_0: entered promiscuous mode [ 2705.032875][T31161] bridge0: port 2(bridge_slave_1) entered blocking state [ 2705.033025][T31161] bridge0: port 2(bridge_slave_1) entered disabled state [ 2705.033270][T31161] bridge_slave_1: entered allmulticast mode [ 2705.046401][T31161] bridge_slave_1: entered promiscuous mode [ 2705.678852][T31161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2706.353774][T26385] Bluetooth: hci4: command tx timeout [ 2706.377590][T31299] fuse: Unknown parameter 'use00000000000000000000' [ 2706.434469][T31161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2706.448619][T31301] fuse: Bad value for 'rootmode' [ 2707.560116][T31313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7635'. [ 2707.689445][T31313] bridge0: port 2(bridge_slave_1) entered disabled state [ 2707.691261][T31313] bridge0: port 1(bridge_slave_0) entered disabled state [ 2707.869773][T31324] fuse: Unknown parameter 'use00000000000000000000' [ 2708.055805][T31331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2708.442009][T26385] Bluetooth: hci4: command tx timeout [ 2708.793133][T31333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2708.886706][T31335] fuse: Unknown parameter 'use00000000000000000000' [ 2709.017126][T31161] team0: Port device team_slave_0 added [ 2709.031352][T31161] team0: Port device team_slave_1 added [ 2709.278525][T31161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2709.278542][T31161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2709.278567][T31161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2709.281296][T31161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2709.281310][T31161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2709.281333][T31161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2709.302704][T31354] fuse: Unknown parameter 'use00000000000000000000' [ 2710.337707][T31368] fuse: Bad value for 'fd' [ 2710.552170][T31372] netlink: 'syz.4.7658': attribute type 83 has an invalid length. [ 2710.604105][T31161] hsr_slave_0: entered promiscuous mode [ 2710.605579][T31161] hsr_slave_1: entered promiscuous mode [ 2710.606546][T31161] debugfs: 'hsr0' already exists in 'hsr' [ 2710.606571][T31161] Cannot create hsr debugfs directory [ 2710.796516][T31377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2710.826536][T31380] fuse: Unknown parameter 'user_i00000000000000000000' [ 2711.246513][T31394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2711.301095][T31394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2711.314211][T31394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2712.296573][T31402] fuse: Unknown parameter 'use00000000000000000000' [ 2712.429256][T31404] netlink: 'syz.4.7671': attribute type 83 has an invalid length. [ 2713.030735][T31414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2713.035520][T31161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2713.035551][T31161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2713.095773][T31415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2713.545617][T31161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2713.545653][T31161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2714.058753][T31431] fuse: Unknown parameter 'user_i00000000000000000000' [ 2714.937903][T31436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7683'. [ 2714.939077][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7683'. [ 2714.961377][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7683'. [ 2714.983761][T31161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2714.983795][T31161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.630513][T31161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2715.630548][T31161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2716.042105][ T37] audit: type=1326 audit(1761309173.233:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31452 comm="syz.3.7690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f909795efc9 code=0x0 [ 2717.071188][T31161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2717.345557][T31161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2717.426547][T31470] fuse: Unknown parameter 'user_i00000000000000000000' [ 2717.453853][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7695'. [ 2717.500141][T31161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2717.663771][T31161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2717.879220][T31482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7698'. [ 2717.979227][T31482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7698'. [ 2718.079559][T31161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2718.113871][T31161] 8021q: adding VLAN 0 to HW filter on device team0 [ 2718.130141][ T4588] bridge0: port 1(bridge_slave_0) entered blocking state [ 2718.131017][ T4588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.157656][T13779] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.157807][T13779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.397708][T31472] tipc: can't start tipc receive workqueue [ 2718.517562][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2718.780514][T31494] netlink: 'syz.4.7701': attribute type 10 has an invalid length. [ 2719.249283][T31161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2719.354053][T31499] netlink: 'syz.3.7703': attribute type 1 has an invalid length. [ 2720.435784][T31501] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 2720.435809][T31501] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 2720.474331][T31501] bond1: (slave vcan1): making interface the new active one [ 2720.475496][T31501] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 2720.509436][T31499] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 2720.560239][T31499] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 2720.561096][T31504] bond1: entered allmulticast mode [ 2720.561114][T31504] vcan1: entered allmulticast mode [ 2720.679297][T31161] veth0_vlan: entered promiscuous mode [ 2720.681057][T31511] fuse: Unknown parameter 'user_i00000000000000000000' [ 2720.717975][T31161] veth1_vlan: entered promiscuous mode [ 2720.810083][T31161] veth0_macvtap: entered promiscuous mode [ 2720.843627][T31161] veth1_macvtap: entered promiscuous mode [ 2720.884152][T31161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2720.928551][T31161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2720.951732][ T6004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.963517][ T6004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.963563][ T6004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.963598][ T6004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.026998][T31523] netlink: 'syz.3.7711': attribute type 10 has an invalid length. [ 2722.326480][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2722.326501][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2722.466732][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2722.466752][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2722.492893][T31547] fuse: Unknown parameter 'user_id00000000000000000000' [ 2722.685931][T31557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7569'. [ 2723.741111][T31569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7729'. [ 2724.453888][T31587] fuse: Unknown parameter 'user_id00000000000000000000' [ 2724.594267][T23070] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 2724.671094][T31593] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2724.745547][T23070] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2724.745575][T23070] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2724.750252][T23070] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2724.750278][T23070] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2724.750298][T23070] usb 1-1: Product: syz [ 2724.750312][T23070] usb 1-1: Manufacturer: syz [ 2724.750327][T23070] usb 1-1: SerialNumber: syz [ 2724.843872][T31595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7740'. [ 2726.227233][T31615] fuse: Unknown parameter 'user_id00000000000000000000' [ 2726.509798][T31622] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7749'. [ 2726.527643][T31622] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7749'. [ 2726.553174][T31622] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7749'. [ 2728.541082][T31649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7762'. [ 2728.550530][T31647] fuse: Bad value for 'fd' [ 2728.567658][T31649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7762'. [ 2728.593167][T31649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7762'. [ 2728.600826][T21793] usb 1-1: USB disconnect, device number 16 [ 2728.816720][T31661] netlink: 'syz.0.7766': attribute type 83 has an invalid length. [ 2729.127906][T31679] bond1: entered allmulticast mode [ 2729.223512][T31674] netlink: 'syz.8.7769': attribute type 1 has an invalid length. [ 2730.048284][T31686] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 2730.048310][T31686] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 2730.066468][T31686] bond1: (slave vcan1): making interface the new active one [ 2730.067291][T31686] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 2730.256242][T31696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7775'. [ 2730.257358][T31696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7775'. [ 2730.258460][T31696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7775'. [ 2730.262202][ T8336] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2730.414531][ T8336] usb 1-1: Using ep0 maxpacket: 32 [ 2730.416775][ T8336] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 2730.416802][ T8336] usb 1-1: config 0 has no interface number 0 [ 2730.416852][ T8336] usb 1-1: config 0 interface 184 has no altsetting 0 [ 2730.419894][ T8336] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2730.419922][ T8336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2730.419942][ T8336] usb 1-1: Product: syz [ 2730.419956][ T8336] usb 1-1: Manufacturer: syz [ 2730.419969][ T8336] usb 1-1: SerialNumber: syz [ 2730.487678][T31701] fuse: Bad value for 'fd' [ 2730.499203][ T8336] usb 1-1: config 0 descriptor?? [ 2730.524421][ T8336] smsc75xx v1.0.0 [ 2731.340980][T31711] lo speed is unknown, defaulting to 1000 [ 2731.347447][T31711] lo speed is unknown, defaulting to 1000 [ 2731.403521][T31711] lo speed is unknown, defaulting to 1000 [ 2731.569666][T31711] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2731.688749][T31711] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2731.784262][T31711] lo speed is unknown, defaulting to 1000 [ 2731.787185][T31711] lo speed is unknown, defaulting to 1000 [ 2731.790505][T31711] lo speed is unknown, defaulting to 1000 [ 2731.793800][T31711] lo speed is unknown, defaulting to 1000 [ 2731.796616][T31711] lo speed is unknown, defaulting to 1000 [ 2731.799812][T31711] lo speed is unknown, defaulting to 1000 [ 2731.802668][T31711] lo speed is unknown, defaulting to 1000 [ 2733.294450][ T8336] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 2733.294481][ T8336] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2733.295284][ T8336] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2733.295309][ T8336] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2733.295329][ T8336] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2733.295350][ T8336] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2733.295662][ T8336] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 2733.462063][ T8336] usb 1-1: USB disconnect, device number 17 [ 2733.521842][T31738] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7791'. [ 2733.543753][T31740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7790'. [ 2733.593438][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7790'. [ 2736.296947][T31787] openvswitch: netlink: Flow key attr not present in new flow. [ 2738.306278][T21793] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2738.330054][T31807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7818'. [ 2738.383471][T31809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7821'. [ 2738.384626][T31809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7821'. [ 2738.442028][T31807] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7818'. [ 2738.463110][T21793] usb 1-1: no configurations [ 2738.463130][T21793] usb 1-1: can't read configurations, error -22 [ 2738.592577][T21793] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2738.671333][T31818] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7822'. [ 2739.293009][T21793] usb 1-1: no configurations [ 2739.293029][T21793] usb 1-1: can't read configurations, error -22 [ 2739.299107][T21793] usb usb1-port1: attempt power cycle [ 2739.676164][T31827] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2739.805355][T31832] netlink: 884 bytes leftover after parsing attributes in process `syz.3.7824'. [ 2740.089901][T21793] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 2740.265408][T21793] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 2740.602031][T21793] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2740.602061][T21793] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2740.606953][T21793] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2740.606980][T21793] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2740.607001][T21793] usb 1-1: Product: syz [ 2740.607016][T21793] usb 1-1: Manufacturer: syz [ 2740.607031][T21793] usb 1-1: SerialNumber: syz [ 2740.916259][T31849] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7833'. [ 2740.937638][T31850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7831'. [ 2741.032127][T31852] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7833'. [ 2741.346001][T31843] bond1 (unregistering): Released all slaves [ 2741.724378][T31856] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7835'. [ 2741.905347][T31862] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7836'. [ 2742.657359][T31876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7844'. [ 2743.506902][ T37] audit: type=1804 audit(1761309200.853:400): pid=31882 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.7845" name="file0" dev="tmpfs" ino=1699 res=1 errno=0 [ 2745.024400][T21793] usb 1-1: USB disconnect, device number 21 [ 2745.124963][ T37] audit: type=1804 audit(1761309202.473:401): pid=31913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.7857" name="file0" dev="tmpfs" ino=1715 res=1 errno=0 [ 2745.146415][T31912] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7858'. [ 2745.215998][T31918] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7855'. [ 2745.319983][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7862'. [ 2745.320981][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7862'. [ 2745.660060][ T37] audit: type=1804 audit(1761309203.003:402): pid=31942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.7869" name="file0" dev="tmpfs" ino=1075 res=1 errno=0 [ 2746.226674][T31957] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7875'. [ 2746.313733][T31962] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7879'. [ 2746.516733][T31976] netlink: 'syz.0.7884': attribute type 1 has an invalid length. [ 2746.517795][ T37] audit: type=1804 audit(1761309203.863:403): pid=31974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.7883" name="file0" dev="tmpfs" ino=1840 res=1 errno=0 [ 2747.193400][T31992] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7891'. [ 2747.381555][T31996] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7893'. [ 2749.169895][T32017] netlink: 'syz.4.7900': attribute type 1 has an invalid length. [ 2749.791237][T32019] netlink: 'syz.8.7902': attribute type 1 has an invalid length. [ 2750.055222][T32029] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7904'. [ 2750.192655][T32020] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 2750.223228][T32020] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 2750.236288][T32021] bond1: (slave vcan3): The slave device specified does not support setting the MAC address [ 2750.240797][T32021] bond1: (slave vcan3): Enslaving as a backup interface with an up link [ 2750.287993][T32026] bond2: entered allmulticast mode [ 2750.423802][ T37] audit: type=1804 audit(1761309207.773:404): pid=32041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.7909" name="/newroot/27/file0" dev="tmpfs" ino=155 res=1 errno=0 [ 2750.639982][T32047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7911'. [ 2750.673572][T32047] bridge0: port 2(bridge_slave_1) entered disabled state [ 2750.677823][T32047] bridge0: port 1(bridge_slave_0) entered disabled state [ 2753.416187][T32065] netlink: 'syz.0.7917': attribute type 1 has an invalid length. [ 2753.659444][T32070] netlink: 'syz.6.7919': attribute type 1 has an invalid length. [ 2753.736744][T32070] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 2753.736771][T32070] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 2753.744480][T32070] bond1: (slave vcan1): making interface the new active one [ 2753.751534][T32070] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 2753.787532][T32070] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 2753.794522][T32070] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 2754.010162][T32070] bond2: entered allmulticast mode [ 2754.023677][T32078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7922'. [ 2754.034001][T32078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7922'. [ 2754.251971][ T37] audit: type=1804 audit(1761309211.503:405): pid=32083 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.7921" name="file0" dev="tmpfs" ino=1883 res=1 errno=0 [ 2755.182396][T32082] uprobe: syz.4.7921:32082 failed to unregister, leaking uprobe [ 2757.811636][T32121] netlink: 'syz.8.7936': attribute type 10 has an invalid length. [ 2757.909087][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7937'. [ 2757.910013][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7937'. [ 2760.690134][ T37] audit: type=1804 audit(1761309218.033:406): pid=32148 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.7945" name="file0" dev="tmpfs" ino=1727 res=1 errno=0 [ 2760.815487][T32146] uprobe: syz.3.7945:32146 failed to unregister, leaking uprobe [ 2760.854745][T32152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7947'. [ 2761.044529][T32155] netlink: 'syz.8.7948': attribute type 10 has an invalid length. [ 2761.160609][T32158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7950'. [ 2761.161728][T32158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7950'. [ 2763.768422][T32191] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7960'. [ 2765.470836][T32198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7963'. [ 2765.795355][T32202] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7962'. [ 2765.797215][T32202] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7962'. [ 2765.943543][ T37] audit: type=1804 audit(1761309223.293:407): pid=32208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.7966" name="file0" dev="tmpfs" ino=1205 res=1 errno=0 [ 2766.531742][T32219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7969'. [ 2766.531766][T32219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7969'. [ 2766.569075][T32219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7969'. [ 2766.569101][T32219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7969'. [ 2766.608385][ T58] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2766.622004][ T58] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2766.622211][ T58] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2766.622387][ T58] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2767.264827][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7973'. [ 2769.452792][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7979'. [ 2769.702675][T32260] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7984'. [ 2772.437967][T32284] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7992'. [ 2774.340710][T32302] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7996'. [ 2775.542976][T32312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8000'. [ 2777.373948][T32328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8008'. [ 2779.970487][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2780.192811][T32349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8012'. [ 2781.980460][T32361] netlink: 'syz.6.8015': attribute type 83 has an invalid length. [ 2782.282294][T32370] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8019'. [ 2783.338827][T32377] netlink: 'syz.3.8020': attribute type 10 has an invalid length. [ 2786.845273][T32395] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8026'. [ 2787.062916][T32404] netlink: 'syz.6.8031': attribute type 10 has an invalid length. [ 2787.064422][T32404] bridge0: port 2(bridge_slave_1) entered blocking state [ 2787.064657][T32404] bridge0: port 2(bridge_slave_1) entered listening state [ 2787.065002][T32404] bridge0: port 1(bridge_slave_0) entered blocking state [ 2787.065789][T32404] bridge0: port 1(bridge_slave_0) entered listening state [ 2787.081140][T32404] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2788.600183][T32413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8030'. [ 2788.948559][T32424] netlink: 'syz.8.8037': attribute type 83 has an invalid length. [ 2791.631610][T32440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8039'. [ 2792.935312][ T8336] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 2794.064119][ T8336] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2794.064146][ T8336] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2794.187778][ T8336] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2794.187808][ T8336] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2794.187828][ T8336] usb 1-1: Product: syz [ 2794.187842][ T8336] usb 1-1: Manufacturer: syz [ 2794.187856][ T8336] usb 1-1: SerialNumber: syz [ 2794.339116][T32457] netlink: 'syz.3.8044': attribute type 10 has an invalid length. [ 2795.455621][T32468] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8047'. [ 2795.868337][T32477] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8050'. [ 2795.885080][T32477] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8050'. [ 2796.244496][T29508] usb 1-1: USB disconnect, device number 22 [ 2796.346620][T32483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8054'. [ 2796.366764][T32483] lo speed is unknown, defaulting to 1000 [ 2796.366853][T32483] lo speed is unknown, defaulting to 1000 [ 2796.369257][T32483] lo speed is unknown, defaulting to 1000 [ 2796.487858][T32483] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2797.074629][T32483] lo speed is unknown, defaulting to 1000 [ 2797.076196][T32483] lo speed is unknown, defaulting to 1000 [ 2797.104908][T32483] lo speed is unknown, defaulting to 1000 [ 2797.109098][T32483] lo speed is unknown, defaulting to 1000 [ 2797.130623][T32483] lo speed is unknown, defaulting to 1000 [ 2797.134725][T32483] lo speed is unknown, defaulting to 1000 [ 2797.147224][T32483] lo speed is unknown, defaulting to 1000 [ 2797.311202][T32487] smc: removing ib device syz1 [ 2804.316597][T32544] siw: device registration error -23 [ 2814.523463][T32588] netlink: 'syz.8.8079': attribute type 1 has an invalid length. [ 2814.541165][T32588] bond1: (slave vcan4): The slave device specified does not support setting the MAC address [ 2814.555888][T32588] bond1: (slave vcan4): Enslaving as a backup interface with an up link [ 2814.575959][T32588] bond1: (slave vcan5): The slave device specified does not support setting the MAC address [ 2814.593978][T32588] bond1: (slave vcan5): Enslaving as a backup interface with an up link [ 2817.073159][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 2817.075391][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 2819.439467][T32630] siw: device registration error -23 [ 2820.169863][T32637] netlink: 'syz.8.8090': attribute type 1 has an invalid length. [ 2820.175999][T32637] bond1: (slave vcan6): The slave device specified does not support setting the MAC address [ 2820.178387][T32637] bond1: (slave vcan6): Enslaving as a backup interface with an up link [ 2820.185424][T32637] bond1: (slave vcan7): The slave device specified does not support setting the MAC address [ 2820.187581][T32637] bond1: (slave vcan7): Enslaving as a backup interface with an up link [ 2823.312184][T20016] Bluetooth: hci4: command 0x0406 tx timeout [ 2825.874455][T32676] netlink: 'syz.0.8100': attribute type 10 has an invalid length. [ 2825.879068][T32676] bridge0: port 2(bridge_slave_1) entered blocking state [ 2825.879200][T32676] bridge0: port 2(bridge_slave_1) entered listening state [ 2825.879404][T32676] bridge0: port 1(bridge_slave_0) entered blocking state [ 2825.879493][T32676] bridge0: port 1(bridge_slave_0) entered listening state [ 2825.883195][T32676] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2839.921477][ T313] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8128'. [ 2841.422686][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2842.270624][ T346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8138'. [ 2842.313600][ T346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8138'. [ 2842.315310][ T346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2846.281996][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2846.432314][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 2846.438690][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2846.438707][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2846.438725][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2846.441344][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2846.441361][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2846.441371][ T31] usb 1-1: Product: syz [ 2846.441379][ T31] usb 1-1: Manufacturer: syz [ 2846.441387][ T31] usb 1-1: SerialNumber: syz [ 2847.128955][ T31] usb 1-1: 0:2 : does not exist [ 2847.162191][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2847.162215][ C0] bridge0: topology change detected, propagating [ 2847.162773][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2847.162784][ C0] bridge0: topology change detected, propagating [ 2849.033604][T29508] usb 1-1: USB disconnect, device number 23 [ 2851.761786][ T426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8159'. [ 2853.249227][ T440] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8160'. [ 2856.112243][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 2856.112443][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 2856.271328][ T467] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8171'. [ 2856.467603][ T469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8170'. [ 2856.527106][ T476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8170'. [ 2860.063232][T23070] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 2860.214422][T23070] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2860.214438][T23070] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2860.217678][T23070] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2860.217694][T23070] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2860.217705][T23070] usb 1-1: Product: syz [ 2860.217712][T23070] usb 1-1: Manufacturer: syz [ 2860.217719][T23070] usb 1-1: SerialNumber: syz [ 2862.082194][ T528] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8185'. [ 2862.105219][ T528] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8185'. [ 2862.520001][ T532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8187'. [ 2862.802227][ T537] netlink: 'syz.6.8189': attribute type 83 has an invalid length. [ 2862.859193][T21793] usb 1-1: USB disconnect, device number 24 [ 2862.863333][ T540] netlink: 'syz.6.8189': attribute type 83 has an invalid length. [ 2869.104436][ T601] netlink: 'syz.6.8205': attribute type 83 has an invalid length. [ 2869.173495][ T602] netlink: 'syz.6.8205': attribute type 83 has an invalid length. [ 2873.397011][ T636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2874.862777][ T652] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8220'. [ 2875.077250][ T660] netlink: 'syz.4.8222': attribute type 83 has an invalid length. [ 2875.114754][ T662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8224'. [ 2875.114771][ T662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8224'. [ 2875.141162][ T664] netlink: 'syz.4.8222': attribute type 83 has an invalid length. [ 2875.150735][ T662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8224'. [ 2877.259836][ T687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2879.576176][ T704] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8233'. [ 2879.889450][ T710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8235'. [ 2879.889467][ T710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8235'. [ 2880.928331][ T717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8236'. [ 2880.998619][ T719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8236'. [ 2882.102161][ T730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2885.362595][ T755] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8245'. [ 2886.488252][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2886.488408][ C0] bridge0: topology change detected, propagating [ 2886.488830][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2886.488923][ C0] bridge0: topology change detected, propagating [ 2886.829264][ T762] netlink: 'syz.8.8248': attribute type 1 has an invalid length. [ 2886.883528][ T763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8246'. [ 2887.995588][ T768] bond1: entered allmulticast mode [ 2887.995612][ T768] vcan1: entered allmulticast mode [ 2888.174121][ T773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8250'. [ 2888.226243][ T774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8250'. [ 2891.812120][ T822] netlink: 'syz.4.8262': attribute type 1 has an invalid length. [ 2892.226917][ T824] bond2: entered allmulticast mode [ 2892.731288][ T837] siw: device registration error -23 [ 2896.898619][ T874] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8274'. [ 2896.913518][ T874] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8274'. [ 2897.102145][ T875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8273'. [ 2897.111757][ T875] siw: device registration error -23 [ 2902.902634][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2904.283173][ T952] netlink: 'syz.0.8291': attribute type 1 has an invalid length. [ 2911.227217][ T1011] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8304'. [ 2916.382312][ T1046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8312'. [ 2916.540019][ T1052] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8313'. [ 2917.307265][ T1061] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8315'. [ 2919.423437][ C1] vkms_vblank_simulate: vblank timer overrun [ 2920.350315][ C1] vkms_vblank_simulate: vblank timer overrun [ 2922.457858][ T1104] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8325'. [ 2923.181540][ T1108] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8327'. [ 2937.025696][ T1214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8351'. [ 2937.027704][ T1214] siw: device registration error -23 [ 2943.177163][ T1261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8363'. [ 2943.179838][ T1261] siw: device registration error -23 [ 2943.909625][ T1268] netlink: 'syz.3.8365': attribute type 83 has an invalid length. [ 2943.962608][ T1269] netlink: 'syz.3.8365': attribute type 83 has an invalid length. [ 2956.747756][ T1378] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8390'. [ 2956.809823][T29508] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 2957.222190][T29508] usb 1-1: config 0 has an invalid interface number: 181 but max is 0 [ 2957.222843][T29508] usb 1-1: config 0 has no interface number 0 [ 2957.270085][T29508] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d5.70 [ 2957.270114][T29508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2957.270134][T29508] usb 1-1: Product: syz [ 2957.270148][T29508] usb 1-1: Manufacturer: syz [ 2957.270162][T29508] usb 1-1: SerialNumber: syz [ 2957.278922][T29508] usb 1-1: config 0 descriptor?? [ 2957.484556][T29508] kl5kusb105 1-1:0.181: KL5KUSB105D / PalmConnect converter detected [ 2957.532550][T29508] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 2958.994930][ T1394] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2959.147143][ T1394] team0: Port device batadv1 added [ 2961.415308][ T1404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8397'. [ 2961.418751][ T1404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8397'. [ 2961.482741][T29508] usb 1-1: USB disconnect, device number 25 [ 2961.549865][T29508] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 2961.558581][T29508] kl5kusb105 1-1:0.181: device disconnected [ 2961.812170][ T1409] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8398'. [ 2961.817785][ T1409] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8398'. [ 2961.966333][ T1416] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8401'. [ 2964.422114][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2965.946612][ T1488] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8426'. [ 2965.966080][ T1488] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8426'. [ 2970.197188][ T1557] siw: device registration error -23 [ 2971.070114][ T1559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8453'. [ 2971.126136][ T1561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8453'. [ 2971.175482][ T1564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8453'. [ 2971.228846][ T1566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8451'. [ 2971.262282][ T1564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2973.218470][ T1604] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8468'. [ 2973.313967][ T1609] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8468'. [ 2973.371178][ T1609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2974.281680][ T1620] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8474'. [ 2974.401775][ T1620] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8474'. [ 2974.742478][T29508] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 2974.916367][T29508] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2974.916384][T29508] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2974.950065][T29508] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2974.950096][T29508] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2974.950118][T29508] usb 1-1: Product: syz [ 2974.950133][T29508] usb 1-1: Manufacturer: syz [ 2974.950146][T29508] usb 1-1: SerialNumber: syz [ 2975.048259][ T1638] netlink: 'syz.4.8481': attribute type 83 has an invalid length. [ 2977.169900][ T1666] netlink: 'syz.8.8491': attribute type 1 has an invalid length. [ 2978.235621][ T1674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8493'. [ 2978.302051][ T8336] usb 1-1: USB disconnect, device number 26 [ 2978.329495][ T1671] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 2981.516290][ T1723] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8508'. [ 2981.571652][ T1725] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8508'. [ 2984.490415][ T1780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8534'. [ 2984.650290][ T1784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8534'. [ 2984.653244][ T1783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8533'. [ 2984.654153][ T1784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2984.725364][ T1786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8533'. [ 2986.062087][ T8336] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2986.212252][ T8336] usb 1-1: Using ep0 maxpacket: 16 [ 2986.213915][ T8336] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2986.213930][ T8336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2986.213940][ T8336] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2986.215879][ T8336] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2986.215894][ T8336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.215905][ T8336] usb 1-1: Product: syz [ 2986.215913][ T8336] usb 1-1: Manufacturer: syz [ 2986.215920][ T8336] usb 1-1: SerialNumber: syz [ 2986.464466][ T8336] usb 1-1: 0:2 : does not exist [ 2986.538608][ T8336] usb 1-1: USB disconnect, device number 27 [ 2987.857159][ T1830] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8550'. [ 2987.958416][ T1805] udevd[1805]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2988.226612][ T1834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8552'. [ 2988.296168][ T1838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8552'. [ 2989.018955][ T1859] netlink: 'syz.0.8562': attribute type 83 has an invalid length. [ 2989.442671][ T1869] siw: device registration error -23 [ 2990.380338][ T1874] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8568'. [ 2990.613642][ T1880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.258283][ T1893] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8576'. [ 2991.468792][ T1894] bond1: entered allmulticast mode [ 2991.468808][ T1894] vcan1: entered allmulticast mode [ 2991.620413][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8578'. [ 2991.990704][ T1904] netlink: 'syz.6.8580': attribute type 83 has an invalid length. [ 2992.393326][ T1917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.897605][ T1934] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8596'. [ 2992.950593][ T1939] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8596'. [ 2992.962047][ T8336] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 2993.274327][ T8336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2993.274354][ T8336] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2993.276642][ T8336] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2993.276669][ T8336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.276689][ T8336] usb 1-1: Product: syz [ 2993.276704][ T8336] usb 1-1: Manufacturer: syz [ 2993.276716][ T8336] usb 1-1: SerialNumber: syz [ 2993.284264][ T8336] usb 1-1: config 0 descriptor?? [ 2994.523499][ T1956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8604'. [ 2994.597074][ T1959] netlink: 'syz.8.8606': attribute type 83 has an invalid length. [ 2995.911587][T23070] usb 1-1: USB disconnect, device number 28 [ 2996.465963][ T2006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8624'. [ 2996.522257][ T2008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8624'. [ 2997.316533][ T2023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.685768][ C1] vkms_vblank_simulate: vblank timer overrun [ 2998.740262][ T2059] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8646'. [ 2999.304348][ T2068] netlink: 'syz.6.8650': attribute type 83 has an invalid length. [ 3000.448028][ T2092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8660'. [ 3000.448195][ T2098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8660'. [ 3000.858376][ T2110] netlink: 892 bytes leftover after parsing attributes in process `syz.4.8667'. [ 3001.326235][ C1] vkms_vblank_simulate: vblank timer overrun [ 3002.294952][ C1] vkms_vblank_simulate: vblank timer overrun [ 3002.487704][ C1] vkms_vblank_simulate: vblank timer overrun [ 3004.088423][ T2132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8677'. [ 3005.271518][ T2147] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8684'. [ 3006.517867][ T2166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3008.184253][ T2198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8699'. [ 3009.046983][ T2207] netlink: 868 bytes leftover after parsing attributes in process `syz.4.8703'. [ 3009.610770][ T2215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3011.102135][T29508] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 3011.731278][T29508] usb 1-1: no configurations [ 3011.731973][T29508] usb 1-1: can't read configurations, error -22 [ 3012.067731][T29508] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 3012.319358][T29508] usb 1-1: no configurations [ 3012.319377][T29508] usb 1-1: can't read configurations, error -22 [ 3012.323901][T29508] usb usb1-port1: attempt power cycle [ 3013.466608][ T2249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8716'. [ 3018.203815][ T2292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3018.252843][ T2292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3018.291220][ T2292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3018.309575][ T2292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3018.319230][ T2292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3018.831274][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3018.913136][ T2299] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8732'. [ 3018.995304][ T2291] lo speed is unknown, defaulting to 1000 [ 3018.998805][ T2291] lo speed is unknown, defaulting to 1000 [ 3019.379365][ T2291] chnl_net:caif_netlink_parms(): no params data found [ 3020.086559][ T2323] siw: device registration error -23 [ 3020.617103][T26385] Bluetooth: hci0: command tx timeout [ 3021.225379][ T2330] Bluetooth: MGMT ver 1.23 [ 3021.320538][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3021.707001][ C0] vkms_vblank_simulate: vblank timer overrun [ 3022.733771][T26385] Bluetooth: hci0: command tx timeout [ 3022.855941][ C0] vkms_vblank_simulate: vblank timer overrun [ 3023.379951][ T2346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8744'. [ 3023.398969][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.431223][ T2345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8744'. [ 3023.472586][ T2291] bridge0: port 1(bridge_slave_0) entered blocking state [ 3023.472793][ T2291] bridge0: port 1(bridge_slave_0) entered disabled state [ 3023.473039][ T2291] bridge_slave_0: entered allmulticast mode [ 3023.474585][ T2291] bridge_slave_0: entered promiscuous mode [ 3023.494715][ T2349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8744'. [ 3023.580548][ T2291] bridge0: port 2(bridge_slave_1) entered blocking state [ 3023.580621][ T2291] bridge0: port 2(bridge_slave_1) entered disabled state [ 3023.580845][ T2291] bridge_slave_1: entered allmulticast mode [ 3023.588141][ T2291] bridge_slave_1: entered promiscuous mode [ 3024.772194][T26385] Bluetooth: hci0: command tx timeout [ 3025.055618][ T2375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8751'. [ 3025.118761][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3025.363084][ T2377] bond1: (slave vcan7): The slave device specified does not support setting the MAC address [ 3025.379086][ T2377] bond1: (slave vcan7): Enslaving as a backup interface with an up link [ 3025.410196][ T2291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3025.423671][ T2291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3025.753656][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 3026.081071][ T2291] team0: Port device team_slave_0 added [ 3026.130749][ T2291] team0: Port device team_slave_1 added [ 3026.849228][T26385] Bluetooth: hci0: command tx timeout [ 3027.178156][ T2398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8757'. [ 3027.231481][ T2399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8757'. [ 3027.286966][ T2401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8757'. [ 3027.512262][ T2401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3027.513556][ T2291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3027.513564][ T2291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3027.513579][ T2291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3027.516971][ T2291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3027.516980][ T2291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3027.516994][ T2291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3030.894724][ T2291] hsr_slave_0: entered promiscuous mode [ 3030.896707][ T2291] hsr_slave_1: entered promiscuous mode [ 3030.897571][ T2291] debugfs: 'hsr0' already exists in 'hsr' [ 3030.897590][ T2291] Cannot create hsr debugfs directory [ 3031.337473][ T58] bridge_slave_1: left allmulticast mode [ 3031.337501][ T58] bridge_slave_1: left promiscuous mode [ 3031.337733][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 3031.440846][ T2435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8764'. [ 3031.452915][ T58] bridge_slave_0: left allmulticast mode [ 3031.452933][ T58] bridge_slave_0: left promiscuous mode [ 3031.453100][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 3033.722860][ T58] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3034.973030][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3035.052891][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3035.078491][ T58] bond0 (unregistering): Released all slaves [ 3035.140285][ T58] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 3035.140304][ T58] vcan1: left allmulticast mode [ 3035.212943][ T58] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 3035.255509][ T58] bond1 (unregistering): Released all slaves [ 3035.281251][ T2460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8770'. [ 3035.335213][ T2440] bond1: (slave vcan8): The slave device specified does not support setting the MAC address [ 3035.340202][ T2440] bond1: (slave vcan8): Enslaving as a backup interface with an up link [ 3035.413572][ T2460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8770'. [ 3039.245907][ T2504] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8779'. [ 3040.561014][ T2510] bond1: (slave vcan9): The slave device specified does not support setting the MAC address [ 3040.574336][ T2510] bond1: (slave vcan9): Enslaving as a backup interface with an up link [ 3040.903277][ T2519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8783'. [ 3041.024416][ T2524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8783'. [ 3041.171249][ T58] hsr_slave_0: left promiscuous mode [ 3041.213639][ T58] hsr_slave_1: left promiscuous mode [ 3041.214357][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3041.214372][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3041.255778][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3041.255798][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3041.544281][ T58] veth1_macvtap: left promiscuous mode [ 3041.544349][ T58] veth0_macvtap: left promiscuous mode [ 3041.544876][ T58] veth1_vlan: left promiscuous mode [ 3041.635792][ T58] veth0_vlan: left promiscuous mode [ 3044.171277][ T2547] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8790'. [ 3046.554602][ T2558] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8792'. [ 3048.532704][ T58] team0 (unregistering): Port device team_slave_1 removed [ 3048.782665][ T58] team0 (unregistering): Port device team_slave_0 removed [ 3053.265763][ T2588] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8802'. [ 3058.147904][ T2624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8807'. [ 3058.228913][ T2626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8807'. [ 3059.550105][ T2291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3060.934021][ T2291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3061.068124][ T2291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3061.389889][ T2291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3065.195727][ T10] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 3066.275480][ T10] usb 1-1: device not accepting address 32, error -71 [ 3066.807431][ T2291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3068.128312][ T2291] 8021q: adding VLAN 0 to HW filter on device team0 [ 3068.267258][ T4588] bridge0: port 1(bridge_slave_0) entered blocking state [ 3068.267428][ T4588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3068.327853][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 3068.328002][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3071.902180][ T2719] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8825'. [ 3072.039401][ T2719] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8825'. [ 3072.088610][ T2729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8827'. [ 3072.141362][ T2730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8827'. [ 3072.146808][ T2723] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3072.150742][ T2723] bond5: (slave bond6): Enslaving as an active interface with an up link [ 3072.572346][T31161] block device autoloading is deprecated and will be removed. [ 3073.623254][ T2745] udevd[2745]: symlink '../../loop0' '/dev/disk/by-diskseq/123.tmp-b7:0' failed: Read-only file system [ 3073.630944][ T2739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3084.349321][ T2763] netlink: 772 bytes leftover after parsing attributes in process `syz.4.8832'. [ 3084.376786][ T2292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3084.392298][ T2292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3084.393879][ T2292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3084.395058][ T2292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3084.466680][ T2292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3084.704795][ T2745] udevd[2745]: symlink '../../loop0' '/dev/disk/by-diskseq/123.tmp-b7:0' failed: Read-only file system [ 3084.754017][ T2764] lo speed is unknown, defaulting to 1000 [ 3084.780222][ T2764] lo speed is unknown, defaulting to 1000 [ 3086.518295][T26385] Bluetooth: hci2: command tx timeout [ 3087.316656][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 3088.739666][T26385] Bluetooth: hci2: command tx timeout [ 3089.993800][ T2764] chnl_net:caif_netlink_parms(): no params data found [ 3090.018219][ T2808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8840'. [ 3090.039613][ T2808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8840'. [ 3091.245596][T26385] Bluetooth: hci2: command tx timeout [ 3092.817982][ T2823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.997396][T26385] Bluetooth: hci2: command tx timeout [ 3099.255098][ T2764] bridge0: port 1(bridge_slave_0) entered blocking state [ 3099.274289][ T2764] bridge0: port 1(bridge_slave_0) entered disabled state [ 3099.274594][ T2764] bridge_slave_0: entered allmulticast mode [ 3099.277402][ T2764] bridge_slave_0: entered promiscuous mode [ 3099.310574][ T2868] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8851'. [ 3099.488009][ T2873] netlink: 100 bytes leftover after parsing attributes in process `syz.6.8851'. [ 3100.886287][ T2880] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8854'. [ 3100.939847][ T2881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8854'. [ 3100.976737][ T2764] bridge0: port 2(bridge_slave_1) entered blocking state [ 3100.976948][ T2764] bridge0: port 2(bridge_slave_1) entered disabled state [ 3100.977236][ T2764] bridge_slave_1: entered allmulticast mode [ 3100.979997][ T2764] bridge_slave_1: entered promiscuous mode [ 3101.041203][ T2881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8854'. [ 3101.208708][ T2885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3101.450288][ T2292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3101.477931][ T2292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3101.480101][ T2292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3101.500539][ T2292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3101.542896][ T2292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3101.799797][ T2764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3102.747596][ T2764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3103.881308][T26385] Bluetooth: hci0: command tx timeout [ 3106.112397][ T2909] can: request_module (can-proto-0) failed. [ 3107.906220][T26385] Bluetooth: hci0: command tx timeout [ 3109.690459][ T2915] can: request_module (can-proto-0) failed. [ 3109.953674][T26385] Bluetooth: hci0: command tx timeout [ 3112.071925][T26385] Bluetooth: hci0: command tx timeout [ 3119.024928][ T2764] team0: Port device team_slave_0 added [ 3119.028674][ T2764] team0: Port device team_slave_1 added [ 3119.029380][ T2886] lo speed is unknown, defaulting to 1000 [ 3120.513142][ T2886] lo speed is unknown, defaulting to 1000 [ 3121.855313][ T2974] netlink: 100 bytes leftover after parsing attributes in process `syz.8.8873'. [ 3121.960066][ T2975] netlink: 100 bytes leftover after parsing attributes in process `syz.8.8873'. [ 3125.192520][ T2764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3125.192536][ T2764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3125.192562][ T2764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3125.208605][ T2764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3125.208621][ T2764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3125.208647][ T2764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3126.384321][ T2992] netlink: 'syz.8.8877': attribute type 72 has an invalid length. [ 3126.384343][ T2992] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8877'. [ 3126.680917][ T2999] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8877'. [ 3127.095131][ T3000] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8877'. [ 3127.621589][ T2764] hsr_slave_0: entered promiscuous mode [ 3127.629140][ T2764] hsr_slave_1: entered promiscuous mode [ 3127.631376][ T2764] debugfs: 'hsr0' already exists in 'hsr' [ 3127.631401][ T2764] Cannot create hsr debugfs directory [ 3138.175298][T25407] bridge_slave_1: left allmulticast mode [ 3138.175328][T25407] bridge_slave_1: left promiscuous mode [ 3138.175614][T25407] bridge0: port 2(bridge_slave_1) entered disabled state [ 3139.353738][T25407] bridge_slave_0: left allmulticast mode [ 3139.353767][T25407] bridge_slave_0: left promiscuous mode [ 3139.354030][T25407] bridge0: port 1(bridge_slave_0) entered disabled state [ 3139.467353][ T2292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3139.495000][ T2292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3139.496586][ T2292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3139.498342][ T2292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3139.499328][ T2292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3143.635125][T26385] Bluetooth: hci4: command tx timeout [ 3146.049235][T26385] Bluetooth: hci4: command tx timeout [ 3148.112569][T26385] Bluetooth: hci4: command tx timeout [ 3148.595536][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 3149.044468][T25407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3149.102636][T25407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3149.124605][T25407] bond0 (unregistering): Released all slaves [ 3150.599560][T26385] Bluetooth: hci4: command tx timeout [ 3152.302375][ T2886] chnl_net:caif_netlink_parms(): no params data found [ 3154.639096][ T3127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8911'. [ 3154.652964][T25407] hsr_slave_0: left promiscuous mode [ 3154.692182][T25407] hsr_slave_1: left promiscuous mode [ 3154.694326][T25407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3154.715506][T25407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3158.554089][T25407] team0 (unregistering): Port device team_slave_1 removed [ 3158.842759][T25407] team0 (unregistering): Port device team_slave_0 removed [ 3161.204982][ T2292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3161.216017][ T2292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3161.222451][ T2292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3161.229591][ T2292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3161.230317][ T2292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3162.001729][ T3062] lo speed is unknown, defaulting to 1000 [ 3162.005931][ T3062] lo speed is unknown, defaulting to 1000 [ 3163.273379][ T3149] lo speed is unknown, defaulting to 1000 [ 3163.422157][T26385] Bluetooth: hci2: command tx timeout [ 3163.579598][ T3149] lo speed is unknown, defaulting to 1000 [ 3167.929391][T26385] Bluetooth: hci2: command tx timeout [ 3168.215613][ T3062] chnl_net:caif_netlink_parms(): no params data found [ 3170.592095][ T2292] Bluetooth: hci2: command tx timeout [ 3172.880729][ T2292] Bluetooth: hci2: command tx timeout [ 3179.152799][ T3149] chnl_net:caif_netlink_parms(): no params data found [ 3185.349126][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 3185.349281][ T3062] bridge0: port 1(bridge_slave_0) entered disabled state [ 3185.349589][ T3062] bridge_slave_0: entered allmulticast mode [ 3185.352596][ T3062] bridge_slave_0: entered promiscuous mode [ 3188.407841][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 3188.407976][ T3062] bridge0: port 2(bridge_slave_1) entered disabled state [ 3188.417872][ T3062] bridge_slave_1: entered allmulticast mode [ 3188.437198][ T3062] bridge_slave_1: entered promiscuous mode [ 3193.236782][ T3282] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 3194.651069][ T3062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3194.670120][ T3062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3201.796909][T26385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3201.828985][T26385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3201.841202][T26385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3201.849331][T26385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3201.857860][T26385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3201.870680][ T3149] bridge0: port 1(bridge_slave_0) entered blocking state [ 3201.870813][ T3149] bridge0: port 1(bridge_slave_0) entered disabled state [ 3201.873615][ T3149] bridge_slave_0: entered allmulticast mode [ 3201.907648][ T3149] bridge_slave_0: entered promiscuous mode [ 3201.934927][ T3149] bridge0: port 2(bridge_slave_1) entered blocking state [ 3201.935074][ T3149] bridge0: port 2(bridge_slave_1) entered disabled state [ 3201.935342][ T3149] bridge_slave_1: entered allmulticast mode [ 3201.938213][ T3149] bridge_slave_1: entered promiscuous mode [ 3203.394022][ T3149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3203.755558][ T3325] overlay: Unknown parameter '/' [ 3203.952639][T26385] Bluetooth: hci0: command tx timeout [ 3204.100036][ T3149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3206.141709][T26385] Bluetooth: hci0: command tx timeout [ 3208.192235][T26385] Bluetooth: hci0: command tx timeout [ 3208.468022][ T3352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8961'. [ 3210.457897][T26385] Bluetooth: hci0: command tx timeout [ 3210.560203][T25407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3210.580343][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 3211.922832][ T3352] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 3211.924402][ T3353] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 3211.932728][ T3149] team0: Port device team_slave_0 added [ 3211.935162][ T3309] lo speed is unknown, defaulting to 1000 [ 3213.990271][T25407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3214.035773][ T3149] team0: Port device team_slave_1 added [ 3214.037088][ T3309] lo speed is unknown, defaulting to 1000 [ 3216.965807][ T3149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3216.965825][ T3149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3216.965851][ T3149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3220.703182][T25407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3221.177835][ T3397] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 3222.050421][ T3149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3222.050439][ T3149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3222.050466][ T3149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3222.254325][ T3407] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8974'. [ 3222.415095][ T3409] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8974'. [ 3222.476572][ T2292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3222.502511][ T2292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3222.520196][ T2292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3222.535772][ T2292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3222.538043][ T2292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3222.638759][T25407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3222.872517][ T3408] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3222.879995][ T3408] bond4: (slave bond5): Enslaving as an active interface with an up link [ 3223.040152][ T3410] lo speed is unknown, defaulting to 1000 [ 3223.049351][ T3410] lo speed is unknown, defaulting to 1000 [ 3224.922718][T26385] Bluetooth: hci4: command tx timeout [ 3225.696927][ T3441] netlink: 828 bytes leftover after parsing attributes in process `syz.4.8980'. [ 3227.634545][T26385] Bluetooth: hci4: command tx timeout [ 3229.272939][ T3464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8985'. [ 3229.389147][ T3468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8985'. [ 3230.565308][ T3466] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 3230.613274][T26385] Bluetooth: hci4: command tx timeout [ 3230.729082][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 3231.603001][ T3483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3231.755806][ T3491] netlink: 828 bytes leftover after parsing attributes in process `syz.8.8990'. [ 3231.849600][ T3410] chnl_net:caif_netlink_parms(): no params data found [ 3231.938851][T25407] bridge_slave_1: left allmulticast mode [ 3231.938881][T25407] bridge_slave_1: left promiscuous mode [ 3231.939122][T25407] bridge0: port 2(bridge_slave_1) entered disabled state [ 3232.014040][T25407] bridge_slave_0: left allmulticast mode [ 3232.014071][T25407] bridge_slave_0: left promiscuous mode [ 3232.014357][T25407] bridge0: port 1(bridge_slave_0) entered disabled state [ 3232.089048][T25407] bridge_slave_1: left allmulticast mode [ 3232.089079][T25407] bridge_slave_1: left promiscuous mode [ 3232.089330][T25407] bridge0: port 2(bridge_slave_1) entered disabled state [ 3232.164335][T25407] bridge_slave_0: left allmulticast mode [ 3232.164354][T25407] bridge_slave_0: left promiscuous mode [ 3232.164516][T25407] bridge0: port 1(bridge_slave_0) entered disabled state [ 3232.675734][ T3504] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 3233.436855][T26385] Bluetooth: hci4: command tx timeout [ 3233.699256][ T3510] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8996'. [ 3233.809469][ T3515] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8996'. [ 3237.279766][ T3524] netlink: 828 bytes leftover after parsing attributes in process `syz.8.8999'. [ 3237.281747][T25407] bond0 (unregistering): Released all slaves [ 3237.482784][T25407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3237.562851][T25407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3237.634169][T25407] bond0 (unregistering): Released all slaves [ 3238.632592][T25407] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3239.902689][T25407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3239.962707][T25407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3239.984724][T25407] bond0 (unregistering): Released all slaves [ 3239.994302][T25407] bond1 (unregistering): Released all slaves [ 3240.003923][T25407] bond2 (unregistering): Released all slaves [ 3240.013200][T25407] bond3 (unregistering): Released all slaves [ 3241.484015][ T3510] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 3241.636255][ T3512] bond6 (unregistering): Released all slaves [ 3242.831106][ T3537] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9002'. [ 3245.433158][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 3245.433310][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 3245.433624][ T3309] bridge_slave_0: entered allmulticast mode [ 3245.436390][ T3309] bridge_slave_0: entered promiscuous mode [ 3245.470401][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 3245.470534][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 3245.470793][ T3309] bridge_slave_1: entered allmulticast mode [ 3245.474548][ T3309] bridge_slave_1: entered promiscuous mode [ 3250.109535][ T3574] netlink: 'syz.6.9012': attribute type 72 has an invalid length. [ 3250.109558][ T3574] netlink: 'syz.6.9012': attribute type 8 has an invalid length. [ 3254.469536][ T26] ================================================================== [ 3254.469552][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 3254.469584][ T26] Read of size 8 at addr ffffc90004971090 by task irq_work/1/26 [ 3254.469601][ T26] [ 3254.469624][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3254.469654][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3254.469674][ T26] Call Trace: [ 3254.469685][ T26] [ 3254.469695][ T26] dump_stack_lvl+0x189/0x250 [ 3254.469721][ T26] ? run_irq_workd+0x116/0x190 [ 3254.469744][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3254.469767][ T26] ? __pfx__printk+0x10/0x10 [ 3254.469789][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 3254.469813][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 3254.469836][ T26] print_report+0xca/0x240 [ 3254.469858][ T26] ? run_irq_workd+0x116/0x190 [ 3254.469879][ T26] kasan_report+0x118/0x150 [ 3254.469901][ T26] ? run_irq_workd+0x116/0x190 [ 3254.469927][ T26] run_irq_workd+0x116/0x190 [ 3254.469949][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 3254.469970][ T26] ? schedule+0x91/0x360 [ 3254.469992][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 3254.470014][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 3254.470034][ T26] smpboot_thread_fn+0x542/0xa60 [ 3254.470055][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 3254.470080][ T26] kthread+0x711/0x8a0 [ 3254.470104][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 3254.470125][ T26] ? __pfx_kthread+0x10/0x10 [ 3254.470146][ T26] ? rt_spin_unlock+0x150/0x200 [ 3254.470165][ T26] ? rt_spin_unlock+0x161/0x200 [ 3254.470182][ T26] ? __pfx_kthread+0x10/0x10 [ 3254.470205][ T26] ret_from_fork+0x4bc/0x870 [ 3254.470227][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 3254.470249][ T26] ? __switch_to_asm+0x39/0x70 [ 3254.470267][ T26] ? __switch_to_asm+0x33/0x70 [ 3254.470283][ T26] ? __pfx_kthread+0x10/0x10 [ 3254.470306][ T26] ret_from_fork_asm+0x1a/0x30 [ 3254.470331][ T26] [ 3254.470339][ T26] [ 3254.470344][ T26] The buggy address belongs to a vmalloc virtual mapping [ 3254.470370][ T26] Memory state around the buggy address: [ 3254.470381][ T26] ffffc90004970f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3254.470394][ T26] ffffc90004971000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3254.470406][ T26] >ffffc90004971080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3254.470419][ T26] ^ [ 3254.470429][ T26] ffffc90004971100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3254.470441][ T26] ffffc90004971180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3254.470450][ T26] ================================================================== [ 3254.470471][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3254.470485][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 3254.470505][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3254.470516][ T26] Call Trace: [ 3254.470523][ T26] [ 3254.470531][ T26] dump_stack_lvl+0x99/0x250 [ 3254.470555][ T26] ? __asan_memcpy+0x40/0x70 [ 3254.470574][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3254.470597][ T26] ? __pfx__printk+0x10/0x10 [ 3254.470624][ T26] vpanic+0x237/0x6d0 [ 3254.470645][ T26] ? __pfx_vpanic+0x10/0x10 [ 3254.470667][ T26] panic+0xb9/0xc0 [ 3254.470683][ T26] ? __pfx_panic+0x10/0x10 [ 3254.470699][ T26] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 3254.470722][ T26] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 3254.470747][ T26] ? run_irq_workd+0x116/0x190 [ 3254.470768][ T26] check_panic_on_warn+0x89/0xb0 [ 3254.470786][ T26] ? run_irq_workd+0x116/0x190 [ 3254.470807][ T26] end_report+0x78/0x160 [ 3254.470828][ T26] kasan_report+0x129/0x150 [ 3254.470851][ T26] ? run_irq_workd+0x116/0x190 [ 3254.470876][ T26] run_irq_workd+0x116/0x190 [ 3254.470898][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 3254.470919][ T26] ? schedule+0x91/0x360 [ 3254.470939][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 3254.470961][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 3254.470981][ T26] smpboot_thread_fn+0x542/0xa60 [ 3254.471003][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 3254.471027][ T26] kthread+0x711/0x8a0 [ 3254.471051][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 3254.471071][ T26] ? __pfx_kthread+0x10/0x10 [ 3254.471092][ T26] ? rt_spin_unlock+0x150/0x200 [ 3254.471112][ T26] ? rt_spin_unlock+0x161/0x200 [ 3254.471128][ T26] ? __pfx_kthread+0x10/0x10 [ 3254.471151][ T26] ret_from_fork+0x4bc/0x870 [ 3254.471171][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 3254.471194][ T26] ? __switch_to_asm+0x39/0x70 [ 3254.471212][ T26] ? __switch_to_asm+0x33/0x70 [ 3254.471229][ T26] ? __pfx_kthread+0x10/0x10 [ 3254.471252][ T26] ret_from_fork_asm+0x1a/0x30 [ 3254.471278][ T26] [ 3254.471537][ T26] Kernel Offset: disabled