last executing test programs: 18m55.613829453s ago: executing program 32 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, &(0x7f0000000080)={[{@quota}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="88", 0x1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x40) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x8090) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0xa8a, 0xd, 0x8e, 0x1f, 0x3, 0xfb, {0xfffffff7, 0x2, 0x800, 0x7, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0886411000500002102", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) 18m43.131772546s ago: executing program 33 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x100, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, r1, &(0x7f0000000380)={0x2d80000, 0x800000000, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={&(0x7f0000000800), 0x0, &(0x7f0000024140)=[0x0, 0x0, 0x0], &(0x7f00000009c0), 0x0, 0x3}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x3}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) io_setup(0x400, &(0x7f0000001080)=0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) 15m56.666725934s ago: executing program 34 (id=402): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = dup(r0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280)={0x2, {{0x2, 0x4e22, @empty=0xe0000000}}, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x108) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xfff7, 0x4, 0xffff, 0x2, 0xffff}, 0x14) 15m22.429200393s ago: executing program 7 (id=571): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0xd}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x1, 0x16, 0xd, 0x1b}, 0x9c) 15m21.754003753s ago: executing program 7 (id=572): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 15m17.84554888s ago: executing program 7 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15m17.049424226s ago: executing program 7 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r4, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0) 15m16.342172804s ago: executing program 7 (id=591): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000001600)) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000002740)={'mpc624\x00', [0x4f27, 0x4, 0x2, 0x3, 0x5, 0xcc5, 0xf, 0x6, 0xa, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x1, 0x0, 0x0, 0x0, 0x1a449, 0x3ff, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x3c, 0xd0, 0x2, 0x1, 0xfce]}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008502"]) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 15m14.915330071s ago: executing program 7 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 14m59.706183846s ago: executing program 35 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 13m3.043832175s ago: executing program 8 (id=870): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 13m0.924447545s ago: executing program 8 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r2, 0x0, 0x160) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa1) 12m57.699416101s ago: executing program 8 (id=880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dri(&(0x7f0000000140), 0x100000000000, 0x44600) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) 12m50.350986756s ago: executing program 8 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ff0f0000000000020000010102"], 0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3103000000000000000009000000080003", @ANYRES32, @ANYBLOB="080006005d333473b5a3089db31732b940ffd5de05040b77d6d0e029f6420c089910327303d74cda385ffca916128f2161b8f228643c62fd17404e87b349ff0af481403252b590becb3f1028b075ad445b8c426241042babb7a49ed211fe67e6c00d017929dbd0cc8ca4bef9", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYRES32=0xee01, @ANYBLOB="b7000000"], 0x1c}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="00086da29a44fcdbdf2506", @ANYRES32=r12, @ANYBLOB="14000200697036677265746170300000000000001400020064766d72703000000000000000000000080003000000000014000200766c616e3000000000000000000000001400020077673200000000000000000000000000080003000100000008000300020000001400018008000100", @ANYRES32=r13, @ANYBLOB="0800030002000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080) 12m46.65858024s ago: executing program 8 (id=895): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r0, 0x1be3b000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x105000, 0x0, 0x8, 0x9c9cb4de96036a06}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x8, 0x55600518, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004280)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ab725c861b08395c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000226089f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076cf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd652b75951a20c100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000059000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x20000001, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x200, 0x81) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) fchdir(r5) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000100)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="30006c082c344ac4671b9b9bbcae6053a1b100001c8e066b0259f2eca5dbdf2507000000", @ANYRES32=r6, @ANYBLOB="ad1adfdb0a000200aaaaaaaaaa1b000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 12m39.056950759s ago: executing program 8 (id=902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x9, 0x0) r0 = getpid() mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000700000007000000005000000020000000000001102000000ffffffff000000000600000d000000000100000000000000090000000400000001000000050000000d000000010000000e000000020000000e"], 0x0, 0x8d, 0x0, 0x3}, 0x28) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000020000000009000000000000ff"]) 12m36.238264622s ago: executing program 4 (id=908): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 12m28.433696633s ago: executing program 4 (id=916): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 12m25.777121274s ago: executing program 4 (id=920): r0 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0xe, 0x8, 0x0, 0x8, 0x1, 0xe, 0x80, 0xe, 0x7, 0x4, 0x9, 0x0, 0x5, 0x3, 0x3, 0x7, 0x0, 0xdb, '\x00', 0x40, 0x6ea93ba1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mq_open(0x0, 0x840, 0x0, 0x0) 12m22.695841677s ago: executing program 36 (id=902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0x9, 0x0) r0 = getpid() mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000700000007000000005000000020000000000001102000000ffffffff000000000600000d000000000100000000000000090000000400000001000000050000000d000000010000000e000000020000000e"], 0x0, 0x8d, 0x0, 0x3}, 0x28) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000020000000009000000000000ff"]) 12m21.294343398s ago: executing program 4 (id=928): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 12m18.685629831s ago: executing program 4 (id=932): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0xfffc, @empty}}, {{0x2, 0x4e23, @empty}}]}, 0x190) 12m14.758397458s ago: executing program 4 (id=938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 12m14.125943597s ago: executing program 37 (id=938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 11m56.439951387s ago: executing program 1 (id=965): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x40000) signalfd4(r3, 0x0, 0x0, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 11m50.640971978s ago: executing program 1 (id=973): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xa6, 0xfffffff9, 0x10000000, 0x96, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4881}, 0x10) 11m47.971740829s ago: executing program 1 (id=974): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) syz_io_uring_setup(0x48be, 0x0, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x4, 0x20, 0x1, 0x0, r0}, 0x50) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) 11m44.894834747s ago: executing program 1 (id=978): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) epoll_create(0x6) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = semget$private(0x0, 0x207, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}], 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x64, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xf0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb773}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) 11m43.060632599s ago: executing program 1 (id=982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) setsockopt(r2, 0x4, 0x10001, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) 11m40.27566442s ago: executing program 1 (id=987): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_PHY(r0, 0x0, 0x20000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_clone(0x31200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) 11m24.036628952s ago: executing program 38 (id=987): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_PHY(r0, 0x0, 0x20000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_clone(0x31200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) 5m48.622922956s ago: executing program 9 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) unshare(0x8040480) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 5m46.900464843s ago: executing program 9 (id=1511): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x4, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x2000, 0x400000, r2, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) fdatasync(r3) 5m44.830641388s ago: executing program 9 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x1, 0x0, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 5m42.787914627s ago: executing program 9 (id=1522): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) fanotify_mark(r1, 0x80, 0x40001002, r0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 5m42.482423205s ago: executing program 9 (id=1525): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 5m40.422747794s ago: executing program 9 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x244) 5m24.929580308s ago: executing program 39 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x244) 3m50.767956908s ago: executing program 3 (id=1735): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x800, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g\xb6\xca\xb1\xb3\xeb\xb9\x92*$\x03\x0fuL6\x93H\x19\xc5\x86\xec5Ke\x8dAx\x80\xde\x9c>\xe0\xa4b\xd0\xc8\t)\x81\x8c\t\xad\xac\x9fw-\x8e%\xc9P\xbd\x87\x00L\xf6X\xb9\xf8|\xad\xeb\xca\x12%#5\xb1\x18S\x86\xee\xd0PC\xba}N[c/\xbe\x9e^\xdf\"Q\xbaVp\xde\xc6\x1f\xaal\xa1j\xa1F_\xa0\xcfN]\x94J0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) 3m45.15327103s ago: executing program 3 (id=1741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = dup(r7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000000010040"]) 3m43.414311891s ago: executing program 3 (id=1745): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25020000000800010000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 3m37.331137238s ago: executing program 3 (id=1754): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) io_setup(0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001000c0080000000", @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m34.159963709s ago: executing program 3 (id=1758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000300), &(0x7f0000000000)) 3m18.374478584s ago: executing program 40 (id=1758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000300), &(0x7f0000000000)) 1m14.349998787s ago: executing program 2 (id=1963): futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r0, 0x6a, 0x3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x1186, &(0x7f00000025c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "23e573", 0x1150, 0x3a, 0xff, @mcast2, @loopback, {[@dstopts={0x21, 0x15, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xfa}, @generic={0x8}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x72, 0x7, [0x7fffffff, 0x800]}}, @generic={0x3, 0x6d, "6a9fae327a38bc1638efacd97aaa405b7710b990eabdc093fdf30d853046e85a507f930022469e77083629e80678516de678995e8abdbb066da6df586718092ce67c2e17748051238dc5e3b2eed383b9a8d8c71a9c0b84f735e6db377a224e0c11505f3e6c2a2d52efec3678d1"}, @jumbo={0xc2, 0x4, 0x14e3}]}, @fragment={0x88, 0x0, 0x1, 0x0, 0x0, 0x4, 0x65}, @srh={0x89, 0xa, 0x4, 0x5, 0x13, 0x70, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @dev={0xfe, 0x80, '\x00', 0x29}, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}]}, @srh={0x0, 0x0, 0x4, 0x0, 0xb, 0x20}, @routing={0x3c, 0x0, 0x2, 0x2}, @hopopts={0x3b}, @routing={0x3b, 0x2, 0x3, 0x3, 0x0, [@empty]}, @dstopts={0x1d, 0xc, '\x00', [@ra={0x5, 0x2, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x2, 0x54, "cdd83db66526cf53dbc72841161584df80fa02075b39857bccc5610c067a2d0d93d17418c9dad073e0586bd812526c7b1993db785f07ce26d5d782bc084f466ce52bf6b6e9bb86c2a2f2bdae8e5141e00d508b2c"}, @padn]}, @routing={0x1, 0x4, 0x2, 0xf, 0x0, [@private2, @dev={0xfe, 0x80, '\x00', 0x17}]}], @echo_reply={0x81, 0x0, 0x0, 0x58, 0x5, "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"}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000020940)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x0, 0xc8}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x11, 0x4, 0x4, 0x80000002, 0x0, 0x1, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) sendmsg$inet(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x8, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x52, 0x0, 0x0) userfaultfd(0x801) 1m8.939069054s ago: executing program 2 (id=1970): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x64, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x47, 0x33, @beacon={{{}, {0xde1}, @broadcast, @broadcast}, 0x0, @default, 0x4001, @val, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x404000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0, 0x7}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 1m7.48276733s ago: executing program 2 (id=1971): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7a}, [@ldst={0x4}]}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0xb, &(0x7f00000001c0)=0x6, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10101) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x1}, 0x2004a, [0x0, 0x0, 0xfffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x296, 0x970, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xf, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x11, 0x80000a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x400], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930, 0x0, 0xa, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe900, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x9b, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0xed, 0x8004, 0xdb, 0x3}, 0x10) 1m5.626642644s ago: executing program 2 (id=1973): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r7, 0x0, &(0x7f00005ca000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7}) 1m2.850754127s ago: executing program 2 (id=1977): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x10056}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) io_setup(0x9, &(0x7f0000000140)=0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xcb4, 0x81, &(0x7f0000000100)) restart_syscall() socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pipe2(&(0x7f00000003c0), 0x80800) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x4002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x150, 0x150, 0xffffffff, 0xa8, 0x150, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key=0x80, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="ea9cd332d77c17f134f19fb7627bb029ccca57cb320fe1ec28ff3d14371e2e2d4ea73f4139e4d79e1fce7dc482889899c1d6bcc147255b8beb64e29c469c", 0x3e, 0x7, 0x0, 0x2}]) 56.174340401s ago: executing program 2 (id=1984): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) r2 = socket$inet6(0xa, 0x1, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xd4, 0x19}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x18}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1a}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1e93fc4e03cf24c}, 0x1) creat(0x0, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r6, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000001d80)={0x2, 0x4}, 0x2) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x30, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8001}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socket$inet6(0xa, 0x80002, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt(0xffffffffffffffff, 0xa, 0x14f, &(0x7f0000000500), 0x0) 40.937243978s ago: executing program 41 (id=1984): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) r2 = socket$inet6(0xa, 0x1, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xd4, 0x19}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x18}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1a}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1e93fc4e03cf24c}, 0x1) creat(0x0, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r6, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000001d80)={0x2, 0x4}, 0x2) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x30, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8001}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socket$inet6(0xa, 0x80002, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt(0xffffffffffffffff, 0xa, 0x14f, &(0x7f0000000500), 0x0) 14.79178167s ago: executing program 0 (id=2035): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x5b, 0xa, 0x0, "93bba551042af768810fa32fa3ccbaf1121823a6dc898168d8b3c3945d8636cf"}) socket$nl_rdma(0x10, 0x3, 0x14) socket$l2tp6(0xa, 0x2, 0x73) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101000) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) lseek(r3, 0x5, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd2(0x1, 0x1) eventfd2(0x4, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x8f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 13.622995805s ago: executing program 0 (id=2038): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() kcmp(r3, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x25, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) 12.007365317s ago: executing program 5 (id=2040): socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x7, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x2004, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x801, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 9.350801059s ago: executing program 6 (id=2042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) creat(0x0, 0x80166a87e08db6a7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002300)=""/156, 0x9c, 0x80000003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x2c, r7, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 9.149717741s ago: executing program 6 (id=2043): mount(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) gettid() r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) socket(0x1d, 0x2, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r6, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0), 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000000980)="9e951160d870c00f99a8151fa0c4fe05671564b4b6e1f934e5753552742c1d8ff05ca587293084458605be67d2eee0dbe6c2319ee23163a833639a215d8fd20c9d786d72f0c97eddaacfc1b9255af98a78c0ddee8e6f3d111cc5dbd383a6774eb2c5e05c3eb58d1cc79f0000000014e5cc13891af3faf1c505d89fe9414de12e72bff97679ac8b11a76b72e8266377f2ff39dbe060184dc94622f150b90aac112d2461c63fbf4c4119ddecee95be32272b0ad486db09b8d73a5f1efe4bad2ced02cde9e9cf516beefe3b8e864c08ce1a", 0xffffffffffffff4a}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) 9.062438985s ago: executing program 5 (id=2044): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$l2tp6(0xa, 0x2, 0x73) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101000) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) lseek(r3, 0x5, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd2(0x1, 0x1) eventfd2(0x4, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x8f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 8.454054682s ago: executing program 0 (id=2045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x100007) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r2, 0x1d, 0x1, 0xffff9aa1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000480)}, 0x40) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x274100) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r7, r8, 0x0, 0x8000fb00) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) 7.104941963s ago: executing program 6 (id=2046): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x5b, 0xa, 0x0, "93bba551042af768810fa32fa3ccbaf1121823a6dc898168d8b3c3945d8636cf"}) socket$nl_rdma(0x10, 0x3, 0x14) socket$l2tp6(0xa, 0x2, 0x73) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101000) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) lseek(r3, 0x5, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd2(0x1, 0x1) eventfd2(0x4, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x8f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.097913247s ago: executing program 0 (id=2047): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@raw={0xc, 0x4, "69d6c882680e"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket(0x40000000015, 0x5, 0x2) bind$inet6(r3, 0x0, 0x0) r4 = getpid() r5 = socket$unix(0x1, 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_open_procfs(r4, &(0x7f0000000240)='smaps\x00') landlock_restrict_self(0xffffffffffffffff, 0x300) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090501"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x40, 0x0, 0x0, 0x0, &(0x7f000043c000/0x1000)=nil, 0x1000, 0x4, 0x0, {0x0, r10}}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052413", @ANYBLOB="1395e4d2a70d7b391889c7f92955565c50ad40f25f565421a2c25aadd2fc723ea9fba752af04cd9f5d8b16953f5d288fdff5fb08d4cd58f64e38739dca981c7b7d652b5538ad4cd3"], 0x0) 6.966007088s ago: executing program 5 (id=2048): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000001c11bfb8334eeafc7030000850000007b00000095035d7df57346ec62c7fad657bdf2fd2ee69437bfd8d1aa39678c6f8e8887f9cdd3ad6bbb6fc5561793d4c7c06d9d5d12c5d46845375b0688da5b3d34fa48399594dc6a86b5274709a163a10d3dc0f8069e7089201bfb6cccd8d2ad09b57dd8dd494b9913d013cd8b6e6e98dad478ab7f7eeea01d5354b8db75af"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000001d40)={0xa, 0x4e1c, 0x10, @loopback, 0x6}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xec1af57558979226, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f99fae00"}, 0x0, 0x2, {0x0}, 0x20002}) tkill(r4, 0xb) r6 = epoll_create1(0x80000) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$FBIOGET_FSCREENINFO(r7, 0x4602, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x68000005}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x40204706, &(0x7f00000000c0)={0x1, 0xc8a9, 0x5, 0x1, 0x0, "3eccd8f9d200000500"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x2000c841}, 0x280480c9) openat$kvm(0xffffffffffffff9c, 0x0, 0x62201, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f00000000c0)={0x1b, 0x5, 0xd}) syz_open_dev$MSR(0x0, 0x375b, 0x0) 6.434648872s ago: executing program 5 (id=2049): socket$kcm(0x2d, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="00c7b39cf30322b7d9", @ANYRES32=0x0, @ANYBLOB="05002001070000000a0034000202020202020000140055006ef502e329b90ad837c8566df29a60020a00060085431210238700000a0034000101010101010000"], 0x5c}}, 0x44004) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x0, 0x3, 0x0, 0x2, 0xa0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@multicast1, @in=@broadcast, @in=@dev, 0x33, 0x0, 0x0, 0x3000003, 0x11, 0x2}]}]}, 0xa0}}, 0x0) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x7, 0xa, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x0, 0x9aa4, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.371013843s ago: executing program 6 (id=2050): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r2, 0x1) syz_io_uring_setup(0xdaf, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x0, 0x3b3}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000040)='./file0\x00', 0x6) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) 3.658549612s ago: executing program 5 (id=2051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) creat(0x0, 0x80166a87e08db6a7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002300)=""/156, 0x9c, 0x80000003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x2c, r7, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.686046525s ago: executing program 0 (id=2052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = socket$phonet(0x23, 0x2, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x2, 0x2, 0x781, 0x5f, 0x3ff, 0xe1aa0}) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000040)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x111}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xacd2}], 0x1, 0x12040, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000940)={@local, @remote}, &(0x7f0000000980)=0xc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000300), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r8, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) 1.635284572s ago: executing program 5 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e6520436170745572652720303030303030"], 0xb8) r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="5800000000000000290000000b00000000070089a148b600c910fc020000000000000000000000000000c9109c1a5cfe8000000000000000000000000000aa07180000000004000000000000003b9900"/91], 0x58}, 0x0) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.548066173s ago: executing program 6 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0xc02, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) preadv(r5, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000000)='sched_switch\x00', &(0x7f00000000c0)="95", 0x1) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x2, 0x0, 0x0) r8 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 66.062671ms ago: executing program 0 (id=2055): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x23, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60000000, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 6 (id=2056): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x80000001, 0x9, {{0x13, 0x4, 0x0, 0xe, 0x4c, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0xb, 0xd1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @generic={0x94, 0xd, "5ca4e71949e909877dd646"}, @timestamp={0x44, 0x4, 0x11, 0x0, 0x5}, @lsrr={0x83, 0x1b, 0x56, [@remote, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newchain={0x2c, 0x64, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0x1}, {0x5}, {0xc, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000000e00), 0x0, 0x22002, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001480)={0xf4, 0x13, 0xa, 0x600, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xdd, 0x8, "dbc7d563776cf515aa40a0c9ee9e6f4837d2924ab5d30cb237d4146cce76c5c277ad4299d17d91a6334cfaf858951cfe6ce0626c48b2fcf503e323cac651af6a70445a2604f2ac3b0946a9c6bf1f8b5285e7f90fc6e40598ce1ca9552d2202fbbdb039a718ebb50a554ab36b55f9de88e962d48cb69050e5140ae7b970c6c5ae650f597b37e23c4acf7795acf2f7bfade14896c045f3aeb0778936ed330e716771f4b61630ecbca1a3b5447b2f22eb8a72614e24f8817b01e400fa67fb5a53293a7c731ec9b8d97e291db5769fecaaf6f81cda5715d6b4e4ba"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2008801}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4088}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) kernel console output (not intermixed with test programs): renamed from eth0 [ 873.649402][T12647] hsr_slave_0: entered promiscuous mode [ 873.675557][T12647] hsr_slave_1: entered promiscuous mode [ 873.682064][T12647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 873.722792][T12647] Cannot create hsr debugfs directory [ 873.812912][T12692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.840637][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.866695][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.882842][T12692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.901798][T12609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 874.017575][T12692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.028526][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.115521][T12692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.141455][T12609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 874.160862][T12609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 875.516879][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.534783][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.738921][T12692] hsr_slave_0: entered promiscuous mode [ 876.771018][T12692] hsr_slave_1: entered promiscuous mode [ 876.931959][T12692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.940117][T12692] Cannot create hsr debugfs directory [ 878.168083][T12938] random: crng reseeded on system resumption [ 878.321191][ T49] bridge_slave_1: left allmulticast mode [ 878.333373][ T49] bridge_slave_1: left promiscuous mode [ 878.340272][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.400903][ T49] bridge_slave_0: left allmulticast mode [ 878.418430][ T49] bridge_slave_0: left promiscuous mode [ 878.424269][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.467168][ T49] bridge_slave_1: left allmulticast mode [ 878.472878][ T49] bridge_slave_1: left promiscuous mode [ 878.491909][T12947] netlink: 'syz.6.1318': attribute type 11 has an invalid length. [ 878.494107][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.517648][T12947] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1318'. [ 878.532314][ T49] bridge_slave_0: left allmulticast mode [ 878.540774][ T49] bridge_slave_0: left promiscuous mode [ 878.566516][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.687489][ T1210] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 878.975385][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 878.987801][ T1210] usb 1-1: unable to get BOS descriptor or descriptor too short [ 879.009104][ T1210] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 879.030034][ T1210] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 879.067710][T12958] Invalid source name [ 879.071828][T12958] UBIFS error (pid: 12958): cannot open "/dev/sg0", error -22 [ 879.091000][T12958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1319'. [ 879.172396][ T1210] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 879.223035][ T1210] usb 1-1: config 7 has no interface number 0 [ 879.254882][ T1210] usb 1-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 879.313524][ T1210] usb 1-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 879.366543][ T1210] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 879.426361][ T1210] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 879.482879][ T1210] usb 1-1: config 7 interface 128 has no altsetting 0 [ 879.820281][ T1210] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 879.833409][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.842384][ T1210] usb 1-1: Product: syz [ 879.855310][ T1210] usb 1-1: Manufacturer: syz [ 879.859996][ T1210] usb 1-1: SerialNumber: syz [ 879.890022][T12945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 880.020852][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.033488][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.044823][ T49] bond0 (unregistering): Released all slaves [ 880.147301][ T1210] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 880.154620][ T1210] usb 1-1: MIDIStreaming interface descriptor not found [ 880.236738][ T1210] usb 1-1: USB disconnect, device number 27 [ 880.400216][T12963] udevd[12963]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.627164][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.639509][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.650515][ T49] bond0 (unregistering): Released all slaves [ 881.124647][ T49] hsr_slave_0: left promiscuous mode [ 881.132925][ T49] hsr_slave_1: left promiscuous mode [ 881.145948][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.183862][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.248231][ T49] hsr_slave_0: left promiscuous mode [ 881.264221][ T49] hsr_slave_1: left promiscuous mode [ 881.295579][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.315944][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.434456][ T49] veth1_vlan: left promiscuous mode [ 881.440368][ T49] veth0_vlan: left promiscuous mode [ 881.855720][ T6279] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 882.040893][ T6279] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 882.056524][ T6279] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 882.064885][ T6279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 882.074125][ T6279] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 882.085694][ T6279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 882.096979][ T6279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 882.107100][ T6279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 882.127561][ T6279] usb 1-1: string descriptor 0 read error: -22 [ 882.134128][ T6279] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 882.134892][ T49] team0 (unregistering): Port device team_slave_1 removed [ 882.152283][ T6279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.170202][ T6279] usb 1-1: config 0 descriptor?? [ 882.184314][ T6279] hub 1-1:0.0: bad descriptor, ignoring hub [ 882.190870][ T6279] hub 1-1:0.0: probe with driver hub failed with error -5 [ 882.209272][ T6279] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 882.259375][ T49] team0 (unregistering): Port device team_slave_0 removed [ 882.421140][ T5854] usb 1-1: USB disconnect, device number 28 [ 883.091708][ T49] team0 (unregistering): Port device team_slave_1 removed [ 883.160418][ T49] team0 (unregistering): Port device team_slave_0 removed [ 883.743794][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.069055][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.395186][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.402404][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.564927][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.572277][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.089851][T12647] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 885.129277][T12647] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 885.160515][T12647] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 885.188877][T12647] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 885.257987][ T6279] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 885.415699][ T6279] usb 7-1: Using ep0 maxpacket: 16 [ 885.440608][ T6279] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.465125][ T6279] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 885.483384][ T6279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.510597][ T6279] usb 7-1: config 0 descriptor?? [ 885.522521][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.564258][ T6279] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input27 [ 885.672181][T12647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.811079][ T5191] bcm5974 7-1:0.0: could not read from device [ 885.825851][ T1210] usb 7-1: USB disconnect, device number 20 [ 885.855284][T12963] bcm5974 7-1:0.0: could not read from device [ 885.910320][T12647] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.991668][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.998923][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.080825][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.088058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.104134][T12692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 886.120910][T12692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 886.141161][T12692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 886.154171][T12609] veth0_vlan: entered promiscuous mode [ 886.169809][T12692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 886.234932][T12609] veth1_vlan: entered promiscuous mode [ 886.377857][T12609] veth0_macvtap: entered promiscuous mode [ 886.399663][T12609] veth1_macvtap: entered promiscuous mode [ 886.511052][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.546178][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.583524][T12609] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.599639][T12609] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.616383][T12609] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.627035][T12609] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.741942][T12692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.409160][T12692] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.431574][T13058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.787735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.803224][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.810477][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.836316][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.926722][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.933911][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.172263][T12410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.197281][T12410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.280154][T12647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.905332][T13078] hub 6-0:1.0: USB hub found [ 888.916124][T13078] hub 6-0:1.0: 1 port detected [ 890.604053][T13085] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 890.613097][T13085] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 890.828355][T12692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.985338][T12692] veth0_vlan: entered promiscuous mode [ 891.036272][T12692] veth1_vlan: entered promiscuous mode [ 891.044109][T12647] veth0_vlan: entered promiscuous mode [ 891.065286][ T6279] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 891.099127][T12647] veth1_vlan: entered promiscuous mode [ 891.169078][T12692] veth0_macvtap: entered promiscuous mode [ 891.278383][T12692] veth1_macvtap: entered promiscuous mode [ 891.326390][ T6279] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 891.366232][ T6279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.381652][T12647] veth0_macvtap: entered promiscuous mode [ 891.409837][ T6279] usb 1-1: config 0 descriptor?? [ 891.432305][ T6279] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 891.453027][T12647] veth1_macvtap: entered promiscuous mode [ 891.461391][T13100] @: renamed from vlan0 (while UP) [ 891.471995][T13100] tipc: Disabling bearer [ 891.484201][T12692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.501819][T12692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.534749][T12692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.543951][T12692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.556785][T12692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.566629][T12692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.609480][T12647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.644029][ T6279] gspca_sn9c2028: read1 error -32 [ 891.653537][ T6279] gspca_sn9c2028: read1 error -32 [ 891.740176][T12647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.918279][T12669] usb 1-1: USB disconnect, device number 29 [ 891.928071][T12647] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.980963][T12647] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.195435][T12647] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.243721][T12647] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.331720][T13103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.517731][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.543438][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.342377][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.368799][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.433853][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.475666][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.606020][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.662525][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.543408][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 894.965424][ T5854] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 895.142727][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 895.198600][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 895.256259][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 895.320039][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 895.335466][T12796] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 895.366019][ T5854] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 895.421854][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.476518][ T5854] usb 1-1: config 0 descriptor?? [ 895.504072][T13139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 895.562984][T12796] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 895.597119][T12796] usb 3-1: config 0 has no interface number 0 [ 895.631803][T12796] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 895.693586][T12796] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 895.743765][T12796] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 895.806974][T12796] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 895.842600][T12796] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 895.904373][T12796] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 895.936153][T12796] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 895.976887][ T5854] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 896.005258][ T5854] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 896.026808][T13186] syzkaller1: entered promiscuous mode [ 896.032352][T13186] syzkaller1: entered allmulticast mode [ 896.045875][ T5854] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 896.120913][ T5854] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 896.172426][T12796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.225302][ T1210] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 896.234552][T12796] usb 3-1: config 0 descriptor?? [ 896.247013][T13155] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 896.254410][T13155] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 896.411304][ T5953] usb 1-1: USB disconnect, device number 30 [ 896.962534][T12796] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 897.011798][T12796] usb 3-1: USB disconnect, device number 3 [ 897.035362][ T1210] usb 7-1: Using ep0 maxpacket: 32 [ 897.043095][T12796] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 897.051860][ T1210] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 897.073537][ T1210] usb 7-1: config 0 has no interface number 0 [ 897.095386][ T1210] usb 7-1: config 0 interface 184 has no altsetting 0 [ 897.128981][ T1210] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 897.534332][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.567623][ T1210] usb 7-1: Product: syz [ 897.583435][ T1210] usb 7-1: Manufacturer: syz [ 897.618361][ T1210] usb 7-1: SerialNumber: syz [ 897.653207][ T1210] usb 7-1: config 0 descriptor?? [ 897.681822][ T1210] smsc75xx v1.0.0 [ 898.367250][ T1210] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 898.413102][ T1210] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 898.442207][T12593] kernel write not supported for file bpf-prog (pid: 12593 comm: kworker/0:1) [ 898.654871][ T1210] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 898.697521][ T1210] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 898.757600][ T1210] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 898.815715][ T1210] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 898.848930][ T1210] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 898.920443][ T1210] usb 7-1: USB disconnect, device number 21 [ 899.656951][T12593] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 899.685376][ T5927] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 899.848337][T12593] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 899.876176][T12593] usb 3-1: can't read configurations, error -61 [ 899.886501][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.922981][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.964792][ T5927] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 899.997248][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.026443][ T5927] usb 7-1: config 0 descriptor?? [ 900.065654][T12593] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 900.241299][T12593] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 900.260482][T12593] usb 3-1: can't read configurations, error -61 [ 900.280930][T12593] usb usb3-port1: attempt power cycle [ 900.455666][ T5901] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 900.466550][ T5927] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 900.524682][ T5927] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 900.575540][ T5927] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 900.662243][T12593] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 900.715272][ T5901] usb 10-1: Using ep0 maxpacket: 8 [ 900.740542][T12593] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 900.758764][ T5901] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 900.769045][T12593] usb 3-1: can't read configurations, error -61 [ 900.777346][ C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71 [ 900.788205][T12669] usb 7-1: USB disconnect, device number 22 [ 900.806708][T13269] fido_id[13269]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:044F:B65D.000C/report_descriptor': No such device [ 900.810350][ T5901] usb 10-1: config 0 has no interface number 0 [ 900.909018][ T5901] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 900.952284][ T5901] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 900.965666][T12593] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 900.985104][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.006713][ T5901] usb 10-1: config 0 descriptor?? [ 901.039687][ T5901] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 901.060400][T12593] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 901.095858][T12593] usb 3-1: can't read configurations, error -61 [ 901.131244][T12593] usb usb3-port1: unable to enumerate USB device [ 901.280657][T13279] KVM: debugfs: duplicate directory 13279-4 [ 901.745239][ T5901] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 901.915414][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 901.929454][ T5901] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 901.955463][ T5901] usb 7-1: config 0 has no interface number 0 [ 901.978967][ T5901] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 901.991761][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.011816][ T5901] usb 7-1: Product: syz [ 902.022702][ T5901] usb 7-1: Manufacturer: syz [ 902.038260][ T5901] usb 7-1: SerialNumber: syz [ 902.057487][ T5901] usb 7-1: config 0 descriptor?? [ 902.081522][ T5901] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 902.422973][T12593] usb 10-1: USB disconnect, device number 2 [ 903.176172][T13321] loop2: detected capacity change from 0 to 7 [ 903.219847][T13321] Dev loop2: unable to read RDB block 7 [ 903.239186][T13321] loop2: unable to read partition table [ 903.260252][T13321] loop2: partition table beyond EOD, truncated [ 903.289988][T13321] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 903.345907][T12593] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 903.487184][ T5901] gspca_spca1528: reg_w err -71 [ 903.492324][ T5901] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 903.527159][T12593] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 903.551907][ T5901] usb 7-1: USB disconnect, device number 23 [ 903.555387][T12593] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 903.595471][T12593] usb 10-1: config 0 interface 0 has no altsetting 0 [ 903.615091][T12593] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 903.633327][T12593] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 903.665470][T12593] usb 10-1: Product: syz [ 903.676033][T12593] usb 10-1: Manufacturer: syz [ 903.680795][T12593] usb 10-1: SerialNumber: syz [ 903.713808][T12593] usb 10-1: config 0 descriptor?? [ 903.735348][T12593] hub 10-1:0.0: bad descriptor, ignoring hub [ 903.748951][T12593] hub 10-1:0.0: probe with driver hub failed with error -5 [ 903.781472][T12593] usb 10-1: selecting invalid altsetting 0 [ 904.542709][T13359] overlayfs: failed to clone upperpath [ 905.259109][T13379] hub 6-0:1.0: USB hub found [ 905.265496][T13379] hub 6-0:1.0: 1 port detected [ 906.663826][T13406] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1421'. [ 906.695661][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1421'. [ 907.783023][T12593] usb 10-1: USB disconnect, device number 3 [ 908.186364][T13453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.499086][T13506] syz_tun: entered allmulticast mode [ 910.514366][T13505] syz_tun: left allmulticast mode [ 910.525454][ T5901] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 910.705589][ T5901] usb 10-1: Using ep0 maxpacket: 32 [ 910.740362][ T5901] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 910.822265][ T5901] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 910.934065][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 911.084069][ T5901] usb 10-1: Product: syz [ 911.176399][ T5901] usb 10-1: Manufacturer: syz [ 911.212512][ T5901] usb 10-1: SerialNumber: syz [ 911.311470][ T5901] usb 10-1: config 0 descriptor?? [ 911.345783][T13498] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 911.381767][ T5901] hub 10-1:0.0: bad descriptor, ignoring hub [ 911.408754][ T5901] hub 10-1:0.0: probe with driver hub failed with error -5 [ 911.550035][T13522] capability: warning: `syz.2.1452' uses 32-bit capabilities (legacy support in use) [ 911.731294][ T1210] usb 10-1: USB disconnect, device number 4 [ 911.845414][T12669] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 912.015222][ T5901] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 912.039519][T12669] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 912.051205][T12669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.062253][T12669] usb 3-1: Product: syz [ 912.074860][T12669] usb 3-1: Manufacturer: syz [ 912.085429][T12669] usb 3-1: SerialNumber: syz [ 912.099275][T12669] usb 3-1: config 0 descriptor?? [ 912.193012][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.225258][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.251102][ T5901] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 912.292331][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.320997][T13545] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 912.331235][T12669] hso 3-1:0.0: Failed to find BULK IN ep [ 912.378054][T12669] usb-storage 3-1:0.0: USB Mass Storage device detected [ 912.378346][ T5901] usb 4-1: config 0 descriptor?? [ 912.560980][T12669] usb 3-1: USB disconnect, device number 8 [ 912.820943][T13531] kvm: emulating exchange as write [ 913.138562][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 913.144658][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 913.174806][ T5901] usb 4-1: USB disconnect, device number 2 [ 913.345241][T12669] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 913.525383][T12669] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 913.589604][T12669] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 913.613937][T12669] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 913.665375][T12669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 913.715389][T12669] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 913.766552][T12669] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 913.785770][T12669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 913.805638][T12669] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 913.835042][T12669] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 913.876764][T12669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 913.914322][T12593] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 913.945004][T12669] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 913.964646][T12669] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.057326][T12669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 914.109187][T12593] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.205287][T12669] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.214264][T12669] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.235912][T12593] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 914.305295][T12593] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 914.318499][T12669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 914.327781][T12593] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 914.382049][T12669] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.401555][T12593] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 914.415222][T12669] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.432965][T12593] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.480080][T12669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 914.526227][T12593] usb 10-1: config 0 descriptor?? [ 914.542249][T12669] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.602407][T12669] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.661991][T12669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 914.672909][T13599] sctp: [Deprecated]: syz.6.1469 (pid 13599) Use of int in max_burst socket option deprecated. [ 914.672909][T13599] Use struct sctp_assoc_value instead [ 914.716609][T12669] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.750891][T12669] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.788920][T12669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 914.809995][T12669] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 914.830120][T12669] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 914.860964][T12669] usb 1-1: Product: syz [ 914.868278][T12669] usb 1-1: Manufacturer: syz [ 914.878665][T12669] usb 1-1: SerialNumber: syz [ 914.908496][T12669] usb 1-1: config 0 descriptor?? [ 914.944085][T12669] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 915.014284][T12593] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 915.125031][T12593] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 915.225107][T12593] usb 10-1: USB disconnect, device number 5 [ 915.479240][ T1210] usb 1-1: USB disconnect, device number 31 [ 915.527981][ T1210] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 915.545399][T13610] fido_id[13610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 915.635721][T12669] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 915.813007][T12669] usb 3-1: device descriptor read/64, error -71 [ 915.825339][T12593] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 915.971158][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 915.971179][ T30] audit: type=1326 audit(1755275790.033:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13625 comm="syz.9.1475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f261d58ebe9 code=0x0 [ 916.030773][T12593] usb 4-1: Using ep0 maxpacket: 32 [ 916.066213][T12593] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 916.090650][T12669] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 916.100012][T12593] usb 4-1: config 0 has no interface number 0 [ 916.112395][T12593] usb 4-1: config 0 interface 184 has no altsetting 0 [ 916.130546][T12593] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 916.141168][T12593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.158278][T12593] usb 4-1: Product: syz [ 916.173340][T12593] usb 4-1: Manufacturer: syz [ 916.184289][T12593] usb 4-1: SerialNumber: syz [ 916.204135][T12593] usb 4-1: config 0 descriptor?? [ 916.222961][T12593] smsc75xx v1.0.0 [ 916.235274][T12669] usb 3-1: device descriptor read/64, error -71 [ 916.346056][T12669] usb usb3-port1: attempt power cycle [ 916.695376][T12669] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 916.706169][ T5927] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 916.736140][T12669] usb 3-1: device descriptor read/8, error -71 [ 916.867942][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 916.974600][ T5927] usb 7-1: unable to get BOS descriptor or descriptor too short [ 917.068805][T12669] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 917.156842][ T5927] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 917.251219][T12669] usb 3-1: device descriptor read/8, error -71 [ 917.311268][ T5927] usb 7-1: config 13 has no interface number 0 [ 917.388605][ T5927] usb 7-1: config 13 interface 50 has no altsetting 0 [ 917.464581][T12669] usb usb3-port1: unable to enumerate USB device [ 917.523444][T12593] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 917.638604][ T5927] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 917.751144][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.761448][T12593] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 917.837909][ T5927] usb 7-1: Product: syz [ 917.842290][ T5927] usb 7-1: Manufacturer: syz [ 917.858908][T12593] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 917.899397][ T5927] usb 7-1: SerialNumber: syz [ 917.920169][T12593] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 917.982488][T12593] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 918.001523][T13654] input: syz1 as /devices/virtual/input/input28 [ 918.024836][T12593] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 918.061563][T12593] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 918.102052][T12593] usb 4-1: USB disconnect, device number 3 [ 918.179358][ T5927] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 918.221779][ T5927] usb 7-1: MIDIStreaming interface descriptor not found [ 918.446763][ T5927] usb 7-1: USB disconnect, device number 24 [ 919.285698][T12726] udevd[12726]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.850776][T12669] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 920.056618][T12669] usb 1-1: Using ep0 maxpacket: 8 [ 920.325592][T12669] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 920.340810][T12669] usb 1-1: config 179 has no interface number 0 [ 920.361748][T12669] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 920.407480][T12669] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 920.455523][T12669] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 920.495438][T12669] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 920.543887][T12669] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 920.620258][T12669] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 920.635874][T12796] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 920.683296][T12669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.745912][T13668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 920.832524][T12796] usb 7-1: Using ep0 maxpacket: 8 [ 920.890989][T12796] usb 7-1: unable to get BOS descriptor or descriptor too short [ 920.923325][T12796] usb 7-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 920.985694][T12796] usb 7-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 921.065044][T12796] usb 7-1: config 4 interface 0 has no altsetting 0 [ 921.144053][T12796] usb 7-1: string descriptor 0 read error: -22 [ 921.170332][T12796] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 921.219679][T12796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.309795][ T5927] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 921.395444][T12796] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 921.483331][T12796] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 921.509094][ T5927] usb 10-1: Using ep0 maxpacket: 16 [ 921.538205][T13683] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 921.541398][ T5927] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 921.557016][T12796] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 921.596621][T12796] usb 7-1: media controller created [ 921.635335][T12796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 921.677014][ T5927] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 921.709983][T12796] zl10353_read_register: readreg error (reg=127, ret==0) [ 921.725342][ T5927] usb 10-1: Product: syz [ 921.744265][ T5927] usb 10-1: Manufacturer: syz [ 921.759252][ T5927] usb 10-1: SerialNumber: syz [ 921.802007][ T5927] usb 10-1: config 0 descriptor?? [ 921.944127][T12796] usb 7-1: USB disconnect, device number 25 [ 922.135961][ T5927] usb 10-1: USB disconnect, device number 6 [ 922.427032][ T6279] usb 1-1: USB disconnect, device number 32 [ 922.427151][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 922.442518][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 926.461922][T13746] syz_tun: entered allmulticast mode [ 926.642703][T13746] syz_tun: left allmulticast mode [ 932.222603][ T6279] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 932.375361][ T6279] usb 1-1: Using ep0 maxpacket: 8 [ 932.496077][ T6279] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 932.626984][ T6279] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.768133][ T6279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 933.198226][ T6279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 933.209723][ T6279] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 933.223237][ T6279] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 933.232732][ T6279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.908769][ T6279] usb 1-1: GET_CAPABILITIES returned 0 [ 933.935307][ T6279] usbtmc 1-1:16.0: can't read capabilities [ 934.157356][ T6279] usb 1-1: USB disconnect, device number 33 [ 934.620731][T13865] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 936.732775][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.739218][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.135568][ T6279] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 937.362695][ T6279] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 937.439309][ T6279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.475299][ T6279] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.501929][ T6279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.582104][ T6279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.615740][ T6279] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.649842][ T6279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.661334][ T6279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.682259][ T6279] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.737590][ T6279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.757534][ T6279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.779279][ T6279] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.832544][ T6279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.866591][ T6279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.889411][ T6279] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.922338][ T6279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 937.964040][ T6279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 938.010893][ T6279] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 938.060544][ T6279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 938.072306][T13923] syz.2.1538: attempt to access beyond end of device [ 938.072306][T13923] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 938.079391][ T6279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 938.115589][ T6279] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 938.144486][T13923] syz.2.1538: attempt to access beyond end of device [ 938.144486][T13923] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 938.175499][ T6279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 938.197663][ T6279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 938.229192][ T6279] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 938.248889][ T6279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 938.272149][ T6279] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 938.298193][ T6279] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 938.325760][ T6279] usb 4-1: Product: syz [ 938.329994][ T6279] usb 4-1: Manufacturer: syz [ 938.334619][ T6279] usb 4-1: SerialNumber: syz [ 938.417478][ T6279] usb 4-1: config 0 descriptor?? [ 938.470489][ T6279] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 938.679937][T13935] netlink: 'syz.6.1540': attribute type 1 has an invalid length. [ 938.984712][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 938.985494][T12593] usb 4-1: USB disconnect, device number 4 [ 939.013196][T12593] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 939.119798][T13938] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 939.769787][T13935] veth3: entered promiscuous mode [ 939.794596][T13935] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 940.945951][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 941.904185][T13972] netfs: Couldn't get user pages (rc=-14) [ 942.036078][ T6279] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 942.216758][ T6279] usb 7-1: unable to get BOS descriptor or descriptor too short [ 942.256978][ T6279] usb 7-1: config 6 has an invalid interface number: 200 but max is 0 [ 942.360214][ T6279] usb 7-1: config 6 has no interface number 0 [ 942.459280][ T6279] usb 7-1: config 6 interface 200 has no altsetting 0 [ 943.249781][ T6279] usb 7-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 943.259022][ T6279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.267407][ T6279] usb 7-1: Product: syz [ 943.271614][ T6279] usb 7-1: Manufacturer: syz [ 943.276363][ T6279] usb 7-1: SerialNumber: syz [ 944.182812][ T6279] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 944.687359][ T6279] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 944.726624][ T6279] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 944.740879][ T6279] usb 7-1: media controller created [ 944.841749][ T6279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 945.079504][ T6279] dvb-usb: bulk message failed: -71 (6/0) [ 945.123080][ T6279] dvb-usb: bulk message failed: -71 (6/0) [ 945.144607][ T6279] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 945.190284][ T6279] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input29 [ 945.251866][ T6279] dvb-usb: schedule remote query interval to 150 msecs. [ 945.545934][ T6279] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 946.265811][ T5901] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 946.296810][ T1210] dvb-usb: bulk message failed: -71 (1/0) [ 946.303231][ T1210] dvb-usb: error while querying for an remote control event. [ 946.599531][ T6279] usb 7-1: USB disconnect, device number 26 [ 946.677370][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.841430][ T5901] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 947.005615][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.036612][ T5901] usb 1-1: config 0 descriptor?? [ 947.072683][ T5901] pwc: Askey VC010 type 2 USB webcam detected. [ 947.199624][ T6279] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 947.451575][ T5901] pwc: recv_control_msg error -32 req 02 val 2b00 [ 947.451607][ T5953] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 947.480580][ T5901] pwc: recv_control_msg error -32 req 02 val 2700 [ 947.521285][ T5901] pwc: recv_control_msg error -32 req 02 val 2c00 [ 947.539715][ T5901] pwc: recv_control_msg error -32 req 04 val 1000 [ 947.580142][ T5901] pwc: recv_control_msg error -32 req 04 val 1300 [ 947.599006][ T5901] pwc: recv_control_msg error -32 req 04 val 1400 [ 947.629121][ T5901] pwc: recv_control_msg error -32 req 02 val 2000 [ 947.646518][ T5901] pwc: recv_control_msg error -32 req 02 val 2100 [ 947.667206][ T5953] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 947.694526][ T5901] pwc: recv_control_msg error -32 req 04 val 1500 [ 947.717887][ T5953] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 947.725786][ T5901] pwc: recv_control_msg error -32 req 02 val 2500 [ 947.744868][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 947.795653][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 947.807314][T12593] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 947.827097][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 947.845091][ T5953] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 947.884528][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 947.899360][ T5953] usb 3-1: Product: syz [ 947.903627][ T5953] usb 3-1: Manufacturer: syz [ 947.946617][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 947.956276][ T5901] pwc: recv_control_msg error -71 req 02 val 2600 [ 947.970267][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 947.990802][T12593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.003641][ T5901] pwc: recv_control_msg error -71 req 02 val 2900 [ 948.013322][ T5953] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 948.022590][T12593] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 948.045353][ T5901] pwc: recv_control_msg error -71 req 02 val 2800 [ 948.065800][ T5901] pwc: recv_control_msg error -71 req 04 val 1100 [ 948.066306][ T5953] cdc_wdm 3-1:1.0: Unknown control protocol [ 948.085288][T12593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.086070][ T5901] pwc: recv_control_msg error -71 req 04 val 1200 [ 948.124990][T12593] usb 4-1: config 0 descriptor?? [ 948.226029][ T5901] pwc: Registered as video103. [ 948.271792][ T5901] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 948.347727][ T5901] usb 1-1: USB disconnect, device number 34 [ 948.368109][T12593] usbhid 4-1:0.0: can't add hid device: -71 [ 948.380184][ T5953] usb 3-1: USB disconnect, device number 13 [ 948.408268][T12593] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 948.511435][T12593] usb 4-1: USB disconnect, device number 5 [ 949.025473][ T5953] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 949.033283][T12593] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 949.791635][ T5953] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 949.822746][T12593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.851190][ T5953] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 949.882881][T12593] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 949.905420][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 949.933534][T12593] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 949.952688][ T5953] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 950.003487][T12593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.063796][ T5953] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 950.097917][T12593] usb 4-1: config 0 descriptor?? [ 950.114773][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 950.153240][ T5953] usb 3-1: Product: syz [ 950.157692][ T5953] usb 3-1: Manufacturer: syz [ 950.228094][ T5953] usb 3-1: can't set config #1, error -71 [ 950.243638][ T5953] usb 3-1: USB disconnect, device number 14 [ 950.744286][T12593] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 951.274764][ C1] plantronics 0003:047F:FFFF.000E: hid_field_extract() called with n (132) > 32! (syz.2.1567) [ 951.639683][ T5901] usb 4-1: USB disconnect, device number 6 [ 952.062463][T14070] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 952.069563][T14070] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 952.165516][T14070] vhci_hcd vhci_hcd.0: Device attached [ 952.197969][T14071] vhci_hcd: connection closed [ 952.231460][ T13] vhci_hcd: stop threads [ 952.253860][ T13] vhci_hcd: release socket [ 952.270620][ T13] vhci_hcd: disconnect device [ 952.850134][ T5926] usb usb34-port1: attempt power cycle [ 952.990825][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 953.162171][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 953.180010][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 953.190650][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 953.215783][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 953.227849][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 953.440505][ T5926] usb usb34-port1: unable to enumerate USB device [ 955.366096][ T5156] Bluetooth: hci2: command tx timeout [ 957.452745][ T51] Bluetooth: hci2: command tx timeout [ 957.775742][ T6279] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 957.945329][ T6279] usb 4-1: Using ep0 maxpacket: 16 [ 957.968228][ T6279] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 957.976818][ T6279] usb 4-1: config 0 has no interface number 0 [ 957.982971][ T6279] usb 4-1: config 0 interface 249 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 957.993253][ T6279] usb 4-1: config 0 interface 249 has no altsetting 0 [ 958.022546][ T6279] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 958.040346][ T6279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.051028][ T6279] usb 4-1: Product: syz [ 958.057761][ T6279] usb 4-1: Manufacturer: syz [ 958.062421][ T6279] usb 4-1: SerialNumber: syz [ 958.070250][ T6279] usb 4-1: config 0 descriptor?? [ 958.081974][T14109] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 958.091891][ T6279] aircable 4-1:0.249: aircable converter detected [ 958.102451][ T6279] usb 4-1: aircable converter now attached to ttyUSB0 [ 958.355996][ T9220] usb 4-1: USB disconnect, device number 7 [ 958.410986][ T9220] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 958.420443][T14083] lo speed is unknown, defaulting to 1000 [ 958.488925][ T9220] aircable 4-1:0.249: device disconnected [ 959.310096][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 959.560693][ T5156] Bluetooth: hci2: command tx timeout [ 961.605347][ T5156] Bluetooth: hci2: command tx timeout [ 962.999267][T14083] chnl_net:caif_netlink_parms(): no params data found [ 967.265492][T14083] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.364035][T14187] netlink: 'syz.0.1595': attribute type 32 has an invalid length. [ 967.625537][T14083] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.652787][T14083] bridge_slave_0: entered allmulticast mode [ 967.677376][T14083] bridge_slave_0: entered promiscuous mode [ 967.722655][T14083] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.791685][T14083] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.813718][T14083] bridge_slave_1: entered allmulticast mode [ 967.865305][T14083] bridge_slave_1: entered promiscuous mode [ 968.575332][T14206] tun0: tun_chr_ioctl cmd 1074025694 [ 969.148692][T14083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.200833][T14083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.778825][T14083] team0: Port device team_slave_0 added [ 970.812772][T14083] team0: Port device team_slave_1 added [ 971.739084][T14228] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1603'. [ 971.751197][T14083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.991033][T14083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.185259][T14083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.187766][T14083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.187785][T14083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.187831][T14083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.492703][ C1] vkms_vblank_simulate: vblank timer overrun [ 972.837323][T14083] hsr_slave_0: entered promiscuous mode [ 972.849528][T14083] hsr_slave_1: entered promiscuous mode [ 972.850448][T14083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 972.850556][T14083] Cannot create hsr debugfs directory [ 974.745333][ T5156] Bluetooth: hci5: command 0x0406 tx timeout [ 974.981987][T14260] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 975.942723][T14260] kvm: pic: single mode not supported [ 975.942879][T14260] kvm: pic: non byte read [ 975.988184][T14260] kvm: pic: level sensitive irq not supported [ 975.988280][T14260] kvm: pic: non byte read [ 977.498580][T14284] siw: device registration error -23 [ 981.488397][T14083] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 981.562773][T14083] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 981.629326][T14083] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 981.664180][T14083] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 982.045656][T14083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.070577][T14083] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.078994][T14342] delete_channel: no stack [ 982.099680][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.106924][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.171881][T12410] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.179220][T12410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.319285][T14357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1628'. [ 985.220026][T14367] tipc: Started in network mode [ 985.224980][T14367] tipc: Node identity 9678e3678965, cluster identity 4711 [ 985.285859][T14367] tipc: Enabled bearer , priority 0 [ 985.338633][T14369] syzkaller0: entered promiscuous mode [ 985.344190][T14369] syzkaller0: entered allmulticast mode [ 985.657842][T14380] tipc: Enabled bearer , priority 0 [ 985.987038][T14381] tipc: Resetting bearer [ 985.993649][T14380] syzkaller0: entered promiscuous mode [ 985.999925][T14380] syzkaller0: entered allmulticast mode [ 986.052058][T14366] tipc: Resetting bearer [ 986.132758][T14366] tipc: Disabling bearer [ 986.787222][T12670] tipc: Node number set to 2647318105 [ 987.602612][T14385] tipc: Resetting bearer [ 987.800329][T14372] tipc: Resetting bearer [ 988.418860][T14372] tipc: Disabling bearer [ 989.034713][T14404] tipc: Started in network mode [ 989.069437][T14404] tipc: Node identity 16a938c338e1, cluster identity 4711 [ 989.105659][T14404] tipc: Enabled bearer , priority 0 [ 989.164524][T14083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.254439][T14406] syzkaller0: entered promiscuous mode [ 989.294551][T14406] syzkaller0: entered allmulticast mode [ 989.301197][T14414] comedi: valid board names for 8255 driver are: [ 989.307948][T14414] 8255 [ 989.310749][T14414] comedi: valid board names for vmk80xx driver are: [ 989.318221][T14414] vmk80xx [ 989.321357][T14414] comedi: valid board names for usbduxsigma driver are: [ 989.328361][T14414] usbduxsigma [ 989.331740][T14414] comedi: valid board names for usbduxfast driver are: [ 989.338656][T14414] usbduxfast [ 989.341944][T14414] comedi: valid board names for usbdux driver are: [ 989.348669][T14414] usbdux [ 989.351610][T14414] comedi: valid board names for ni6501 driver are: [ 989.358202][T14414] ni6501 [ 989.361148][T14414] comedi: valid board names for dt9812 driver are: [ 989.367720][T14414] dt9812 [ 989.370771][T14414] comedi: valid board names for ni_labpc_cs driver are: [ 989.377780][T14414] ni_labpc_cs [ 989.381572][T14414] comedi: valid board names for ni_daq_700 driver are: [ 989.388883][T14414] ni_daq_700 [ 989.392207][T14414] comedi: valid board names for labpc_pci driver are: [ 989.399142][T14414] labpc_pci [ 989.402369][T14414] comedi: valid board names for adl_pci9118 driver are: [ 989.409362][T14414] pci9118dg [ 989.412565][T14414] pci9118hg [ 989.415828][T14414] pci9118hr [ 989.419040][T14414] comedi: valid board names for 8255_pci driver are: [ 989.425771][T14414] 8255_pci [ 989.428909][T14414] comedi: valid board names for s526 driver are: [ 989.435279][T14414] s526 [ 989.438050][T14414] comedi: valid board names for multiq3 driver are: [ 989.444646][T14414] multiq3 [ 989.447779][T14414] comedi: valid board names for pcmuio driver are: [ 989.454379][T14414] pcmuio48 [ 989.457547][T14414] pcmuio96 [ 989.461291][T14414] comedi: valid board names for pcmmio driver are: [ 989.467956][T14414] pcmmio [ 989.470919][T14414] comedi: valid board names for pcmda12 driver are: [ 989.477530][T14414] pcmda12 [ 989.480564][T14414] comedi: valid board names for pcmad driver are: [ 989.487412][T14414] pcmad12 [ 989.490454][T14414] pcmad16 [ 989.493491][T14414] comedi: valid board names for ni_labpc driver are: [ 989.500213][T14414] lab-pc-1200 [ 989.503592][T14414] lab-pc-1200ai [ 989.507202][T14414] lab-pc+ [ 989.510257][T14414] comedi: valid board names for atmio16 driver are: [ 989.516965][T14414] atmio16 [ 989.520016][T14414] atmio16d [ 989.523133][T14414] comedi: valid board names for ni_at_ao driver are: [ 989.529928][T14414] at-ao-6 [ 989.532959][T14414] at-ao-10 [ 989.536109][T14414] comedi: valid board names for ni_at_a2150 driver are: [ 989.543047][T14414] ni_at_a2150 [ 989.546480][T14414] comedi: valid board names for adq12b driver are: [ 989.552987][T14414] adq12b [ 989.555974][T14414] comedi: valid board names for mpc624 driver are: [ 989.562489][T14414] mpc624 [ 989.565586][T14414] comedi: valid board names for c6xdigio driver are: [ 989.572303][T14414] c6xdigio [ 989.575464][T14414] comedi: valid board names for aio_iiro_16 driver are: [ 989.582420][T14414] aio_iiro_16 [ 989.586140][T14414] comedi: valid board names for aio_aio12_8 driver are: [ 989.593092][T14414] aio_aio12_8 [ 989.596507][T14414] aio_ai12_8 [ 989.599795][T14414] aio_ao12_4 [ 989.603083][T14414] comedi: valid board names for fl512 driver are: [ 989.609568][T14414] fl512 [ 989.612450][T14414] comedi: valid board names for dmm32at driver are: [ 989.619085][T14414] dmm32at [ 989.622112][T14414] comedi: valid board names for dt282x driver are: [ 989.628650][T14414] dt2821 [ 989.631602][T14414] dt2821-f [ 989.634733][T14414] dt2821-g [ 989.637936][T14414] dt2823 [ 989.640905][T14414] dt2824-pgh [ 989.644221][T14414] dt2824-pgl [ 989.647649][T14414] dt2825 [ 989.650591][T14414] dt2827 [ 989.653575][T14414] dt2828 [ 989.656572][T14414] dt2829 [ 989.659511][T14414] dt21-ez [ 989.662537][T14414] dt23-ez [ 989.665675][T14414] dt24-ez [ 989.668707][T14414] dt24-ez-pgl [ 989.672102][T14414] comedi: valid board names for dt2817 driver are: [ 989.678638][T14414] dt2817 [ 989.681591][T14414] comedi: valid board names for dt2815 driver are: [ 989.688630][T14414] dt2815 [ 989.691609][T14414] comedi: valid board names for dt2814 driver are: [ 989.698174][T14414] dt2814 [ 989.701121][T14414] comedi: valid board names for dt2811 driver are: [ 989.707659][T14414] dt2811-pgh [ 989.710950][T14414] dt2811-pgl [ 989.714270][T14414] comedi: valid board names for dt2801 driver are: [ 989.720814][T14414] dt2801 [ 989.723756][T14414] comedi: valid board names for das6402 driver are: [ 989.730394][T14414] das6402-12 [ 989.733686][T14414] das6402-16 [ 989.737011][T14414] comedi: valid board names for das1800 driver are: [ 989.743600][T14414] das-1701st [ 989.746936][T14414] das-1701st-da [ 989.750513][T14414] das-1702st [ 989.753821][T14414] das-1702st-da [ 989.757694][T14414] das-1702hr [ 989.761085][T14414] das-1702hr-da [ 989.764634][T14414] das-1701ao [ 989.767960][T14414] das-1702ao [ 989.771247][T14414] das-1801st [ 989.774535][T14414] das-1801st-da [ 989.778123][T14414] das-1802st [ 989.781431][T14414] das-1802st-da [ 989.784987][T14414] das-1802hr [ 989.788373][T14414] das-1802hr-da [ 989.792238][T14414] das-1801hc [ 989.795583][T14414] das-1802hc [ 989.798871][T14414] das-1801ao [ 989.802159][T14414] das-1802ao [ 989.805592][T14414] comedi: valid board names for das800 driver are: [ 989.812098][T14414] das-800 [ 989.815182][T14414] cio-das800 [ 989.818472][T14414] das-801 [ 989.821496][T14414] cio-das801 [ 989.824784][T14414] das-802 [ 989.827927][T14414] cio-das802 [ 989.831218][T14414] cio-das802/16 [ 989.834764][T14414] comedi: valid board names for isa-das08 driver are: [ 989.841560][T14414] isa-das08 [ 989.844855][T14414] das08-pgm [ 989.848210][T14414] das08-pgh [ 989.851415][T14414] das08-pgl [ 989.854613][T14414] das08-aoh [ 989.857852][T14414] das08-aol [ 989.861049][T14414] das08-aom [ 989.864280][T14414] das08/jr-ao [ 989.867690][T14414] das08jr-16-ao [ 989.871237][T14414] pc104-das08 [ 989.874621][T14414] das08jr/16 [ 989.878039][T14414] comedi: valid board names for das16m1 driver are: [ 989.884628][T14414] das16m1 [ 989.887699][T14414] comedi: valid board names for dac02 driver are: [ 989.894483][T14414] dac02 [ 989.897407][T14414] comedi: valid board names for rti802 driver are: [ 989.903915][T14414] rti802 [ 989.906912][T14414] comedi: valid board names for rti800 driver are: [ 989.913415][T14414] rti800 [ 989.916377][T14414] rti815 [ 989.919330][T14414] comedi: valid board names for pcm3724 driver are: [ 989.926084][T14414] pcm3724 [ 989.929129][T14414] comedi: valid board names for pcl818 driver are: [ 989.935670][T14414] pcl818l [ 989.938702][T14414] pcl818h [ 989.941732][T14414] pcl818hd [ 989.944874][T14414] pcl818hg [ 989.948132][T14414] pcl818 [ 989.951100][T14414] pcl718 [ 989.954041][T14414] pcm3718 [ 989.957120][T14414] comedi: valid board names for pcl816 driver are: [ 989.963632][T14414] pcl816 [ 989.966620][T14414] pcl814b [ 989.969655][T14414] comedi: valid board names for pcl812 driver are: [ 989.976191][T14414] pcl812 [ 989.979151][T14414] pcl812pg [ 989.982284][T14414] acl8112pg [ 989.985529][T14414] acl8112dg [ 989.988734][T14414] acl8112hg [ 989.991937][T14414] a821pgl [ 989.995324][T14414] a821pglnda [ 989.998649][T14414] a821pgh [ 990.001700][T14414] a822pgl [ 990.004759][T14414] a822pgh [ 990.008039][T14414] a823pgl [ 990.011097][T14414] a823pgh [ 990.014183][T14414] pcl813 [ 990.017193][T14414] pcl813b [ 990.020293][T14414] acl8113 [ 990.023348][T14414] iso813 [ 990.026354][T14414] acl8216 [ 990.029383][T14414] a826pg [ 990.032336][T14414] comedi: valid board names for pcl730 driver are: [ 990.038867][T14414] pcl730 [ 990.041806][T14414] iso730 [ 990.044736][T14414] acl7130 [ 990.047802][T14414] pcm3730 [ 990.050825][T14414] pcl725 [ 990.053757][T14414] p8r8dio [ 990.056816][T14414] acl7225b [ 990.059945][T14414] p16r16dio [ 990.063165][T14414] pcl733 [ 990.066200][T14414] pcl734 [ 990.069169][T14414] opmm-1616-xt [ 990.072632][T14414] pearl-mm-p [ 990.075982][T14414] ir104-pbf [ 990.079190][T14414] comedi: valid board names for pcl726 driver are: [ 990.085821][T14414] pcl726 [ 990.088790][T14414] pcl727 [ 990.091742][T14414] pcl728 [ 990.094690][T14414] acl6126 [ 990.098105][T14414] acl6128 [ 990.101139][T14414] comedi: valid board names for pcl724 driver are: [ 990.107716][T14414] pcl724 [ 990.110663][T14414] pcl722 [ 990.113604][T14414] pcl731 [ 990.116574][T14414] acl7122 [ 990.119600][T14414] acl7124 [ 990.122623][T14414] pet48dio [ 990.125864][T14414] pcmio48 [ 990.128902][T14414] onyx-mm-dio [ 990.132273][T14414] comedi: valid board names for pcl711 driver are: [ 990.138807][T14414] pcl711 [ 990.141755][T14414] pcl711b [ 990.144775][T14414] acl8112hg [ 990.148002][T14414] acl8112dg [ 990.151211][T14414] comedi: valid board names for amplc_pc263 driver are: [ 990.158350][T14414] pc263 [ 990.161211][T14414] comedi: valid board names for amplc_pc236 driver are: [ 990.168180][T14414] pc36at [ 990.171121][T14414] comedi: valid board names for amplc_dio200 driver are: [ 990.178171][T14414] pc212e [ 990.181108][T14414] pc214e [ 990.184044][T14414] pc215e [ 990.187057][T14414] pc218e [ 990.190006][T14414] pc272e [ 990.192958][T14414] comedi: valid board names for comedi_parport driver are: [ 990.200454][T14414] comedi_parport [ 990.204115][T14414] comedi: valid board names for comedi_test driver are: [ 990.211088][T14414] comedi_test [ 990.214464][T14414] comedi: valid board names for comedi_bond driver are: [ 990.221427][T14414] comedi_bond [ 990.240463][T12670] tipc: Node number set to 776485059 [ 990.292302][T14396] tipc: Resetting bearer [ 990.345589][T14395] tipc: Resetting bearer [ 990.613079][T14395] tipc: Disabling bearer [ 990.976118][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 990.987584][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 990.987617][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 990.987634][ T51] Workqueue: hci5 hci_rx_work [ 990.987669][ T51] Call Trace: [ 990.987683][ T51] [ 990.987694][ T51] dump_stack_lvl+0x189/0x250 [ 990.987725][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 990.987755][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 990.987781][ T51] ? __pfx__printk+0x10/0x10 [ 990.987814][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 990.987840][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 990.987871][ T51] ? kernfs_path_from_node+0x22c/0x260 [ 990.987898][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 990.987930][ T51] sysfs_create_dir_ns+0x259/0x280 [ 990.987960][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 990.987990][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 990.988027][ T51] kobject_add_internal+0x59f/0xb40 [ 990.988067][ T51] kobject_add+0x155/0x220 [ 990.988101][ T51] ? __pfx_kobject_add+0x10/0x10 [ 990.988129][ T51] ? _raw_spin_unlock+0x28/0x50 [ 990.988170][ T51] ? get_device_parent+0x366/0x3a0 [ 990.988209][ T51] device_add+0x408/0xb50 [ 990.988253][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 990.988294][ T51] le_conn_complete_evt+0xc3a/0x1220 [ 990.988340][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 990.988372][ T51] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 990.988395][ T51] ? __asan_memcpy+0x40/0x70 [ 990.988430][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 990.988457][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 990.988482][ T51] ? skb_pull_data+0xfb/0x200 [ 990.988513][ T51] hci_le_conn_complete_evt+0x187/0x450 [ 990.988551][ T51] hci_event_packet+0x78c/0x1200 [ 990.988580][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 990.988612][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 990.988638][ T51] ? kcov_remote_start+0x4d3/0x7f0 [ 990.988670][ T51] ? lockdep_hardirqs_on+0x90/0x150 [ 990.988698][ T51] ? hci_send_to_monitor+0xe2/0x570 [ 990.988733][ T51] hci_rx_work+0x46a/0xe80 [ 990.988767][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 990.988794][ T51] process_scheduled_works+0xade/0x17b0 [ 990.988854][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 990.988899][ T51] worker_thread+0x8a0/0xda0 [ 990.988956][ T51] kthread+0x70e/0x8a0 [ 990.988991][ T51] ? __pfx_worker_thread+0x10/0x10 [ 990.989015][ T51] ? __pfx_kthread+0x10/0x10 [ 990.989048][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 990.989069][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 990.989090][ T51] ? __pfx_kthread+0x10/0x10 [ 990.989122][ T51] ret_from_fork+0x3fc/0x770 [ 990.989148][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 990.989178][ T51] ? __switch_to_asm+0x39/0x70 [ 990.989205][ T51] ? __switch_to_asm+0x33/0x70 [ 990.989239][ T51] ? __pfx_kthread+0x10/0x10 [ 990.989270][ T51] ret_from_fork_asm+0x1a/0x30 [ 990.989318][ T51] [ 990.989353][ T51] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 991.300779][ T51] Bluetooth: hci5: failed to register connection device [ 993.030894][T14446] netlink: zone id is out of range [ 994.132820][T14446] netlink: set zone limit has 4 unknown bytes [ 994.957003][T14083] veth0_vlan: entered promiscuous mode [ 995.612220][T14083] veth1_vlan: entered promiscuous mode [ 995.902635][T14083] veth0_macvtap: entered promiscuous mode [ 996.029824][T14466] tipc: Enabled bearer , priority 0 [ 996.039401][T14466] syzkaller0: entered promiscuous mode [ 996.044933][T14466] syzkaller0: entered allmulticast mode [ 996.230467][T14083] veth1_macvtap: entered promiscuous mode [ 996.320029][T14466] tipc: Resetting bearer [ 997.036841][T12670] tipc: Node number set to 522052455 [ 998.174575][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.181058][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.812540][T14465] tipc: Resetting bearer [ 1000.873973][T14465] tipc: Disabling bearer [ 1000.917303][T14083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.994320][T14487] tipc: Enabled bearer , priority 0 [ 1001.017493][T14083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.055900][T14481] syzkaller0: entered promiscuous mode [ 1001.061494][T14481] syzkaller0: entered allmulticast mode [ 1001.725770][T14481] tipc: Resetting bearer [ 1002.184649][T14083] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.235387][T14083] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.282406][T14083] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.411601][T14083] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.298313][T14480] tipc: Resetting bearer [ 1003.685985][T14480] tipc: Disabling bearer [ 1004.898154][T14530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.387215][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.446449][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.935054][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.943314][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.145375][ T5953] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1012.414184][ T5953] usb 7-1: Using ep0 maxpacket: 8 [ 1012.852851][ T5953] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1012.917538][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.973955][ T5953] usb 7-1: Product: syz [ 1013.004863][ T5953] usb 7-1: Manufacturer: syz [ 1013.065179][ T5953] usb 7-1: SerialNumber: syz [ 1013.103591][ T5953] usb 7-1: config 0 descriptor?? [ 1013.173141][T14562] lo speed is unknown, defaulting to 1000 [ 1013.208995][ T5953] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1013.310886][T14578] tipc: Enabling of bearer rejected, failed to enable media [ 1013.578023][T14598] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1013.587594][T14598] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1013.787157][T14601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1014.212885][ T5953] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1014.220647][ T5953] sq905 7-1:0.0: probe with driver sq905 failed with error -71 [ 1014.255660][ T5953] usb 7-1: USB disconnect, device number 27 [ 1014.377273][T14612] tipc: Enabled bearer , priority 0 [ 1014.392075][T14612] syzkaller0: entered promiscuous mode [ 1014.398405][T14612] syzkaller0: entered allmulticast mode [ 1014.461810][T14612] tipc: Resetting bearer [ 1014.508284][T14610] tipc: Resetting bearer [ 1014.564847][T14610] tipc: Disabling bearer [ 1018.255271][ T1210] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1018.507097][ T1210] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1018.522740][ T1210] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.299685][ T1210] usb 6-1: config 0 has no interface number 0 [ 1019.311717][ T1210] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1019.321994][ T1210] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.942823][ T1210] usb 6-1: string descriptor 0 read error: -71 [ 1019.985195][ T1210] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1019.994432][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.073637][ T1210] usb 6-1: config 0 descriptor?? [ 1020.122595][ T1210] usb 6-1: can't set config #0, error -71 [ 1021.162678][ T1210] usb 6-1: USB disconnect, device number 4 [ 1022.919145][T14649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.208158][T14668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1697'. [ 1029.466420][T12670] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1030.194805][T12670] usb 6-1: Using ep0 maxpacket: 8 [ 1030.625357][T14716] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1033.240091][T14720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.596993][T12670] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1034.628622][T12670] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1034.668305][T12670] usb 6-1: can't read configurations, error -71 [ 1036.735194][T12670] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1036.958754][T12670] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.008560][T12670] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1037.098378][T12670] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1037.192503][T12670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1037.267169][T12670] usb 6-1: SerialNumber: syz [ 1037.643276][T12670] usb 6-1: 0:2 : does not exist [ 1037.718340][T12670] usb 6-1: USB disconnect, device number 7 [ 1038.434108][T12728] udevd[12728]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.780713][T14807] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1042.789232][T14807] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1044.363033][ T5901] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1044.882339][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1046.175213][ T5901] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1046.184335][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.936913][ T5901] usb 1-1: config 0 descriptor?? [ 1046.963408][ T5901] usb 1-1: can't set config #0, error -71 [ 1047.066429][ T5901] usb 1-1: USB disconnect, device number 35 [ 1055.329104][ T5901] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1056.219950][T14871] nbd0: detected capacity change from 0 to 63 [ 1056.429355][ T51] block nbd0: Receive control failed (result -32) [ 1056.433884][ T5901] usb 7-1: device descriptor read/all, error -71 [ 1056.735285][T14874] block nbd0: NBD_DISCONNECT [ 1056.755868][T14874] block nbd0: Send disconnect failed -32 [ 1056.843872][T14874] block nbd0: Disconnected due to user request. [ 1056.864951][T14874] block nbd0: shutting down sockets [ 1058.101437][T14633] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1058.112053][T14633] buffer_io_error: 26 callbacks suppressed [ 1058.112105][T14633] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1058.149298][T14633] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1058.160370][T14633] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1058.173933][T14633] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1058.244791][T12963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1058.348879][T12963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1058.369643][T12963] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1058.383657][T12963] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1058.396570][T12963] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1058.425701][T12963] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1058.485389][T12963] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1058.735159][ T5854] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1058.743116][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1059.181883][T12963] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1059.282250][T12963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1059.515157][T12963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1059.523191][T12963] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1059.595190][ T5854] usb 7-1: device descriptor read/64, error -32 [ 1059.613672][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.625247][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.646581][T12963] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1059.681038][T12963] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1059.706004][T12670] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1059.720703][T12963] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1059.965271][ T5854] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1059.965450][T12963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1059.993636][T12670] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1060.217582][ T5854] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1060.254407][T12963] ldm_validate_partition_table(): Disk read failed. [ 1060.279034][T12963] Dev nbd0: unable to read RDB block 0 [ 1060.299946][ T5854] usb 7-1: config 0 has no interface number 0 [ 1060.311724][T12963] nbd0: unable to read partition table [ 1061.104018][ T5854] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1061.133856][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.175202][ T5854] usb 7-1: Product: syz [ 1061.179441][ T5854] usb 7-1: Manufacturer: syz [ 1061.210236][T12963] ldm_validate_partition_table(): Disk read failed. [ 1061.254682][ T5854] usb 7-1: SerialNumber: syz [ 1061.284843][T12963] Dev nbd0: unable to read RDB block 0 [ 1061.313632][ T5854] usb 7-1: config 0 descriptor?? [ 1061.357864][T12963] nbd0: unable to read partition table [ 1061.635969][ T5854] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1062.488598][ T5854] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1062.595312][ T5854] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1062.648951][ T5854] usb 7-1: media controller created [ 1062.839763][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1062.971417][ T5854] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1063.165392][ T5854] usb 7-1: USB disconnect, device number 31 [ 1063.636116][T14940] gre1: entered allmulticast mode [ 1065.622933][T14955] syz.2.1761: attempt to access beyond end of device [ 1065.622933][T14955] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1065.637571][T14955] efs: cannot read volume header [ 1068.692635][T14963] tipc: Started in network mode [ 1072.275447][T14963] tipc: Node identity ee9777e860e9, cluster identity 4711 [ 1072.484363][T14963] tipc: Enabled bearer , priority 0 [ 1072.755714][T14976] syzkaller0: entered promiscuous mode [ 1072.761337][T14976] syzkaller0: entered allmulticast mode [ 1073.615852][T12593] tipc: Node number set to 2390652904 [ 1074.609135][T14977] tipc: Resetting bearer [ 1074.798231][T14977] tipc: Disabling bearer [ 1079.445790][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1081.380485][ T6279] Process accounting resumed [ 1082.055744][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1082.090412][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1082.105622][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1082.131876][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1082.141208][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1082.329012][T15048] lo speed is unknown, defaulting to 1000 [ 1084.245803][ T51] Bluetooth: hci4: command tx timeout [ 1085.536008][T15085] overlayfs: missing 'lowerdir' [ 1086.596033][ T51] Bluetooth: hci4: command tx timeout [ 1087.510462][T15092] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1087.517253][T15092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1087.537441][T15092] vhci_hcd vhci_hcd.0: Device attached [ 1087.568754][T15093] vhci_hcd: connection closed [ 1087.611494][ T6017] vhci_hcd: stop threads [ 1087.661980][ T6017] vhci_hcd: release socket [ 1087.697511][ T6017] vhci_hcd: disconnect device [ 1087.878607][ T6279] vhci_hcd: vhci_device speed not set [ 1087.949232][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.057876][T15048] chnl_net:caif_netlink_parms(): no params data found [ 1088.172028][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.527223][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.696781][ T5156] Bluetooth: hci4: command tx timeout [ 1089.461135][T15127] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1792'. [ 1089.699178][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.725584][ T5156] Bluetooth: hci4: command tx timeout [ 1092.634616][T15048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.665278][T15048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.672712][T15048] bridge_slave_0: entered allmulticast mode [ 1092.874478][T15048] bridge_slave_0: entered promiscuous mode [ 1093.773631][T15048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.792953][T15048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.832555][T15048] bridge_slave_1: entered allmulticast mode [ 1093.920175][T15048] bridge_slave_1: entered promiscuous mode [ 1094.650418][T15172] bridge0: port 3(gretap0) entered blocking state [ 1094.732541][T15172] bridge0: port 3(gretap0) entered disabled state [ 1094.802512][T15172] gretap0: entered allmulticast mode [ 1094.903400][T15172] gretap0: entered promiscuous mode [ 1094.936031][T15172] bridge0: port 3(gretap0) entered blocking state [ 1094.943233][T15172] bridge0: port 3(gretap0) entered forwarding state [ 1096.112377][T15048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.174166][T15170] gretap0: left allmulticast mode [ 1096.189603][T15170] gretap0: left promiscuous mode [ 1096.206505][T15170] bridge0: port 3(gretap0) entered disabled state [ 1096.505369][T15048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.515013][ T36] bridge_slave_1: left allmulticast mode [ 1096.552578][ T36] bridge_slave_1: left promiscuous mode [ 1096.608895][T15194] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1803'. [ 1096.708575][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.927493][ T36] bridge_slave_0: left allmulticast mode [ 1096.945004][ T36] bridge_slave_0: left promiscuous mode [ 1096.991017][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.761678][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.786413][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.810680][ T36] bond0 (unregistering): Released all slaves [ 1099.892738][T15204] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1100.073220][T15048] team0: Port device team_slave_0 added [ 1100.097165][T15048] team0: Port device team_slave_1 added [ 1101.664848][ T36] tipc: Left network mode [ 1101.781182][T15048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.925173][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.978082][T15048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.001516][T15048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.066320][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.103720][T15239] input input34: cannot allocate more than FF_MAX_EFFECTS effects [ 1102.323594][T15048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.473743][T15243] netlink: 'syz.2.1810': attribute type 10 has an invalid length. [ 1103.174960][T15243] hsr0: entered promiscuous mode [ 1103.194431][T15243] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1103.206237][T15243] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1103.219684][T15243] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1104.989529][T15263] hpfs: Bad magic ... probably not HPFS [ 1105.498102][T15048] hsr_slave_0: entered promiscuous mode [ 1105.507712][T15268] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1815'. [ 1105.529241][T15048] hsr_slave_1: entered promiscuous mode [ 1105.584441][T15048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.595121][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1815'. [ 1105.614872][T15048] Cannot create hsr debugfs directory [ 1105.725499][T15268] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1815'. [ 1105.755338][T15268] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1815'. [ 1105.893009][ T36] hsr_slave_0: left promiscuous mode [ 1105.913810][ T36] hsr_slave_1: left promiscuous mode [ 1105.927668][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.935871][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.099098][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.099899][T15275] overlayfs: failed to get inode (-116) [ 1106.113341][T15275] overlayfs: failed to look up (bus) for ino (-116) [ 1106.117364][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.077235][ T36] veth1_macvtap: left promiscuous mode [ 1107.083132][ T36] veth0_macvtap: left promiscuous mode [ 1107.141679][ T36] veth1_vlan: left promiscuous mode [ 1107.169103][ T36] veth0_vlan: left promiscuous mode [ 1107.500148][T15286] hub 6-0:1.0: USB hub found [ 1107.515477][T15286] hub 6-0:1.0: 1 port detected [ 1109.791035][T12593] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1109.945659][T12593] usb 1-1: Using ep0 maxpacket: 8 [ 1110.894603][T12593] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1110.903426][T12593] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1110.922285][T12593] usb 1-1: can't read configurations, error -71 [ 1111.002239][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1111.052958][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1112.886175][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1115.463499][T15345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1830'. [ 1115.938577][T15350] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1832'. [ 1119.745741][T15376] Cannot find del_set index 286 as target [ 1121.139310][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.145749][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.683067][T15392] hfs: unable to load iocharset "io#harset" [ 1122.553245][T15048] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1123.154638][T15048] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1123.234195][T15048] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1123.560481][T15048] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1125.579547][T15048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.684703][T15444] ubi31: detaching mtd0 [ 1126.308844][T15048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.481351][T15444] ubi31: mtd0 is detached [ 1126.497520][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.504762][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.536146][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.543342][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.552015][T15451] comedi comedi0: pcl711: I/O port conflict (0x2,16) [ 1127.242563][T15048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1129.015298][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 1131.170744][T15048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.025338][T15513] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1860'. [ 1138.344762][T15048] veth0_vlan: entered promiscuous mode [ 1138.455611][T15048] veth1_vlan: entered promiscuous mode [ 1138.905429][T15048] veth0_macvtap: entered promiscuous mode [ 1139.677154][T15551] netlink: 'syz.5.1867': attribute type 4 has an invalid length. [ 1142.232910][T15565] sd 0:0:1:0: device reset [ 1142.888652][T15570] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1142.897610][T15570] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1144.258403][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1144.326338][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1144.432997][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1144.460913][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1144.494556][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1146.735335][ T5156] Bluetooth: hci5: command tx timeout [ 1147.532001][T15584] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1148.124368][T15574] lo speed is unknown, defaulting to 1000 [ 1148.805581][ T5156] Bluetooth: hci5: command tx timeout [ 1149.788483][T15619] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 1150.896770][ T5156] Bluetooth: hci5: command tx timeout [ 1151.240383][T15638] netlink: 'syz.0.1883': attribute type 2 has an invalid length. [ 1151.736655][ T30] audit: type=1326 audit(1755276025.803:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1151.852409][T15642] o2cb: This node has not been configured. [ 1151.858552][T15642] o2cb: Cluster check failed. Fix errors before retrying. [ 1151.875575][T15642] (syz.6.1885,15642,0):user_dlm_register:674 ERROR: status = -22 [ 1151.883430][T15642] (syz.6.1885,15642,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1152.375644][ T30] audit: type=1326 audit(1755276025.813:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1152.498580][ T30] audit: type=1326 audit(1755276025.813:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1152.561586][ T30] audit: type=1326 audit(1755276025.813:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1152.672043][ T30] audit: type=1326 audit(1755276025.813:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1152.695752][T12593] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1152.993864][ T5156] Bluetooth: hci5: command tx timeout [ 1152.994704][ T30] audit: type=1326 audit(1755276025.813:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1153.435781][T12593] usb 6-1: Using ep0 maxpacket: 32 [ 1153.467529][ T30] audit: type=1326 audit(1755276025.813:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1153.474030][T12593] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1153.652972][T12593] usb 6-1: config 0 has no interface number 0 [ 1153.699449][ T30] audit: type=1326 audit(1755276025.833:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1153.722220][T12593] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1153.773218][ T30] audit: type=1326 audit(1755276025.843:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1153.800199][ T30] audit: type=1326 audit(1755276025.843:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.6.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70118ebe9 code=0x7ffc0000 [ 1153.827318][T12593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.985265][T12593] usb 6-1: Product: syz [ 1154.005154][T12593] usb 6-1: Manufacturer: syz [ 1154.028794][T12593] usb 6-1: SerialNumber: syz [ 1154.075175][T12593] usb 6-1: config 0 descriptor?? [ 1154.090902][T12593] smsc95xx v2.0.0 [ 1155.056888][T12593] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1155.100961][T12593] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1155.179275][T15574] chnl_net:caif_netlink_parms(): no params data found [ 1155.368953][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.396222][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.518485][T15685] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1893'. [ 1155.628212][ T36] bridge_slave_1: left allmulticast mode [ 1155.635482][ T36] bridge_slave_1: left promiscuous mode [ 1155.641383][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.670889][T15646] netlink: 'syz.5.1886': attribute type 5 has an invalid length. [ 1155.767624][ T36] bridge_slave_0: left allmulticast mode [ 1155.773465][ T36] bridge_slave_0: left promiscuous mode [ 1155.789798][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.000541][T12593] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1156.043550][T12593] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1156.105411][T12593] usb 6-1: USB disconnect, device number 8 [ 1158.625142][T15714] (syz.5.1897,15714,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1158.634071][T15714] (syz.5.1897,15714,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1160.172251][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.197348][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.219033][ T36] bond0 (unregistering): Released all slaves [ 1160.339130][T15720] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1160.348817][T15720] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1160.610906][T15574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.680484][T15574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.715577][T15574] bridge_slave_0: entered allmulticast mode [ 1160.760807][T15574] bridge_slave_0: entered promiscuous mode [ 1161.280701][T15574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.325437][T15574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.363393][T15574] bridge_slave_1: entered allmulticast mode [ 1161.371689][T15574] bridge_slave_1: entered promiscuous mode [ 1161.591637][T15752] netlink: 'syz.2.1903': attribute type 4 has an invalid length. [ 1161.687178][T15754] netlink: 'syz.2.1903': attribute type 4 has an invalid length. [ 1161.775867][ T36] hsr_slave_0: left promiscuous mode [ 1161.805972][ T36] hsr_slave_1: left promiscuous mode [ 1161.830176][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.879019][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.944407][ T36] veth0_macvtap: left promiscuous mode [ 1161.961173][ T36] veth1_vlan: left promiscuous mode [ 1161.990073][ T36] veth0_vlan: left promiscuous mode [ 1162.893003][T15768] netlink: 'syz.0.1904': attribute type 3 has an invalid length. [ 1163.165433][ T9220] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1163.315507][ T9220] usb 1-1: Using ep0 maxpacket: 16 [ 1163.329315][ T9220] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1163.345318][ T9220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.375373][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1163.394960][ T9220] usb 1-1: Product: syz [ 1163.404760][ T9220] usb 1-1: Manufacturer: syz [ 1163.411921][ T9220] usb 1-1: SerialNumber: syz [ 1163.423174][ T9220] usb 1-1: config 0 descriptor?? [ 1163.478099][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1163.848765][ T9220] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1163.882507][ T9220] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1163.909014][ T9220] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1163.917260][ T9220] usb 1-1: media controller created [ 1163.979627][ T9220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.566950][ T9220] zl10353_read_register: readreg error (reg=127, ret==0) [ 1164.574189][T15768] dtv5100: wlen = 0, aborting. [ 1164.614939][ T9220] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1164.635164][ T9220] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1164.727594][ T9220] usb 1-1: USB disconnect, device number 38 [ 1164.898325][T15759] netlink: 'syz.2.1903': attribute type 3 has an invalid length. [ 1164.928048][ T9220] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1164.966848][T15574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.044248][T15574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.084529][T15574] team0: Port device team_slave_0 added [ 1170.706352][T15574] team0: Port device team_slave_1 added [ 1170.909157][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1170.909178][ T30] audit: type=1326 audit(1755276044.853:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15823 comm="syz.0.1911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f887638ebe9 code=0x0 [ 1171.074851][T15831] tmpfs: Unknown parameter 'y8vO' [ 1173.216904][T15574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.245256][T15574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.272978][T15574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.287771][T15574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.295915][T15574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.323193][T15574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.904463][T15574] hsr_slave_0: entered promiscuous mode [ 1176.228032][T15574] hsr_slave_1: entered promiscuous mode [ 1176.244366][T15574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1176.252257][T15574] Cannot create hsr debugfs directory [ 1177.086623][T15882] Bluetooth: hci4: Frame reassembly failed (-84) [ 1177.966759][T15868] Falling back ldisc for ttyS3. [ 1178.494957][T15891] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1178.501557][T15891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1178.661487][T15891] vhci_hcd vhci_hcd.0: Device attached [ 1178.847085][T15899] netlink: 'syz.5.1925': attribute type 1 has an invalid length. [ 1178.857156][T15899] netlink: 'syz.5.1925': attribute type 2 has an invalid length. [ 1178.864955][T15899] netlink: 'syz.5.1925': attribute type 2 has an invalid length. [ 1179.045342][ T5926] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1179.686774][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 1179.692124][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1179.951440][T15892] vhci_hcd: connection reset by peer [ 1179.965783][ T36] vhci_hcd: stop threads [ 1179.970113][ T36] vhci_hcd: release socket [ 1180.015122][ T36] vhci_hcd: disconnect device [ 1180.695823][T15897] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1180.707987][T15897] bond0: (slave lo): Error: Device type is different from other slaves [ 1182.492930][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.499387][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.474793][T15574] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1183.752104][T15574] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1183.814093][T15574] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1183.852444][T15574] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1184.235168][ T5926] vhci_hcd: vhci_device speed not set [ 1186.321737][ T30] audit: type=1800 audit(1755276060.093:155): pid=15967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1936" name="bus" dev="overlay" ino=325 res=0 errno=0 [ 1186.987667][T15574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.184707][T15574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.896035][T15977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1937'. [ 1187.941146][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.948442][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.960839][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.968085][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.019293][T15574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.055510][ T64] Bluetooth: hci4: Frame reassembly failed (-84) [ 1194.085165][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 1194.088062][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1194.419046][T15574] veth0_vlan: entered promiscuous mode [ 1195.290898][T15574] veth1_vlan: entered promiscuous mode [ 1195.367005][T15574] veth0_macvtap: entered promiscuous mode [ 1195.429257][T15574] veth1_macvtap: entered promiscuous mode [ 1195.532440][T15574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.572970][T15574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.608869][T15574] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.638322][T16051] mkiss: ax0: crc mode is auto. [ 1195.680339][T15574] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.735363][T15574] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.767223][T15574] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.077411][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.180082][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.753213][ T6620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.799582][ T6620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.404298][T16084] can0: slcan on ttyS3. [ 1199.625644][T16084] can0 (unregistered): slcan off ttyS3. [ 1201.825751][T16109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1960'. [ 1202.912640][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1962'. [ 1202.932421][T16113] netlink: 'syz.5.1962': attribute type 11 has an invalid length. [ 1202.940447][T16113] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1962'. [ 1204.076285][T12670] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1204.984537][T16122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.995925][T16122] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1205.154846][T12670] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1205.179001][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1205.196804][T12670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.205226][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1205.214557][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1205.237045][T12670] usb 3-1: config 0 descriptor?? [ 1205.243152][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1205.254130][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1205.658595][T12670] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1206.077672][T16133] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1965'. [ 1206.080111][T16124] lo speed is unknown, defaulting to 1000 [ 1206.086822][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1965'. [ 1206.086851][T16133] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1965'. [ 1206.086898][T16133] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1965'. [ 1206.139426][T12670] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1206.325363][T12670] [drm] Initialized udl on minor 2 [ 1206.340828][T12670] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1206.440930][T12670] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1206.673305][ T5953] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1206.685410][T12670] usb 3-1: USB disconnect, device number 15 [ 1206.712754][ T5953] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1207.494914][ T51] Bluetooth: hci4: command tx timeout [ 1209.462258][T16161] fuse: Bad value for 'user_id' [ 1209.467390][T16161] fuse: Bad value for 'user_id' [ 1209.527847][ T51] Bluetooth: hci4: command tx timeout [ 1209.993849][T16168] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 1211.086487][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.605267][ T51] Bluetooth: hci4: command tx timeout [ 1212.881706][T16188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.685251][ T51] Bluetooth: hci4: command tx timeout [ 1213.891458][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.865619][T16189] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1214.875871][T16189] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1215.268504][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.363569][T16203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.630093][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.855793][T16218] qnx4: no qnx4 filesystem (no root dir). [ 1218.431395][T16124] chnl_net:caif_netlink_parms(): no params data found [ 1218.619284][T16222] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1218.750133][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'. [ 1221.855122][T16250] PKCS8: Unsupported PKCS#8 version [ 1224.263888][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.345480][T16124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.352808][T16124] bridge_slave_0: entered allmulticast mode [ 1224.378040][T16124] bridge_slave_0: entered promiscuous mode [ 1224.397381][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.404902][T16124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.418655][T16124] bridge_slave_1: entered allmulticast mode [ 1224.562435][T16124] bridge_slave_1: entered promiscuous mode [ 1224.609701][T16270] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1224.618722][T16270] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1225.062466][T16124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.299254][T16124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.101806][T16124] team0: Port device team_slave_0 added [ 1228.112547][T16124] team0: Port device team_slave_1 added [ 1229.415810][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.422837][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.533579][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.570709][ T13] bridge_slave_1: left allmulticast mode [ 1229.614314][ T13] bridge_slave_1: left promiscuous mode [ 1229.655385][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.770002][ T13] bridge_slave_0: left allmulticast mode [ 1229.972523][ T13] bridge_slave_0: left promiscuous mode [ 1229.987262][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.183497][T16337] ubi31: attaching mtd0 [ 1232.228286][T16337] ubi31: scanning is finished [ 1232.751749][T16337] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1236.331966][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.353837][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.367722][ T13] bond0 (unregistering): Released all slaves [ 1236.782501][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1236.843152][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1236.862974][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1237.008567][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.020802][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.033120][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1237.055354][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1237.105674][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.444815][T16351] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1237.453930][T16351] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1238.477568][T16124] hsr_slave_0: entered promiscuous mode [ 1238.483943][T16124] hsr_slave_1: entered promiscuous mode [ 1238.562293][T16124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1238.592736][T16124] Cannot create hsr debugfs directory [ 1239.395095][ T5156] Bluetooth: hci5: command tx timeout [ 1240.495702][T16384] smc: net device bond0 applied user defined pnetid SYZ2 [ 1240.625922][T16394] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1241.165274][ T5953] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1241.389729][ T5953] usb 7-1: Using ep0 maxpacket: 32 [ 1241.428834][ T5953] usb 7-1: config 0 has an invalid interface number: 63 but max is 0 [ 1241.445119][ T5156] Bluetooth: hci5: command tx timeout [ 1242.404590][ T5953] usb 7-1: config 0 has no interface number 0 [ 1242.421261][ T5953] usb 7-1: config 0 interface 63 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1242.499648][T16401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1242.945635][ T5953] usb 7-1: config 0 interface 63 has no altsetting 0 [ 1242.965984][ T5953] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0023, bcdDevice=40.69 [ 1242.975157][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.983143][ T5953] usb 7-1: Product: syz [ 1242.995617][ T5953] usb 7-1: Manufacturer: syz [ 1243.000308][ T5953] usb 7-1: SerialNumber: syz [ 1243.008396][ T5953] usb 7-1: config 0 descriptor?? [ 1243.016476][ T5953] kvaser_usb 7-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 1244.070076][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.085274][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.095140][ T5156] Bluetooth: hci5: command tx timeout [ 1244.620332][ T5926] usb 7-1: USB disconnect, device number 33 [ 1244.709813][T16364] lo speed is unknown, defaulting to 1000 [ 1246.245623][ T5156] Bluetooth: hci5: command tx timeout [ 1246.478469][ T13] hsr_slave_0: left promiscuous mode [ 1246.500833][ T13] hsr_slave_1: left promiscuous mode [ 1246.523988][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1247.473369][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.484812][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1247.521207][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.988681][ T13] veth1_macvtap: left promiscuous mode [ 1248.026772][ T13] veth0_macvtap: left promiscuous mode [ 1248.065967][ T13] veth1_vlan: left promiscuous mode [ 1248.096746][ T13] veth0_vlan: left promiscuous mode [ 1248.247979][T16436] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2015'. [ 1251.163099][T16452] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 1253.084066][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2022'. [ 1253.546674][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1253.601614][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1255.436413][T16482] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2024'. [ 1257.300699][T16480] bpq0: entered allmulticast mode [ 1257.733258][T16496] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1257.742842][T16496] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1258.184852][T16509] No control pipe specified [ 1259.051435][T16503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1260.813773][T16499] QAT: Device 7 not found [ 1260.862839][T16524] ip6erspan0: entered promiscuous mode [ 1261.327209][T16534] autofs: Unknown parameter './file0' [ 1261.598599][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2032'. [ 1263.581304][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.036265][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1264.067352][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1264.079649][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1264.137243][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1264.150643][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1264.236758][T12670] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1264.651481][T12670] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1264.660340][T12670] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1264.673847][T12670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.695761][T12670] usb 1-1: Product: syz [ 1264.703545][T12670] usb 1-1: Manufacturer: syz [ 1264.715116][T12670] usb 1-1: SerialNumber: syz [ 1264.786861][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.823314][T16364] chnl_net:caif_netlink_parms(): no params data found [ 1265.175617][T12670] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1265.521292][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.269968][ T51] Bluetooth: hci3: command tx timeout [ 1266.359432][T16580] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2041'. [ 1267.291238][ T5953] usb 1-1: USB disconnect, device number 39 [ 1267.340764][ T5953] usblp0: removed [ 1267.560724][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.681276][T16594] hub 6-0:1.0: USB hub found [ 1267.691754][T16594] hub 6-0:1.0: 1 port detected [ 1267.812480][T16364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.837671][T16574] syz.5.2040 (16574) used greatest stack depth: 17032 bytes left [ 1267.885346][T16364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.349532][ T51] Bluetooth: hci3: command tx timeout [ 1268.365577][T16364] bridge_slave_0: entered allmulticast mode [ 1268.416498][T16364] bridge_slave_0: entered promiscuous mode [ 1268.473405][T16364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.500103][T16364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.520529][T16364] bridge_slave_1: entered allmulticast mode [ 1268.688043][T16608] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1269.806244][T16364] bridge_slave_1: entered promiscuous mode [ 1270.052916][T16559] lo speed is unknown, defaulting to 1000 [ 1270.072612][T16364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.144594][ T1210] libceph: connect (1)[c::]:6789 error -101 [ 1270.152744][ T1210] libceph: mon0 (1)[c::]:6789 connect error [ 1270.155407][ T5854] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1270.204477][T16619] ceph: No mds server is up or the cluster is laggy [ 1270.244546][T16364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.359638][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 1270.389836][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.405175][ T51] Bluetooth: hci3: command tx timeout [ 1270.461406][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1270.498357][ T5854] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1270.551412][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.593379][ T5854] usb 1-1: Product: syz [ 1270.607160][ T5854] usb 1-1: Manufacturer: syz [ 1270.611837][ T5854] usb 1-1: SerialNumber: syz [ 1270.630645][ T5854] usb 1-1: config 0 descriptor?? [ 1270.799966][T16631] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1270.811221][T16631] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1270.860945][T16364] team0: Port device team_slave_0 added [ 1271.179464][T16638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.190011][T16638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.026944][ T51] Bluetooth: hci3: command tx timeout [ 1274.124076][ T1210] usb 1-1: USB disconnect, device number 40 [ 1274.456792][T16645] hub 6-0:1.0: USB hub found [ 1274.463223][T16645] hub 6-0:1.0: 1 port detected [ 1275.138873][T16364] team0: Port device team_slave_1 added [ 1275.332818][ T13] bridge_slave_1: left allmulticast mode [ 1275.372713][ T13] bridge_slave_1: left promiscuous mode [ 1276.347901][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.587109][T16662] netlink: 'syz.5.2053': attribute type 8 has an invalid length. [ 1276.872620][ T13] bridge_slave_0: left allmulticast mode [ 1276.896073][ T13] bridge_slave_0: left promiscuous mode [ 1276.902375][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.601730][ T13] ------------[ cut here ]------------ [ 1277.607860][ T13] WARNING: CPU: 1 PID: 13 at net/ipv6/route.c:4856 rt6_multipath_rebalance+0x455/0x8b0 [ 1277.617667][ T13] Modules linked in: [ 1277.622026][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1277.632097][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1277.642273][ T13] Workqueue: netns cleanup_net [ 1277.647122][ T13] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 1277.653486][ T13] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 dd 6d 02 f8 e9 78 fe ff ff e8 23 87 a2 f7 eb 05 e8 1c 87 a2 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1277.673335][ T13] RSP: 0018:ffffc90000126f60 EFLAGS: 00010293 [ 1277.679452][ T13] RAX: ffffffff8a1d9e9d RBX: ffff88805f8c1400 RCX: ffff88801ba88000 [ 1277.687474][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1277.695484][ T13] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1277.703466][ T13] R10: dffffc0000000000 R11: fffff52000024de4 R12: ffff88805aefd4de [ 1277.711474][ T13] R13: ffff88805f8c1490 R14: 0000000000000000 R15: 1ffff1100bf18292 [ 1277.719487][ T13] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 1277.728562][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1277.735195][ T13] CR2: 000020000001f000 CR3: 0000000025164000 CR4: 00000000003526f0 [ 1277.743182][ T13] Call Trace: [ 1277.746500][ T13] [ 1277.749449][ T13] fib6_ifdown+0x401/0x4c0 [ 1277.753890][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 1277.758872][ T13] fib6_clean_node+0x24d/0x590 [ 1277.763664][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 1277.768987][ T13] ? __lock_acquire+0xab9/0xd20 [ 1277.773849][ T13] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1277.779267][ T13] fib6_walk_continue+0x678/0x910 [ 1277.784317][ T13] fib6_walk+0x149/0x290 [ 1277.788612][ T13] __fib6_clean_all+0x234/0x380 [ 1277.793483][ T13] ? __fib6_clean_all+0x9b/0x380 [ 1277.798462][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 1277.803501][ T13] ? __pfx___fib6_clean_all+0x10/0x10 [ 1277.808910][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 1277.814233][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 1277.819340][ T13] rt6_disable_ip+0x120/0x720 [ 1277.824039][ T13] ? rcu_is_watching+0x15/0xb0 [ 1277.829795][ T13] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1277.835066][ T13] addrconf_ifdown+0x15d/0x1880 [ 1277.839937][ T13] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1277.845616][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 1277.850663][ T13] ? tls_dev_event+0x717/0xec0 [ 1277.855460][ T13] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1277.860769][ T13] addrconf_notify+0x1bc/0x1010 [ 1277.865673][ T13] notifier_call_chain+0x1b3/0x3e0 [ 1277.870819][ T13] dev_close_many+0x29c/0x410 [ 1277.875536][ T13] ? __pfx_dev_close_many+0x10/0x10 [ 1277.880749][ T13] ? call_rcu+0x6ff/0x9c0 [ 1277.885123][ T13] unregister_netdevice_many_notify+0x834/0x2320 [ 1277.891493][ T13] ? __lock_acquire+0xab9/0xd20 [ 1277.896377][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1277.903155][ T13] ? unregister_netdevice_queue+0x1b3/0x380 [ 1277.909080][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1277.915349][ T13] ? net_generic+0x1e/0x240 [ 1277.919868][ T13] ? net_generic+0x1e/0x240 [ 1277.924429][ T13] ops_undo_list+0x3dc/0x990 [ 1277.929063][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 1277.934192][ T13] cleanup_net+0x4c5/0x800 [ 1277.938662][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 1277.943621][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 1277.948860][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 1277.954596][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 1277.960346][ T13] process_scheduled_works+0xade/0x17b0 [ 1277.965942][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 1277.971962][ T13] worker_thread+0x8a0/0xda0 [ 1277.976622][ T13] kthread+0x70e/0x8a0 [ 1277.980714][ T13] ? __pfx_worker_thread+0x10/0x10 [ 1277.985868][ T13] ? __pfx_kthread+0x10/0x10 [ 1277.990472][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 1277.995714][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 1278.000928][ T13] ? __pfx_kthread+0x10/0x10 [ 1278.005553][ T13] ret_from_fork+0x3fc/0x770 [ 1278.010235][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 1278.015559][ T13] ? __switch_to_asm+0x39/0x70 [ 1278.020333][ T13] ? __switch_to_asm+0x33/0x70 [ 1278.025127][ T13] ? __pfx_kthread+0x10/0x10 [ 1278.029727][ T13] ret_from_fork_asm+0x1a/0x30 [ 1278.034531][ T13] [ 1278.037598][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1278.044879][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1278.054777][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1278.064838][ T13] Workqueue: netns cleanup_net [ 1278.069621][ T13] Call Trace: [ 1278.072911][ T13] [ 1278.075847][ T13] dump_stack_lvl+0x99/0x250 [ 1278.080466][ T13] ? __asan_memcpy+0x40/0x70 [ 1278.085070][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1278.090274][ T13] ? __pfx__printk+0x10/0x10 [ 1278.094888][ T13] panic+0x2db/0x790 [ 1278.098798][ T13] ? __pfx_panic+0x10/0x10 [ 1278.103220][ T13] ? show_trace_log_lvl+0x4fb/0x550 [ 1278.108435][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 1278.113387][ T13] __warn+0x31b/0x4b0 [ 1278.117375][ T13] ? rt6_multipath_rebalance+0x455/0x8b0 [ 1278.123039][ T13] ? rt6_multipath_rebalance+0x455/0x8b0 [ 1278.128687][ T13] report_bug+0x2be/0x4f0 [ 1278.133017][ T13] ? rt6_multipath_rebalance+0x455/0x8b0 [ 1278.138658][ T13] ? rt6_multipath_rebalance+0x455/0x8b0 [ 1278.144299][ T13] ? rt6_multipath_rebalance+0x457/0x8b0 [ 1278.149953][ T13] handle_bug+0x84/0x160 [ 1278.154210][ T13] exc_invalid_op+0x1a/0x50 [ 1278.158731][ T13] asm_exc_invalid_op+0x1a/0x20 [ 1278.163607][ T13] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 1278.169887][ T13] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 dd 6d 02 f8 e9 78 fe ff ff e8 23 87 a2 f7 eb 05 e8 1c 87 a2 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1278.189687][ T13] RSP: 0018:ffffc90000126f60 EFLAGS: 00010293 [ 1278.195852][ T13] RAX: ffffffff8a1d9e9d RBX: ffff88805f8c1400 RCX: ffff88801ba88000 [ 1278.203847][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1278.211817][ T13] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1278.219787][ T13] R10: dffffc0000000000 R11: fffff52000024de4 R12: ffff88805aefd4de [ 1278.227763][ T13] R13: ffff88805f8c1490 R14: 0000000000000000 R15: 1ffff1100bf18292 [ 1278.235876][ T13] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 1278.241645][ T13] fib6_ifdown+0x401/0x4c0 [ 1278.246081][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 1278.251119][ T13] fib6_clean_node+0x24d/0x590 [ 1278.255921][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 1278.261229][ T13] ? __lock_acquire+0xab9/0xd20 [ 1278.266085][ T13] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1278.271483][ T13] fib6_walk_continue+0x678/0x910 [ 1278.276618][ T13] fib6_walk+0x149/0x290 [ 1278.280864][ T13] __fib6_clean_all+0x234/0x380 [ 1278.285718][ T13] ? __fib6_clean_all+0x9b/0x380 [ 1278.290658][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 1278.295609][ T13] ? __pfx___fib6_clean_all+0x10/0x10 [ 1278.300992][ T13] ? __pfx_fib6_clean_node+0x10/0x10 [ 1278.306284][ T13] ? __pfx_fib6_ifdown+0x10/0x10 [ 1278.311244][ T13] rt6_disable_ip+0x120/0x720 [ 1278.315951][ T13] ? rcu_is_watching+0x15/0xb0 [ 1278.320718][ T13] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1278.325935][ T13] addrconf_ifdown+0x15d/0x1880 [ 1278.330792][ T13] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1278.336428][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 1278.341508][ T13] ? tls_dev_event+0x717/0xec0 [ 1278.346308][ T13] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1278.351692][ T13] addrconf_notify+0x1bc/0x1010 [ 1278.356596][ T13] notifier_call_chain+0x1b3/0x3e0 [ 1278.361734][ T13] dev_close_many+0x29c/0x410 [ 1278.366432][ T13] ? __pfx_dev_close_many+0x10/0x10 [ 1278.371653][ T13] ? call_rcu+0x6ff/0x9c0 [ 1278.376013][ T13] unregister_netdevice_many_notify+0x834/0x2320 [ 1278.382359][ T13] ? __lock_acquire+0xab9/0xd20 [ 1278.387225][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1278.394004][ T13] ? unregister_netdevice_queue+0x1b3/0x380 [ 1278.399924][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1278.406169][ T13] ? net_generic+0x1e/0x240 [ 1278.410680][ T13] ? net_generic+0x1e/0x240 [ 1278.415205][ T13] ops_undo_list+0x3dc/0x990 [ 1278.419817][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 1278.425059][ T13] cleanup_net+0x4c5/0x800 [ 1278.429590][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 1278.434553][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 1278.439764][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 1278.445498][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 1278.451234][ T13] process_scheduled_works+0xade/0x17b0 [ 1278.456929][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 1278.462933][ T13] worker_thread+0x8a0/0xda0 [ 1278.467557][ T13] kthread+0x70e/0x8a0 [ 1278.471679][ T13] ? __pfx_worker_thread+0x10/0x10 [ 1278.476800][ T13] ? __pfx_kthread+0x10/0x10 [ 1278.481399][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 1278.486605][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 1278.491924][ T13] ? __pfx_kthread+0x10/0x10 [ 1278.496636][ T13] ret_from_fork+0x3fc/0x770 [ 1278.501957][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 1278.507121][ T13] ? __switch_to_asm+0x39/0x70 [ 1278.511908][ T13] ? __switch_to_asm+0x33/0x70 [ 1278.516704][ T13] ? __pfx_kthread+0x10/0x10 [ 1278.521319][ T13] ret_from_fork_asm+0x1a/0x30 [ 1278.526108][ T13] [ 1278.529532][ T13] Kernel Offset: disabled [ 1278.533892][ T13] Rebooting in 86400 seconds..