last executing test programs: 16m34.135791369s ago: executing program 0 (id=351): syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x800400) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 16m32.805736365s ago: executing program 0 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20) 16m31.636272988s ago: executing program 0 (id=356): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2ac8c0, 0x0) ioctl$COMEDI_UNLOCK(r0, 0x6406) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x8dffffff, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="0e", 0x1}], 0x1}, {0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d0477c72b0a1987519d2fabb8fb5c6dbb09a84879f98172916d440bf895ef832c594dc4755490505d438e3a0a4bb0d5be92d72f0d988ec6f980c1d5e7fb5e56e1560ab03bab7a789e32f5409a18ee8c923206aa3c5c7", 0x56}], 0x1, &(0x7f0000000900), 0x0, 0x4000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc040800}, {0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000000}], 0x4, 0x8004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000002180)=""/4101, 0x1005, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c1000000000", 0x53}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010612b06d77e680ae0d1717e00cc6016915a44a3d99bcd1426366a4da581ef9"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2004090) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x2b, 0x8, 0x1e}, 0x2c) 16m30.005823945s ago: executing program 0 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, 0x2) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x57}) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x14, r2, 0xffffffffffffffff, 0x2000003, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x1000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b91f04076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16m23.93200659s ago: executing program 0 (id=374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000003840)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x2, 0x8, {@mac=@random="a0423ecebbbc", {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x800, 0x5, 0x4, 0x7, 0x10, 'erspan0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0x70d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @multicast1, 0xff000000, 0x0, 0x1, 0x0, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x7, 0xfffb, 0x1, 0x3, 0x5, 0x6, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="59a2f242dbf9", @mac=@random="6480059adaaa", @multicast1, @multicast2, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xde4, 0xd, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000100)='reno\x00', 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="120000000000000026916b1b4c1c4b4c178363a0000000000000000034d3389fb2650b2cbea28abb97e2433143f3e915d6eba477d962edd7b6ab898312509171abb85a82b6e93f2c1e9aacfb5a1ad354e46d2adc0da94ef6153b76e1631ae2aaa036b817e0eead66fddd53921586ab2aeb", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) socket(0x10, 0x3, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688140032000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5f7", 0xb8) setrlimit(0xe, &(0x7f0000000040)={0x9, 0x7fff}) 16m22.665576723s ago: executing program 0 (id=375): syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80809, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) 16m6.3591754s ago: executing program 32 (id=375): syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80809, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) 51.573965285s ago: executing program 4 (id=1998): openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') clock_gettime(0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 50.347062654s ago: executing program 4 (id=2002): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f000001b000)=ANY=[@ANYBLOB="381200003300000126bd7000fddbdf253010fb801d101380783cabcf3de8f3c211caac293bfba1f6c66248e2705bfdeaf3e518701e75b6870e949c9efe541264de467766dfe253da80bc4601fddfb29d68a356ca39cba5bb876bdee1d1f6640bb64e313f030da7715e4e5f282235c21405e318614f33083a4b615d83fbc2757362a21e81598dd1c94f416f7fe0291ee066acb78990917d93450dc091617b2b9b856b762e98782567c7ae32d25d68ac22ba4415ab4e9411b60459b5fe04a16c83cb50e70b539e77b39213d9c96b5f0eaa04346eb659528defaefebc201f6fd8a70ef275ffc1ccaf61d56015c4bb63039c3b5db172b76ef8c834ae9df36f8764c27785f4098f8bbe8190e92a2f53d0e17cbd0e3150c8839cfd779a96807dfb84d6d424978b1060dc0fe13a00d526681c018bd90b954e1dd4f36787f6cf693c4a428c8cc5a6c0c77a940f5911f6191babbb44ddb0874a2e573d9a4c41cc89134dc1498259ae3da6f5e2bb40631050a2b28b86f43fa397c8cb73698f2625d966e2695db75c2d719077e59f4278644ce09c0b5cd873f4ce68a6d88819c0caf1c3b58612897c74636701d99260c2ed0e29392f96e6b46a5d8e4797d49f7db2400f81bbdfe7fedab277d090a977eb6d3143e34ab570975d403d9d5975d8a1b373d0322ea31faf954d8921cca83c962e55959bb2b82ab789e617a67200d503f89c88d6e8f04deb2773349669e22cdc62f0d6037bc11334f3b7f3c203866d39f6f2f15215fa9a707960c2f6d5229ee00a879a842724c9f633dcb55114d5b4ae228f59001fdea972a1e2893ca0f1855a3918dda375af22d6531cf30c28f84ab3f45d7893f65a9ac09cca966c896c79172b1f8b8da2af3c82ad641eb3db53966e1f670fa1f94465c356331e7a9e39be91d6b2719780109b8e0fae2ad2c85814892d2bdc40d650d54e75277ba22818857a3ce176b85f447a52d43e52d621422695ce1bbeaaa3611d296953b63f08238844704293e37334ef7dc826b87704ffa5e634c89fe70223869ef8484d0dbab21bf206fae62fa6b645ecd4f1f0ea1107ec9ae55882dd92b099da4cd71ab2493b81a3eee6f617dd53af22ff15b01e97689db12b6fe53f941207303d1e822a7b98303617efdaa4e844df85dac246617b3aff4cd0bb5db224a59fa4e7161c4862114cdec7a7b9f4ffcbd7e8a9dc761dc3368a0f37541463227ae5cf525441ab99b9ba09d70b4c2ad9719a5c48258398e77adb9d1f8dcc64d8d658cfcd1b5fef2669f1b2c19f0988268611a644f02f13b86377a9203c36091545f09d62c96c98732c2619cc81dbd4ca19dd62141ce8421dbc28de8b32fa91631b8957025c89812d5fdd72d79aa5d1f765aaa08317915d35ebdfc8a880923596ffbbe4bc6bbd81427869350d59a206c96c813efb25bade849f515e6b6a47c6ccb2131e60c8c05891ea8f065baf49459218c32257c13a82b423cee266dbf51f500ce996d76a723e662f3c3d2fddaff5c050f2ef2e17d0fafb0c42a82184201d8732fa4f1c370384fed4b0d8ee842f2de5523aed2e09e2c484f940a1736359711eb655bd00504e76f3c72f26970d3c05b00ea25803e8be24d7751baadfda870d3e0e64514f0b290a052071cd8f71a2c6ff4850b891c3f1818e0774794c46c62d511db9ee5b960404c866850602205b15b287e6d3279e6a5d1dce653ef770f68af6a16dfa552145e18dd0b185571f29542c24b753ee6ee5f5fb448afcfe643d540e7a120ebf36f2e4f3a30b46d8497ad69b5a55ee023709f640d44e1ba6a4da79579fbaf66676c8e2f60a1a8e3fe123a70b4604e75db29ee19bb8805e22195aeda6b0412c750e0043a53c673e24f9bf68544089b1bc8fe1763e0b157106cec5b21847eeea377c258bac16ff48a208b4c7d3cd1fcf410d22148beb6f95317061c1de7e2d87c448bc2c00069d2e886a7a37c4ced954d2b06ee6de91785a967d4dd117b83fdf7786133abd08ac3399ba7e6f521d933e14966ca444056c4289ec24c76b9eed38ceae0c5493dbe53c20063ac6f9290663cad2b4c73b5276bc5a17847e9098563928694a0316d7d73c4a439bd0fb91fdb520d9b92c5c686ed1122383012b84f4846f4d5e0c5fedf74c9c07ec64da1f2157feee49aa476a4d2b830f528f1c8bf8b7b76ecf7d2266ed1b9d8278a5923501cf134fb9e59f1ee9a5c1397387c2959e0743e634cc41782b57f8c7ea51525150c443066b352f84050fbfb72f55680f24461c791024efa74022caa8d58f1e9985e910f25aa92bfe756ab3eacf8079e7eb7f970165b3ff1bf1ca457ab5f4d9a1a08448ffca704fcee8030a7d8aca43ae64b0be45efd5151bcea83845720d210aa76ef748810e46ffb0cdb7bad706a24d6cb076171a6b79f5de5ac6b8190919a68b1b41b173914dd37d599f7a78587c4ee606b31949a88e6a790e000000008d32f05a22e68d22793282b716d151d9de60e24cc049e3bf4cce36fe43b5ea824a7b3c854860ceed13d466439263353e81940e7ded03f31211cc714f4cdf240516025f1f5621cced4b88a4e48c940d6f46ff2f57f0583046b650a440c4ea8e9fab79e98d7529db2f11cc7529bb361cf8cb65600ffb36eb5fd93acbdd58398ecbb0befd277e267051f93dc3e7c6a5212c2ed990eb60d9d451b4458cb44cd691dac77ece483236e3006b7f7913e39f685ca41bcd1692494370acb70d0cfdc9e6de0bcd602040a0bc2de02a8cd477fef88b5410f5dfea1cd32d25464853d56c82abd3c11caebd992ca656e88a10ca2779f887472d5064fddd7397eb0205c419b23c2756a3b9b722ff273907c50f8b176834edcc1268e036214a2a25651c719541a4f7729ef7e32dee27c5b910bfea677c562138b30b3355b462c8f910874acc292f6787f8d94fa1cb2e648789cc67d05eb49d6d3c8788a024e3c523c4ee282764090044b44f30a9848daf2522b76448ecb9249ffe58dad4363b1d08181131a89af718ecbd5ffe44e032ca26664eecabc9aa57a875b5964ea492b7e745606a3f4ab36130a8a43a19be74709dea4eeebf5e53706685122e6603247996d672dacdf1bbadf5df111cfe7e72f5b2c6cdc32c1e4eed30147c9a51c5abd4214c577c4c8d1725daf906d145c6ff2c9ab0fc3da4edfb92be40b4af234c2bc147b2d08a801b539928cb754f2f6d2d4280ee0c834ee4f5eb8b0662ffa6f7154307b0fe55fe248a3f953a09b06244674adbf31dd7489be3f26423140ffe98671ca413d678047096fcad53f5bca7e602354553af02c225a67e4e8eabf298495a99de9653638405ebe78dc75e6d16c39e1547dadbc07a014369e39175991368d05be623656c4ecb3735612546b9a9c1490f834cab7567e61c8b2669aa62f156f2ff3b76b32e11b0e0acb6c7ccd6623bef1a5ccbe5f477ae90b3918899fc6b6075c514deaf387d5f09cd59f3fb3c0a9614f1eec092a8f7c6bd200e04da47085d58adc08f1f0651f7ce0cea5792a30aa2bee9970913fc9e79bcf0b5c55adfa6967a44b84ffcd3ce7fb47a610773eb9323b8ab3b5b9670f3ddc06e673e5ebe929f1ae4508decd56a2cefc34bab4703bbd3d83fcfdc27fc4e8a799a34742526848f6aae932ec98959f46ea50f12e0ad3ba4ef50a7b4defdf2fcf8dd2afdb8f29a1b7eed384b17c8b4ff4cfc220745cef2c083615eee226bccb8f2b7faf5a8948e60edc37a644b70011ff8b608da74a3873b2d8a6ba50dcce8a5ed6fe96c599c6d0b8a431f0b96789e974ea48400b94c2d1fbb7a8908de838cc64d4de93d506dfb450012df4af40d5980aed567e0b94281f8109ae7cb42f8253783a9ccb1cdd07245b31c0a00f13b42eedea9dd6d031f283a277f140f7ccacffc4e76829fede0479d59a542f873524651dbed995a00749e1b06182f073ebc3122ef1b007436d9eeb89d4f82ad366361ae8bb54e795b5c3d0594ccab1d5019f4b9191fd7c84598c866a8f98b2759738a65af53943b466aec83bb055e8f6c6e7755862de6c4c203fa67663702783f5f19459620a99f4de75fc85efedc44cf65adaaead7038406ebc507048b115c44209057f887f204a60ad9f6abc9b7983b930be5115cd91de9723bef58d29e421e123c7fa19ac3de2900827041d096ce0d589d45159c322ff3529687b89a10dd6c628977aedb1547ab6630995b48edba0a6f0e9ce99166dd7acdab5253f6bd4c3891c45d6ce4cf136a77eb9a343569b57559215f79051388cff4761a3a63f6c73d8d7aafa8053e4f764f1c37b8b57128ecea00d7046c7532576bd413e01bf6df40bb1c3bf0480efbb1407003a98b1014552d2a1ecf99ba29c063ba96b3555cca24a211c2c604766a6b503a875040039f23f7ed46566519ee1aed0167c774555b623bee2bcfe83459af5527b312a19298e8323cd9b3fe5e075ee0867aadae8bc81939919d6d36834a87c1bf9e47d467395892aa09f12cfc172a2a9a44a43ff880219487798a206fbaca25172b3f00867d3f100f355ccb987bd0c41c015d791bae97c258ea4138a377fee51219e917893248391b7b2fa8d1bedc3ac71e5dd6ac382a0c8e0753f16bda800108d9dcbf9ccb192136b1cc555129afd8821b007543ff2d14f07003fe05cdd5fd133295c36bd44aca53c8fd91428fbd72951d4a97006636456baeac6c4d2f75d864e5aec7e738d865f2a0e5bdfadccc2486241fb38c024f981b08c8ad06bd48e99ee116c764d894f39e603949a4644ab2ed942d933876f16949c833f0bf1962b908087ff77b9318945edd47cf5c6b329e0dc403944fc9fc49e0c88f0177ba649ce61b4758ccdce20df2abbc45fec9e350286898d3fbc0ace3f75a5d8667438217ad564903ce64ee98e90ea770e431bec58c7d624278c5dc5955a555056be562308c7a003abdeb13456d43c245bcaa63c4ed17a4fb73cd53d890130322ad78c9b53073e7146ee8cc36f29f632c0e554dbcf161ab7a01badd56a0d84c8f337a2a3248c4ec96445158cb59060c352df81f6b85cccda5a0d737d44101a413d9edf5ed0bf16537520bd544e25540124ac7fc202bb8db6b141fca9cc25e85b4d064535de0dc5b8868025b71f8950ddc35d6b1bf04d8440c8ea2660fa3476578981bb467e9a54a9ebb2561f1414d34a922168537cde92375d6bb4e35cf4e2655cb0daca2a1b75013a9a5f72768b061492a381d1e339970a322f07ff3d0b9af33af6a191ed778a99b721eb89a294ebf76748230837f75cb9f5f31a0dcc4b9f6dcc99487e5799e1ff5db60f7193308a4b40dcac5e9aa3a288c03d724a5e2da794590446c236234eb0b34cc60fde282400039d7a263fad5b2df94907c54b07cc0d3e6d97a64e7306131f741caec8bfca4e40b033f4633a63d0845db13b0b59b3eb0ad2cde32856ee356d8e910524f71aa75d1b527bd0c69c7126f7d18644c3547acedcac805f9077778362d40004e8fb4d6de7f3dd679e1519f8896174be1fb9313a90bd3c5f2999cb0e1d96cbad7a1d9a708558d4984343d4b05f16acda0edba81d898efea1d7bb10baeaf2141d5b40b2131983132c6c16add15f83d122f305d67067321bc004960d47cb7e41e530a025498fa1d07b3040be112638801625d3e7e90d73b398bfe6d473278c5feba0b895347fc3395aa7c336ebed7aad8e1c2091b6e7167ab04f292f469e5e517509f1f780f7394958bfa07e6cce1af58573f08a743bbef50ba44d980448329666357eda505a49f06e24a73daf6d49b1f92e00210c96d34ccc033e0fbf3582180f477e0fa5a10f0cc49296a57242bc1a065539357ed9a6b5830f37d35fa3cb30a03b06256013a87ba66a58214002200fc00000000000000000000000000000008001000070000000000000c0023000000000000000000d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028aa284f8f626392a21d31e4e06fe98065e0246d46b7fe927a881c18c044e5c139e1400be00fe80000000000000000000000000000a08006300010000000800180004", @ANYRES32=0x0, @ANYBLOB="f7a0892a0f44ae21cef9bccdc148b946ddef45529a62c9e1934ed61f2ddf4fdbe9bb7c15cb11095e580d4d866f2d5b708e455bf1f43dde72df495711a095ce0940bf134854b7c70a45393aba65021b51892210c9adf6fc0b74be5275c5a5bfc70b89ce65a251c6dc9e451e17372dac7db685f334aede8004e23e65a6262763fdd5a03e445d8e6fe3057005af3edfe62bae75c6c7b84565ad0887bb7b6cc85ad5b78e19554efc5370000dc738b7bc8df535998f5912b0d94b1b2a6779e9a76eb43ca92ffd31000000000000"], 0x1238}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffff5f) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syncfs(r7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.173362561s ago: executing program 4 (id=2005): ioprio_set$pid(0x1, 0x0, 0x6000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000500)=r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x23, 0x0, 0x2}, 0x10) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) shmctl$IPC_RMID(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003c8000/0x4000)=nil, 0x4000, &(0x7f0000000040)='[:Q%@\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x3c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x1e, 0x0, 0x1, [@nested={0x18, 0x3d, 0x0, 0x1, [@generic="f1df62fd16b937aa9eab523e2bb48affe1d2f1a5"]}]}]}]}, 0x3c}}, 0x0) 47.333197301s ago: executing program 4 (id=2008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)}}], 0x1, 0x0) socket$inet(0x2, 0xa, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 45.26634742s ago: executing program 4 (id=2010): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x0) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) read$FUSE(r5, &(0x7f00000057c0)={0x2020}, 0x2020) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) r7 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b09058103000200000009040191d90a"], 0x0) prlimit64(r7, 0x0, &(0x7f0000000280)={0x41b, 0x8272}, 0x0) 41.232483712s ago: executing program 4 (id=2016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) statx(r1, &(0x7f0000019080)='./file0\x00', 0x400, 0x800, &(0x7f00000190c0)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) read$FUSE(r2, &(0x7f0000032680)={0x2020}, 0xfffffffffffffca5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet(0x2, 0x5, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000019200)=ANY=[@ANYBLOB="18000000fcffffff00000000ff090000950075b4939fe69c4e400c0000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x5, 0x9, 0x1, {0xa, @pix_mp={0x4, 0x7fff, 0x34565348, 0x0, 0xb, [{0x8, 0x8b3}, {0x2a7, 0x8}, {0x2, 0x3}, {0x13235815, 0xa3d}, {0x5}, {0x1, 0xff}, {0x1, 0xa}, {0x7ff, 0x9}], 0x2, 0x3, 0x1, 0x2}}, 0x1}) poll(&(0x7f0000001280)=[{r3, 0x190}], 0x1, 0xfffffffb) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000019300)={0xffffffffffffffff, 0x0}, 0x20) 24.665065361s ago: executing program 33 (id=2016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) statx(r1, &(0x7f0000019080)='./file0\x00', 0x400, 0x800, &(0x7f00000190c0)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) read$FUSE(r2, &(0x7f0000032680)={0x2020}, 0xfffffffffffffca5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet(0x2, 0x5, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000019200)=ANY=[@ANYBLOB="18000000fcffffff00000000ff090000950075b4939fe69c4e400c0000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x5, 0x9, 0x1, {0xa, @pix_mp={0x4, 0x7fff, 0x34565348, 0x0, 0xb, [{0x8, 0x8b3}, {0x2a7, 0x8}, {0x2, 0x3}, {0x13235815, 0xa3d}, {0x5}, {0x1, 0xff}, {0x1, 0xa}, {0x7ff, 0x9}], 0x2, 0x3, 0x1, 0x2}}, 0x1}) poll(&(0x7f0000001280)=[{r3, 0x190}], 0x1, 0xfffffffb) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000019300)={0xffffffffffffffff, 0x0}, 0x20) 21.957822397s ago: executing program 5 (id=2042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 21.828818164s ago: executing program 2 (id=2043): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xd, 0x0, &(0x7f0000000040)="4e3f261e29a7fa764a1131a77b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000580)=0xe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) 20.063139281s ago: executing program 1 (id=2044): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b09058103000200000009040191d90a"], 0x0) prlimit64(r6, 0x0, &(0x7f0000000280)={0x41b, 0x8272}, 0x0) 19.712095587s ago: executing program 5 (id=2045): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000240)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="08000000010000", 0x7) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7082, &(0x7f00000003c0)={0x0, 0x8b9c, 0x8, 0x0, 0x2b8}, &(0x7f0000000100), &(0x7f0000000140)) pivot_root(0x0, 0x0) 19.582426389s ago: executing program 2 (id=2046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) kcmp(r0, r0, 0x2, 0xffffffffffffffff, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = mq_open(&(0x7f0000000040)='\x00', 0x1, 0x10, 0x0) mq_notify(r4, &(0x7f0000000100)={0x0, 0x29, 0x1, @thr={&(0x7f00000005c0), &(0x7f0000000280)="844cbb4b058fb7559d62177cc6e73eabe5d45fff680c316580b8c8d25b934b7f27792b1f7fd89a05736b8d56b0f0de08db965c22f4365d4ce82da4b3f654ee3ac14eb427f2906350e2fec15518b19565ac736cfb4271eb0130ef09b3bc9ed3c606859ef19c"}}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, &(0x7f0000001ac0)=""/4080, 0xff0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5100) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x14, r9, 0x301, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 16.711965316s ago: executing program 2 (id=2047): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000057c0)={0x2020}, 0x2020) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b09058103000200000009040191d90a"], 0x0) prlimit64(r6, 0x0, &(0x7f0000000280)={0x41b, 0x8272}, 0x0) 16.193906587s ago: executing program 5 (id=2049): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) statx(r1, &(0x7f0000019080)='./file0\x00', 0x400, 0x800, &(0x7f00000190c0)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) read$FUSE(r2, &(0x7f0000032680)={0x2020}, 0xfffffffffffffca5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet(0x2, 0x5, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000019200)=ANY=[@ANYBLOB="18000000fcffffff00000000ff090000950075b4939fe69c4e400c0000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x5, 0x9, 0x1, {0xa, @pix_mp={0x4, 0x7fff, 0x34565348, 0x0, 0xb, [{0x8, 0x8b3}, {0x2a7, 0x8}, {0x2, 0x3}, {0x13235815, 0xa3d}, {0x5}, {0x1, 0xff}, {0x1, 0xa}, {0x7ff, 0x9}], 0x2, 0x3, 0x1, 0x2}}, 0x1}) poll(&(0x7f0000001280)=[{r3, 0x190}], 0x1, 0xfffffffb) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000019300)={0xffffffffffffffff, 0x0}, 0x20) 15.234799464s ago: executing program 1 (id=2050): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x8}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000510) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000140)) mknodat$loop(0xffffffffffffffff, 0x0, 0x6000, 0x0) 13.508895889s ago: executing program 1 (id=2060): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) 12.441256274s ago: executing program 2 (id=2052): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002d80)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r4, @ANYBLOB="08002600b41400000a000600ffffffffffff000008003500000000000a00340002020202020200002000508009000100408922a0bd0000000500020009"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00004d7000/0x4000)=nil, 0x4000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) lsm_list_modules(0x0, 0x0, 0x0) 11.235345061s ago: executing program 3 (id=2054): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2, {[@dstopts={0x21}]}}}}}, 0x0) r7 = signalfd4(r6, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) io_uring_enter(r7, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 10.130506118s ago: executing program 3 (id=2055): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)}}], 0x1, 0x0) socket$inet(0x2, 0xa, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 9.169530596s ago: executing program 3 (id=2056): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') pread64(r3, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x4048080) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f00000006c0)={0x18, r6, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 8.665644486s ago: executing program 5 (id=2057): memfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) gettid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$inet6(r2, 0x0, 0x0, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = getpid() r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0xab, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x16, 0x0, "fcaeff0161242b70a7fdf9d1995498d85c2aa40e6849f84a88e6355f9154c2935eeb7fe3a97257cd6e7d0ae9143ed7603e6cd6d7ebd7d2b15dc39086483062ae62b468d1e2e4ba1c7953cd6656a7ea67"}, 0xd8) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @random="80cc03df2bac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70881bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) syz_pidfd_open(r4, 0x0) 8.608223911s ago: executing program 3 (id=2058): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200000d4) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'macvtap0\x00', {0x4}, 0xe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5fb969700b5b438b, '\x00', 0x0, 0x2}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x8000) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x8000, 0x6, 0x2}, &(0x7f0000000280)=0x10) socket$unix(0x1, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 7.510284594s ago: executing program 5 (id=2059): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b09058103000200000009040191d90a"], 0x0) prlimit64(r6, 0x0, &(0x7f0000000280)={0x41b, 0x8272}, 0x0) 4.773635778s ago: executing program 1 (id=2061): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') memfd_create(0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x15}], 0x1}}], 0x1, 0x20008000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0xe90d7e3c28e7031, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 4.770936886s ago: executing program 2 (id=2062): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000057c0)={0x2020}, 0x2020) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b09058103000200000009040191d90a"], 0x0) prlimit64(r6, 0x0, &(0x7f0000000280)={0x41b, 0x8272}, 0x0) 4.768240272s ago: executing program 3 (id=2063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 2.469772045s ago: executing program 3 (id=2064): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000057c0)={0x2020}, 0x2020) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b09058103000200000009040191d90a"], 0x0) prlimit64(r6, 0x0, &(0x7f0000000280)={0x41b, 0x8272}, 0x0) 1.223191704s ago: executing program 5 (id=2065): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x0) socket(0x22, 0x2, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) shutdown(r4, 0x2) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00010026bd7000ffdbdf", @ANYRES32, @ANYBLOB="04"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 1.140450393s ago: executing program 1 (id=2066): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)}}], 0x1, 0x0) socket$inet(0x2, 0xa, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 648.27µs ago: executing program 2 (id=2067): socket(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x3) ppoll(&(0x7f0000003840), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) 0s ago: executing program 1 (id=2068): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xd, 0x0, &(0x7f0000000040)="4e3f261e29a7fa764a1131a77b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) kernel console output (not intermixed with test programs): er_noprof+0xad/0xf0 [ 391.346940][ T8415] ? xskq_create+0xbf/0x170 [ 391.346960][ T8415] xskq_create+0xbf/0x170 [ 391.346983][ T8415] xsk_init_queue+0xb0/0x110 [ 391.347003][ T8415] xsk_setsockopt+0x43f/0x710 [ 391.347033][ T8415] ? __pfx_xsk_setsockopt+0x10/0x10 [ 391.347066][ T8415] ? __fget_files+0x2a/0x420 [ 391.347092][ T8415] ? __fget_files+0x2a/0x420 [ 391.347113][ T8415] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 391.347132][ T8415] ? __pfx_xsk_setsockopt+0x10/0x10 [ 391.347164][ T8415] do_sock_setsockopt+0x179/0x1b0 [ 391.347197][ T8415] __x64_sys_setsockopt+0x13f/0x1b0 [ 391.347232][ T8415] do_syscall_64+0xfa/0x3b0 [ 391.347252][ T8415] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.347285][ T8415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.347304][ T8415] ? clear_bhb_loop+0x60/0xb0 [ 391.347328][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.347347][ T8415] RIP: 0033:0x7fe64d58ebe9 [ 391.347366][ T8415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.347382][ T8415] RSP: 002b:00007fe64b391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 391.347404][ T8415] RAX: ffffffffffffffda RBX: 00007fe64d7b6270 RCX: 00007fe64d58ebe9 [ 391.347419][ T8415] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 391.347431][ T8415] RBP: 00007fe64d611e19 R08: 0000000000000052 R09: 0000000000000000 [ 391.347444][ T8415] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.347456][ T8415] R13: 00007fe64d7b6308 R14: 00007fe64d7b6270 R15: 00007ffcf0df7e18 [ 391.347489][ T8415] [ 391.647700][ T8415] Mem-Info: [ 391.651159][ T8415] active_anon:6007 inactive_anon:11659 isolated_anon:0 [ 391.651159][ T8415] active_file:5605 inactive_file:35791 isolated_file:0 [ 391.651159][ T8415] unevictable:768 dirty:428 writeback:0 [ 391.651159][ T8415] slab_reclaimable:10485 slab_unreclaimable:102516 [ 391.651159][ T8415] mapped:37706 shmem:12832 pagetables:1373 [ 391.651159][ T8415] sec_pagetables:0 bounce:0 [ 391.651159][ T8415] kernel_misc_reclaimable:0 [ 391.651159][ T8415] free:1312997 free_pcp:13732 free_cma:0 [ 391.700756][ T8415] Node 0 active_anon:24028kB inactive_anon:46636kB active_file:22220kB inactive_file:143164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150824kB dirty:1704kB writeback:0kB shmem:49792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12784kB pagetables:5344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 391.735811][ T8415] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 391.767951][ T8415] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.797926][ T8415] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 391.805894][ T8415] Node 0 DMA32 free:1339476kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24024kB inactive_anon:46592kB active_file:20468kB inactive_file:143096kB unevictable:1536kB writepending:1704kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:37252kB local_pcp:20836kB free_cma:0kB [ 391.841220][ T8415] lowmem_reserve[]: 0 0 1 1 1 [ 391.846072][ T8415] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1752kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 391.875882][ T8415] lowmem_reserve[]: 0 0 0 0 0 [ 391.880988][ T8415] Node 1 Normal free:3897132kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17632kB local_pcp:7936kB free_cma:0kB [ 391.914639][ T8415] lowmem_reserve[]: 0 0 0 0 0 [ 391.919489][ T8415] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 391.932407][ T8415] Node 0 DMA32: 11*4kB (UME) 22*8kB (U) 2*16kB (UE) 5*32kB (U) 29*64kB (UME) 28*128kB (M) 21*256kB (UME) 4*512kB (UME) 5*1024kB (UM) 3*2048kB (UM) 321*4096kB (M) = 1339356kB [ 391.950863][ T8415] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 391.963423][ T8415] Node 1 Normal: 195*4kB (UME) 48*8kB (UME) 52*16kB (UME) 173*32kB (UME) 55*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3897132kB [ 391.981942][ T8415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.991832][ T8415] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.001482][ T8415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.012786][ T8415] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.022277][ T8415] 54224 total pagecache pages [ 392.027057][ T8415] 0 pages in swap cache [ 392.031437][ T8415] Free swap = 124996kB [ 392.035600][ T8415] Total swap = 124996kB [ 392.039851][ T8415] 2097051 pages RAM [ 392.043914][ T8415] 0 pages HighMem/MovableOnly [ 392.048857][ T8415] 424695 pages reserved [ 392.053199][ T8415] 0 pages cma reserved [ 392.060308][ T9] usb usb42-port1: unable to enumerate USB device [ 392.259463][ T8416] bond3: (slave veth0_to_bond): Releasing backup interface [ 398.706991][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.536'. [ 398.727060][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 399.592183][ T5941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 399.936852][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 400.271729][ T8476] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 401.951764][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.544'. [ 401.961334][ T8493] netlink: 48 bytes leftover after parsing attributes in process `syz.5.544'. [ 402.497018][ T5941] usb 3-1: unable to get BOS descriptor or descriptor too short [ 402.527606][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 402.535510][ T5941] usb 3-1: can't read configurations, error -71 [ 406.397927][ T8539] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 406.790401][ T8548] overlayfs: failed to resolve './file1': -2 [ 407.506160][ T8552] syz.1.556: attempt to access beyond end of device [ 407.506160][ T8552] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 407.726951][ T8555] netlink: 60 bytes leftover after parsing attributes in process `syz.1.556'. [ 408.116631][ T8559] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 410.787958][ T5844] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 416.011306][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.573'. [ 417.227312][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 417.236463][ T8655] netlink: 48 bytes leftover after parsing attributes in process `syz.1.574'. [ 418.081260][ T8663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.899436][ T8653] vlan2: entered allmulticast mode [ 419.454697][ T8653] veth0_to_bond: entered allmulticast mode [ 421.124014][ T8693] xt_TPROXY: Can be used only with -p tcp or -p udp [ 424.468578][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 425.834594][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 425.844267][ T8730] netlink: 48 bytes leftover after parsing attributes in process `syz.3.589'. [ 427.248010][ T8743] hub 8-0:1.0: USB hub found [ 427.256465][ T8743] hub 8-0:1.0: 1 port detected [ 435.361496][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 437.702160][ T24] IPVS: starting estimator thread 0... [ 438.128517][ T8826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.607'. [ 438.141293][ T8825] IPVS: using max 38 ests per chain, 91200 per kthread [ 438.966566][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.608'. [ 438.975629][ T8821] netlink: 32 bytes leftover after parsing attributes in process `syz.3.608'. [ 438.984742][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.608'. [ 440.150945][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.179951][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.897060][ T8854] IPVS: length: 129 != 8 [ 445.624103][ T8878] 8021q: VLANs not supported on nlmon0 [ 445.790642][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.619'. [ 445.801916][ T8887] vlan0: entered promiscuous mode [ 446.968970][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 447.111327][ T8900] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 448.299570][ T8911] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 448.893088][ T8917] netlink: 'syz.5.626': attribute type 32 has an invalid length. [ 449.376210][ T8912] tmpfs: Bad value for 'mpol' [ 449.567125][ T8914] binder: 8907:8914 ioctl 4018620d 0 returned -22 [ 450.642843][ T5924] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 450.663407][ T8912] binder: 8907:8912 ioctl 4020ae46 7fe20801bbe0 returned -22 [ 451.525662][ T8912] binder: 8907:8912 ioctl 4020ae46 7fe20801bbe0 returned -22 [ 451.547225][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 451.774049][ T5924] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 451.788561][ T8912] binder: 8907:8912 ioctl 4020ae46 7fe20801bbe0 returned -22 [ 451.921908][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.147080][ T5924] usb 3-1: Product: syz [ 453.151391][ T5924] usb 3-1: Manufacturer: syz [ 453.153387][ T30] audit: type=1326 audit(1755823897.525:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8907 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20718ebe9 code=0x7fc00000 [ 453.158407][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 454.206788][ T5924] usb 3-1: SerialNumber: syz [ 454.419607][ T5924] r8152-cfgselector 3-1: Unknown version 0x0000 [ 454.425991][ T5924] r8152-cfgselector 3-1: config 0 descriptor?? [ 454.438488][ T5924] r8152-cfgselector 3-1: can't set config #0, error -71 [ 454.455791][ T5924] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 455.119923][ T8940] sctp: failed to load transform for md5: -2 [ 455.274323][ T8957] netlink: 100 bytes leftover after parsing attributes in process `syz.4.635'. [ 457.045363][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 457.237409][ T8975] fuse: Bad value for 'fd' [ 459.739375][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 461.554847][ T8994] program syz.4.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.831521][ T9017] syz.5.646: attempt to access beyond end of device [ 461.831521][ T9017] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 461.854934][ T9017] syz.5.646: attempt to access beyond end of device [ 461.854934][ T9017] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 461.874312][ T9017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 461.889116][ T9017] syz.5.646: attempt to access beyond end of device [ 461.889116][ T9017] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 461.903884][ T9017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 461.917902][ T9017] syz.5.646: attempt to access beyond end of device [ 461.917902][ T9017] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 461.936355][ T9017] syz.5.646: attempt to access beyond end of device [ 461.936355][ T9017] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 461.955154][ T9017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 461.966376][ T9017] syz.5.646: attempt to access beyond end of device [ 461.966376][ T9017] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 461.980798][ T9017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 462.000822][ T9017] syz.5.646: attempt to access beyond end of device [ 462.000822][ T9017] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 462.016329][ T9017] syz.5.646: attempt to access beyond end of device [ 462.016329][ T9017] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 462.030123][ T9017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 462.041623][ T9017] syz.5.646: attempt to access beyond end of device [ 462.041623][ T9017] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 462.060817][ T9017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 462.075734][ T9017] syz.5.646: attempt to access beyond end of device [ 462.075734][ T9017] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 462.078423][ T8994] program syz.4.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.090235][ T9017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 462.110815][ T9017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 462.121586][ T9017] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 464.211396][ T8994] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 465.288992][ T9042] netlink: 452 bytes leftover after parsing attributes in process `syz.1.651'. [ 466.211027][ T9055] Smack: duplicate mount options [ 468.606591][ T9063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.655'. [ 469.446388][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 470.811923][ T9098] xt_TPROXY: Can be used only with -p tcp or -p udp [ 471.665483][ T9093] /dev/nullb0: Can't open blockdev [ 472.041579][ T9103] 8021q: VLANs not supported on nlmon0 [ 473.784164][ T9118] fuse: Bad value for 'fd' [ 477.879453][ T5859] IPVS: starting estimator thread 0... [ 477.978365][ T9127] IPVS: using max 30 ests per chain, 72000 per kthread [ 479.970699][ T30] audit: type=1326 audit(1755823924.355:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9146 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 480.076255][ T30] audit: type=1326 audit(1755823924.355:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9146 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 480.107259][ T30] audit: type=1326 audit(1755823924.355:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9146 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 480.366904][ T30] audit: type=1326 audit(1755823924.595:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9146 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 480.809673][ T30] audit: type=1326 audit(1755823924.595:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9146 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 481.892841][ T9165] 8021q: VLANs not supported on nlmon0 [ 484.169468][ T9182] xt_SECMARK: invalid mode: 2 [ 486.400380][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 487.241493][ T9199] block nbd0: shutting down sockets [ 488.383130][ T9223] lo speed is unknown, defaulting to 1000 [ 488.390782][ T9223] lo speed is unknown, defaulting to 1000 [ 488.402502][ T9223] lo speed is unknown, defaulting to 1000 [ 488.518814][ T9223] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 488.885925][ T9223] lo speed is unknown, defaulting to 1000 [ 488.893097][ T9223] lo speed is unknown, defaulting to 1000 [ 488.900148][ T9223] lo speed is unknown, defaulting to 1000 [ 488.907494][ T9223] lo speed is unknown, defaulting to 1000 [ 488.914253][ T9223] lo speed is unknown, defaulting to 1000 [ 489.441472][ T9224] bio_check_eod: 2 callbacks suppressed [ 489.441580][ T9224] syz.1.687: attempt to access beyond end of device [ 489.441580][ T9224] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 489.525960][ T9224] gfs2: error -5 reading superblock [ 493.300319][ T9238] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 496.239647][ T9244] overlayfs: failed to decode file handle (len=24, type=251, flags=0, err=-22) [ 496.294777][ T9244] No source specified [ 497.599022][ T9275] bridge2: entered promiscuous mode [ 497.604389][ T9275] bridge2: entered allmulticast mode [ 498.184707][ T9264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.257895][ T9315] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 501.310276][ T9308] sctp: [Deprecated]: syz.1.704 (pid 9308) Use of int in max_burst socket option deprecated. [ 501.310276][ T9308] Use struct sctp_assoc_value instead [ 501.602698][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.610404][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.047442][ T9334] veth0_to_team: entered promiscuous mode [ 503.053265][ T9334] veth0_to_team: entered allmulticast mode [ 504.329854][ T9347] new mount options do not match the existing superblock, will be ignored [ 505.168781][ T9339] binder: 9335:9339 ioctl 4018620d 0 returned -22 [ 506.102334][ T9357] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 507.736214][ T9366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.314977][ T9368] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 508.390730][ T9368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.879035][ T9374] netlink: 60 bytes leftover after parsing attributes in process `syz.5.718'. [ 508.907553][ T9368] bond0: (slave veth0_to_bond): Releasing active interface [ 508.918078][ T9374] unsupported nlmsg_type 40 [ 508.945225][ T9368] bond2: (slave veth0_to_bond): making interface the new active one [ 508.979085][ T9368] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 508.988948][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.718'. [ 509.072712][ T9368] vlan2: entered allmulticast mode [ 509.096860][ T9368] veth0_to_bond: entered allmulticast mode [ 509.112253][ T50] Bluetooth: hci1: unexpected event for opcode 0x200a [ 511.360114][ T9395] fuse: Bad value for 'fd' [ 512.252215][ T9405] loop6: detected capacity change from 0 to 524287999 [ 512.892375][ T9409] ipvlan0: entered allmulticast mode [ 512.916925][ T9409] veth0_vlan: entered allmulticast mode [ 516.319137][ T9425] Bluetooth: hci1: command 0x0406 tx timeout [ 516.858442][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 523.205033][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.739'. [ 523.214422][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.739'. [ 524.927129][ T9489] batadv_slave_1: entered promiscuous mode [ 524.969719][ T9489] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 525.020494][ T9489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.457863][ T9486] batadv_slave_1: left promiscuous mode [ 527.464139][ T9519] netlink: 'syz.3.751': attribute type 1 has an invalid length. [ 527.504601][ T9519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.526107][ T9519] bond2: (slave veth0_to_bond): Releasing active interface [ 528.025118][ T9519] bond3: (slave veth0_to_bond): making interface the new active one [ 528.124793][ T9519] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 528.135080][ T9526] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 528.323326][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 528.479076][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 531.748290][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.761'. [ 534.237699][ T9589] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 534.938598][ T9595] netlink: 'syz.4.768': attribute type 1 has an invalid length. [ 536.990441][ T9595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 537.412781][ T9604] veth0_to_bond: left promiscuous mode [ 537.560296][ T9604] veth0_to_bond: entered promiscuous mode [ 538.446525][ T9604] bond6: (slave veth0_to_bond): making interface the new active one [ 538.607256][ T9604] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 539.121740][ T9638] Bluetooth: MGMT ver 1.23 [ 540.840603][ T9650] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 542.809616][ T9671] netlink: 'syz.1.783': attribute type 21 has an invalid length. [ 542.818577][ T9671] netlink: 156 bytes leftover after parsing attributes in process `syz.1.783'. [ 542.828882][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 542.946856][ T5941] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 543.398220][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 543.424250][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.436419][ T5941] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 543.604305][ T5941] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 543.614442][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.625911][ T5941] usb 3-1: config 0 descriptor?? [ 545.817208][ T9688] netlink: 'syz.5.788': attribute type 1 has an invalid length. [ 545.850071][ T9688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.027963][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 546.788326][ T9688] bond2: (slave veth0_to_bond): making interface the new active one [ 546.805350][ T9688] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 546.931172][ T9688] vlan2: entered allmulticast mode [ 546.992528][ T9688] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 547.715935][ T24] usb 3-1: USB disconnect, device number 8 [ 551.055871][ T9728] sd 0:0:1:0: device reset [ 557.506056][ T9750] xt_l2tp: invalid flags combination: 4 [ 559.916199][ T9759] netlink: 'syz.3.803': attribute type 10 has an invalid length. [ 559.987496][ T9759] : (slave netdevsim0): Enslaving as an active interface with an up link [ 560.071732][ T9772] netlink: 'syz.2.806': attribute type 1 has an invalid length. [ 560.172852][ T9772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 560.220039][ T9776] bond2: (slave veth0_to_bond): making interface the new active one [ 560.490976][ T9776] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 560.692760][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.808'. [ 560.705011][ T9779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.808'. [ 563.920516][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.927140][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.487014][ T9810] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 567.493859][ T9810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 567.511638][ T9817] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 567.518480][ T9817] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 567.531283][ T9817] vhci_hcd vhci_hcd.0: Device attached [ 567.539954][ T9810] vhci_hcd vhci_hcd.0: Device attached [ 567.551016][ T9816] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 567.558713][ T9816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 567.568099][ T9816] vhci_hcd vhci_hcd.0: Device attached [ 567.603128][ T9820] vhci_hcd: connection closed [ 567.603799][ T9819] vhci_hcd: connection closed [ 567.609355][ T9818] vhci_hcd: connection closed [ 567.617601][ T2959] vhci_hcd: stop threads [ 567.747263][ T2959] vhci_hcd: release socket [ 567.752025][ T2959] vhci_hcd: disconnect device [ 568.326165][ T2959] vhci_hcd: stop threads [ 568.336066][ T2959] vhci_hcd: release socket [ 568.342877][ T2959] vhci_hcd: disconnect device [ 568.349976][ T2959] vhci_hcd: stop threads [ 568.354525][ T2959] vhci_hcd: release socket [ 568.446702][ T2959] vhci_hcd: disconnect device [ 570.736969][ T9846] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 571.398607][ T9846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.002448][ T9846] bond2: (slave veth0_to_bond): Releasing active interface [ 573.610155][ T9846] bond3: (slave veth0_to_bond): making interface the new active one [ 573.748514][ T9846] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 574.364831][ T9863] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 574.905914][ T9870] fuse: Bad value for 'group_id' [ 574.911982][ T9870] fuse: Bad value for 'group_id' [ 575.177988][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.830'. [ 577.868641][ T30] audit: type=1326 audit(1755824022.325:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9893 comm="syz.5.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe64d58ebe9 code=0x0 [ 579.122760][ T9910] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 580.475559][ T9910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 582.884773][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 586.359953][ T9959] program syz.3.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.836070][ T9970] xt_hashlimit: overflow, rate too high: 0 [ 588.339640][ T9976] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 588.436048][ T9976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 589.150478][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 590.426069][ T9980] bond3: (slave veth0_to_bond): Releasing active interface [ 590.463405][ T9980] bond4: (slave veth0_to_bond): making interface the new active one [ 590.473452][ T9980] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 590.695743][ T9993] 8021q: VLANs not supported on nlmon0 [ 593.281530][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 593.466837][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 593.504440][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 593.535596][ T24] usb 5-1: config 0 has no interface number 0 [ 593.564576][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 593.584711][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 593.594323][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 593.612181][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 593.709051][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.781593][ T24] usb 5-1: config 0 descriptor?? [ 593.819430][ T24] usb 5-1: can't set config #0, error -71 [ 593.889492][ T24] usb 5-1: USB disconnect, device number 4 [ 604.883865][T10103] kAFS: unable to lookup cell '/,' [ 609.040632][T10128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 609.608985][T10131] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 609.833502][T10131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 610.454174][T10134] bond4: (slave veth0_to_bond): Releasing active interface [ 611.198400][T10134] bond5: (slave veth0_to_bond): making interface the new active one [ 611.225967][T10134] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 614.070528][ T5924] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 615.676780][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 615.695774][ T5924] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 615.798011][T10168] misc userio: No port type given on /dev/userio [ 615.840342][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.851304][ T5924] usb 5-1: Product: syz [ 615.860301][ T5924] usb 5-1: Manufacturer: syz [ 615.865059][ T5924] usb 5-1: SerialNumber: syz [ 615.902389][ T5924] usb 5-1: config 0 descriptor?? [ 616.466376][ T5924] usb 5-1: can't set config #0, error -71 [ 616.579765][ T5924] usb 5-1: USB disconnect, device number 5 [ 616.937972][T10175] netlink: 68 bytes leftover after parsing attributes in process `syz.4.907'. [ 617.095078][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 619.908415][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.911'. [ 624.472873][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.479706][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.166421][T10237] Device name cannot be null; rc = [-22] [ 628.793093][T10249] ptrace attach of "./syz-executor exec"[10251] was attempted by "./syz-executor exec"[10249] [ 629.428009][T10250] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 629.531079][T10253] bond4: entered promiscuous mode [ 629.536172][T10253] bond4: entered allmulticast mode [ 629.541851][T10253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 631.077061][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 637.730145][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.942'. [ 642.488176][T10366] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 644.590243][T10379] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 645.369652][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 652.861940][T10426] input: syz0 as /devices/virtual/input/input10 [ 654.563628][T10448] veth0_to_team: entered promiscuous mode [ 654.570651][T10448] veth0_to_team: entered allmulticast mode [ 655.709096][T10463] /dev/nullb0: Can't open blockdev [ 656.315149][T10462] syz.2.977 (10462): drop_caches: 2 [ 656.786789][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 657.067389][ T1612] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 657.985822][ T1612] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 658.226154][T10479] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 660.712665][ T1612] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 660.719605][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 660.741952][ T1612] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 660.885230][T10500] sctp: [Deprecated]: syz.3.981 (pid 10500) Use of int in maxseg socket option. [ 660.885230][T10500] Use struct sctp_assoc_value instead [ 664.295019][T10542] fuse: Bad value for 'group_id' [ 664.336733][T10542] fuse: Bad value for 'group_id' [ 664.948820][T10551] /dev/nullb0: Can't open blockdev [ 665.446753][T10553] netlink: 'syz.1.994': attribute type 1 has an invalid length. [ 665.688781][T10553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 665.728766][T10557] veth0_to_bond: entered promiscuous mode [ 665.809506][T10557] bond6: (slave veth0_to_bond): making interface the new active one [ 666.252442][T10557] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 666.791833][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 666.800782][ T1612] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 666.824375][ T1612] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 667.043261][T10572] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 667.309366][T10572] 8021q: adding VLAN 0 to HW filter on device bond6 [ 667.355015][T10572] bond6: (slave veth7): Enslaving as an active interface with a down link [ 668.323993][T10597] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 669.779447][ T36] bond5: (slave veth0_to_bond): link status definitely down, disabling slave [ 669.795050][ T36] bond5: now running without any active interface! [ 670.987725][T10622] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 674.546115][T10650] misc userio: No port type given on /dev/userio [ 677.182518][T10670] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 678.613496][T10670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 679.101337][T10676] bond5: (slave veth7): Enslaving as an active interface with a down link [ 679.301419][ T2959] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 679.361648][ T2959] bond3: now running without any active interface! [ 680.579004][T10700] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 680.588554][T10700] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 680.597050][T10700] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 680.604060][T10700] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 680.611773][T10700] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 680.618984][T10700] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 680.643537][T10700] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 685.910259][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.175043][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.047461][T10760] misc userio: No port type given on /dev/userio [ 688.092464][T10760] misc userio: The device must be registered before sending interrupts [ 689.462780][T10771] binder: 10770:10771 ioctl c0306201 200000000240 returned -11 [ 690.611796][ T30] audit: type=1107 audit(1755824135.055:121): pid=10782 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 693.040743][T10807] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 696.833913][T10460] libceph: connect (1)[c::]:6789 error -101 [ 697.175159][T10819] ceph: No mds server is up or the cluster is laggy [ 697.187136][T10460] libceph: mon0 (1)[c::]:6789 connect error [ 697.900386][T10807] 8021q: adding VLAN 0 to HW filter on device bond7 [ 698.132804][T10835] binder: BINDER_SET_CONTEXT_MGR already set [ 699.110284][T10835] binder: 10831:10835 ioctl 4018620d 200000000040 returned -16 [ 701.805916][T10858] loop6: detected capacity change from 0 to 524287999 [ 705.049431][T10877] binder: 10874:10877 ioctl 4018620d 0 returned -22 [ 705.080313][T10883] fuse: Unknown parameter 'grou00000000000000000000' [ 706.061359][T10889] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 706.203115][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 706.230251][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 707.117641][T10909] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 708.466871][T10909] 8021q: adding VLAN 0 to HW filter on device bond8 [ 710.390697][T10980] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1066'. [ 710.734045][T10938] bond8: (slave veth9): Enslaving as an active interface with a down link [ 711.373631][T10990] netlink: 'syz.5.1078': attribute type 1 has an invalid length. [ 711.805065][T10990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 712.841147][T11001] vlan2: entered allmulticast mode [ 713.409181][T11001] bond3: (slave vlan2): making interface the new active one [ 713.431267][T11001] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 713.450263][T11004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1070'. [ 713.492804][T11005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1070'. [ 715.558283][T11027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.397196][T11044] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 718.133047][T11044] 8021q: adding VLAN 0 to HW filter on device bond7 [ 718.289029][T11049] bond7: (slave veth7): Enslaving as an active interface with a down link [ 718.511423][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'. [ 719.846167][T11069] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 720.122239][T11069] 8021q: adding VLAN 0 to HW filter on device bond8 [ 722.109535][T11076] bond8: (slave veth9): Enslaving as an active interface with a down link [ 723.117170][ T30] audit: type=1326 audit(1755824680.068:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11092 comm="syz.2.1091" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f552ab8ebe9 code=0x0 [ 723.138699][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.275485][T11128] netlink: 'syz.4.1097': attribute type 1 has an invalid length. [ 727.541487][T11128] 8021q: adding VLAN 0 to HW filter on device bond9 [ 729.356279][T11134] bond9: (slave veth11): Enslaving as an active interface with a down link [ 730.790712][T11163] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 730.931782][ T5903] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 730.936581][T11163] 8021q: adding VLAN 0 to HW filter on device bond9 [ 731.243743][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 731.320830][ T5903] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 731.338902][ T5903] usb 3-1: config 0 has no interface number 0 [ 731.679384][ T5903] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 732.130771][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.307143][T11165] bond9: (slave veth11): Enslaving as an active interface with a down link [ 732.352341][ T5903] usb 3-1: Product: syz [ 732.480493][ T5903] usb 3-1: Manufacturer: syz [ 732.623238][ T5903] usb 3-1: SerialNumber: syz [ 732.945588][ T5903] usb 3-1: config 0 descriptor?? [ 732.961378][ T5903] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 733.105437][ T5903] usb 3-1: selecting invalid altsetting 1 [ 733.132024][ T5903] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 733.167521][ T5903] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 733.184208][ T5903] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 733.195267][ T5903] usb 3-1: media controller created [ 733.279771][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 735.333097][ T5903] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 735.382493][ T5903] zl10353_read_register: readreg error (reg=127, ret==-110) [ 735.420129][ T5903] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 736.144331][ T5903] usb 3-1: USB disconnect, device number 9 [ 740.305238][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 740.694498][ T24] usb 3-1: device descriptor read/64, error -71 [ 740.955620][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 741.199831][ T24] usb 3-1: device descriptor read/64, error -71 [ 741.347208][ T24] usb usb3-port1: attempt power cycle [ 741.532970][T11249] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 741.728356][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 741.964491][ T24] usb 3-1: device descriptor read/8, error -71 [ 742.320553][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 743.412883][T11261] fuse: Bad value for 'fd' [ 743.455373][ T24] usb 3-1: device not accepting address 13, error -71 [ 743.507858][ T24] usb usb3-port1: unable to enumerate USB device [ 743.875514][ T53] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 744.066364][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 744.147210][ T53] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.200978][ T53] usb 4-1: config 0 has no interface number 0 [ 744.239506][ T53] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.295835][ T53] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 744.342985][ T53] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 744.368758][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.422535][ T53] usb 4-1: config 0 descriptor?? [ 744.574683][ T53] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 746.045229][ T9] usb 4-1: USB disconnect, device number 4 [ 747.829622][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.908020][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.642267][T11314] fuse: Unknown parameter 'group_i00000000000000000000' [ 751.669580][T11315] fuse: Bad value for 'fd' [ 753.106224][T11327] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 755.736524][T11341] netlink: 'syz.5.1144': attribute type 12 has an invalid length. [ 755.752083][T11341] netlink: 'syz.5.1144': attribute type 29 has an invalid length. [ 755.771995][T11341] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1144'. [ 755.814887][T11341] netlink: 'syz.5.1144': attribute type 2 has an invalid length. [ 755.880182][T11341] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1144'. [ 757.999386][T11345] binder: 11343:11345 ioctl 4018620d 0 returned -22 [ 758.436989][T11365] fuse: Unknown parameter 'group_i00000000000000000000' [ 759.891084][T11382] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 760.396372][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1154'. [ 763.090311][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 763.100624][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 763.485675][T11406] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1160'. [ 763.751121][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 764.622946][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 768.480421][T11423] fuse: Bad value for 'group_id' [ 769.782816][T11423] fuse: Bad value for 'group_id' [ 770.436982][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1164'. [ 770.540233][T11440] fuse: Unknown parameter 'group_i00000000000000000000' [ 773.637345][T11472] No such timeout policy "syz1" [ 773.666833][T10940] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 774.769043][ T48] Bluetooth: hci5: Frame reassembly failed (-84) [ 775.688661][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 777.141289][T11481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1176'. [ 777.205777][T11486] fuse: Bad value for 'group_id' [ 777.211109][T11486] fuse: Bad value for 'group_id' [ 777.374273][T11489] netlink: 'syz.3.1180': attribute type 2 has an invalid length. [ 777.399940][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 783.678841][T11551] netlink: 'syz.3.1192': attribute type 1 has an invalid length. [ 783.820821][T11551] 8021q: adding VLAN 0 to HW filter on device bond7 [ 783.892433][T11558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1192'. [ 784.131983][T11563] netlink: 'syz.2.1194': attribute type 1 has an invalid length. [ 784.149864][T11557] bond7: (slave veth9): Enslaving as an active interface with a down link [ 784.765063][T11563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.939763][T11566] bond6: (slave veth9): Enslaving as an active interface with a down link [ 785.727328][T11578] loop6: detected capacity change from 0 to 524287999 [ 786.365129][T11578] Dev loop6: unable to read RDB block 8 [ 786.371240][T11578] loop6: unable to read partition table [ 786.377346][T11578] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 786.834461][T11588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1197'. [ 787.165136][T11591] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 787.177471][T11591] /dev/nullb0: Can't open blockdev [ 790.031893][T11580] sctp: failed to load transform for md5: -2 [ 791.126967][T11614] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1205'. [ 793.158366][T11627] batadv1: entered promiscuous mode [ 793.535422][T11633] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 794.758466][T11650] loop6: detected capacity change from 0 to 524287999 [ 795.762673][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1221'. [ 796.080049][T11650] Dev loop6: unable to read RDB block 8 [ 796.085929][T11650] loop6: unable to read partition table [ 796.091845][T11650] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 796.280877][T11645] vivid-007: kernel_thread() failed [ 796.314071][T11633] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 797.163618][ T6686] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 797.528833][ T6686] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.996453][ T6686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.101136][ T6686] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 798.386205][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 798.403603][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 798.414770][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 798.426727][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 798.437566][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 799.159987][ T6686] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 799.196985][ T6686] usb 2-1: config 1 interface 1 has no altsetting 0 [ 799.696845][ T6686] usb 2-1: string descriptor 0 read error: -71 [ 799.753102][ T6686] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.787469][ T6686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.926977][ T6686] usb 2-1: can't set config #1, error -71 [ 799.966622][ T6686] usb 2-1: USB disconnect, device number 4 [ 800.086531][T11687] Device name cannot be null; rc = [-22] [ 805.205224][T11720] netlink: 'syz.4.1226': attribute type 1 has an invalid length. [ 807.743699][T11720] 8021q: adding VLAN 0 to HW filter on device bond10 [ 807.896968][T11727] bond10: (slave veth13): Enslaving as an active interface with a down link [ 809.161102][T11758] Invalid source name [ 809.301606][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.308673][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.793412][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 810.141306][T11766] fuse: Unknown parameter 'group_i00000000000000000000' [ 811.641890][T11778] --map-set only usable from mangle table [ 812.204609][T11784] syz.4.1239: attempt to access beyond end of device [ 812.204609][T11784] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 814.761608][T11806] input: syz0 as /devices/virtual/input/input13 [ 818.391616][T11839] sp0: Synchronizing with TNC [ 819.098492][T11832] [U] [ 819.889431][T11847] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 820.128619][T11857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1255'. [ 821.699507][T11847] 8021q: adding VLAN 0 to HW filter on device bond11 [ 823.061052][T11855] bond11: (slave veth15): Enslaving as an active interface with a down link [ 823.306244][T11874] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 823.873822][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 824.076144][T11874] 8021q: adding VLAN 0 to HW filter on device bond10 [ 824.235902][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 825.451092][T11878] bond10: (slave veth13): Enslaving as an active interface with a down link [ 825.509363][T11888] batadv1: entered promiscuous mode [ 826.161486][T11899] fuse: Unknown parameter 'group_id00000000000000000000' [ 827.125319][T11914] syz.1.1270: attempt to access beyond end of device [ 827.125319][T11914] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 827.139173][T11914] gfs2: error -5 reading superblock [ 827.813944][T11924] comedi comedi2: dt2814: I/O port conflict (0xb000,2) [ 829.667779][T11930] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 829.909973][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'. [ 830.332580][T11930] 8021q: adding VLAN 0 to HW filter on device bond11 [ 830.399801][T11935] bond11: (slave veth15): Enslaving as an active interface with a down link [ 832.701404][T11956] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 833.167499][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 833.318181][T11956] 8021q: adding VLAN 0 to HW filter on device bond7 [ 833.466613][T11960] bond7: (slave veth11): Enslaving as an active interface with a down link [ 833.488912][T11961] tipc: Started in network mode [ 833.509190][T11961] tipc: Node identity 4, cluster identity 4711 [ 833.524937][T11961] tipc: Node number set to 4 [ 833.689249][T11971] fuse: Bad value for 'fd' [ 834.914572][T11977] delete_channel: no stack [ 835.261927][T11984] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.270125][T11984] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.296419][T11984] bridge0: entered allmulticast mode [ 836.342641][T11974] ecryptfs: Unknown parameter '(' [ 836.583560][T11992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1291'. [ 837.408336][T12003] loop6: detected capacity change from 0 to 524287999 [ 838.202596][T12003] Dev loop6: unable to read RDB block 8 [ 838.211783][T12003] loop6: unable to read partition table [ 838.220602][T12003] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 839.556486][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1293'. [ 841.598527][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 842.080998][T12026] fuse: Bad value for 'fd' [ 842.153972][T12027] netlink: 'syz.3.1297': attribute type 1 has an invalid length. [ 842.214954][ T5859] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 842.292812][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 842.475117][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 842.482948][T12027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 843.039529][ T5859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 843.067055][ T5859] usb 5-1: config 7 has an invalid interface number: 111 but max is 0 [ 843.079998][ T5859] usb 5-1: config 7 has no interface number 0 [ 843.339205][ T5859] usb 5-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 843.503867][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.516682][ T5859] usb 5-1: Product: syz [ 843.521030][ T5859] usb 5-1: Manufacturer: syz [ 843.526457][ T5859] usb 5-1: SerialNumber: syz [ 843.774003][ T5859] usb 5-1: bad CDC descriptors [ 844.248378][T12030] bond8: (slave veth11): Enslaving as an active interface with a down link [ 844.276892][ T5859] usb 5-1: USB disconnect, device number 6 [ 845.635123][T12056] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 846.424656][T12069] fuse: Invalid rootmode [ 847.181113][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 849.063837][T12083] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 849.096902][T12083] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 851.272404][T12102] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1316'. [ 851.282424][T12102] netlink: 'syz.5.1316': attribute type 9 has an invalid length. [ 851.296940][T12102] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1316'. [ 851.306509][T12102] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1316'. [ 851.365780][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1316'. [ 851.375849][T12102] netlink: 'syz.5.1316': attribute type 5 has an invalid length. [ 851.384124][T12102] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1316'. [ 851.461296][T12102] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 851.470598][T12102] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 851.479886][T12102] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 851.489178][T12102] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 851.500649][T12102] geneve2: entered promiscuous mode [ 851.507050][T12102] geneve2: entered allmulticast mode [ 852.186555][T12106] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 853.605758][T12117] fuse: Invalid rootmode [ 853.969663][T12106] 8021q: adding VLAN 0 to HW filter on device bond9 [ 854.196394][T12128] sysfs: Unknown parameter 'tS' [ 854.667082][T12129] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 855.264437][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 855.781148][T12136] fuse: Unknown parameter 'user_i00000000000000000000' [ 855.800148][T12138] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 855.903680][T12138] 8021q: adding VLAN 0 to HW filter on device bond8 [ 855.996457][T12141] bond8: (slave veth13): Enslaving as an active interface with a down link [ 856.006175][T12138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 861.223163][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'. [ 864.505820][T12206] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 864.623326][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'. [ 864.870692][T12206] 8021q: adding VLAN 0 to HW filter on device bond9 [ 865.209566][T12208] bond9: (slave veth15): Enslaving as an active interface with a down link [ 867.771231][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'. [ 868.770525][T12247] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 869.208773][T12251] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 869.244388][T12251] 8021q: adding VLAN 0 to HW filter on device bond12 [ 869.538528][T12251] bond12: (slave veth17): Enslaving as an active interface with a down link [ 870.738610][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.745340][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.948943][T12268] loop8: detected capacity change from 0 to 7 [ 870.963302][T12268] Dev loop8: unable to read RDB block 7 [ 870.969352][T12268] loop8: unable to read partition table [ 870.975401][T12268] loop8: partition table beyond EOD, truncated [ 870.981824][T12268] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 872.991588][T12298] fuse: Unknown parameter 'f' [ 873.450167][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'. [ 875.763820][T12319] vivid-009: kernel_thread() failed [ 879.836709][T12363] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 879.845695][T12363] /dev/nullb0: Can't open blockdev [ 881.824796][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1375'. [ 882.276015][T12384] sp0: Synchronizing with TNC [ 882.415702][T12370] sctp: failed to load transform for md5: -2 [ 887.886347][T12429] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 889.854873][T12443] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 889.859494][T12442] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 889.887411][T12420] IPVS: stopping backup sync thread 12442 ... [ 891.209466][T12450] mkiss: ax0: crc mode is auto. [ 894.240237][T12465] Device name cannot be null; rc = [-22] [ 895.874445][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1398'. [ 897.260696][T12490] Device name cannot be null; rc = [-22] [ 903.512613][T12527] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 904.200087][T12536] fuse: Invalid rootmode [ 904.988847][T12544] fuse: Unknown parameter '0x0000000000000004' [ 905.555268][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 909.689592][T12593] xt_bpf: check failed: parse error [ 910.188474][T12590] batman_adv: batadv0: Adding interface: dummy0 [ 910.196944][T12590] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.223034][T12590] batman_adv: batadv0: Interface activated: dummy0 [ 910.239162][T12594] fuse: Unknown parameter 'user_i00000000000000000000' [ 910.244601][T12590] batadv0: mtu less than device minimum [ 910.253892][T12590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.265918][T12590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.277384][T12590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.289544][T12590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.301388][T12590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.313345][T12590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.324641][T12590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.336410][T12590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.347871][T12590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 914.665599][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 915.553489][T12640] Device name cannot be null; rc = [-22] [ 918.410136][T12664] fuse: Invalid rootmode [ 921.333643][T12690] fuse: Bad value for 'rootmode' [ 921.911820][T12700] Device name cannot be null; rc = [-22] [ 923.774503][T12712] fuse: Bad value for 'rootmode' [ 926.680937][T12744] : entered promiscuous mode [ 927.589199][ T24] Process accounting resumed [ 931.467723][T12746] Process accounting resumed [ 932.178493][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.185529][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.301148][T12778] fuse: Bad value for 'rootmode' [ 932.780692][T12782] Device name cannot be null; rc = [-22] [ 935.064411][T12798] geneve2: entered allmulticast mode [ 936.217880][T12800] net_ratelimit: 10 callbacks suppressed [ 936.217901][T12800] sctp: failed to load transform for md5: -4 [ 938.576102][T12834] fuse: Bad value for 'rootmode' [ 939.636881][T12849] Device name cannot be null; rc = [-22] [ 940.151509][T12854] fuse: Unknown parameter '0x0000000000000004' [ 941.078787][T12867] fuse: Bad value for 'fd' [ 941.403521][T12871] fuse: Unknown parameter 'user_id00000000000000000000' [ 941.802301][T12875] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.809963][T12875] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.856638][T12875] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.865884][T12875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.875609][T12875] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.883294][T12875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.945906][T12875] team0: Port device bridge0 added [ 944.014444][T12889] fuse: Unknown parameter 'use00000000000000000000' [ 945.158050][T12899] vivid-007: kernel_thread() failed [ 947.472967][T12923] Device name cannot be null; rc = [-22] [ 948.488934][T12927] fuse: Unknown parameter 'user_id00000000000000000000' [ 950.315185][ T30] audit: type=1326 audit(1755824906.897:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 950.338904][ T30] audit: type=1326 audit(1755824906.897:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 950.362863][ T30] audit: type=1326 audit(1755824906.907:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 950.394132][ T30] audit: type=1326 audit(1755824906.907:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 950.427253][ T30] audit: type=1326 audit(1755824906.907:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 950.532780][ T30] audit: type=1326 audit(1755824906.927:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 951.770716][ T30] audit: type=1326 audit(1755824906.927:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 951.798603][ T30] audit: type=1326 audit(1755824906.927:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 951.826384][ T30] audit: type=1326 audit(1755824906.937:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 951.855772][ T30] audit: type=1326 audit(1755824906.937:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12935 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b0b8ebe9 code=0x7ffc0000 [ 953.854534][T12974] batadv_slave_0: entered promiscuous mode [ 954.222828][T12966] batadv_slave_0: left promiscuous mode [ 954.456717][T12968] Device name cannot be null; rc = [-22] [ 955.210372][T12986] fuse: Bad value for 'fd' [ 958.425950][T13014] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 959.258125][T13026] Device name cannot be null; rc = [-22] [ 962.956653][T13038] Device name cannot be null; rc = [-22] [ 963.564605][T13050] Device name cannot be null; rc = [-22] [ 968.933981][T13074] fuse: Invalid rootmode [ 969.027667][T13077] Device name cannot be null; rc = [-22] [ 970.064581][T13083] netlink: 'syz.1.1533': attribute type 4 has an invalid length. [ 970.966929][T13081] Device name cannot be null; rc = [-22] [ 972.252443][T13092] sysfs: Unknown parameter 'tS' [ 973.270256][T13097] Device name cannot be null; rc = [-22] [ 974.636360][T13103] Device name cannot be null; rc = [-22] [ 977.107109][T13120] : entered promiscuous mode [ 978.456532][T13132] fuse: Invalid rootmode [ 978.703391][T13137] Device name cannot be null; rc = [-22] [ 981.204542][T13143] tipc: Started in network mode [ 981.210379][T13143] tipc: Node identity 5a8adffef6b5, cluster identity 4711 [ 981.218608][T13143] tipc: Enabled bearer , priority 0 [ 981.228063][T13143] syzkaller0: entered promiscuous mode [ 981.235237][T13143] syzkaller0: entered allmulticast mode [ 981.401907][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 981.422814][T13143] tipc: Resetting bearer [ 982.268690][ T9] tipc: Node number set to 2889867262 [ 982.911147][T13143] tipc: Disabling bearer [ 984.444070][T13165] Device name cannot be null; rc = [-22] [ 986.228109][T13176] : entered promiscuous mode [ 986.568344][T13184] Device name cannot be null; rc = [-22] [ 991.731117][T13230] tmpfs: Bad value for 'mpol' [ 991.836906][T13228] xt_hashlimit: max too large, truncated to 1048576 [ 991.899707][T13230] xt_connbytes: Forcing CT accounting to be enabled [ 991.945093][T13230] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 992.335172][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 993.682017][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.730313][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.444592][T13267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1587'. [ 995.837445][T13278] 8021q: VLANs not supported on nlmon0 [ 998.233131][T13302] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 998.253974][T13306] netlink: 'syz.1.1595': attribute type 1 has an invalid length. [ 999.618473][T13306] 8021q: adding VLAN 0 to HW filter on device bond13 [ 999.924576][T13317] bond13: (slave veth19): Enslaving as an active interface with a down link [ 1000.143004][ T9301] bond6: (slave veth0_to_bond): link status definitely down, disabling slave [ 1000.167416][ T9301] bond6: now running without any active interface! [ 1000.980037][T10460] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1001.882384][T10460] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.944895][T10460] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1001.974807][T10460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1002.014868][T10460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1002.027474][T10460] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1002.052411][T10460] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1002.074787][T10460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1002.132672][T10460] usb 4-1: Product: syz [ 1002.164850][T10460] usb 4-1: Manufacturer: syz [ 1002.170046][T10460] usb 4-1: SerialNumber: syz [ 1002.215926][T10460] usb 4-1: config 0 descriptor?? [ 1002.219013][T13346] 8021q: VLANs not supported on nlmon0 [ 1002.481215][T13352] Device name cannot be null; rc = [-22] [ 1003.465359][T10460] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1003.474443][T10460] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1005.652848][T10460] usb 4-1: USB disconnect, device number 5 [ 1007.212731][T13384] netlink: 'syz.3.1611': attribute type 1 has an invalid length. [ 1007.997335][T13384] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1008.942569][T13393] bond10: (slave veth13): Enslaving as an active interface with a down link [ 1008.982009][T13406] 8021q: VLANs not supported on nlmon0 [ 1011.915251][T13419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1618'. [ 1015.194852][T13453] 8021q: VLANs not supported on nlmon0 [ 1016.725257][T13463] netlink: 'syz.5.1630': attribute type 1 has an invalid length. [ 1018.385469][T13477] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1630'. [ 1018.515063][T13463] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1018.579295][T13471] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1020.814534][T13497] netlink: 'syz.2.1637': attribute type 1 has an invalid length. [ 1021.659032][T13508] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1021.685387][T13497] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1022.427713][T13500] bond10: (slave veth17): Enslaving as an active interface with a down link [ 1022.642479][T13522] 8021q: VLANs not supported on nlmon0 [ 1022.878378][T13528] futex_wake_op: syz.4.1642 tries to shift op by -1; fix this program [ 1023.031857][ T5941] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1024.221720][T13540] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 1024.369605][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 1025.247575][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1646'. [ 1025.295268][T13547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1645'. [ 1025.553412][T13540] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1025.625701][T13545] bond12: (slave veth17): Enslaving as an active interface with a down link [ 1026.255911][ T6686] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1026.431013][ T6686] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.488324][ T6686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.518550][ T6686] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1026.573305][ T6686] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1026.588368][ T6686] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1026.600562][ T6686] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1026.613876][ T6686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.682336][ T6686] usb 4-1: Product: syz [ 1026.693731][ T6686] usb 4-1: Manufacturer: syz [ 1026.726114][ T6686] usb 4-1: SerialNumber: syz [ 1026.925800][ T6686] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1027.441572][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1027.476255][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1027.503799][ T5941] usb 2-1: can't read configurations, error -71 [ 1027.628526][T13574] Device name cannot be null; rc = [-22] [ 1030.522045][T13594] vivid-007: kernel_thread() failed [ 1032.427590][ T1612] usb 4-1: USB disconnect, device number 6 [ 1032.498624][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'. [ 1032.756314][T13618] geneve2: entered allmulticast mode [ 1034.401610][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1661'. [ 1034.411741][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1661'. [ 1038.153116][T13643] /dev/nullb0: Can't open blockdev [ 1041.043923][T13668] netlink: 'syz.4.1671': attribute type 1 has an invalid length. [ 1042.056952][T13676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1042.785243][T13675] netlink: 'syz.3.1673': attribute type 11 has an invalid length. [ 1042.865134][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 1044.596064][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1676'. [ 1044.605649][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1676'. [ 1046.206054][T13706] capability: warning: `syz.4.1678' uses 32-bit capabilities (legacy support in use) [ 1046.235573][T13706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1678'. [ 1048.931350][T13734] Device name cannot be null; rc = [-22] [ 1050.325186][T13736] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 1050.338041][T13736] CPU: 0 UID: 0 PID: 13736 Comm: syz.4.1686 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1050.338067][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1050.338081][T13736] Call Trace: [ 1050.338090][T13736] [ 1050.338099][T13736] dump_stack_lvl+0x189/0x250 [ 1050.338130][T13736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1050.338151][T13736] ? __pfx__printk+0x10/0x10 [ 1050.338173][T13736] ? kernfs_path_from_node+0x2c/0x260 [ 1050.338195][T13736] ? kernfs_path_from_node+0x2c/0x260 [ 1050.338214][T13736] ? kernfs_path_from_node+0x2c/0x260 [ 1050.338235][T13736] ? kernfs_path_from_node+0x22c/0x260 [ 1050.338254][T13736] ? kernfs_path_from_node+0x2c/0x260 [ 1050.338277][T13736] sysfs_warn_dup+0x8e/0xa0 [ 1050.338297][T13736] sysfs_do_create_link_sd+0xc0/0x110 [ 1050.338319][T13736] device_add_class_symlinks+0x1cf/0x240 [ 1050.338349][T13736] device_add+0x475/0xb50 [ 1050.338378][T13736] wiphy_register+0x199a/0x26b0 [ 1050.338401][T13736] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1050.338433][T13736] ? __pfx_wiphy_register+0x10/0x10 [ 1050.338471][T13736] ieee80211_register_hw+0x33e1/0x4120 [ 1050.338514][T13736] ? ieee80211_register_hw+0x1471/0x4120 [ 1050.338547][T13736] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1050.338576][T13736] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1050.338610][T13736] ? __hrtimer_setup+0x187/0x210 [ 1050.338627][T13736] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1050.338656][T13736] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1050.338710][T13736] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1050.338733][T13736] ? trace_kmalloc+0x1f/0xd0 [ 1050.338748][T13736] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1050.338766][T13736] ? kstrndup+0xbf/0x160 [ 1050.338797][T13736] hwsim_new_radio_nl+0xea4/0x1b10 [ 1050.338824][T13736] ? __pfx___nla_validate_parse+0x10/0x10 [ 1050.338859][T13736] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1050.338896][T13736] ? __nla_parse+0x40/0x60 [ 1050.338927][T13736] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1050.338956][T13736] genl_family_rcv_msg_doit+0x215/0x300 [ 1050.338982][T13736] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1050.339013][T13736] ? bpf_lsm_capable+0x9/0x20 [ 1050.339035][T13736] ? security_capable+0x7e/0x2e0 [ 1050.339063][T13736] genl_rcv_msg+0x60e/0x790 [ 1050.339088][T13736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1050.339105][T13736] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1050.339143][T13736] netlink_rcv_skb+0x205/0x470 [ 1050.339168][T13736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1050.339187][T13736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1050.339227][T13736] ? down_read+0x1ad/0x2e0 [ 1050.339250][T13736] genl_rcv+0x28/0x40 [ 1050.339265][T13736] netlink_unicast+0x75c/0x8e0 [ 1050.339298][T13736] netlink_sendmsg+0x805/0xb30 [ 1050.339331][T13736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1050.339368][T13736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1050.339384][T13736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1050.339409][T13736] __sock_sendmsg+0x21c/0x270 [ 1050.339433][T13736] ____sys_sendmsg+0x505/0x830 [ 1050.339465][T13736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1050.339501][T13736] ? import_iovec+0x74/0xa0 [ 1050.339528][T13736] ___sys_sendmsg+0x21f/0x2a0 [ 1050.339556][T13736] ? __pfx____sys_sendmsg+0x10/0x10 [ 1050.339618][T13736] ? __fget_files+0x2a/0x420 [ 1050.339636][T13736] ? __fget_files+0x3a0/0x420 [ 1050.339666][T13736] __x64_sys_sendmsg+0x19b/0x260 [ 1050.339694][T13736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1050.339738][T13736] ? do_syscall_64+0xbe/0x3b0 [ 1050.339761][T13736] do_syscall_64+0xfa/0x3b0 [ 1050.339781][T13736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.339797][T13736] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1050.339814][T13736] ? clear_bhb_loop+0x60/0xb0 [ 1050.339835][T13736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.339852][T13736] RIP: 0033:0x7fe20718ebe9 [ 1050.339868][T13736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.339884][T13736] RSP: 002b:00007fe20801d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.339903][T13736] RAX: ffffffffffffffda RBX: 00007fe2073b6090 RCX: 00007fe20718ebe9 [ 1050.339924][T13736] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 1050.339936][T13736] RBP: 00007fe207211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1050.339947][T13736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.339958][T13736] R13: 00007fe2073b6128 R14: 00007fe2073b6090 R15: 00007ffdf794b5b8 [ 1050.339987][T13736] [ 1052.100842][T13755] Device name cannot be null; rc = [-22] [ 1053.966857][T13769] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd4": -EINTR [ 1054.844013][T13763] Invalid source name [ 1054.858129][T13763] UBIFS error (pid: 13763): cannot open "/dev/sg0", error -22 [ 1055.058615][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.433913][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.172358][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1057.172376][ T30] audit: type=1326 audit(1755825013.747:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1057.390167][T13815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1057.401001][T13815] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1057.425217][ T30] audit: type=1326 audit(1755825013.747:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1058.061662][ T30] audit: type=1326 audit(1755825013.767:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1058.137232][T13819] fuse: Unknown parameter '0x0000000000000004' [ 1058.234335][ T30] audit: type=1326 audit(1755825013.767:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1058.311368][ T30] audit: type=1326 audit(1755825013.767:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1058.338742][ T30] audit: type=1326 audit(1755825013.817:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1058.865585][ T30] audit: type=1326 audit(1755825013.817:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1059.079422][ T30] audit: type=1326 audit(1755825013.817:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1059.203605][T13840] netlink: 'syz.3.1708': attribute type 4 has an invalid length. [ 1059.625748][ T30] audit: type=1326 audit(1755825013.827:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1059.648640][ T30] audit: type=1326 audit(1755825013.827:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.3.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f34fb98ebe9 code=0x7ffc0000 [ 1061.024851][ T5941] lo speed is unknown, defaulting to 1000 [ 1061.031033][ T5941] 3yz0: Port: 1 Link DOWN [ 1061.993271][T13848] [U] [ 1062.301326][T13858] No such timeout policy "syz0" [ 1064.384183][T13871] macsec0: entered promiscuous mode [ 1064.444768][T13871] macsec0: entered allmulticast mode [ 1065.491172][T13880] fuse: Unknown parameter 'fd0x0000000000000004' [ 1066.326813][T13898] netlink: 'syz.5.1720': attribute type 4 has an invalid length. [ 1068.148235][T13913] siw: device registration error -23 [ 1068.995123][ T5941] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1069.158909][T13917] netlink: 'syz.5.1725': attribute type 10 has an invalid length. [ 1069.168779][T13917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.177307][T13917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.354806][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.356314][T13917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.372852][T13917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.381493][T13917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.388856][T13917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.444524][T13917] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1069.461618][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.534291][ T5941] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1069.587519][ T5941] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1069.648153][ T5941] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1069.678902][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1069.697225][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.714960][ T5941] usb 4-1: Product: syz [ 1069.725252][ T5941] usb 4-1: Manufacturer: syz [ 1069.735577][ T5941] usb 4-1: SerialNumber: syz [ 1069.813391][ T5941] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1071.268594][ T5903] usb 4-1: USB disconnect, device number 7 [ 1072.538516][T13941] fuse: Unknown parameter 'fd0x0000000000000004' [ 1073.496120][T13949] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1074.707635][T13968] sysfs: Unknown parameter 'tS' [ 1075.803103][T13970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1075.862763][ T5941] lo speed is unknown, defaulting to 1000 [ 1076.643558][T13988] ip6gre1: entered promiscuous mode [ 1078.099059][T13999] fuse: Unknown parameter 'fd0x0000000000000004' [ 1078.189171][T13997] netlink: 'syz.4.1744': attribute type 10 has an invalid length. [ 1078.347935][T13997] team0: Port device wlan1 added [ 1082.551652][T14039] macsec1: entered promiscuous mode [ 1082.557400][T14039] macsec1: entered allmulticast mode [ 1086.189831][T14071] xt_SECMARK: invalid mode: 2 [ 1086.784873][T10460] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1086.859764][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1087.204764][T10460] usb 2-1: Using ep0 maxpacket: 16 [ 1087.259618][T10460] usb 2-1: device descriptor read/all, error -71 [ 1087.298409][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.365073][T14078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1765'. [ 1087.374570][T14078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1765'. [ 1088.643345][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.719576][ T24] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1091.169280][ T24] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1091.182882][ T24] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1091.192842][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1091.202153][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.210513][ T24] usb 3-1: Product: syz [ 1091.215084][ T24] usb 3-1: Manufacturer: syz [ 1091.220185][ T24] usb 3-1: SerialNumber: syz [ 1091.715688][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1091.859575][ T24] usb 3-1: can't set config #1, error -71 [ 1091.867439][ T24] usb 3-1: USB disconnect, device number 14 [ 1092.046959][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.176175][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.391153][T14091] macsec1: entered promiscuous mode [ 1092.396799][T14091] macsec1: entered allmulticast mode [ 1093.143600][ T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1093.154892][ T9] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1093.168319][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1093.711499][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1093.718235][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1093.728119][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.896216][ T9] usb 2-1: can't set config #1, error -71 [ 1094.489899][ T9] usb 2-1: USB disconnect, device number 9 [ 1094.778496][T14117] netlink: 'syz.2.1770': attribute type 4 has an invalid length. [ 1095.394802][ T6686] lo speed is unknown, defaulting to 1000 [ 1095.430555][ T6686] syz0: Port: 1 Link DOWN [ 1098.792789][T14137] loop9: detected capacity change from 0 to 7 [ 1101.915084][T14161] Device name cannot be null; rc = [-22] [ 1103.934405][ T1612] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1104.187136][ T1612] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.278303][ T1612] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.996282][ T1612] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1105.008433][ T1612] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1105.021959][ T1612] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1105.074764][ T1612] usb 2-1: string descriptor 0 read error: -71 [ 1105.081300][ T1612] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1105.255485][ T1612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.292479][ T1612] usb 2-1: can't set config #1, error -71 [ 1105.343020][ T1612] usb 2-1: USB disconnect, device number 10 [ 1112.219901][T14217] /dev/nullb0: Can't open blockdev [ 1116.735563][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.741915][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.084744][T13334] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1117.236957][T13334] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.250950][T13334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.295634][T13334] usb 5-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1117.334806][T13334] usb 5-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1117.479273][T13334] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1117.516501][T13334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1117.530435][T13334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.541960][T13334] usb 5-1: Product: syz [ 1118.285618][T13334] usb 5-1: Manufacturer: syz [ 1118.519143][T13334] usb 5-1: SerialNumber: syz [ 1118.844197][T14272] binder_alloc: 14265: binder_alloc_buf, no vma [ 1118.919608][T13334] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1119.884466][T13334] usb 5-1: USB disconnect, device number 7 [ 1120.365835][T14286] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 1121.606109][T14293] 9pnet: Could not find request transport: fd0x00000000000000060x0000000000000007 [ 1121.754380][T14300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1810'. [ 1121.876793][T14286] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1121.934077][T14295] bond13: (slave veth19): Enslaving as an active interface with a down link [ 1124.521212][T14324] tmpfs: Unknown parameter '0x0000000000000007' [ 1126.841970][ T5941] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1127.694993][ T5941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.748990][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.784733][ T5941] usb 5-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1127.808416][ T5941] usb 5-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1127.822528][ T5941] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1127.851050][ T5941] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1128.061999][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.107169][ T5941] usb 5-1: Product: syz [ 1128.111543][ T5941] usb 5-1: Manufacturer: syz [ 1128.116470][ T5941] usb 5-1: SerialNumber: syz [ 1128.400669][T14360] Bluetooth: (null): Invalid header checksum [ 1128.430962][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1128.430998][ T30] audit: type=1800 audit(1755825085.067:160): pid=14358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1823" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1128.534067][ T76] Bluetooth: (null): Invalid header checksum [ 1128.680837][ T76] Bluetooth: (null): Invalid header checksum [ 1129.509970][ T5941] usb 5-1: can't set config #1, error -71 [ 1129.518825][ T5941] usb 5-1: USB disconnect, device number 8 [ 1131.383872][T14382] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1135.055071][T14420] /dev/nullb0: Can't open blockdev [ 1135.063845][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1835'. [ 1135.080748][T14420] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1138.207442][T13334] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1139.613902][T14457] Device name cannot be null; rc = [-22] [ 1139.690135][T14459] Device name cannot be null; rc = [-22] [ 1142.744836][ T5941] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1144.510816][T14482] devtmpfs: Too few inodes for current use [ 1146.084959][T14493] ip6gre1: entered promiscuous mode [ 1147.661046][T14499] 9pnet: Could not find request transport: fd0x00000000000000060x0000000000000007 [ 1148.474981][T13334] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1148.838830][T14515] bridge3: entered allmulticast mode [ 1149.266844][T13334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.290578][T13334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.328888][T13334] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1149.776166][T13334] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1149.834339][T13334] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1149.844853][T14525] Device name cannot be null; rc = [-22] [ 1150.739487][T13334] usb 3-1: string descriptor 0 read error: -71 [ 1150.746433][T13334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1150.799275][T13334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.812406][T13334] usb 3-1: can't set config #1, error -71 [ 1150.832705][T13334] usb 3-1: USB disconnect, device number 16 [ 1150.957439][T14528] Device name cannot be null; rc = [-22] [ 1156.641085][T14581] 8021q: VLANs not supported on caif0 [ 1156.796233][T14583] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1158.013372][T14598] IPVS: Error joining to the multicast group [ 1160.852012][T14619] netlink: 'syz.2.1878': attribute type 10 has an invalid length. [ 1160.860475][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1878'. [ 1160.892326][T14619] bridge0: port 3(dummy0) entered blocking state [ 1160.904575][T14619] bridge0: port 3(dummy0) entered disabled state [ 1160.918174][T14619] dummy0: entered allmulticast mode [ 1161.772906][T14628] input: syz0 as /devices/virtual/input/input14 [ 1162.448827][T14633] 8021q: VLANs not supported on caif0 [ 1162.457810][T14632] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1881'. [ 1163.587608][T14639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1885'. [ 1164.140484][T14650] loop2: detected capacity change from 0 to 7 [ 1164.435040][T14650] loop2: [ 1164.456045][T14650] loop2: partition table partially beyond EOD, truncated [ 1164.598006][ T5208] loop2: [ 1164.601069][ T5208] loop2: partition table partially beyond EOD, truncated [ 1164.654879][T14653] loop6: detected capacity change from 0 to 524287999 [ 1164.662664][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.670942][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.679373][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.687482][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.695722][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.703741][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.711871][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.720443][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.728608][T14653] ldm_validate_partition_table(): Disk read failed. [ 1164.735662][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.743932][T14653] Buffer I/O error on dev loop6, logical block 0, async page read [ 1164.752120][T14653] Dev loop6: unable to read RDB block 0 [ 1164.759320][T14653] loop6: unable to read partition table [ 1164.765261][T14653] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1165.081360][T14664] syz.2.1889: attempt to access beyond end of device [ 1165.081360][T14664] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1165.095516][T14664] (syz.2.1889,14664,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1165.464851][T14664] (syz.2.1889,14664,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 1166.074372][T14664] (syz.2.1889,14664,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1166.174897][T14664] (syz.2.1889,14664,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1170.383909][T14687] 8021q: VLANs not supported on caif0 [ 1170.539476][T14689] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1896'. [ 1172.150720][T14702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.884898][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1175.274406][T14722] vivid-007: kernel_thread() failed [ 1177.903502][T14749] 8021q: VLANs not supported on caif0 [ 1177.924886][T14746] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1910'. [ 1178.101672][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.115083][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.068841][T14792] netlink: 'syz.1.1919': attribute type 8 has an invalid length. [ 1188.126803][ T5941] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1188.368579][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.397442][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 1189.409222][T14838] lo speed is unknown, defaulting to 1000 [ 1189.756882][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.947992][T14845] netlink: 'syz.4.1931': attribute type 2 has an invalid length. [ 1190.307127][T14845] : entered promiscuous mode [ 1190.649799][ T5941] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1190.815058][ T5941] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1190.842686][ T5941] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1190.856359][ T5941] usb 4-1: string descriptor 0 read error: -71 [ 1191.506253][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1191.609577][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.770150][ T5941] usb 4-1: can't set config #1, error -71 [ 1191.792326][ T5941] usb 4-1: USB disconnect, device number 8 [ 1193.010686][ T5941] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1194.075003][T14879] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1939'. [ 1194.084229][T14879] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1939'. [ 1200.480161][T14920] 8021q: VLANs not supported on caif0 [ 1201.158397][T14932] can0: slcan on ttyS3. [ 1201.448212][T14928] can0 (unregistered): slcan off ttyS3. [ 1201.474391][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1201.906802][T14937] trusted_key: encrypted_key: insufficient parameters specified [ 1201.977067][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.026109][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.887341][ T24] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1202.899197][ T24] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1202.996541][ T24] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1203.005096][ T24] usb 3-1: string descriptor 0 read error: -71 [ 1203.011427][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1203.178878][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.192062][ T24] usb 3-1: can't set config #1, error -71 [ 1203.200593][ T24] usb 3-1: USB disconnect, device number 17 [ 1209.118137][T15004] Device name cannot be null; rc = [-22] [ 1209.665801][T15003] input: syz0 as /devices/virtual/input/input15 [ 1215.249051][T15032] /dev/nullb0: Can't open blockdev [ 1217.224848][ T5941] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1218.539788][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.901556][ T5941] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.913311][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1220.019180][ T5941] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1220.060060][ T5941] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1220.197066][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.213842][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.225540][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1220.543714][ T9] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1220.683421][ T5941] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1220.900986][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1220.989235][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.107302][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.264664][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.273253][ T5941] usb 2-1: Product: syz [ 1222.068128][ T5941] usb 2-1: Manufacturer: syz [ 1222.072871][ T5941] usb 2-1: SerialNumber: syz [ 1222.110547][ T5941] usb 2-1: can't set config #1, error -71 [ 1222.154867][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.163093][ T9] usb 3-1: Product: syz [ 1222.179109][ T9] usb 3-1: Manufacturer: syz [ 1222.189569][ T9] usb 3-1: SerialNumber: syz [ 1222.269766][T15073] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1980'. [ 1223.003978][T15076] input: syz1 as /devices/virtual/input/input16 [ 1223.099798][ T5941] usb 2-1: USB disconnect, device number 11 [ 1223.790524][ T9] usb 3-1: can't set config #1, error -71 [ 1225.538337][ T9] usb 3-1: USB disconnect, device number 18 [ 1226.325218][T15093] dlm: no local IP address has been set [ 1226.331181][T15093] dlm: cannot start dlm midcomms -107 [ 1229.462526][T15113] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1985'. [ 1230.295657][T15118] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 1230.367639][T15118] CPU: 0 UID: 0 PID: 15118 Comm: syz.2.1988 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1230.367668][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1230.367681][T15118] Call Trace: [ 1230.367689][T15118] [ 1230.367698][T15118] dump_stack_lvl+0x189/0x250 [ 1230.367731][T15118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1230.367753][T15118] ? __pfx__printk+0x10/0x10 [ 1230.367788][T15118] ? kernfs_path_from_node+0x2c/0x260 [ 1230.367813][T15118] ? kernfs_path_from_node+0x2c/0x260 [ 1230.367835][T15118] ? kernfs_path_from_node+0x2c/0x260 [ 1230.367860][T15118] ? kernfs_path_from_node+0x22c/0x260 [ 1230.367882][T15118] ? kernfs_path_from_node+0x2c/0x260 [ 1230.367909][T15118] sysfs_warn_dup+0x8e/0xa0 [ 1230.367932][T15118] sysfs_do_create_link_sd+0xc0/0x110 [ 1230.367960][T15118] device_add_class_symlinks+0x1cf/0x240 [ 1230.367995][T15118] device_add+0x475/0xb50 [ 1230.368030][T15118] wiphy_register+0x199a/0x26b0 [ 1230.368075][T15118] ? __pfx_wiphy_register+0x10/0x10 [ 1230.368100][T15118] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1230.368137][T15118] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1230.368171][T15118] ieee80211_register_hw+0x33e1/0x4120 [ 1230.368220][T15118] ? ieee80211_register_hw+0x1471/0x4120 [ 1230.368259][T15118] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1230.368294][T15118] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1230.368335][T15118] ? __hrtimer_setup+0x187/0x210 [ 1230.368355][T15118] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1230.368390][T15118] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1230.368452][T15118] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1230.368479][T15118] ? trace_kmalloc+0x1f/0xd0 [ 1230.368496][T15118] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1230.368517][T15118] ? kstrndup+0xbf/0x160 [ 1230.368552][T15118] hwsim_new_radio_nl+0xea4/0x1b10 [ 1230.368584][T15118] ? __pfx___nla_validate_parse+0x10/0x10 [ 1230.368626][T15118] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1230.368670][T15118] ? __nla_parse+0x40/0x60 [ 1230.368699][T15118] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1230.368731][T15118] genl_family_rcv_msg_doit+0x215/0x300 [ 1230.368763][T15118] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1230.368806][T15118] ? bpf_lsm_capable+0x9/0x20 [ 1230.368832][T15118] ? security_capable+0x7e/0x2e0 [ 1230.368866][T15118] genl_rcv_msg+0x60e/0x790 [ 1230.368896][T15118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1230.368917][T15118] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1230.368962][T15118] netlink_rcv_skb+0x205/0x470 [ 1230.368991][T15118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1230.369013][T15118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1230.369060][T15118] ? down_read+0x1ad/0x2e0 [ 1230.369086][T15118] genl_rcv+0x28/0x40 [ 1230.369104][T15118] netlink_unicast+0x75c/0x8e0 [ 1230.369143][T15118] netlink_sendmsg+0x805/0xb30 [ 1230.369182][T15118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1230.369219][T15118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1230.369239][T15118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1230.369268][T15118] __sock_sendmsg+0x21c/0x270 [ 1230.369296][T15118] ____sys_sendmsg+0x505/0x830 [ 1230.369332][T15118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1230.369374][T15118] ? import_iovec+0x74/0xa0 [ 1230.369405][T15118] ___sys_sendmsg+0x21f/0x2a0 [ 1230.369439][T15118] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.369513][T15118] ? __fget_files+0x2a/0x420 [ 1230.369533][T15118] ? __fget_files+0x3a0/0x420 [ 1230.369569][T15118] __x64_sys_sendmsg+0x19b/0x260 [ 1230.369602][T15118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1230.369664][T15118] do_syscall_64+0xfa/0x3b0 [ 1230.369688][T15118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.369708][T15118] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1230.369728][T15118] ? clear_bhb_loop+0x60/0xb0 [ 1230.369753][T15118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.369778][T15118] RIP: 0033:0x7f552ab8ebe9 [ 1230.369797][T15118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1230.369816][T15118] RSP: 002b:00007f552b9e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1230.369839][T15118] RAX: ffffffffffffffda RBX: 00007f552adb6180 RCX: 00007f552ab8ebe9 [ 1230.369855][T15118] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 1230.369869][T15118] RBP: 00007f552ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1230.369882][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.369895][T15118] R13: 00007f552adb6218 R14: 00007f552adb6180 R15: 00007ffe9e0371f8 [ 1230.369930][T15118] [ 1233.014921][ T6686] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1233.776288][ T6686] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.057005][ T6686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.095795][ T6686] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1234.114677][ T6686] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1234.161377][ T6686] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1234.194920][ T5941] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1234.204531][ T6686] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1234.223893][ T6686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.240459][ T6686] usb 2-1: Product: syz [ 1234.253148][ T6686] usb 2-1: Manufacturer: syz [ 1234.264440][ T6686] usb 2-1: SerialNumber: syz [ 1234.288036][ T6686] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1234.554217][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.575710][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.595118][ T5941] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1237.481205][ T6686] usb 2-1: USB disconnect, device number 12 [ 1237.487678][ T5941] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1237.730737][ T5941] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1237.756836][ T5941] usb 4-1: string descriptor 0 read error: -71 [ 1237.797468][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1237.845959][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.894982][ T5941] usb 4-1: can't set config #1, error -71 [ 1238.389429][ T5941] usb 4-1: USB disconnect, device number 10 [ 1239.037199][T15188] overlayfs: failed to resolve './bus': -2 [ 1239.059430][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 1239.069021][T15188] lo speed is unknown, defaulting to 1000 [ 1239.389743][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.397085][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.404948][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1243.650491][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.671313][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1243.896775][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1244.356065][ T5941] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1244.462025][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1244.470306][ T9] usb 4-1: SerialNumber: syz [ 1244.505238][ T9] usb 4-1: 0:2 : does not exist [ 1245.838771][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.853616][ T5941] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.876864][ T5941] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1246.905314][ T5941] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1247.245628][ T5941] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1247.253239][ T5941] usb 2-1: string descriptor 0 read error: -71 [ 1247.263867][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1247.274517][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.333674][ T9] usb 4-1: USB disconnect, device number 11 [ 1247.349856][ T5941] usb 2-1: can't set config #1, error -71 [ 1247.385457][ T976] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1247.513768][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 1247.524878][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 1247.856270][ T976] usb 5-1: device not accepting address 11, error -71 [ 1247.893875][ T5941] usb 2-1: USB disconnect, device number 13 [ 1248.119663][T14101] udevd[14101]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.993385][T15253] mkiss: ax0: crc mode is auto. [ 1250.523830][ T30] audit: type=1326 audit(1755825207.467:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 1250.549763][ T30] audit: type=1326 audit(1755825207.497:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 1251.115705][T15259] sctp: [Deprecated]: syz.2.2018 (pid 15259) Use of int in maxseg socket option. [ 1251.115705][T15259] Use struct sctp_assoc_value instead [ 1251.630874][T15265] Invalid source name [ 1251.635363][T15265] UBIFS error (pid: 15265): cannot open "/dev/sg0", error -22 [ 1251.750399][T15265] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2017'. [ 1251.774089][ T30] audit: type=1326 audit(1755825207.497:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f552ab8d69f code=0x7ffc0000 [ 1252.247425][ T30] audit: type=1326 audit(1755825207.497:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 1252.674747][T13334] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1252.986655][T13334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.126162][T13334] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.144944][T13334] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1253.163165][T13334] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1253.948968][T13334] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1253.957782][ T30] audit: type=1326 audit(1755825207.497:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 1253.981805][T13334] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1254.109131][T13334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.171320][T13334] usb 2-1: Product: syz [ 1254.178196][ T30] audit: type=1326 audit(1755825207.497:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 1254.223022][T13334] usb 2-1: Manufacturer: syz [ 1254.284888][T13334] usb 2-1: SerialNumber: syz [ 1254.297638][T13334] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1254.314687][ T30] audit: type=1326 audit(1755825207.497:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 1254.996549][ T30] audit: type=1326 audit(1755825207.497:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 1255.086601][ T30] audit: type=1326 audit(1755825207.497:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 1255.151185][ T30] audit: type=1326 audit(1755825207.497:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15256 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f552ab8ebe9 code=0x7ffc0000 [ 1255.179487][ T976] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1255.467823][ T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.479161][ T976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.490494][ T976] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1255.502532][ T976] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1255.516484][ T976] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1255.528094][ T976] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.539226][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.549811][ T976] usb 3-1: Product: syz [ 1255.554334][ T976] usb 3-1: Manufacturer: syz [ 1255.868720][ T976] usb 3-1: SerialNumber: syz [ 1256.104494][ T9] usb 2-1: USB disconnect, device number 14 [ 1256.171286][ T976] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1257.578172][ T5941] usb 3-1: USB disconnect, device number 19 [ 1257.928651][T15309] netlink: 'syz.2.2027': attribute type 1 has an invalid length. [ 1258.560166][T15309] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2027'. [ 1258.864830][T10460] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1258.869919][T15316] xt_CT: No such helper "snmp" [ 1259.168247][T15324] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2028'. [ 1259.762529][T10460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.876102][T10460] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.970029][T10460] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1260.034167][T10460] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1260.103787][T10460] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1260.205701][T10460] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1260.272681][T10460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.367716][T15329] 8021q: VLANs not supported on caif0 [ 1260.373891][T10460] usb 2-1: Product: syz [ 1260.521523][T10460] usb 2-1: Manufacturer: syz [ 1260.532048][T10460] usb 2-1: SerialNumber: syz [ 1260.761845][ T6686] IPVS: starting estimator thread 0... [ 1261.132673][T10460] usb 2-1: can't set config #1, error -71 [ 1261.314714][T15332] IPVS: using max 30 ests per chain, 72000 per kthread [ 1262.273935][T10460] usb 2-1: USB disconnect, device number 15 [ 1263.421602][T15351] can0: slcan on ttyS3. [ 1264.516785][T15351] can0 (unregistered): slcan off ttyS3. [ 1264.605045][ T5941] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1265.609621][ T5941] usb 3-1: device not accepting address 20, error -71 [ 1266.194857][T15371] xt_SECMARK: invalid mode: 2 [ 1267.458513][T13334] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1268.537282][T13334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.547699][T13334] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.559706][T13334] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1268.571912][T13334] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1268.959502][T13334] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1269.249971][T15385] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1269.312419][T15385] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1269.339390][T15385] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1269.467491][T15385] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1269.565209][T15385] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1269.594307][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1269.602028][ T1002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.613154][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1269.629249][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1269.641203][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1269.649621][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1269.743165][T13334] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1270.730932][T13334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.730223][T15385] Bluetooth: hci2: command tx timeout [ 1272.784809][T13334] usb 4-1: can't set config #1, error -71 [ 1272.792525][T13334] usb 4-1: USB disconnect, device number 12 [ 1272.897173][ T1002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.951892][T15412] netlink: 'syz.3.2048': attribute type 1 has an invalid length. [ 1273.774833][ T50] Bluetooth: hci2: command tx timeout [ 1273.843289][ T6686] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1273.944947][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1274.625538][T15412] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1274.635956][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.672002][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.709821][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1274.723039][ T9] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1274.738665][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1274.757074][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.771685][ T1002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.782801][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.806090][ T9] usb 3-1: Product: syz [ 1274.822837][ T9] usb 3-1: Manufacturer: syz [ 1274.831639][T15417] bond5: (slave veth0_to_bond): Releasing active interface [ 1274.839630][ T9] usb 3-1: SerialNumber: syz [ 1274.892192][T15417] bond11: (slave veth0_to_bond): making interface the new active one [ 1274.904913][ T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1274.936064][T15417] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1274.955079][T15383] lo speed is unknown, defaulting to 1000 [ 1274.989048][ T1002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.006682][T15383] lo speed is unknown, defaulting to 1000 [ 1275.262795][ T1002] bridge_slave_1: left allmulticast mode [ 1275.270657][ T1002] bridge_slave_1: left promiscuous mode [ 1275.279168][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.292827][ T1002] bridge_slave_0: left allmulticast mode [ 1275.298775][ T1002] bridge_slave_0: left promiscuous mode [ 1275.305634][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.683952][T15435] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 1275.832291][T15438] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1275.864981][ T50] Bluetooth: hci2: command tx timeout [ 1276.412835][ T5941] usb 3-1: USB disconnect, device number 22 [ 1277.938295][ T50] Bluetooth: hci2: command tx timeout [ 1278.890492][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.908711][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.923404][ T1002] bond0 (unregistering): Released all slaves [ 1280.023588][ T1002] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1280.404740][ T1002] bond1 (unregistering): (slave vlan2): Releasing backup interface [ 1280.431666][ T1002] veth0_to_bond: left promiscuous mode [ 1280.484899][ T1002] bond1 (unregistering): Released all slaves [ 1281.746192][ T1002] bond2 (unregistering): Released all slaves [ 1282.528995][ T1002] bond3 (unregistering): (slave veth5): Releasing backup interface [ 1282.538811][ T1002] bond3 (unregistering): Released all slaves [ 1282.701528][ T1002] bond4 (unregistering): (slave veth7): Releasing active interface [ 1282.714948][ T1002] bond4 (unregistering): Released all slaves [ 1282.729899][ T1002] bond5 (unregistering): Released all slaves [ 1282.893150][ T1002] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1282.907002][ T1002] bond6 (unregistering): Released all slaves [ 1283.069848][ T1002] bond7 (unregistering): Released all slaves [ 1283.232894][ T1002] bond8 (unregistering): (slave veth9): Releasing active interface [ 1283.242904][ T1002] bond8 (unregistering): Released all slaves [ 1283.425632][ T1002] bond9 (unregistering): (slave veth11): Releasing active interface [ 1283.435863][ T1002] bond9 (unregistering): Released all slaves [ 1283.602946][ T1002] bond10 (unregistering): (slave veth13): Releasing active interface [ 1283.613078][ T1002] bond10 (unregistering): Released all slaves [ 1283.787218][ T1002] bond11 (unregistering): (slave veth15): Releasing active interface [ 1283.798735][ T1002] bond11 (unregistering): Released all slaves [ 1283.961893][ T1002] bond12 (unregistering): (slave veth17): Releasing active interface [ 1283.972736][ T1002] bond12 (unregistering): Released all slaves [ 1284.134244][ T1002] bond13 (unregistering): (slave veth19): Releasing active interface [ 1284.144490][ T1002] bond13 (unregistering): Released all slaves [ 1284.173055][T15435] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1284.233694][T15440] bond6: (slave veth0_to_bond): Releasing active interface [ 1284.374348][ T1002] _Z`Ԁ@: left promiscuous mode [ 1286.097940][ T1002] : left promiscuous mode [ 1286.264740][ T5859] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1286.586944][ T5859] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.623582][ T1002] : left promiscuous mode [ 1286.676505][ T5859] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.744614][ T5859] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1286.798199][ T5859] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1286.833702][ T5859] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1287.008925][ T5859] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1287.891698][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.902186][T15490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1287.940039][ T5859] usb 3-1: Product: syz [ 1287.944292][ T5859] usb 3-1: Manufacturer: syz [ 1287.949181][T15383] chnl_net:caif_netlink_parms(): no params data found [ 1288.013402][ T5859] usb 3-1: SerialNumber: syz [ 1288.264196][ T5859] usb 3-1: can't set config #1, error -71 [ 1288.288704][ T5859] usb 3-1: USB disconnect, device number 23 [ 1288.325054][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1289.149364][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.195461][ T1002] [ 1289.198028][ T1002] ====================================================== [ 1289.205154][ T1002] WARNING: possible circular locking dependency detected [ 1289.212216][ T1002] 6.16.0-syzkaller #0 Not tainted [ 1289.217272][ T1002] ------------------------------------------------------ [ 1289.224485][ T1002] kworker/u8:5/1002 is trying to acquire lock: [ 1289.230995][ T1002] ffff88805e824e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 1289.240700][ T1002] [ 1289.240700][ T1002] but task is already holding lock: [ 1289.248381][ T1002] ffff888030fb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 1289.259105][ T1002] [ 1289.259105][ T1002] which lock already depends on the new lock. [ 1289.259105][ T1002] [ 1289.269767][ T1002] [ 1289.269767][ T1002] the existing dependency chain (in reverse order) is: [ 1289.279410][ T1002] [ 1289.279410][ T1002] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 1289.287409][ T1002] lock_acquire+0x120/0x360 [ 1289.292525][ T1002] __mutex_lock+0x182/0xe80 [ 1289.297562][ T1002] ieee80211_open+0xed/0x1f0 [ 1289.302695][ T1002] __dev_open+0x470/0x880 [ 1289.307642][ T1002] netif_open+0xaa/0x170 [ 1289.312585][ T1002] dev_open+0x125/0x260 [ 1289.317265][ T1002] team_add_slave+0xb36/0x2840 [ 1289.322640][ T1002] do_set_master+0x530/0x6d0 [ 1289.327846][ T1002] do_setlink+0xcf0/0x41c0 [ 1289.332873][ T1002] rtnl_newlink+0x160b/0x1c70 [ 1289.338069][ T1002] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1289.343624][ T1002] netlink_rcv_skb+0x205/0x470 [ 1289.348922][ T1002] netlink_unicast+0x75c/0x8e0 [ 1289.354232][ T1002] netlink_sendmsg+0x805/0xb30 [ 1289.359527][ T1002] __sock_sendmsg+0x21c/0x270 [ 1289.364994][ T1002] ____sys_sendmsg+0x505/0x830 [ 1289.370551][ T1002] ___sys_sendmsg+0x21f/0x2a0 [ 1289.375816][ T1002] __x64_sys_sendmsg+0x19b/0x260 [ 1289.381367][ T1002] do_syscall_64+0xfa/0x3b0 [ 1289.386388][ T1002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.392884][ T1002] [ 1289.392884][ T1002] -> #0 (team->team_lock_key#4){+.+.}-{4:4}: [ 1289.401245][ T1002] validate_chain+0xb9b/0x2140 [ 1289.406633][ T1002] __lock_acquire+0xab9/0xd20 [ 1289.412058][ T1002] lock_acquire+0x120/0x360 [ 1289.417078][ T1002] __mutex_lock+0x182/0xe80 [ 1289.422101][ T1002] team_del_slave+0x32/0x1c0 [ 1289.427313][ T1002] team_device_event+0x285/0xa20 [ 1289.432878][ T1002] notifier_call_chain+0x1b3/0x3e0 [ 1289.438688][ T1002] unregister_netdevice_many_notify+0x15d8/0x2320 [ 1289.445710][ T1002] unregister_netdevice_queue+0x33c/0x380 [ 1289.452062][ T1002] _cfg80211_unregister_wdev+0x165/0x590 [ 1289.458217][ T1002] ieee80211_remove_interfaces+0x49a/0x6d0 [ 1289.464631][ T1002] ieee80211_unregister_hw+0x5d/0x2c0 [ 1289.470614][ T1002] mac80211_hwsim_del_radio+0x275/0x460 [ 1289.476687][ T1002] hwsim_exit_net+0x584/0x640 [ 1289.481984][ T1002] ops_undo_list+0x497/0x990 [ 1289.487098][ T1002] cleanup_net+0x4c5/0x800 [ 1289.492040][ T1002] process_scheduled_works+0xade/0x17b0 [ 1289.498107][ T1002] worker_thread+0x8a0/0xda0 [ 1289.503238][ T1002] kthread+0x70e/0x8a0 [ 1289.507834][ T1002] ret_from_fork+0x3fc/0x770 [ 1289.512939][ T1002] ret_from_fork_asm+0x1a/0x30 [ 1289.518223][ T1002] [ 1289.518223][ T1002] other info that might help us debug this: [ 1289.518223][ T1002] [ 1289.528445][ T1002] Possible unsafe locking scenario: [ 1289.528445][ T1002] [ 1289.535898][ T1002] CPU0 CPU1 [ 1289.541686][ T1002] ---- ---- [ 1289.547041][ T1002] lock(&rdev->wiphy.mtx); [ 1289.551566][ T1002] lock(team->team_lock_key#4); [ 1289.559046][ T1002] lock(&rdev->wiphy.mtx); [ 1289.566334][ T1002] lock(team->team_lock_key#4); [ 1289.571417][ T1002] [ 1289.571417][ T1002] *** DEADLOCK *** [ 1289.571417][ T1002] [ 1289.579554][ T1002] 5 locks held by kworker/u8:5/1002: [ 1289.584916][ T1002] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1289.596356][ T1002] #1: ffffc90003c6fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1289.607098][ T1002] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1289.616823][ T1002] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 1289.626954][ T1002] #4: ffff888030fb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 1289.638197][ T1002] [ 1289.638197][ T1002] stack backtrace: [ 1289.644076][ T1002] CPU: 0 UID: 0 PID: 1002 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1289.644095][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1289.644108][ T1002] Workqueue: netns cleanup_net [ 1289.644132][ T1002] Call Trace: [ 1289.644142][ T1002] [ 1289.644151][ T1002] dump_stack_lvl+0x189/0x250 [ 1289.644172][ T1002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1289.644189][ T1002] ? __pfx__printk+0x10/0x10 [ 1289.644211][ T1002] ? print_lock_name+0xde/0x100 [ 1289.644231][ T1002] print_circular_bug+0x2ee/0x310 [ 1289.644253][ T1002] check_noncircular+0x134/0x160 [ 1289.644275][ T1002] validate_chain+0xb9b/0x2140 [ 1289.644295][ T1002] ? bpf_trace_run2+0x186/0x4b0 [ 1289.644323][ T1002] __lock_acquire+0xab9/0xd20 [ 1289.644340][ T1002] ? team_del_slave+0x32/0x1c0 [ 1289.644360][ T1002] lock_acquire+0x120/0x360 [ 1289.644374][ T1002] ? team_del_slave+0x32/0x1c0 [ 1289.644397][ T1002] ? __mutex_trylock_common+0x153/0x260 [ 1289.644419][ T1002] __mutex_lock+0x182/0xe80 [ 1289.644436][ T1002] ? team_del_slave+0x32/0x1c0 [ 1289.644457][ T1002] ? rcu_is_watching+0x15/0xb0 [ 1289.644477][ T1002] ? team_del_slave+0x32/0x1c0 [ 1289.644498][ T1002] ? __pfx___mutex_lock+0x10/0x10 [ 1289.644516][ T1002] ? bond_netdev_event+0xd9/0xe80 [ 1289.644541][ T1002] ? __pfx___mutex_lock+0x10/0x10 [ 1289.644559][ T1002] ? __pfx_bond_netdev_event+0x10/0x10 [ 1289.644586][ T1002] team_del_slave+0x32/0x1c0 [ 1289.644608][ T1002] team_device_event+0x285/0xa20 [ 1289.644625][ T1002] notifier_call_chain+0x1b3/0x3e0 [ 1289.644647][ T1002] unregister_netdevice_many_notify+0x15d8/0x2320 [ 1289.644672][ T1002] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1289.644693][ T1002] ? __lock_acquire+0xab9/0xd20 [ 1289.644716][ T1002] unregister_netdevice_queue+0x33c/0x380 [ 1289.644734][ T1002] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1289.644755][ T1002] _cfg80211_unregister_wdev+0x165/0x590 [ 1289.644780][ T1002] ieee80211_remove_interfaces+0x49a/0x6d0 [ 1289.644808][ T1002] ? __pfx_synchronize_rcu+0x10/0x10 [ 1289.644828][ T1002] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1289.644847][ T1002] ? rcu_is_watching+0x15/0xb0 [ 1289.644867][ T1002] ieee80211_unregister_hw+0x5d/0x2c0 [ 1289.644893][ T1002] mac80211_hwsim_del_radio+0x275/0x460 [ 1289.644919][ T1002] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1289.644946][ T1002] hwsim_exit_net+0x584/0x640 [ 1289.644967][ T1002] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1289.644988][ T1002] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1289.645013][ T1002] ops_undo_list+0x497/0x990 [ 1289.645037][ T1002] ? __pfx_ops_undo_list+0x10/0x10 [ 1289.645063][ T1002] cleanup_net+0x4c5/0x800 [ 1289.645085][ T1002] ? __pfx_cleanup_net+0x10/0x10 [ 1289.645105][ T1002] ? __pfx_cleanup_net+0x10/0x10 [ 1289.645128][ T1002] ? process_scheduled_works+0x9ef/0x17b0 [ 1289.645146][ T1002] process_scheduled_works+0xade/0x17b0 [ 1289.645174][ T1002] ? __pfx_process_scheduled_works+0x10/0x10 [ 1289.645198][ T1002] worker_thread+0x8a0/0xda0 [ 1289.645217][ T1002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1289.645245][ T1002] ? __kthread_parkme+0x7b/0x200 [ 1289.645266][ T1002] kthread+0x70e/0x8a0 [ 1289.645288][ T1002] ? __pfx_worker_thread+0x10/0x10 [ 1289.645304][ T1002] ? __pfx_kthread+0x10/0x10 [ 1289.645324][ T1002] ? _raw_spin_unlock_irq+0x23/0x50 [ 1289.645339][ T1002] ? lockdep_hardirqs_on+0x9c/0x150 [ 1289.645354][ T1002] ? __pfx_kthread+0x10/0x10 [ 1289.645374][ T1002] ret_from_fork+0x3fc/0x770 [ 1289.645391][ T1002] ? __pfx_ret_from_fork+0x10/0x10 [ 1289.645407][ T1002] ? __switch_to_asm+0x39/0x70 [ 1289.645426][ T1002] ? __switch_to_asm+0x33/0x70 [ 1289.645445][ T1002] ? __pfx_kthread+0x10/0x10 [ 1289.645465][ T1002] ret_from_fork_asm+0x1a/0x30 [ 1289.645491][ T1002] [ 1290.011772][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.023331][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 1290.034653][ T9] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 1290.047900][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1290.069085][T15532] Device name cannot be null; rc = [-22] [ 1290.327029][ T1002] team0: Port device wlan1 removed [ 1290.335817][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1290.345089][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.386627][ T9] usb 4-1: can't set config #1, error -71 [ 1290.393994][ T9] usb 4-1: USB disconnect, device number 13 [ 1290.565752][T15383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.574458][T15383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.582601][T15383] bridge_slave_0: entered allmulticast mode [ 1290.591280][T15383] bridge_slave_0: entered promiscuous mode [ 1290.612448][T15383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.621765][T15383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.630928][T15383] bridge_slave_1: entered allmulticast mode [ 1290.638874][T15383] bridge_slave_1: entered promiscuous mode [ 1290.663462][ T1002] hsr_slave_0: left promiscuous mode [ 1290.670045][ T1002] hsr_slave_1: left promiscuous mode [ 1290.676770][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.684218][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.694362][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1290.702251][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.712585][ T1002] veth1_macvtap: left promiscuous mode [ 1290.718598][ T1002] veth0_macvtap: left promiscuous mode [ 1290.724355][ T1002] veth1_vlan: left promiscuous mode [ 1291.162152][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 1291.197502][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 1291.411220][T15383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.436188][T15383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.506983][T15383] team0: Port device team_slave_0 added [ 1291.528613][T15383] team0: Port device team_slave_1 added [ 1291.590483][T15383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.604182][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.645822][T15383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.679045][T15383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.686773][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.715010][T15383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.733397][ T1002] ------------[ cut here ]------------ [ 1291.739195][ T1002] WARNING: CPU: 1 PID: 1002 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x270/0x2f0 [ 1291.749429][ T1002] Modules linked in: [ 1291.753541][ T1002] CPU: 1 UID: 0 PID: 1002 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1291.763877][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1291.774882][ T1002] Workqueue: netns cleanup_net [ 1291.779928][ T1002] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 1291.786464][ T1002] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 1291.806533][ T1002] RSP: 0018:ffffc90003c6f898 EFLAGS: 00010293 [ 1291.812631][ T1002] RAX: ffffffff8a0f293f RBX: ffff8880237dc100 RCX: ffff888025f43c00 [ 1291.820705][ T1002] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888025f43c00 [ 1291.828766][ T1002] RBP: ffffc90003c6f9b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 1291.836986][ T1002] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 1291.845057][ T1002] R13: 1ffff9200078df40 R14: ffff8880237dd5c0 R15: dffffc0000000000 [ 1291.853139][ T1002] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 1291.862348][ T1002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1291.869136][ T1002] CR2: 00007efe527c7440 CR3: 000000007e5fc000 CR4: 00000000003526f0 [ 1291.877382][ T1002] Call Trace: [ 1291.880767][ T1002] [ 1291.883764][ T1002] xfrm_net_exit+0x2d/0x70 [ 1291.888337][ T1002] ops_undo_list+0x497/0x990 [ 1291.893152][ T1002] ? __pfx_ops_undo_list+0x10/0x10 [ 1291.898345][ T1002] cleanup_net+0x4c5/0x800 [ 1291.902795][ T1002] ? __pfx_cleanup_net+0x10/0x10 [ 1291.907899][ T1002] ? __pfx_cleanup_net+0x10/0x10 [ 1291.912881][ T1002] ? process_scheduled_works+0x9ef/0x17b0 [ 1291.918692][ T1002] process_scheduled_works+0xade/0x17b0 [ 1291.924450][ T1002] ? __pfx_process_scheduled_works+0x10/0x10 [ 1291.930523][ T1002] worker_thread+0x8a0/0xda0 [ 1291.935219][ T1002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1291.941644][ T1002] ? __kthread_parkme+0x7b/0x200 [ 1291.946748][ T1002] kthread+0x70e/0x8a0 [ 1291.950965][ T1002] ? __pfx_worker_thread+0x10/0x10 [ 1291.956375][ T1002] ? __pfx_kthread+0x10/0x10 [ 1291.961186][ T1002] ? _raw_spin_unlock_irq+0x23/0x50 [ 1291.966646][ T1002] ? lockdep_hardirqs_on+0x9c/0x150 [ 1291.971957][ T1002] ? __pfx_kthread+0x10/0x10 [ 1291.976689][ T1002] ret_from_fork+0x3fc/0x770 [ 1291.981316][ T1002] ? __pfx_ret_from_fork+0x10/0x10 [ 1291.986559][ T1002] ? __switch_to_asm+0x39/0x70 [ 1291.991415][ T1002] ? __switch_to_asm+0x33/0x70 [ 1291.996330][ T1002] ? __pfx_kthread+0x10/0x10 [ 1292.000949][ T1002] ret_from_fork_asm+0x1a/0x30 [ 1292.005993][ T1002] [ 1292.009175][ T1002] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1292.016660][ T1002] CPU: 1 UID: 0 PID: 1002 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1292.026758][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1292.036951][ T1002] Workqueue: netns cleanup_net [ 1292.041938][ T1002] Call Trace: [ 1292.045327][ T1002] [ 1292.048275][ T1002] dump_stack_lvl+0x99/0x250 [ 1292.053384][ T1002] ? __asan_memcpy+0x40/0x70 [ 1292.058008][ T1002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1292.063234][ T1002] ? __pfx__printk+0x10/0x10 [ 1292.067871][ T1002] panic+0x2db/0x790 [ 1292.071800][ T1002] ? __pfx_panic+0x10/0x10 [ 1292.076331][ T1002] ? ret_from_fork_asm+0x1a/0x30 [ 1292.081650][ T1002] __warn+0x31b/0x4b0 [ 1292.085679][ T1002] ? xfrm_state_fini+0x270/0x2f0 [ 1292.090649][ T1002] ? xfrm_state_fini+0x270/0x2f0 [ 1292.095811][ T1002] report_bug+0x2be/0x4f0 [ 1292.100248][ T1002] ? xfrm_state_fini+0x270/0x2f0 [ 1292.105434][ T1002] ? xfrm_state_fini+0x270/0x2f0 [ 1292.110566][ T1002] ? xfrm_state_fini+0x272/0x2f0 [ 1292.115622][ T1002] handle_bug+0x84/0x160 [ 1292.119959][ T1002] exc_invalid_op+0x1a/0x50 [ 1292.124841][ T1002] asm_exc_invalid_op+0x1a/0x20 [ 1292.129893][ T1002] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 1292.135487][ T1002] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 1292.156092][ T1002] RSP: 0018:ffffc90003c6f898 EFLAGS: 00010293 [ 1292.162270][ T1002] RAX: ffffffff8a0f293f RBX: ffff8880237dc100 RCX: ffff888025f43c00 [ 1292.170450][ T1002] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888025f43c00 [ 1292.178441][ T1002] RBP: ffffc90003c6f9b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 1292.186508][ T1002] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 1292.194505][ T1002] R13: 1ffff9200078df40 R14: ffff8880237dd5c0 R15: dffffc0000000000 [ 1292.202577][ T1002] ? xfrm_state_fini+0x26f/0x2f0 [ 1292.207636][ T1002] ? xfrm_state_fini+0x26f/0x2f0 [ 1292.212663][ T1002] xfrm_net_exit+0x2d/0x70 [ 1292.217078][ T1002] ops_undo_list+0x497/0x990 [ 1292.221767][ T1002] ? __pfx_ops_undo_list+0x10/0x10 [ 1292.226907][ T1002] cleanup_net+0x4c5/0x800 [ 1292.231415][ T1002] ? __pfx_cleanup_net+0x10/0x10 [ 1292.236621][ T1002] ? __pfx_cleanup_net+0x10/0x10 [ 1292.241562][ T1002] ? process_scheduled_works+0x9ef/0x17b0 [ 1292.247277][ T1002] process_scheduled_works+0xade/0x17b0 [ 1292.252927][ T1002] ? __pfx_process_scheduled_works+0x10/0x10 [ 1292.258995][ T1002] worker_thread+0x8a0/0xda0 [ 1292.263584][ T1002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1292.269929][ T1002] ? __kthread_parkme+0x7b/0x200 [ 1292.274963][ T1002] kthread+0x70e/0x8a0 [ 1292.279141][ T1002] ? __pfx_worker_thread+0x10/0x10 [ 1292.284267][ T1002] ? __pfx_kthread+0x10/0x10 [ 1292.288886][ T1002] ? _raw_spin_unlock_irq+0x23/0x50 [ 1292.294097][ T1002] ? lockdep_hardirqs_on+0x9c/0x150 [ 1292.299470][ T1002] ? __pfx_kthread+0x10/0x10 [ 1292.304201][ T1002] ret_from_fork+0x3fc/0x770 [ 1292.308808][ T1002] ? __pfx_ret_from_fork+0x10/0x10 [ 1292.314022][ T1002] ? __switch_to_asm+0x39/0x70 [ 1292.318788][ T1002] ? __switch_to_asm+0x33/0x70 [ 1292.323641][ T1002] ? __pfx_kthread+0x10/0x10 [ 1292.328324][ T1002] ret_from_fork_asm+0x1a/0x30 [ 1292.333135][ T1002] [ 1292.336845][ T1002] Kernel Offset: disabled [ 1292.341161][ T1002] Rebooting in 86400 seconds..