last executing test programs: 15.480180884s ago: executing program 0 (id=698): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r0 = bpf$PROG_LOAD(0x2, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x12, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) close_range(r0, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x92082) openat$tun(0xffffff9c, &(0x7f0000000340), 0x200000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_io_uring_setup(0x82b, &(0x7f0000000500)={0x0, 0x14, 0x0, 0x3, 0x80}, &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000440)="6fb73e", 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x8, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1) syz_open_procfs(0x0, &(0x7f0000000580)='stack\x00') 14.579687537s ago: executing program 0 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x4c, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x4, 0x0, {0x329, 0xf70, 0x0, 0x319, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf, 0xa, 0x48}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) write(r0, &(0x7f0000001940)="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", 0x1000) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9c0100001900010025bd7000ffdbdf251d01020008000500f9f7fdfe15000300000000c005030000a4887e803004673603"], 0x19c}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r8, 0x747}], 0x1, 0x0, 0x0, 0x0) signalfd4(r8, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) r9 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 13.692531118s ago: executing program 0 (id=705): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0xf00, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 13.687990616s ago: executing program 0 (id=707): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file1\x00', 0x200000, 0x14a) openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x80000, 0x101) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x4, 0x20000000, 0x23, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x40, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r3, 0x6700000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r4, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcd}, 0x8) sendmmsg$inet6(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xb9, 0x1, [0x8]}, 0xa) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 13.455555876s ago: executing program 0 (id=709): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1af90000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet(0x2, 0x3, 0x9) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000001600)=0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000001640)=0x9) readv(r7, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/146, 0x92}], 0x1) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 13.069400814s ago: executing program 0 (id=712): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) mkdir(0x0, 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$tmpfs(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1044, 0x0) r2 = socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r0, 0xffffffff, &(0x7f0000002080)) r3 = io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0xd4}) syz_io_uring_setup(0x49e, &(0x7f0000000380)={0x0, 0xd74d, 0x20, 0x0, 0x19f, 0x0, r3}, 0x0, &(0x7f0000000280)) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x1f8, 0x0, 0x22a, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf26}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff0000}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "95bdb858fda82909cd3a4fd7829a60301ce44a94c9cc2adb53b94183762de0868f8648b51885b78f50c906b9fe218f970115506dc7667000189a00e6ec27a5ad7ed313732ad95b93efdec387f9fa9defc528661b74a544b9a6e4d95f64caa6c58aa12457b3f19d1e2d0d82ddf73f71757762864beb0c867a02a86cdc7d459c6813ee8fd9a509c253a0236ba5997d8727da2bc6fd41d8af15332d4aa80f1ec1d5ee6bfd2d745e111106810760a460cf8e92"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff2a}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20024800}, 0x20008010) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) 12.969306375s ago: executing program 32 (id=712): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) mkdir(0x0, 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$tmpfs(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1044, 0x0) r2 = socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r0, 0xffffffff, &(0x7f0000002080)) r3 = io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0xd4}) syz_io_uring_setup(0x49e, &(0x7f0000000380)={0x0, 0xd74d, 0x20, 0x0, 0x19f, 0x0, r3}, 0x0, &(0x7f0000000280)) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x1f8, 0x0, 0x22a, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf26}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff0000}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "95bdb858fda82909cd3a4fd7829a60301ce44a94c9cc2adb53b94183762de0868f8648b51885b78f50c906b9fe218f970115506dc7667000189a00e6ec27a5ad7ed313732ad95b93efdec387f9fa9defc528661b74a544b9a6e4d95f64caa6c58aa12457b3f19d1e2d0d82ddf73f71757762864beb0c867a02a86cdc7d459c6813ee8fd9a509c253a0236ba5997d8727da2bc6fd41d8af15332d4aa80f1ec1d5ee6bfd2d745e111106810760a460cf8e92"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff2a}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20024800}, 0x20008010) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) 9.277788097s ago: executing program 1 (id=738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) 8.45982676s ago: executing program 1 (id=735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000fdffff"], &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x80, @private1}}, 0x0, 0x0, 0x3f8, 0x1000, 0x11, 0x5c}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000680)={{0xa, 0x0, 0xc, 0x8, 'syz1\x00', 0x1}, 0x4, 0x40, 0x80, r2, 0x0, 0x10000, 'syz0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff200000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000008000008500000086000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 6.656183404s ago: executing program 1 (id=747): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x814}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) open_tree(r4, &(0x7f0000000280)='./file0\x00', 0x101) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket(0xf, 0x1, 0x3a) 6.120107002s ago: executing program 4 (id=751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000de"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (fail_nth: 4) 5.969700605s ago: executing program 4 (id=752): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0xfffffffd}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 4.722352796s ago: executing program 4 (id=756): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r0 = bpf$PROG_LOAD(0x2, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x12, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) close_range(r0, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x92082) openat$tun(0xffffff9c, &(0x7f0000000340), 0x200000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_io_uring_setup(0x82b, &(0x7f0000000500)={0x0, 0x14, 0x0, 0x3, 0x80}, &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000440)="6fb73e", 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x8, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1) syz_open_procfs(0x0, &(0x7f0000000580)='stack\x00') 4.519297643s ago: executing program 1 (id=758): ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x94, &(0x7f0000000000)={0x9, 0x1b8f, 0x5}}) r0 = openat$mice(0xffffff9c, &(0x7f0000000100), 0x2) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/26, 0x1a}, {&(0x7f0000001380)=""/85, 0x55}, {&(0x7f0000001400)=""/123, 0x7b}], 0x8) r1 = dup(r0) sendmsg$key(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x2, 0x8, 0xfd, 0x3, 0x3, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x0, 0x4e23}]}, 0x18}}, 0x8005) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001580)={0x0, 'wg2\x00', {}, 0xc}) sendmsg$NFT_BATCH(r1, &(0x7f00000018c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001880)={&(0x7f0000001600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x141a2b487ed34ad4, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSET={0x150, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2b}, @NFTA_SET_USERDATA={0x81, 0xd, 0x1, 0x0, "864fc87d67ccb0528d8ff3ce98289376ec3128e52bf9a423842d7e347df423aaa79dfef5f5b700507da0b9edec8b78701507dbe7f5919742054d84c4c3af33fd4d5981cebf1aef84ac2f0f8d5c72b25f361d0cea6e800be9a3b5a11da7ba745f17540f9c4cd027e8fff3475485c06d03dd43318b0e92da03b0f479bd48"}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_USERDATA={0x74, 0xd, 0x1, 0x0, "1951990ffcd9cca21836c7831bdb6efb6e12d0f37ba9e5737d4c6d12d9ced31b8aca3358c2618831678206022c8c1bc47a84b1aef776800f4d17cadf8c720c09fc8139aa40d643ed3c61d8a9f66f4dc13bf8968162806bd4a2cef87d85725dab582a03102fa105b00d01a1638947ec6a"}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x24c}, 0x1, 0x0, 0x0, 0x40840}, 0xc1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000001900)=r1, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001940)={'veth1_macvtap\x00', 0x0}) r3 = dup3(r0, r0, 0x0) close_range(r3, r1, 0x2) bind$inet6(r3, &(0x7f0000001980)={0xa, 0x4e20, 0x40, @local, 0x7fff}, 0x1c) r4 = openat$drirender128(0xffffff9c, &(0x7f00000019c0), 0x84000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001a40)={0x1, 0x0, &(0x7f0000001a00)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000001a80)={r5, 0x0, 0x2, 0x7bf}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r6, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfd2}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x962}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd10}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffbff}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x718b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @loopback, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x28b1}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000001d80)=0x6) r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000001e80), 0x402000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0x7, &(0x7f0000001dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc2}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}]}, &(0x7f0000001e00)='GPL\x00', 0x8001, 0x6, &(0x7f0000001e40)=""/6, 0x41100, 0xc, '\x00', r2, 0x25, r7, 0x8, &(0x7f0000001ec0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001f00)=[{0x2, 0x2, 0x7, 0x6}], 0x10, 0x6}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000002000)={0x1, [0x0]}, &(0x7f0000002040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000002080)={r8, 0x1}, 0x8) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd0}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004040}, 0x24002800) syz_open_dev$dmmidi(&(0x7f0000002200), 0xc, 0x468000) sendmsg$key(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002240)={0x2, 0x0, 0x9, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfd}, 0x10}}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000002300)={0x2, 0x2, 0x30000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r9 = openat$uinput(0xffffff9c, &(0x7f0000002340), 0x2, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) 4.399957122s ago: executing program 1 (id=759): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_usbip_server_init(0x6) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x6, 0xfffd, 0x4}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)}, 0x58) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x31) r8 = dup(r6) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x2e0a}, 0x7, [0x4, 0x1, 0x802, 0x5, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8009, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x4, 0x7, 0x5, 0xdd5a, 0x0, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0xb, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7f, 0x1, 0x9422, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x2], [0x2, 0x40, 0x8, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x6, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x80007, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0xa, 0x7ffd, 0x7ff, 0x8, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c, 0x3], [0x7d, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0xc, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x100, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0xa, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xf, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 3.795942531s ago: executing program 4 (id=764): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0xfdef) 3.369969289s ago: executing program 2 (id=765): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x0, @void}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) 3.116081797s ago: executing program 3 (id=766): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000024d01d304c6489f75ae77a10", @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800800"], 0x38}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) fchmod(r3, 0x148) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) chdir(&(0x7f0000000140)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0x80000300, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x20, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}e\xd6So\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x8, 0xe9, 0x0, 0x0, @pid}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) quotactl_fd$Q_GETINFO(r7, 0xffffffff80000500, 0x0, 0x0) utimensat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r4, r5/1000+60000}, {0x0, 0x2710}}, 0x100) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 3.089654625s ago: executing program 3 (id=767): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001004a0000000000000000000000000100000000ffffe000000200000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a7a"], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000081}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3}, 0x9, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x64833, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/153, 0x99) 2.8280356s ago: executing program 4 (id=768): syz_open_dev$tty20(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000d23000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x83) socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100000000000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 2.82574873s ago: executing program 2 (id=769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x8000000000000b9, 0x48000) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x60, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$can_bcm(r3, 0x0, 0x2404c000) r5 = socket(0x2a, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10) socket(0x10, 0x803, 0x0) close(0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r6, 0x40096102, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.98082602s ago: executing program 2 (id=770): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000010000080045"], 0x0) 1.980514924s ago: executing program 3 (id=771): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x0, @void}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) 1.869740477s ago: executing program 2 (id=772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file1\x00', 0x0, 0x121889c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000080)={0x2, 0x32314742, 0x2, @discrete={0x7, 0xbe78}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESDEC=r6, @ANYRESOCT=r8, @ANYBLOB="00000000000000000000000000000000000010000000000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 710.888949ms ago: executing program 3 (id=773): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) iopl(0xb) socket$igmp(0x2, 0x3, 0x2) syz_usbip_server_init(0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) iopl(0xb) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_usbip_server_init(0x4) (async) 699.932656ms ago: executing program 1 (id=774): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2255, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x56}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) syz_emit_vhci(0x0, 0x7) mount$cgroup(0x8cffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8000, &(0x7f0000000480)={[{@name={'name', 0x3d, 'nfs\x00'}}]}) 528.736872ms ago: executing program 3 (id=775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000100)={0x24, 0xa, 0x2, "3258e54601cccf040000000000000000000000130200ffffff00000000b28d00", 0x3631564e}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffff9c, &(0x7f0000000300), 0xa0000, 0x0) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 159.026036ms ago: executing program 2 (id=776): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0x2c0, 0x2c0, 0x0, 0x0, 0x2c0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ipv6header={{0x24}, {0xc2, 0x40}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x17, 0x35}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x1f}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x58c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x110, r0, 0x348d3000) r1 = openat$tun(0xffffff9c, &(0x7f0000000580), 0x800, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f00000005c0)) 158.100855ms ago: executing program 2 (id=777): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) close(0x3) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000040)={0x0, 0x2, [0x4, 0x0, 0x6, 0x7, 0x3, 0x5]}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r2, 0x0) io_uring_setup(0x664, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x29d}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000680)=""/219, 0xdb) r4 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x80104d12, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20) 140.17931ms ago: executing program 3 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x8000000000000b9, 0x48000) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x60, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$can_bcm(r3, 0x0, 0x2404c000) r5 = socket(0x2a, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10) socket(0x10, 0x803, 0x0) close(0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r6, 0x40096102, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) 0s ago: executing program 4 (id=779): r0 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x8, {0xffffffffffffffdf, 0x7, 0x9, 0x803, 0xf7c, 0x800000000000d615, 0x80003fa, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x1c}}, {0x0, 0x1f}}}, 0xa0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000500050043cd52d8050001000700000005000408000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c009f2e2135084000000010"], 0x5c}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) fcntl$setlease(r6, 0x400, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'gretap0\x00', r4, 0x1, 0x1, 0x9, 0x2, {{0x18, 0x4, 0x3, 0x2c, 0x60, 0x64, 0x0, 0xb, 0x2f, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x3f, 0x3, [{0x6, 0x9, "bae6e6572c2452"}, {0x6, 0x7, "3d87aa41b3"}, {0x1, 0xa, "52c4cf15757d408d"}, {0x5, 0x10, "549006099a9faf7cce48c0060453"}, {0x1, 0xc, "40dcfd2200778cda6b01"}, {0x7, 0x3, "e3"}]}, @timestamp={0x44, 0xc, 0x69, 0x0, 0x7, [0x401, 0x9e]}, @noop]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@deltfilter={0x58, 0x2d, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x5, 0xfff2}, {0x5, 0x2}, {0x0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x29}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x87}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r11, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000380)={r11, @in6={{0xa, 0x4e23, 0x5c, @rand_addr=' \x01\x00', 0xe}}, 0x4, 0x6, 0x81, 0x9, 0x3}, &(0x7f0000000080)=0x98) 0s ago: executing program 3 (id=781): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x49, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x6d56d000) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "cb2891", 0x20, 0x2b, 0x0, @remote, @local, {[@fragment={0x33, 0x0, 0xf, 0x1, 0x0, 0x19, 0x65}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x401}}}}}}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43709' (ED25519) to the list of known hosts. [ 48.061863][ T5912] cgroup: Unknown subsys name 'net' [ 48.186385][ T5912] cgroup: Unknown subsys name 'cpuset' [ 48.191320][ T5912] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.121041][ T5912] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.549975][ T5296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.566020][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.568331][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.571432][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.574387][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.576895][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.579222][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.581730][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.584356][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.587069][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.587163][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.590567][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.592318][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.593697][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.596463][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.598652][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.601129][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.602119][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.606679][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.607300][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.880318][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 52.892068][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 52.998616][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 53.010479][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 53.053881][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.056902][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.060016][ T5934] bridge_slave_0: entered allmulticast mode [ 53.062945][ T5934] bridge_slave_0: entered promiscuous mode [ 53.078923][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.081504][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.084447][ T5934] bridge_slave_1: entered allmulticast mode [ 53.088108][ T5934] bridge_slave_1: entered promiscuous mode [ 53.091792][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.094472][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.096850][ T5936] bridge_slave_0: entered allmulticast mode [ 53.099473][ T5936] bridge_slave_0: entered promiscuous mode [ 53.107642][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.110084][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.113067][ T5936] bridge_slave_1: entered allmulticast mode [ 53.116186][ T5936] bridge_slave_1: entered promiscuous mode [ 53.160809][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.174739][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.181211][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.215033][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.269498][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.271821][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.274280][ T5935] bridge_slave_0: entered allmulticast mode [ 53.276991][ T5935] bridge_slave_0: entered promiscuous mode [ 53.312161][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.314587][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.316946][ T5935] bridge_slave_1: entered allmulticast mode [ 53.319716][ T5935] bridge_slave_1: entered promiscuous mode [ 53.329909][ T5934] team0: Port device team_slave_0 added [ 53.333861][ T5936] team0: Port device team_slave_0 added [ 53.341958][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.344759][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.347075][ T5945] bridge_slave_0: entered allmulticast mode [ 53.349708][ T5945] bridge_slave_0: entered promiscuous mode [ 53.353988][ T5934] team0: Port device team_slave_1 added [ 53.357337][ T5936] team0: Port device team_slave_1 added [ 53.365227][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.367880][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.370331][ T5945] bridge_slave_1: entered allmulticast mode [ 53.374240][ T5945] bridge_slave_1: entered promiscuous mode [ 53.398613][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.444272][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.447639][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.449940][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.457832][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.466106][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.469223][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.471302][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.479364][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.491912][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.494344][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.502595][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.507894][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.511065][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.513243][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.521438][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.559967][ T5935] team0: Port device team_slave_0 added [ 53.564151][ T5945] team0: Port device team_slave_0 added [ 53.568913][ T5945] team0: Port device team_slave_1 added [ 53.572394][ T5935] team0: Port device team_slave_1 added [ 53.618556][ T5934] hsr_slave_0: entered promiscuous mode [ 53.620805][ T5934] hsr_slave_1: entered promiscuous mode [ 53.634857][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.637299][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.646982][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.656675][ T5936] hsr_slave_0: entered promiscuous mode [ 53.658914][ T5936] hsr_slave_1: entered promiscuous mode [ 53.661450][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 53.663774][ T5936] Cannot create hsr debugfs directory [ 53.666215][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.668376][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.677528][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.681866][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.684853][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.694916][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.707092][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.709679][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.718640][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.797697][ T5945] hsr_slave_0: entered promiscuous mode [ 53.800245][ T5945] hsr_slave_1: entered promiscuous mode [ 53.803107][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 53.805312][ T5945] Cannot create hsr debugfs directory [ 53.876452][ T5935] hsr_slave_0: entered promiscuous mode [ 53.878823][ T5935] hsr_slave_1: entered promiscuous mode [ 53.880898][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 53.882806][ T5935] Cannot create hsr debugfs directory [ 54.082545][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.092032][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.101637][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.106244][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.145088][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.152526][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.164286][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.175453][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.215449][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.225410][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.236813][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.245311][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.310135][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.329468][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.341036][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.347584][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.376901][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.408471][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.427186][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.430162][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.440044][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.443970][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.446212][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.479609][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.515823][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.518757][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.527061][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.529852][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.549187][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.589570][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.602304][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.604699][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.616425][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.625868][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.628951][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.661365][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.678279][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.681375][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.685037][ T5937] Bluetooth: hci2: command tx timeout [ 54.685042][ T5951] Bluetooth: hci3: command tx timeout [ 54.689788][ T5942] Bluetooth: hci1: command tx timeout [ 54.694196][ T5942] Bluetooth: hci0: command tx timeout [ 54.706810][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.709758][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.782325][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.807385][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.847706][ T5934] veth0_vlan: entered promiscuous mode [ 54.861418][ T5934] veth1_vlan: entered promiscuous mode [ 54.880312][ T5945] veth0_vlan: entered promiscuous mode [ 54.893456][ T5945] veth1_vlan: entered promiscuous mode [ 54.921398][ T5934] veth0_macvtap: entered promiscuous mode [ 54.929010][ T5934] veth1_macvtap: entered promiscuous mode [ 54.941091][ T5945] veth0_macvtap: entered promiscuous mode [ 54.949360][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.956463][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.961434][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.967431][ T5945] veth1_macvtap: entered promiscuous mode [ 54.978577][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.980845][ T225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.984523][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.989242][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.992684][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.017867][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.050962][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.070814][ T1254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.077409][ T1254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.080118][ T1254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.095631][ T1254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.099977][ T5936] veth0_vlan: entered promiscuous mode [ 55.104399][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.107279][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.153508][ T5936] veth1_vlan: entered promiscuous mode [ 55.161556][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.163502][ T5935] veth0_vlan: entered promiscuous mode [ 55.164349][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.184577][ T5935] veth1_vlan: entered promiscuous mode [ 55.191198][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.195125][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.209991][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.229816][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.234435][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.271107][ T5936] veth0_macvtap: entered promiscuous mode [ 55.282411][ T5935] veth0_macvtap: entered promiscuous mode [ 55.296240][ T5935] veth1_macvtap: entered promiscuous mode [ 55.299816][ T5936] veth1_macvtap: entered promiscuous mode [ 55.315141][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.332034][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.341771][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.351810][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.357825][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.360798][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.377422][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.384000][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.388514][ T6030] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 55.443661][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.446793][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.451176][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.469775][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.482125][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.492558][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.540494][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.542868][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.560583][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.564004][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.621381][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.624092][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.075641][ T6069] afs: Unknown parameter ' ' [ 56.078269][ T6069] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 56.104042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.486036][ T6076] process 'syz.1.23' launched './file1' with NULL argv: empty string added [ 56.516812][ T6080] afs: Unknown parameter ' ' [ 56.517513][ T6080] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 56.771276][ T5942] Bluetooth: hci3: command tx timeout [ 56.775172][ T5942] Bluetooth: hci0: command tx timeout [ 56.777231][ T5942] Bluetooth: hci1: command tx timeout [ 56.779727][ T5942] Bluetooth: hci2: command tx timeout [ 56.963172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.167940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.253735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 57.409852][ T6094] lo speed is unknown, defaulting to 1000 [ 57.411785][ T6094] lo speed is unknown, defaulting to 1000 [ 57.415522][ T6094] lo speed is unknown, defaulting to 1000 [ 57.419436][ T6094] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.425313][ T6094] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 57.439729][ T6094] lo speed is unknown, defaulting to 1000 [ 57.442814][ T6094] lo speed is unknown, defaulting to 1000 [ 57.478596][ T6099] afs: Unknown parameter ' ' [ 57.481276][ T6099] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 57.514164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.517021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.541863][ T6094] lo speed is unknown, defaulting to 1000 [ 57.550938][ T6094] lo speed is unknown, defaulting to 1000 [ 58.004312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.007197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.313776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 58.499525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.608112][ T6108] siw: device registration error -23 [ 58.686026][ T6112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.34'. [ 58.762761][ T6118] syz.3.37 uses obsolete (PF_INET,SOCK_PACKET) [ 58.854652][ T5942] Bluetooth: hci1: command tx timeout [ 58.854694][ T5951] Bluetooth: hci0: command tx timeout [ 58.856675][ T5942] Bluetooth: hci3: command tx timeout [ 58.860640][ T5937] Bluetooth: hci2: command tx timeout [ 58.945732][ T6126] 9pnet_virtio: no channels available for device syz [ 60.933939][ T5947] Bluetooth: hci2: command tx timeout [ 60.935874][ T5942] Bluetooth: hci0: command tx timeout [ 60.936274][ T5947] Bluetooth: hci1: command tx timeout [ 60.938135][ T5937] Bluetooth: hci3: command tx timeout [ 61.304020][ T6162] siw: device registration error -23 [ 61.945891][ T6173] siw: device registration error -23 [ 62.217127][ T6180] 9pnet_virtio: no channels available for device syz [ 62.320921][ T6189] siw: device registration error -23 [ 63.049665][ T6192] siw: device registration error -23 [ 63.350445][ T6200] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.432079][ T6203] 9pnet_virtio: no channels available for device syz [ 64.137358][ T6205] 9pnet_virtio: no channels available for device syz [ 64.817876][ T6225] siw: device registration error -23 [ 64.896139][ T6226] siw: device registration error -23 [ 65.161105][ T6217] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.477816][ T6236] siw: device registration error -23 [ 66.707312][ T6257] 9pnet_virtio: no channels available for device syz [ 66.816255][ T6261] 9pnet_virtio: no channels available for device syz [ 66.929879][ T6264] 9pnet_virtio: no channels available for device syz [ 66.933350][ T6264] overlayfs: failed to resolve './file1': -2 [ 67.693784][ T6274] overlayfs: failed to resolve './file1': -2 [ 67.812257][ T6254] 9pnet_virtio: no channels available for device syz [ 67.887133][ T6280] afs: Unknown parameter ' ' [ 67.890651][ T6280] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 68.328261][ T6287] siw: device registration error -23 [ 69.267062][ T6293] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 69.269323][ T6293] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.278245][ T6293] vhci_hcd vhci_hcd.0: Device attached [ 69.369439][ T6300] siw: device registration error -23 [ 69.543741][ T60] usb 44-1: SetAddress Request (2) to port 0 [ 69.545839][ T60] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 70.308254][ T6313] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.334935][ T6294] vhci_hcd: connection reset by peer [ 70.337617][ T89] vhci_hcd vhci_hcd.3: stop threads [ 70.340304][ T89] vhci_hcd vhci_hcd.3: release socket [ 70.343454][ T89] vhci_hcd vhci_hcd.3: disconnect device [ 70.362876][ T6313] 9pnet_virtio: no channels available for device syz [ 70.549056][ T6321] afs: Unknown parameter ' ' [ 70.551954][ T6321] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 71.167771][ T6324] afs: Unknown parameter ' ' [ 71.170282][ T6324] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 71.543143][ T6327] netlink: 224 bytes leftover after parsing attributes in process `syz.3.87'. [ 71.649118][ T6332] netlink: 224 bytes leftover after parsing attributes in process `syz.3.89'. [ 72.342427][ T6349] afs: Unknown parameter ' ' [ 72.354907][ T6349] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 72.865361][ T6360] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 72.868145][ T6360] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.877200][ T6360] vhci_hcd vhci_hcd.0: Device attached [ 72.985889][ T89] Bluetooth: hci4: Frame reassembly failed (-84) [ 72.988640][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.072783][ T6364] afs: Unknown parameter ' ' [ 73.075358][ T6364] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 73.207936][ T6002] usb 38-1: SetAddress Request (2) to port 0 [ 73.210502][ T6002] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 73.614080][ T6369] netlink: 224 bytes leftover after parsing attributes in process `syz.2.99'. [ 74.179668][ T6386] afs: Unknown parameter ' ' [ 74.183498][ T6386] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 74.604001][ T60] usb 44-1: device descriptor read/8, error -110 [ 74.875247][ T6397] ref_ctr_offset mismatch. inode: 0x90 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 75.003718][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.003772][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 75.005144][ T60] usb usb44-port1: attempt power cycle [ 75.321419][ T6401] netlink: 224 bytes leftover after parsing attributes in process `syz.1.111'. [ 75.373541][ T6361] vhci_hcd: connection reset by peer [ 75.383787][ T61] vhci_hcd vhci_hcd.0: stop threads [ 75.385546][ T61] vhci_hcd vhci_hcd.0: release socket [ 75.387381][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 75.454897][ T6404] overlayfs: failed to resolve './file1': -2 [ 75.594091][ T60] usb usb44-port1: unable to enumerate USB device [ 76.126779][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.129194][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.399613][ T6427] netlink: 224 bytes leftover after parsing attributes in process `syz.2.121'. [ 76.669434][ T6434] siw: device registration error -23 [ 77.105999][ T6445] 9pnet_virtio: no channels available for device syz [ 78.263450][ T6465] afs: Unknown parameter ' ' [ 78.266619][ T6465] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 78.371604][ T6467] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 78.373716][ T6467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 78.390992][ T6473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.131'. [ 78.575673][ T6467] vhci_hcd vhci_hcd.0: Device attached [ 78.638015][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.640790][ T225] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.843730][ T6077] usb 40-1: SetAddress Request (2) to port 0 [ 78.845663][ T6077] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.003718][ T6002] usb 38-1: device descriptor read/8, error -110 [ 79.410539][ T6002] usb usb38-port1: attempt power cycle [ 80.004450][ T6002] usb usb38-port1: unable to enumerate USB device [ 80.372878][ T6502] 9pnet_virtio: no channels available for device syz [ 80.683783][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 80.683854][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.980861][ T6470] vhci_hcd: connection reset by peer [ 80.985085][ T46] vhci_hcd vhci_hcd.1: stop threads [ 80.987319][ T46] vhci_hcd vhci_hcd.1: release socket [ 80.989177][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 81.188374][ T6506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.142'. [ 81.652582][ T6518] siw: device registration error -23 [ 82.070287][ T6520] loop9: detected capacity change from 0 to 7 [ 82.076972][ T6520] Dev loop9: unable to read RDB block 7 [ 82.079460][ T6520] loop9: unable to read partition table [ 82.081989][ T6520] loop9: partition table beyond EOD, truncated [ 82.098759][ T6520] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.104801][ T5951] Bluetooth: hci2: unexpected event 0x3e length: 262 > 260 [ 82.104830][ T5951] Bluetooth: hci2: unexpected subevent 0x0d length: 261 > 260 [ 82.265089][ T6530] netlink: 224 bytes leftover after parsing attributes in process `syz.1.153'. [ 83.893801][ T6077] usb 40-1: device descriptor read/8, error -110 [ 83.939942][ T6559] siw: device registration error -23 [ 84.297303][ T6077] usb usb40-port1: attempt power cycle [ 84.323306][ T6565] netlink: 224 bytes leftover after parsing attributes in process `syz.2.163'. [ 84.600375][ T6577] siw: device registration error -23 [ 84.855073][ T6077] usb usb40-port1: unable to enumerate USB device [ 85.037457][ T6571] siw: device registration error -23 [ 86.087388][ T6598] siw: device registration error -23 [ 86.375024][ T9] cfg80211: failed to load regulatory.db [ 86.553708][ T6606] netlink: 224 bytes leftover after parsing attributes in process `syz.0.175'. [ 86.942299][ T6616] 9pnet_virtio: no channels available for device syz [ 87.302153][ T6625] 9pnet_virtio: no channels available for device syz [ 87.452618][ T6628] MPI: mpi too large (130440 bits) [ 87.565204][ T6630] syzkaller0: entered promiscuous mode [ 87.567637][ T6630] syzkaller0: entered allmulticast mode [ 88.212903][ T6635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 88.245076][ T6635] 9pnet_virtio: no channels available for device syz [ 89.115629][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.190'. [ 89.188909][ T6655] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 89.492797][ T6661] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.514713][ T6661] 9pnet_virtio: no channels available for device syz [ 90.284062][ T6680] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.362267][ T40] audit: type=1326 audit(1766174525.751:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.1.198" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x0 [ 90.405855][ T6680] 9pnet_virtio: no channels available for device syz [ 90.450246][ T6686] afs: Unknown parameter ' ' [ 90.469606][ T6686] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 91.511992][ T6699] syzkaller0: entered promiscuous mode [ 91.513951][ T6699] syzkaller0: entered allmulticast mode [ 91.858603][ T6704] netlink: 'syz.0.204': attribute type 5 has an invalid length. [ 91.905018][ T6708] netlink: 224 bytes leftover after parsing attributes in process `syz.0.206'. [ 92.108268][ T6714] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.149095][ T6716] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 92.636062][ T6736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.214'. [ 93.073497][ T6743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.215'. [ 93.157520][ T6744] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 93.174876][ T6744] team0: Failed to send options change via netlink (err -105) [ 93.178360][ T6744] team0: Port device dummy0 added [ 93.252788][ T6744] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 93.283058][ T6744] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.356392][ T6744] team0: Failed to send options change via netlink (err -105) [ 93.377106][ T6744] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.378908][ T6749] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.414800][ T6744] team0: Port device dummy0 removed [ 93.437564][ T6749] 9pnet_virtio: no channels available for device syz [ 93.561029][ T6744] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.139815][ T40] audit: type=1326 audit(1766174529.531:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="syz.1.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 94.155327][ T40] audit: type=1326 audit(1766174529.531:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="syz.1.220" exe="/syz-executor" sig=0 arch=40000003 syscall=82 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 94.189032][ T6763] Zero length message leads to an empty skb [ 94.353898][ T6772] fuse: Bad value for 'fd' [ 94.658560][ T6778] netlink: 76 bytes leftover after parsing attributes in process `syz.0.223'. [ 94.675512][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.678498][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.696332][ T6778] bridge_slave_1: left allmulticast mode [ 94.698711][ T6778] bridge_slave_1: left promiscuous mode [ 94.702096][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.713881][ T6778] bridge_slave_0: left allmulticast mode [ 94.715759][ T6778] bridge_slave_0: left promiscuous mode [ 94.718455][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.843846][ T6739] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 94.846556][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.430109][ T6739] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.507447][ T6784] netlink: 224 bytes leftover after parsing attributes in process `syz.0.225'. [ 95.573256][ T6739] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.591968][ T6739] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.601475][ T6739] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.610552][ T6739] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.615027][ T6739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.616973][ T6739] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.620806][ T6739] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.626635][ T6739] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.629036][ T6739] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.633979][ T6739] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.916455][ T6793] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.776927][ T6789] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 96.779059][ T6789] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 96.781782][ T6789] vhci_hcd vhci_hcd.0: Device attached [ 96.820021][ T6809] MPI: mpi too large (130440 bits) [ 96.846591][ T6789] wg2 speed is unknown, defaulting to 1000 [ 96.850467][ T6789] wg2 speed is unknown, defaulting to 1000 [ 96.853414][ T6789] wg2 speed is unknown, defaulting to 1000 [ 96.934339][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.939728][ T6814] syzkaller0: entered promiscuous mode [ 96.942129][ T6814] syzkaller0: entered allmulticast mode [ 97.021282][ T6789] infiniband syz2: set active [ 97.023428][ T6789] infiniband syz2: added wg2 [ 97.073803][ T29] wg2 speed is unknown, defaulting to 1000 [ 97.076662][ T6806] vhci_hcd: connection closed [ 97.087336][ T6097] vhci_hcd vhci_hcd.0: stop threads [ 97.097934][ T6097] vhci_hcd vhci_hcd.0: release socket [ 97.099544][ T6789] RDS/IB: syz2: added [ 97.102499][ T6789] smc: adding ib device syz2 with port count 1 [ 97.102585][ T6097] vhci_hcd vhci_hcd.0: disconnect device [ 97.105649][ T6789] smc: ib device syz2 port 1 has no pnetid [ 97.112529][ T6789] wg2 speed is unknown, defaulting to 1000 [ 97.198405][ T6789] wg2 speed is unknown, defaulting to 1000 [ 97.283318][ T6789] wg2 speed is unknown, defaulting to 1000 [ 97.324528][ T6096] usb 38-1: enqueue for inactive port 0 [ 97.324678][ T6110] wg2 speed is unknown, defaulting to 1000 [ 97.452845][ T6789] wg2 speed is unknown, defaulting to 1000 [ 97.653781][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.653830][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.656395][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.864316][ T6096] usb usb38-port1: attempt power cycle [ 97.947662][ T6826] netlink: 224 bytes leftover after parsing attributes in process `syz.3.234'. [ 98.694077][ T6848] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.720482][ T6848] 9pnet_virtio: no channels available for device syz [ 98.994952][ T6096] usb usb38-port1: unable to enumerate USB device [ 99.007431][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.058045][ T6851] afs: Unknown parameter ' ' [ 99.061414][ T6851] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 99.247691][ T6857] netlink: 224 bytes leftover after parsing attributes in process `syz.3.243'. [ 99.697972][ T6868] netlink: 76 bytes leftover after parsing attributes in process `syz.2.244'. [ 99.723874][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.727482][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.737268][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.739877][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.741939][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.786253][ T6868] bridge_slave_1: left allmulticast mode [ 99.789756][ T6868] bridge_slave_1: left promiscuous mode [ 99.792692][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.850807][ T6868] bridge_slave_0: left allmulticast mode [ 99.850973][ T6868] bridge_slave_0: left promiscuous mode [ 99.851831][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.813743][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.815861][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.817789][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.918717][ T6022] IPVS: starting estimator thread 0... [ 102.004088][ T6893] IPVS: using max 44 ests per chain, 105600 per kthread [ 102.016497][ T6895] ======================================================= [ 102.016497][ T6895] WARNING: The mand mount option has been deprecated and [ 102.016497][ T6895] and is ignored by this kernel. Remove the mand [ 102.016497][ T6895] option from the mount to silence this warning. [ 102.016497][ T6895] ======================================================= [ 102.032948][ T6895] 9p: Bad value for 'rfdno' [ 102.590465][ T6905] netlink: 224 bytes leftover after parsing attributes in process `syz.3.253'. [ 102.765522][ T6909] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.800641][ T6909] 9pnet_virtio: no channels available for device syz [ 103.883732][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.914923][ T6924] [U] : [ 103.916346][ T6924] [U] [ 103.917506][ T6924] [U] [ 103.918688][ T6924] [U] [ 103.919882][ T6924] [U] [ 103.921016][ T6924] [U] [ 103.922175][ T6924] [U] [ 103.923346][ T6924] [U] [ 103.924499][ T6928] afs: Unknown parameter ' ' [ 103.926859][ T6928] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 103.945828][ T6924] [U] [ 103.946730][ T6924] [U] [ 103.947673][ T6924] [U] [ 103.948600][ T6924] [U] [ 103.949498][ T6924] [U] [ 103.950403][ T6924] [U] [ 103.951302][ T6924] [U] [ 103.952202][ T6924] [U] [ 103.953116][ T6924] [U] [ 103.954085][ T6924] [U] [ 103.954977][ T6924] [U] [ 103.955874][ T6924] [U] [ 103.956790][ T6924] [U] [ 103.957779][ T6924] [U] [ 103.958919][ T6924] [U] [ 103.959818][ T6924] [U] [ 103.961818][ T6924] [U] [ 103.962761][ T6924] [U] [ 103.963675][ T6924] [U] [ 103.964569][ T6924] [U] [ 103.965470][ T6924] [U] [ 103.966391][ T6924] [U] [ 103.967282][ T6924] [U] NG»E¸X»ðx™™pÑ€ò{,ïÙ&5ÔZV=’)ÉýwýÀ„ŽRú^ýšÚ\”¡º”´·ÇP‹» ‘ŸP¨: [ 103.969928][ T6924] [U] »á&ÝŸj{„ê¶°ÕÎxÒ­çz_~N™}ñÐ?ú´´ÉEØäEy 1'©‡iÉ8Â7órc¼PšB¼Vÿ-¿€èGâÄ [ 103.972220][ T6924] [U] À«ìε` 'TÉ¥u¯RÀ·ä&âÖB¨†CÉ5¼ºäQmÞ!2e+9Ǫ¦ÎeÚ»D”–R ·›§çå9Û\6Ö§ømrÝY•OÖôa$¢Pk$Z [ 103.975164][ T6924] [U] ±¨/ë1*e–ê/ìª{`!óz%_b§ÿkl6µÓ¶¾4åùÚÆ¬ûˆ˜ [ 103.977678][ T6924] [U] É41S5TeŒIWß6p5‘Cdˆ¼Ý‚§^»6zHPçšF°M [ 103.979585][ T6924] [U] b¤¿‚˜øµpú)&K¥z8<^Ńlã1ì¯ìvã( [ 103.981376][ T6924] [U] ,‹×«ÿ:Z$.jc}¶08ï]x¬©Æ€×+`ÚM¾°áæƒÝÈ(˜d|Xš¸ù-°gØ ¯V ×§ [ 103.983818][ T6924] [U] ×¢¿£ˆ ‘§“G ¥ž©’Ò¡c:R­ŠÝü«s¢‘ãWE攦GB›Cˆlyö|xÞ?>ɘÉÅ&vlÔFöðÞ`?,h’á<ý£}žŽ ‹i†ÌÙ‘™>ÁR>}w9K¹ž}1 Pgñ¾R$”8û©a_m­.Ç$Oíón4ì1}kîd'd‘žÞ×âŽ*ÚC©²˜l&{0Ò÷ ÿ#@€ñՉΞç˜x3elÏ}õ³¨~ÂSÿ|~ñæ|î± “ãúh<ÚÚÖXPÿ¼@+wDéLÞÎùÛ&Lu\SÓbxß#ÔÉh_Þúi÷XŠ3¸¦K5è¼¹vUwÑuËãX(ÿrC¿ïD–¼Š#RBõé‘êbÔÜþÙ [ 103.992541][ T6924] [U] &ð²™B[òöÑ…þnŠäF°=ï­¡‡”þ¬“xv–¥ÔðŸv›Åô=-ö¡1ö‰]¢Þ &Dh^W±ÔvÆ«¥ˆ•O²WSVE+‹”,°+N üøñ»¹¢;n2ÉЬÍ=ØaE*:×{8þpž!it“-ëS—ý€3ÿ=“¬ Kçb¼ BMi½W²+©?‡g)I‹&Œ)ç“!TcÊ!dã€YEaܲ›îßÖ'~+A¡oa±˜uÉ8OùÅ<V×6 [ 104.038211][ T6924] [U] ¯à_zïuÀÏ+üú—zÐq¶šý¯— 8MLˆœúZ—Ûè•C¥Æ0&EÖíùYª`pœà"_æÃ&l~ö!W¬ŽxýÜØ¡òÊ[X‚Ñ’vˆUwS&®îà"lÈ„>°QD¿Ž/ã4 ö 2Êý–Ò<×ÐÓ­Ëßìš*=ˆ0|6&3±Åcvê„vÙ [ 104.042780][ T6924] [U] ˆAK£e*-~~7ìÇ” [ 104.044076][ T6924] [U] ‰=Fs%SïíÒ‚hÕ*~:~| [ 104.045512][ T6924] [U] jØÂTvC–¡hK/Ù€[SR_.dQ1—(<ÄÔ:À3àSšˆðŠ«áB<Ô Š~47صz]9 SËá?Dfèžüf¡䳚> 0sÉÔNlù¸_MõÄà6(Ð[ÀùNÀB4Éì¤íF?ƒKˆ‡(ö%7ÚuÑ^Ážþ½Yð [ 104.049820][ T6924] [U] ¶Yë”눼²b£i­Y–ÁSÌ[‚ [Å!_ãb:Èì)}ôîçZÎ s]P^fÂb·÷TL”cð¦îþ:(€¸àn{Æk²­Ì?›%õì1Ñ*%ñ÷<*¦»:v€×† ‚¦;Ìá‚/¦¤°…¨q®4 îËÁý†aµÕ+²¸·/#âJ"Puòrí+ ÆÅÆ“øÛm§ÏçÉfÆGðzÒ#îÛ¥·¯>˜FJÇhÇ›!ÊE±*RÏ&àÓgD,Úqĸî9ÉMí"ºÁ86ËF~º´ïê½ñãÞ¥jæÔøHSÌ!úÁ [ 104.057002][ T6924] [U] C±øÒž›?XGŸ›•9*9Õº1îDAÊ-µ| [ 104.059034][ T6924] [U] †x zrKze²«ÑÚC[Î>ðüâ¢ð¦|ÖÉ0¤¼õžyå{ [ 104.061604][ T6924] [U] ¨õ`3;]ý² Ø™°ý©U_Ç^ÿÓÉS]ˆPŽƒoëxÕ{*W̤-=þ}æ [ 104.064341][ T6924] [U] *37oI½¬Ý?KÐ’A­b¡ 0/³ªø+ ƯF»ù¶­¤^ø<á0)ÑgÆQ4ç¸+YÝýÃgæ@Þý'2Ìë±Ô [ 104.067777][ T6924] [U] °­ [ 104.069037][ T6924] [U] ½”›dX,gÿÎŽ~FÞ@‘üÇze¹qügÈÙËðÃAÊvKVîPÙ†PYajRZF®/­šþ†Ýù¸$d‚~S\ ªŸƒ ç [ 104.072892][ T6924] [U] ¢s'é=XJœï‡Šd.“aïª] ½©ú.FVö†Ó³ê1ÑØP®‘–·vEHõÆE [ 104.075782][ T6924] [U] 2§à›k~uÔ?»Úvä:$ñ†ÕW‰3ô¿¢Ž5Íå%û‘ç’×ÌZ›^=·ªìFÒ±øÜ³ù!ö›×9|–¡á2ÜVΤ6\wš¿vœµ¶ªÚ.ÞÅÉͯ¢çóvZùȲ ±¦xP…ü°Üg¸Q½ýƶŒRýâ³ÇáÄT¤Ò2•;%Å •¯qY¥¨Ð¡bHñ&¥½@ÝÇŸíô™%î6zW \¾9þ,!>|$©ìúiïæà!Àj&$q¤7<˜ éþäóuâ|1¶¯»!QÚ†·Ê¶<{O¤·³r¹Ð׋5ì9Ä‘ ^î˵¸µÈªtÁ@ç­4xãm³ zø\ «, [ 104.086416][ T6924] [U] úTÅf_†ß±C¾d…!»+ DxdOŒˆ·žuNn©Ç—º½®Ç*–€«­ó¤„ÍÕ|+nƒ:ÌF¾Z©'ñ±³ebÒ¬¹ìûu„U# [ 104.090388][ T6924] [U]  [ 104.091437][ T6924] [U] ®Æt‹¢€¥íÈmHãø¯Oû®<ÓÁš‚Õ¤ýR»b(šèer¤—þ&‡ïKKX†ª·Ëù–ƒ÷¯ÉíŠHˆƒÎ¸÷ý[‚©þ!¤ Ê¢1Ä¡Q [ 104.094733][ T6924] [U] ‚vkb´Èu6ð·çß4ë²·ŽÏ›Ï• £¹â£a#둽¼‹»ë“ŸÙÚÔ9 ìÀe×#WªÀ%š%@› YÌiàë¦zzœ§è·€xÙ7 ÓãqhÞ`Ëk¿æ”5Ö«^ý€Ïšpü `DÔ’ØDÞR$¤~å)ÇÚ%ä*†9µÛ"^#–]OŠ)zÿ£Ëí˜[c“¥º &¶Ç´Ê"Ói³[A™Ñ­‚QÓOs@±”„8Yy1í&x4¿¢÷4S}½õì05ÿF@ïç÷±Âôk«Û’GÎŽ«­—¨¹Ý·¡^‡ÎÕTÉÖÞxø])3IY l2H54¼–‹$¢ŽµK•XmØëQ¥­ M‰lé"P9|¼@C#üßä~Ö4àÅ‚¼[5§+! ˜áyÀaC [ 104.121666][ T6924] [U] ÈÁàÇš[nÓ°—™3ñ¸:òP±½\IXßMuS >ûÚ‰ö©/àŒ#­ÿV*=ÍåxÖ‚[˜GµßÛÊO*¥-ŽLø<á!ã›P5Š—–¬Þr¨ÿ—v˜t¨ [ 104.125169][ T6924] [U] ¹—͈‘EªÔˆŒ–ÔZÅÅŠ•{ÌgàZX‰…º [ 104.142129][ T6924] [U] i¡°iäÌUÔCnÛÑ› ` [ 104.143468][ T6924] [U] YÜç©R¶”Æ&sñ"ÉÑ&O¬lâ&.†Íj@&rø…0ü-ó6ÝIzN…2S¬Zÿv‰^ŸU²I ¢A+ Éœì…_fˆ71 [ 104.146778][ T6924] [U] ÆÍ\fÓ¯‘aE¬^×ú BwÀDбëxÉC¾šê°X}2KËwTðpˆxø¾f‹ha$‰Ÿ¬%%ô¶Ä-·f©uP@F1%ÂhPt©w$m6Ò:úÀ¡‰ÕF@½og [ 104.151389][ T6924] [U] hlý3öü]Ïl½cÙÐý ÔÇM»«‰Ÿ<#À·ã~ ²¯ô!2r [ 104.153907][ T6924] [U] ºý‰ÃC€[ÒŒªmDš 6a¸û¯GG·|I(±7ÜŒz{8­á®ìD½úÌ‚qб2²›5‚ù‘Ÿ\ŒÕC«ÉÊö¸+|Ô‚Ãïa¦GCPcB¿P£ÁÿTEc»‹ ‘áúÖ˜ô¬?þÕ¿è9É zǨ½q ¥®§8épã«*¿uKYŠËyÏ'g’ªrM ¢O*iI«y[?Eõ-ìPÙ¿¼™®'áÒÂ!jþÆpe¦K)ïX%[¾GŒ]O÷N¦:HwRîÈýŸJz¢RwfGT½-|Ó§ ¹,VÙe¡—H…67W(m©àU﬇o [ 104.163554][ T6924] [U] dÁjYw3¸—©^Ëô šèå š¨:5DÿñûEfòÕO•ã»Ó [ 104.165961][ T6924] [U] Ì¥òC—ä½Gÿ)/ [ 104.167577][ T6924] [U] oéÝG¨àÂS‚úi´˜}ý›iïQ­k$ªœ…‚š&Fù«xt¼¿¨4lÉ CéÔkDˆp±âª:)è;åG-tˆZ5?ªÞn‹ôµˆ`{»u…ˆÑâñúMa¾P$Ÿã.oøÀÇr*®Á¼yeJGrïÅx½jÇš¼ÇzN ȶÆê5Í:³5&µ]¸Co€BøÎ{àÝÔêÖÛÚÐïž|²2=µÌHšr²s¸ÿcfÀ¼h*…«ž,ò#‹mn²ãŠ—ÕW~c4Ë*¦çÈnHž‡opSWz\µR/«|K×±š4Â(ÿ¶}ÊÉ(÷xµŒX B Ð ³­Ù4 ߓů$“öFØÞyqú [ 104.176365][ T6924] [U] e$sˆ/¿ ð ,v8b;‚?ñDýÞE5pùŸ™¶ [ 104.178716][ T6924] [U] Þ [ 104.179939][ T6924] [U] ”è¸WÇLá9γ3x+)¨J[I§…‘\v€Ý—,µ›¢!aö†åË<>€‡&ËùkÄÚx‘NîV\mç [ 104.183399][ T6924] [U] "ÏŒDÏ<ôˆÃUª@ Àòmdàñ¼¨AÙT:d>øƒØM]¸éßpŽdæ@³÷)_ås†6Sk®UÈ€«Ûzl\çp'ÿ§9R3ÓÎSmw®l.œûoîx£¼³µøˆ½Y\ª:U†”‡v¹P¨œÞM¸$ÿòt‘È‚´0¯Ý`ç¢#$öcZš§Ÿ>bLmžÎ`÷ø; €ÏDûøáÄ6P7fæp¹`Jµ!ᥦ\íÖLúø˜¬_UÀŒ‡i<25¼°Ùœ(õàrÔöT ~­pGÁ¦×+ÖïV¯3 ¯1= [ 104.192571][ T6924] [U] c¢¢ß¾5Ñ¶ä ›á(h25§ˆµ¤ÊÏ™º¾ã‚EYèª×»§àÓ Z=øírx²ÆíXz@5f2\Ñ™bí׃ªD¦·Q{­P!0çÏj\å(ÈLpö"® f©ÂÀw‘ߟØ*âF–Î8–GFÁÁÐC!ªçÔd뀾§ì9PTWçx ‡t×&sbl™‹ [ 104.199125][ T6924] [U] 6,,¬F>§7z µK”5D,¥)ü [ 104.201008][ T6924] [U] £Ð/ÍGé•g€ã [ 104.202308][ T6924] [U] [ 104.203202][ T6924] [U] [ 104.205456][ T6924] [U] [ 104.206386][ T6924] [U] [ 104.207252][ T6924] [U] [ 104.208261][ T6924] [U] [ 104.209159][ T6924] [U] [ 104.210070][ T6924] [U] [ 104.210973][ T6924] [U] [ 104.211868][ T6924] [U] [ 104.213112][ T6924] [U] [ 104.214055][ T6924] [U] [ 104.214958][ T6924] [U] [ 104.215860][ T6924] [U] [ 104.216786][ T6924] [U] [ 104.217713][ T6924] [U] [ 104.218617][ T6924] [U] olùÉnG*•N\vjn]+7NÊ,6½|¬S»pU¸ˆQO"„ñwð+I>jl¨£­ÙŠ]Y’§kû}B‡Æ§s¥ [ 104.221166][ T6924] [U] [ 104.222056][ T6924] [U] ÿTñTÂÕëbSžõò¹áÞypsë&–õ™ä©1­‡“ïnôÞ>„¥8óÑËe‹ãǹPL.62Çv]@¿àENo?­Ne‹³8ìÒŒÝTp0§0ʲJŸÄ$¸±\îðü'].¶o/Ò #p6QB†Ñä+Ü»Ì-Ö>[Æ"6Ê釚„É«Öqõ Ü×ôòI„69ôm ˆhé9ÝøžÅúã Ãü‡:°_ú*Ç[º [ 104.228010][ T6924] [U] ç%`\¹ŽøÇ}c¨;50ñ²¥€Q øsž»Û°ÙÕåªtñÊUèê(ÉÏ^žÑF„iÒióëR¾Áõ^²Gصg–J5GvTíD:æ1«©aO›«³ký1 ½ÒE [ 104.231856][ T6924] [U] ‹f÷››fcô ¯SQø4°æªIlWƦ¸-¥“›öz[@tî庨a® (»TnJ‡Ö±…VHSâ­hýJŒŸåŸi¦ÂiwJF®ÕËÉ,WÁ“t†î«ê$.x¡”°Ž‡,(¬ZèB¶½lw ÊD»¿NuÃ.V4Ý:äÆÇ¥z®ßr6ƒH‚ã4j­ZŸ…Vq^¢tÉÚ~½<Ð+z3ñf̾Š^òã—ò+|Ú›^ö [ 104.237666][ T6924] [U] Âø&"ë\%Ü [ 104.238799][ T6924] [U] ÇY5o¥„KƒT‚ýÁÛù’‚¼ CDÍâмQU°sñæ}(”©mâÃUÒ›qºJ1éá0E+!¥û•Dg6lUÒG7—W÷ÇÔ‰ÿƒÓÅoĤ§ëUçí#š¨MÇ­ÔnùäÚ~RÍñØ9’s¦‡ÇjW [ 104.269538][ T6924] [U] S££îÚ¶œdÆà¨£Ö‡9@jq Ÿì±`íú~ê¦Ùžð½éÉ‚¥z%'†åUÛ4KS°¤â§l4ïÔgJÌ‚.i,=ÛQ¯Xù¬ ©í¹ÝÕˆL§4¿z¦Ã[lmäü"cAñðiUKë;-¨/¡(²ÛóV 9s9âðד0BÝ¥”Ù§"fPF`W©Ù{ƒï ¯Îìš‚: [ 104.274503][ T6924] [U] ¢‡s§8mU2próX†•Þ [ 104.275832][ T6924] [U] ó _ÄÑúá“ö"UÞ õtZ§öÆùú¬Á™©+Çâ5_Vu†!$ òW›`” [ 104.277975][ T6924] [U] B33“½4ðã4óyJr]Hù)èÃæµq°g¤ëHÜ/—éì+lˆ:ÓŸžh¶'§lŽ>Òñ5'. [ 104.280637][ T6924] [U] ¯9>ë5Ë©7µS¸ ä’m¢ÄÓ‹l¯‰9dVÙëËÑòV÷¨ù [ 104.282573][ T6924] [U] Ö]%¥× òa^D-öB”‚K [ 104.283905][ T6924] [U] Ë`Þ?@rÄÄUé&DÃô’æc»>¼tÌÃT4ìןú2R¬ ¡³gb¿I0f0VÌRú¶Îa8ž€×>K»8ÆH±Ï=`ßü–‡a;p^Gä0òçóñ%_¹P,¯`3Â:xH…[±ý5!gä;d˜úögû°• –’øÎcp7$þG«@4gƒaïyNÙ†4ò]™»øäù˜å¦ ½g?!ˆÜ;ìµ–’h¥&ö !$XŠiqpÙÌàj¾Ç‚C…3½€Î®;SHLg#‚:K [ 104.290374][ T6924] [U] ¢| [ 104.291306][ T6924] [U] µ/åFs´Æ²Hvû{;1¬ï [ 104.292745][ T6924] [U] F%¹¹>Ž'°Ÿ¨"S˜t]V%R,h±Ú§ùAÞ¥d¶JíWï/Û4’…ÙŸÆÕÕäÁøJßGd`üZzÈr,:j hjy5ßøõ† Ás>Ï×±>sàŸqö©¡ò-w!ö(·N­¾OÏy&ˆ`…ÀŠ.ÝèH±äɳŸÂîE§F=b=Ý•(}¹·ŠV¤Uqé ÉëTŸ s—?6@ˆé}u•n8µNb‰IzŽ1üTuyFh‚”ˆ^saîØuêàäájŸ‹ÞwÉ74\댫(c炊•]¼‡ñ8&½a»'K9ÓȘÏÍ,¨‘D–^si÷[•ýЩUZ<íÿöÙ§Q [ 104.300885][ T6924] [U] •þˆuÏ}Kœ}cüW+8¦¯jÒs͇•Xª|xœò9GÌé€tGÔã‵dR¿îÍ³× ³‡A>¤4XÍ–ù6÷á|²Eѹ½»Ší0& G‚¶WösLÄ; [ 104.316210][ T6924] [U] åð'Vu®_À éù¾æN{hŠŸ+žÊ¸isṲlNŠÂÀž4äÉžØz. 3ºïòä±,c`…ý#úÊÁ6EÞç—É/üøOvÃy-çá4¾Àš™âùè [ 104.319605][ T6924] [U] ¤o‡ëÛ>•wªÞ{xéßÎñüúï¼5+ЛšJiúý¥?þWˆ‘ŽòûÇðtŸ=®G_Qw_iŒÍåO½ËØD [ 104.322414][ T6924] [U] vܲ]kê6̪Ê{Ó^’ÊÄ#‹¶+˹Fèœç¶x ;—Ï¿ÕÇ™ÉO)jýz»ïIjµ¯¨ò ­›*À„z³§=î\½M³ýÑ áO}+…Ymrãâ!(R9£µ÷)M-„”.¥KUxÅX~T¢kò@I™±ß8jµµ¯ó”!—Ä1ñ_õ†)GRmß$Ö\SXÍ4q’`&‚—Œ%w–㊌«läm±ò0Ϧ [ 104.328207][ T6924] [U] b²r~I…MÞðŒpˆ«FùéºAÒ-y½¹êL@½¯À¢Ÿ*óKpkh>¡¹I—j>·18ÒyÞ=ýwæ§é_ÑÈ [ 104.330934][ T6924] [U] ·h›E,çaÛLпjù¦Ý"£W•È—Õ·… G [ 104.332596][ T6924] [U] ¬4àz¦Žó‰6BFùûGjM~N¸Ëƒ'€Ø [ 104.334320][ T6924] [U] Wç"n!Bü2,?y?Æ4~¯áÇ ¿¾@ÙQžB•‹#çË0®m9¸äT™Õ¨0ßB“ˆï,´`½‰©Ã [ 104.337004][ T6924] [U]  ôË?EM¼ØÒ3?ê%;Á [ 104.338418][ T6924] [U] •ZÁ•iÔ›6®[í—}4©¤þÖ¦wî† áÖ‡ãÀÃê [ 104.340306][ T6924] [U] ÍQ ÜÜF’Go³Ý´y¹U}Û&Ù}-Ûk”_E¦6ú?L{Œk'¼'Ü»F9®?‡‰œ–SZXác¼µøõçZ¦,ÐP†_Òƒ¶¹ð„*ðõ [ 104.343368][ T6924] [U] Á€ï-†uVóøfÂ{à ös¢—°‡þ´°Dæj{§. [ 104.345189][ T6924] [U] )(g˜ZuF˜6½ýÃÚõ|Ú†êJ •=ùµö±ó [ 104.346880][ T6924] [U] qZûFƘZ‡•;áÍñ £¦?_u.’ú±Â¹?ôŸ… Ã8x:“£©h¡$v16ƒ®×äë妳š¥xÍPR™ˆò!mƒ¯½À2%ïÒž“Qµ—ÈÇ [ 104.349962][ T6924] [U] ÂuðCm Ö˜±Þ‘6?ÿ³ØF¾¡EÚæÏ)FÕg–‰Îª/‰7ÜßFLj²ÏÛ§šÎè7Ós—Ÿ$] ìˆÓ:Öaê’̇5‰L¼½ÉØ3ÔZ*ô™³Ï×Û­WË¬É [ 104.356140][ T6924] [U] ˜2 i¯Î’¿'`)HY}Ô÷oÁõëìáîƒìBæ¾Ïç°ˆ˜ì\¬xƦu/vÈÏ&ÀVË¢Æ65ƒ`.Ê6lL¶kávÎß+OnÙË3¼A(÷ÐéÝA3ûd?0ácr,õuZ},è [ 104.360143][ T6924] [U] þMg˜Ôú15°ðr1àU*Bª"ú3 óÌQ}oþ‹º³ºbµÇzG->–ãÊc–åøP^|8û®ÄyOjŸ£È’‚``Ź%™ÌNÅó€õ [ 104.363354][ T6924] [U] Qfâ†ÎíC³yKJ›)ëd؉dçÁõçëYеռÚsá{ji¨~«}œÃgª¢Äš@–Û! (%ËþAÐ(Õ µçµŒ¸ã”hdÖ¥ÅË [ 104.366520][ T6924] [U] ÑvZ‹©í!>fäÄÒUƒ½o_ ¤B† ‰ÝòGQióÝ…ö…+7TIY[ÖºA)TßYm$þ¹\0'aËúÝó˜:pl¸bÞáv4è²24ù>ª=Bm š*2Ðê?£ü‘úZEÿmT§+{I&Åoô»"ÑÈ•lÈHíÎt ñ&ü ú€ûOƒ ˆn [ 104.371364][ T6924] [U] ÕDn~ðˆ-ûügïðbÜ@ͯ% ɦé/WÏPÀ&ò°Ù'¨)ì ZT?Ý<=k˜Ù©$Pþx6†TFƒ"˜BàÔ1[cé¿×u¦/ŠÓá¦,»{N‚<…pÁª'ïQl f×Y÷ÅœW‘Çü^÷j²oþ™¥ÊÝEñ¨¯ø [ 104.375736][ T6924] [U] Æ:›4?Š¥'¤ß–ðRB]Ýaâ%¬”èw9Å\1cö°&"ƒ#ƒ_¹_x‹yŽ­‡îðOÁZ$&Mr2ß.®MÊÃ"kõóÞáï2ÕXnŒ÷×Ðú—‘´Ò–Å` œ[¡3fÞ`þa8ÝÐ"~žXæpLØü>ÍúVŠ6_ [ 104.379961][ T6924] [U] - 'cÐ'ß…FÓR¡ïdŒ€4s—¿ÐopFvò̺àųHPÐÜ—s!UçˆýŒOÀêÉŸå [ 104.382719][ T6924] [U] ]…µè9šç# Q¤A£ý›gJÿå&}f²‡¯ —aê'0T3Ëû5£ØjËì0o [ 104.385659][ T6924] [U] öÅ•döœ§ýÛÌOì´¯ˆÖwî¿7b>î“u\ø‚ÕÉg"d‹n:Èñ˜ueõ·§ [ 104.388717][ T6924] [U] v˜¢(µ7=G|W´˜vÓÚ2°j5ÆöïÂÞª¿TŸ×Ö:T [ŽéÁ«ÚQÒéÝgÏs¸Ìp [ 104.391843][ T6924] [U] ˜—P ú¦óÖàuËUò†çTýñh<¤~ͧ²F®.Ä\YCöž¿°:ÃVm´ ®ˆgiYŠ)q+kÕϘ©¯“nŸ‰VÁjdÊìYXå ô—ï ÞØ5äò%Œ]}  ûÿ<Ýæ4£ˆMÁ}% eîçDYÝfÊ8Û²„£Ç|z3©¹ë#IY1‡³VÈ–,‘ [ 104.398529][ T6924] [U] í™÷rŸ{ Ú–£$2ü{Fì [ 104.400309][ T6924] [U] h)¨ž(S [ 104.401727][ T6924] [U] IÀ‚/éVDž5U6W§}}Õx Sÿ |qÙÿ1r†­Á2ÄË<çhýÅÖî(æÚCrsŠÅWöšïú˜ßŠª%+’òü }spÑÆñs¨h"Ä#âC\löý1ŠØ¿íø“æ]ˆUE×ÎÆÔPü7dÏpÝðà3³Øí›VÉ)Rð¶'†:1I õë+ž]ZºÏðå‘õÝCVŠômWõoS‹XrM"^9Á·¦ý(/‹‘K|XêQfÆdeÍÊL>¿ðÓÿÁ„¹¼Á¤r»ªWðr²ÜÉÜé@én™<û£Á7n¯)aÂH©ïuèÓšÒ [ 104.411194][ T6924] [U] ¦Y›ÈÄ—êbŠŠÂ»òŒæ¶^E&ç«ïÐxHîAZ ®‰Ïhê,š’ÚÑ,ݸ&×å\SAÑL‡ÒÁÜU*NÁ­ˆ&8Ñ=´%¥¦þâ˜ê±C°•Y‘RkõÖbô ¿eYõšç<ütˆü [ 104.414848][ T6924] [U] ë8øß/ÁM”Ø6îFÀÇ • â?têra¥¥'F{¶¼4z›— 2…ß1[Ó[Ÿ‹§¿8£ž†:ÑSš®4 [ 104.417537][ T6924] [U] 8-“f~"$Oª™.Ré&ú{íW¦¨<‡¬Ï6Ö€2ÀT†»ÎßV"^…’,Fgoœ˜]1 V‡ºÈ¶ÙuŽÙJÿÓe0H´DXí»ª4gŠÏÈ_«°‹_P]åSÔ‡ÚXÀxyf5YåwØPwì ®ñ˜ [ 104.421474][ T6924] [U] c.Ñ;Bu€ ±Å=ºÊûüƒœ#M oH#ôø$üÎuëLL¾æ%Ê4|Ð%åeÒº#³*¾ŽCNE'5£îú2´ˆz©°” ¸+øfâÖòn:;<ðúÖ [ 104.424648][ T6924] [U] y¾1‚S_TÀŸŒC†žû±½ó½‚ç^ü&ýœÂ5uOœ¿$Á@¨›%‚ë®yFÌpßþO'Zá”Ç·û¤}.¿·¥O;ÂSTw¶ [ 104.427520][ T6924] [U] ­Ž [ 104.428479][ T6924] [U] I忲³vQ][È·û›íFeW«®Hôjl ‰ÇÒˆ=#˜äF-÷VÆÄÒŠR­´ŽÜï1Ï-q,¾†uÝGm [ 104.430990][ T6924] [U] J‰¤YIX›4iy(Ýúù…˜h‘Û{=£&h£ƒþ°ßIVw4eßÓ•0¡GrN ܸ& [ 104.433168][ T6924] [U] @©]³ÃzÆžÿÄ„ýO_2¹ [ 104.435124][ T6924] [U] 1«'Ä#nHn’T˜ qeþ÷ bmP¦ëilÔ!OwÉWeç§òNÂÏxœS’xÓÌ[&{”r•Í«ôŽ{D=W¸<Z¯¼w*×vßúI쬿ÃS2×ÿÚÇs{¬óFÔÓBzsÚ+`áï‡m<‚¬Ý+åäs [ 104.440757][ T6924] [U] [ 104.441982][ T6924] [U] [ 104.447685][ T6924] [U] [ 104.448944][ T6924] [U] [ 104.450156][ T6924] [U] [ 104.451343][ T6924] [U] [ 104.452527][ T6924] [U] [ 104.453722][ T6924] [U] [ 104.454925][ T6924] [U] [ 104.456079][ T6924] [U] [ 104.458375][ T6924] [U] [ 104.459613][ T6924] [U] [ 104.460825][ T6924] [U] [ 104.461908][ T6924] [U] [ 104.462814][ T6924] [U] [ 104.463706][ T6924] [U] [ 104.464601][ T6924] [U] [ 104.465494][ T6924] [U] [ 104.466953][ T6924] [U] [ 104.468033][ T6924] [U] [ 104.469256][ T6924] [U] [ 104.470217][ T6924] [U] [ 104.471112][ T6924] [U] [ 104.472004][ T6924] [U] [ 104.472898][ T6924] [U] [ 104.473795][ T6924] [U] [ 104.475256][ T6924] [U] [ 104.476176][ T6924] [U] [ 104.477079][ T6924] [U] [ 104.478011][ T6924] [U] [ 104.478916][ T6924] [U] [ 104.479810][ T6924] [U] [ 104.480708][ T6924] [U] [ 104.481602][ T6924] [U] [ 104.482991][ T6924] [U] [ 104.483918][ T6924] [U] [ 104.484816][ T6924] [U] [ 104.485711][ T6924] [U] [ 104.486614][ T6924] [U] [ 104.487538][ T6924] [U] [ 104.488432][ T6924] [U] [ 104.489331][ T6924] [U] [ 104.491309][ T6924] [U] [ 104.492192][ T6924] [U] [ 104.493128][ T6924] [U] [ 104.494327][ T6924] [U] [ 104.495511][ T6924] [U] [ 104.496754][ T6924] [U] [ 104.497955][ T6924] [U] [ 104.533372][ T6923] [U] [ 104.572749][ T6939] netlink: 224 bytes leftover after parsing attributes in process `syz.0.263'. [ 105.010546][ T6948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.061348][ T6948] 9pnet_virtio: no channels available for device syz [ 105.794785][ T6957] 9pnet_virtio: no channels available for device syz [ 106.307692][ T6925] syz.2.258 (6925) used greatest stack depth: 19128 bytes left [ 106.687238][ T6977] netlink: 224 bytes leftover after parsing attributes in process `syz.0.272'. [ 106.789514][ T6981] syzkaller0: entered promiscuous mode [ 106.792029][ T6981] syzkaller0: entered allmulticast mode [ 106.943135][ T6984] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.056066][ T6984] 9pnet_virtio: no channels available for device syz [ 108.251863][ T7001] mmap: syz.0.281 (7001) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.262179][ T7000] 9pnet_virtio: no channels available for device syz [ 108.301444][ T7004] netlink: 224 bytes leftover after parsing attributes in process `syz.0.282'. [ 108.444859][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.642382][ T7009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.123528][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 109.223018][ T7021] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.339386][ T7026] 9pnet_virtio: no channels available for device syz [ 109.380479][ T7021] 9pnet_virtio: no channels available for device syz [ 110.604700][ T7043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.291'. [ 111.373233][ T7056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.425373][ T7056] 9pnet_virtio: no channels available for device syz [ 111.483690][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.779241][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 111.790469][ T7065] 9pnet_virtio: no channels available for device syz [ 112.813692][ T6077] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 112.845350][ T7077] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.963625][ T6077] usb 7-1: Using ep0 maxpacket: 32 [ 112.977489][ T6077] usb 7-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 112.979128][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 112.995365][ T6077] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.003521][ T6077] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 113.008664][ T6077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.013490][ T6077] usb 7-1: Product: syz [ 113.015133][ T6077] usb 7-1: Manufacturer: syz [ 113.017154][ T6077] usb 7-1: SerialNumber: syz [ 113.025545][ T6077] usb 7-1: config 0 descriptor?? [ 113.142745][ T7074] 9pnet_virtio: no channels available for device syz [ 113.190903][ T7090] netlink: 224 bytes leftover after parsing attributes in process `syz.1.302'. [ 113.957491][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.303'. [ 113.960449][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.303'. [ 114.473038][ T7125] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.674224][ T7125] 9pnet_virtio: no channels available for device syz [ 115.160190][ T7135] syz.0.309 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.264943][ T60] usb 7-1: USB disconnect, device number 2 [ 115.340201][ T7138] netlink: 224 bytes leftover after parsing attributes in process `syz.2.311'. [ 115.642666][ T40] audit: type=1326 audit(1766174551.031:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7149 comm="syz.1.316" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0 [ 115.683739][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.689877][ T7151] fuse: Bad value for 'rootmode' [ 115.864901][ T60] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.868926][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 115.872727][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.877092][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.881400][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.884717][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.894194][ T60] usb 5-1: config 0 descriptor?? [ 115.897726][ T7142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.093718][ T7162] ocfs2: Unknown parameter 'aJÝì_cl' [ 116.219733][ T7166] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.257618][ T7166] 9pnet_virtio: no channels available for device syz [ 116.316129][ T60] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 116.328547][ T60] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 116.846415][ T7170] capability: warning: `syz.0.313' uses deprecated v2 capabilities in a way that may be insecure [ 117.305793][ T7175] netlink: 224 bytes leftover after parsing attributes in process `syz.2.321'. [ 117.361026][ T7177] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 117.613867][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 117.674188][ T5938] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 117.784444][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 117.789308][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 117.797697][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.801649][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.806444][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.810889][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.820924][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.825204][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.825618][ T7179] kvm: kvm [7178]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 118.039553][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 118.041736][ T9] usbtmc 7-1:16.0: can't read capabilities [ 118.250154][ T6020] usb 7-1: USB disconnect, device number 3 [ 118.824181][ T7192] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 118.859950][ T7192] bond1: entered promiscuous mode [ 118.862002][ T7192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.887517][ T7192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.891165][ T7192] bond1: (slave bond2): making interface the new active one [ 118.893676][ T7192] bond2: entered promiscuous mode [ 118.895880][ T7192] bond1: (slave bond2): Enslaving as an active interface with an up link [ 119.254335][ T6096] usb 5-1: USB disconnect, device number 2 [ 119.965200][ T7202] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.013555][ T7202] 9pnet_virtio: no channels available for device syz [ 120.182369][ T7207] fuse: Unknown parameter 'rootƒode' [ 120.447937][ T7213] 9pnet_virtio: no channels available for device syz [ 120.835090][ T7221] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.844951][ T7221] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.851628][ T7221] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.938580][ T7221] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.068934][ T7231] /dev/sg0: Can't lookup blockdev [ 122.675270][ T7270] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.736457][ T7270] 9pnet_virtio: no channels available for device syz [ 122.854664][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.925091][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.925124][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.003782][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.830828][ T7285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.347'. [ 124.121341][ T7294] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.246980][ T7294] 9pnet_virtio: no channels available for device syz [ 126.058696][ T7312] tipc: Can't bind to reserved service type 0 [ 126.164258][ T7317] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.253380][ T7317] 9pnet_virtio: no channels available for device syz [ 126.901893][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 127.323518][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 127.327910][ T7335] nbd: must specify at least one socket [ 127.655137][ T7344] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 127.704488][ T7344] 9pnet_virtio: no channels available for device syz [ 128.754587][ T7359] G [ 128.989525][ T7359] lo speed is unknown, defaulting to 1000 [ 128.992119][ T7359] lo speed is unknown, defaulting to 1000 [ 128.994301][ T7359] lo speed is unknown, defaulting to 1000 [ 129.000441][ T7359] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 129.044025][ T7359] lo speed is unknown, defaulting to 1000 [ 129.047666][ T7359] lo speed is unknown, defaulting to 1000 [ 129.051242][ T7359] lo speed is unknown, defaulting to 1000 [ 129.055252][ T7359] lo speed is unknown, defaulting to 1000 [ 129.272889][ T7367] kvm: kvm [7366]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 129.338577][ T7368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.454228][ T7368] 9pnet_virtio: no channels available for device syz [ 130.214686][ T7386] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.265041][ T7386] 9pnet_virtio: no channels available for device syz [ 131.655564][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'. [ 131.708409][ T7407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 131.764172][ T7407] 9pnet_virtio: no channels available for device syz [ 132.353516][ T7415] siw: device registration error -23 [ 133.117927][ T7430] FAULT_INJECTION: forcing a failure. [ 133.117927][ T7430] name failslab, interval 1, probability 0, space 0, times 1 [ 133.122004][ T7430] CPU: 3 UID: 0 PID: 7430 Comm: syz.3.389 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.122020][ T7430] Tainted: [L]=SOFTLOCKUP [ 133.122024][ T7430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.122030][ T7430] Call Trace: [ 133.122034][ T7430] [ 133.122038][ T7430] dump_stack_lvl+0x16c/0x1f0 [ 133.122057][ T7430] should_fail_ex+0x512/0x640 [ 133.122072][ T7430] should_failslab+0xc2/0x120 [ 133.122093][ T7430] kmem_cache_alloc_node_noprof+0x86/0x800 [ 133.122106][ T7430] ? __alloc_skb+0x156/0x410 [ 133.122120][ T7430] ? __alloc_skb+0x156/0x410 [ 133.122130][ T7430] __alloc_skb+0x156/0x410 [ 133.122140][ T7430] ? __alloc_skb+0x35d/0x410 [ 133.122150][ T7430] ? __pfx___alloc_skb+0x10/0x10 [ 133.122166][ T7430] hci_sock_sendmsg+0x1b0c/0x26b0 [ 133.122184][ T7430] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 133.122198][ T7430] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 133.122218][ T7430] sock_write_iter+0x566/0x610 [ 133.122234][ T7430] ? __pfx_sock_write_iter+0x10/0x10 [ 133.122254][ T7430] ? bpf_lsm_file_permission+0x9/0x10 [ 133.122266][ T7430] ? security_file_permission+0x71/0x210 [ 133.122280][ T7430] ? rw_verify_area+0xcf/0x6c0 [ 133.122294][ T7430] vfs_write+0x7d3/0x11d0 [ 133.122309][ T7430] ? __pfx_sock_write_iter+0x10/0x10 [ 133.122326][ T7430] ? __pfx_vfs_write+0x10/0x10 [ 133.122339][ T7430] ? find_held_lock+0x2b/0x80 [ 133.122360][ T7430] ksys_write+0x1f8/0x250 [ 133.122374][ T7430] ? __pfx_ksys_write+0x10/0x10 [ 133.122389][ T7430] ? do_user_addr_fault+0x843/0x1370 [ 133.122405][ T7430] __do_fast_syscall_32+0xe8/0x680 [ 133.122422][ T7430] do_fast_syscall_32+0x32/0x80 [ 133.122431][ T7430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.122444][ T7430] RIP: 0023:0xf704d579 [ 133.122452][ T7430] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 133.122462][ T7430] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 133.122472][ T7430] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 133.122478][ T7430] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 133.122484][ T7430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.122489][ T7430] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 133.122495][ T7430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.122508][ T7430] [ 133.122521][ T7430] Bluetooth: MGMT ver 1.23 [ 133.555361][ T6077] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 133.726859][ T6077] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.732542][ T6077] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.736376][ T6077] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 133.739709][ T6077] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.744045][ T6077] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.747047][ T6077] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.755154][ T6077] usb 7-1: config 0 descriptor?? [ 133.976736][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.391'. [ 134.003991][ T7446] Invalid ELF header type: 2 != 1 [ 134.022786][ T7445] kvm: kvm [7443]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 134.228375][ T6077] plantronics 0003:047F:FFFF.0003: unknown global tag 0xd [ 134.230866][ T6077] plantronics 0003:047F:FFFF.0003: item 0 4 1 13 parsing failed [ 134.236908][ T6077] plantronics 0003:047F:FFFF.0003: parse failed [ 134.239566][ T6077] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 134.392558][ T40] audit: type=1326 audit(1766174570.779:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.396" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d579 code=0x0 [ 134.609107][ T7459] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 134.627951][ T6354] lo speed is unknown, defaulting to 1000 [ 134.630681][ T6354] syz0: Port: 1 Link DOWN [ 134.637404][ T7459] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 134.664293][ T6354] lo speed is unknown, defaulting to 1000 [ 134.666425][ T6354] syz0: Port: 1 Link ACTIVE [ 135.680400][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 136.079762][ T7482] netlink: 'syz.0.403': attribute type 5 has an invalid length. [ 136.198927][ T7485] lo speed is unknown, defaulting to 1000 [ 136.202935][ T7485] wg2 speed is unknown, defaulting to 1000 [ 136.284076][ T7490] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 136.286887][ T7490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 136.290457][ T7490] vhci_hcd vhci_hcd.0: Device attached [ 136.326510][ T7485] lo speed is unknown, defaulting to 1000 [ 136.603794][ T5836] usb 40-1: SetAddress Request (6) to port 0 [ 136.606534][ T5836] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 137.029896][ T40] audit: type=1326 audit(1766174573.419:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 137.036064][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 137.040085][ T40] audit: type=1326 audit(1766174573.419:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 137.057513][ T7491] vhci_hcd: connection reset by peer [ 137.057676][ T40] audit: type=1326 audit(1766174573.419:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 137.061315][ T225] vhci_hcd vhci_hcd.1: stop threads [ 137.068213][ T40] audit: type=1326 audit(1766174573.419:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 137.068238][ T40] audit: type=1326 audit(1766174573.419:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 137.068258][ T40] audit: type=1326 audit(1766174573.419:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 137.068278][ T40] audit: type=1326 audit(1766174573.419:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 137.068297][ T40] audit: type=1326 audit(1766174573.419:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 137.068316][ T40] audit: type=1326 audit(1766174573.419:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 137.072616][ T225] vhci_hcd vhci_hcd.1: release socket [ 137.128854][ T225] vhci_hcd vhci_hcd.1: disconnect device [ 137.566805][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.569695][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.631696][ T7527] netlink: 224 bytes leftover after parsing attributes in process `syz.1.415'. [ 137.728982][ T7529] netlink: 5 bytes leftover after parsing attributes in process `syz.2.417'. [ 137.734641][ T7529] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 137.740024][ T7529] 0ªX¹¦D: entered allmulticast mode [ 137.742275][ T7529] veth0_macvtap: entered allmulticast mode [ 137.745604][ T7529] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 137.760183][ T7529] ubi31: attaching mtd0 [ 138.509989][ T7543] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.540466][ T7543] 9pnet_virtio: no channels available for device syz [ 138.601877][ T7550] netlink: 224 bytes leftover after parsing attributes in process `syz.0.421'. [ 139.356676][ T7564] netlink: 224 bytes leftover after parsing attributes in process `syz.2.425'. [ 139.787726][ T7566] siw: device registration error -23 [ 139.940016][ T7569] 9pnet_virtio: no channels available for device syz [ 140.782743][ T7583] netlink: 224 bytes leftover after parsing attributes in process `syz.2.430'. [ 140.836525][ T7587] FAULT_INJECTION: forcing a failure. [ 140.836525][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.842128][ T7587] CPU: 0 UID: 0 PID: 7587 Comm: syz.3.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.842152][ T7587] Tainted: [L]=SOFTLOCKUP [ 140.842158][ T7587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.842167][ T7587] Call Trace: [ 140.842173][ T7587] [ 140.842180][ T7587] dump_stack_lvl+0x16c/0x1f0 [ 140.842206][ T7587] should_fail_ex+0x512/0x640 [ 140.842228][ T7587] _copy_to_user+0x32/0xd0 [ 140.842247][ T7587] simple_read_from_buffer+0xcb/0x170 [ 140.842269][ T7587] proc_fail_nth_read+0x197/0x240 [ 140.842295][ T7587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.842318][ T7587] ? rw_verify_area+0xcf/0x6c0 [ 140.842338][ T7587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.842365][ T7587] vfs_read+0x1e4/0xcf0 [ 140.842389][ T7587] ? __pfx___mutex_lock+0x10/0x10 [ 140.842418][ T7587] ? __pfx_vfs_read+0x10/0x10 [ 140.842434][ T7587] ? find_held_lock+0x2b/0x80 [ 140.842463][ T7587] ? __fget_files+0x20e/0x3c0 [ 140.842491][ T7587] ksys_read+0x12a/0x250 [ 140.842513][ T7587] ? __pfx_ksys_read+0x10/0x10 [ 140.842536][ T7587] __do_fast_syscall_32+0xe8/0x680 [ 140.842561][ T7587] do_fast_syscall_32+0x32/0x80 [ 140.842578][ T7587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.842599][ T7587] RIP: 0023:0xf704d579 [ 140.842613][ T7587] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 140.842628][ T7587] RSP: 002b:00000000f543d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 140.842645][ T7587] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f543d620 [ 140.842654][ T7587] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 140.842665][ T7587] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 140.842675][ T7587] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 140.842683][ T7587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.842705][ T7587] [ 140.987390][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 140.987400][ T40] audit: type=1326 audit(1766174577.379:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 140.996129][ T40] audit: type=1326 audit(1766174577.389:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 141.002848][ T40] audit: type=1326 audit(1766174577.389:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 141.024610][ T40] audit: type=1326 audit(1766174577.389:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 141.033936][ T40] audit: type=1326 audit(1766174577.389:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 141.040842][ T40] audit: type=1326 audit(1766174577.389:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 141.047998][ T40] audit: type=1326 audit(1766174577.389:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 141.068357][ T40] audit: type=1326 audit(1766174577.399:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 141.079229][ T40] audit: type=1326 audit(1766174577.399:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 141.094630][ T40] audit: type=1326 audit(1766174577.399:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 141.116709][ T5947] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 141.172456][ T7602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.182247][ T7602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.186965][ T5947] Bluetooth: hci3: Unknown advertising packet type: 0x1e [ 141.186995][ T5947] Bluetooth: hci3: Malformed LE Event: 0x0d [ 141.198789][ T7602] futex_wake_op: syz.2.439 tries to shift op by -1; fix this program [ 141.643679][ T5836] usb 40-1: device descriptor read/8, error -110 [ 141.739941][ T7605] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.045243][ T5836] usb usb40-port1: attempt power cycle [ 142.635608][ T5836] usb usb40-port1: unable to enumerate USB device [ 142.981781][ T7618] netlink: 224 bytes leftover after parsing attributes in process `syz.3.444'. [ 143.716642][ T7620] kvm: kvm [7619]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 143.888327][ T7605] 9pnet_virtio: no channels available for device syz [ 145.198807][ T7642] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 145.371150][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.373702][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.452536][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.465945][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.834406][ T1254] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.839725][ T1254] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.953079][ T1254] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.973862][ T1254] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.025686][ T7659] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 146.186253][ T7663] netlink: 224 bytes leftover after parsing attributes in process `syz.2.459'. [ 146.416119][ T7666] x_tables: duplicate underflow at hook 1 [ 146.427547][ T7666] hub 8-0:1.0: USB hub found [ 146.429788][ T7666] hub 8-0:1.0: 1 port detected [ 146.461183][ T7670] kvm: user requested TSC rate below hardware speed [ 146.498530][ T7672] netlink: 224 bytes leftover after parsing attributes in process `syz.2.469'. [ 147.314267][ T6249] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 147.463703][ T6249] usb 6-1: Using ep0 maxpacket: 8 [ 147.467779][ T6249] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.472013][ T6249] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.484017][ T6249] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.488856][ T6249] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.503696][ T6249] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.510638][ T6249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.722021][ T6249] usb 6-1: GET_CAPABILITIES returned 0 [ 147.724320][ T6249] usbtmc 6-1:16.0: can't read capabilities [ 147.896168][ T7698] FAULT_INJECTION: forcing a failure. [ 147.896168][ T7698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.910406][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.3.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.910435][ T7698] Tainted: [L]=SOFTLOCKUP [ 147.910441][ T7698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.910451][ T7698] Call Trace: [ 147.910457][ T7698] [ 147.910464][ T7698] dump_stack_lvl+0x16c/0x1f0 [ 147.910493][ T7698] should_fail_ex+0x512/0x640 [ 147.910515][ T7698] _copy_to_user+0x32/0xd0 [ 147.910536][ T7698] simple_read_from_buffer+0xcb/0x170 [ 147.910560][ T7698] proc_fail_nth_read+0x197/0x240 [ 147.910585][ T7698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.910611][ T7698] ? rw_verify_area+0xcf/0x6c0 [ 147.910631][ T7698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.910664][ T7698] vfs_read+0x1e4/0xcf0 [ 147.910688][ T7698] ? __pfx___mutex_lock+0x10/0x10 [ 147.910715][ T7698] ? __pfx_vfs_read+0x10/0x10 [ 147.910733][ T7698] ? find_held_lock+0x2b/0x80 [ 147.910760][ T7698] ? __fget_files+0x20e/0x3c0 [ 147.910787][ T7698] ksys_read+0x12a/0x250 [ 147.910808][ T7698] ? __pfx_ksys_read+0x10/0x10 [ 147.910830][ T7698] ? do_user_addr_fault+0x843/0x1370 [ 147.910852][ T7698] __do_fast_syscall_32+0xe8/0x680 [ 147.910878][ T7698] do_fast_syscall_32+0x32/0x80 [ 147.910892][ T7698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.910912][ T7698] RIP: 0023:0xf704d579 [ 147.910926][ T7698] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 147.910940][ T7698] RSP: 002b:00000000f543d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 147.910955][ T7698] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d620 [ 147.910964][ T7698] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 147.910974][ T7698] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 147.910982][ T7698] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 147.910991][ T7698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.911013][ T7698] [ 148.006288][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 148.019184][ T6096] usb 6-1: USB disconnect, device number 2 [ 148.924234][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 148.924246][ T40] audit: type=1326 audit(1766174585.309:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 148.933133][ T40] audit: type=1326 audit(1766174585.319:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 148.940785][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 149.063764][ T40] audit: type=1326 audit(1766174585.319:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 149.072345][ T40] audit: type=1326 audit(1766174585.319:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 149.082479][ T40] audit: type=1326 audit(1766174585.319:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 149.093751][ T40] audit: type=1326 audit(1766174585.319:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 149.100560][ T40] audit: type=1326 audit(1766174585.319:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 149.107911][ T40] audit: type=1326 audit(1766174585.319:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 149.116074][ T40] audit: type=1326 audit(1766174585.319:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 149.122749][ T40] audit: type=1326 audit(1766174585.329:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 149.724701][ T7734] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.730138][ T7734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.732243][ T7734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.743899][ T7734] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.954701][ T7744] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.017692][ T7744] 9pnet_virtio: no channels available for device syz [ 150.545191][ T5947] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 150.549582][ T7758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.488'. [ 150.953454][ T7765] x_tables: duplicate underflow at hook 1 [ 150.959001][ T7765] hub 8-0:1.0: USB hub found [ 150.961175][ T7765] hub 8-0:1.0: 1 port detected [ 150.991152][ T5947] Bluetooth: hci0: unexpected event for opcode 0xa031 [ 151.803700][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.805951][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.333309][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.500'. [ 152.375678][ T7798] netlink: 224 bytes leftover after parsing attributes in process `syz.0.501'. [ 154.237832][ T7819] [U] ÿ [ 154.350243][ T7827] netlink: 224 bytes leftover after parsing attributes in process `syz.2.511'. [ 155.127345][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 155.914474][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 155.975612][ T7856] 9p: Bad value for 'wfdno' [ 156.455576][ T7851] comedi comedi2: reset error (fatal) [ 156.835836][ T7867] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 158.968420][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 159.791759][ T7918] netlink: 224 bytes leftover after parsing attributes in process `syz.3.535'. [ 160.095417][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 160.102171][ T7930] loop9: detected capacity change from 0 to 7 [ 160.107113][ T7930] Dev loop9: unable to read RDB block 7 [ 160.109440][ T7930] loop9: unable to read partition table [ 160.111984][ T7930] loop9: partition table beyond EOD, truncated [ 160.114824][ T7930] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 160.221075][ T7933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.539'. [ 160.359429][ T7936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.602352][ T7944] 9pnet_virtio: no channels available for device syz [ 160.667685][ T7936] 9pnet_virtio: no channels available for device syz [ 161.920249][ T7965] 9pnet_virtio: no channels available for device syz [ 162.470074][ T7969] netlink: 224 bytes leftover after parsing attributes in process `syz.2.548'. [ 162.976589][ T7981] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 162.987806][ T7981] team0: Port device batadv1 added [ 163.185187][ T7987] Invalid ELF header magic: != ELF [ 163.953986][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 164.115639][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 164.115649][ T40] audit: type=1326 audit(1766174600.509:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.2.558" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x0 [ 164.212628][ T8010] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 164.217728][ T8010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'. [ 164.220881][ T8010] dummy0: entered promiscuous mode [ 164.223823][ T8010] bridge0: port 3(dummy0) entered blocking state [ 164.226731][ T8010] bridge0: port 3(dummy0) entered disabled state [ 164.229435][ T8010] dummy0: entered allmulticast mode [ 164.232381][ T8010] bridge0: port 3(dummy0) entered blocking state [ 164.234865][ T8010] bridge0: port 3(dummy0) entered forwarding state [ 164.244967][ T8011] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 164.246991][ T8011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.250732][ T8011] vhci_hcd vhci_hcd.0: Device attached [ 164.276917][ T8015] netlink: 'syz.1.560': attribute type 16 has an invalid length. [ 164.276932][ T8015] netlink: 'syz.1.560': attribute type 17 has an invalid length. [ 164.311251][ T8015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.315937][ T8015] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.327609][ T8015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.401116][ T8019] 9pnet_virtio: no channels available for device syz [ 164.503713][ T6077] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 164.730680][ T8012] vhci_hcd: connection reset by peer [ 164.732796][ T6937] vhci_hcd vhci_hcd.0: stop threads [ 164.735841][ T6937] vhci_hcd vhci_hcd.0: release socket [ 164.738392][ T6937] vhci_hcd vhci_hcd.0: disconnect device [ 165.211062][ T8026] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.261539][ T8026] 9pnet_virtio: no channels available for device syz [ 166.460433][ T40] audit: type=1800 audit(1766174602.849:149): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.569" name="file0" dev="9p" ino=72095695 res=0 errno=0 [ 166.701300][ T8049] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 166.747193][ T8049] bond1 (unregistering): Released all slaves [ 167.056839][ T8056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.573'. [ 167.513087][ T8066] netlink: 'syz.2.575': attribute type 13 has an invalid length. [ 167.606419][ T8066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.616416][ T9] lo speed is unknown, defaulting to 1000 [ 167.969247][ T8069] trusted_key: encrypted_key: insufficient parameters specified [ 167.973189][ T8069] trusted_key: encrypted_key: keylen parameter is missing [ 169.053404][ T8088] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 169.105626][ T8088] 9pnet_virtio: no channels available for device syz [ 169.142409][ T8087] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.147614][ T8087] team0: Port device batadv1 added [ 169.251168][ T8093] 9pnet_virtio: no channels available for device syz [ 169.643978][ T6077] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 169.934436][ T8100] Invalid ELF header magic: != ELF [ 170.775500][ T8106] netlink: 'syz.0.593': attribute type 16 has an invalid length. [ 170.786960][ T8106] netlink: 'syz.0.593': attribute type 17 has an invalid length. [ 170.804430][ T8106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.838107][ T8110] netlink: 224 bytes leftover after parsing attributes in process `syz.1.587'. [ 171.884373][ T8132] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 172.175262][ T8136] FAULT_INJECTION: forcing a failure. [ 172.175262][ T8136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.182941][ T8136] CPU: 2 UID: 0 PID: 8136 Comm: syz.2.596 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.182959][ T8136] Tainted: [L]=SOFTLOCKUP [ 172.182962][ T8136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.182968][ T8136] Call Trace: [ 172.182973][ T8136] [ 172.182977][ T8136] dump_stack_lvl+0x16c/0x1f0 [ 172.182996][ T8136] should_fail_ex+0x512/0x640 [ 172.183011][ T8136] _copy_to_user+0x32/0xd0 [ 172.183023][ T8136] simple_read_from_buffer+0xcb/0x170 [ 172.183038][ T8136] proc_fail_nth_read+0x197/0x240 [ 172.183056][ T8136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.183073][ T8136] ? rw_verify_area+0xcf/0x6c0 [ 172.183087][ T8136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.183103][ T8136] vfs_read+0x1e4/0xcf0 [ 172.183118][ T8136] ? __pfx___mutex_lock+0x10/0x10 [ 172.183135][ T8136] ? __pfx_vfs_read+0x10/0x10 [ 172.183148][ T8136] ? find_held_lock+0x2b/0x80 [ 172.183165][ T8136] ? __fget_files+0x20e/0x3c0 [ 172.183183][ T8136] ksys_read+0x12a/0x250 [ 172.183197][ T8136] ? __pfx_ksys_read+0x10/0x10 [ 172.183212][ T8136] ? do_user_addr_fault+0x843/0x1370 [ 172.183227][ T8136] __do_fast_syscall_32+0xe8/0x680 [ 172.183244][ T8136] do_fast_syscall_32+0x32/0x80 [ 172.183253][ T8136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.183266][ T8136] RIP: 0023:0xf709d579 [ 172.183274][ T8136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.183284][ T8136] RSP: 002b:00000000f548d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 172.183294][ T8136] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f548d620 [ 172.183300][ T8136] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 172.183306][ T8136] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 172.183311][ T8136] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 172.183317][ T8136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.183330][ T8136] [ 172.289923][ T8141] netlink: 224 bytes leftover after parsing attributes in process `syz.0.597'. [ 173.295010][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 173.298299][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 174.187746][ T8176] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.215739][ T8176] 9pnet_virtio: no channels available for device syz [ 174.583082][ T8186] netlink: 224 bytes leftover after parsing attributes in process `syz.3.607'. [ 174.716861][ T8190] input: syz0 as /devices/virtual/input/input6 [ 175.799549][ T8207] Bluetooth: MGMT ver 1.23 [ 176.089636][ T40] audit: type=1804 audit(1766174612.479:150): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.617" name="bus" dev="ramfs" ino=17769 res=1 errno=0 [ 176.320330][ T8225] syzkaller0: entered promiscuous mode [ 176.322230][ T8225] syzkaller0: entered allmulticast mode [ 176.552721][ T8228] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.701613][ T8228] 9pnet_virtio: no channels available for device syz [ 176.928612][ T8235] input: syz0 as /devices/virtual/input/input7 [ 177.696401][ T8239] netlink: 224 bytes leftover after parsing attributes in process `syz.0.626'. [ 177.741505][ T8243] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.755961][ T8243] 9pnet_virtio: no channels available for device syz [ 177.827259][ T8241] input: syz0 as /devices/virtual/input/input8 [ 178.590032][ T8263] overlay: ./file1 is not a directory [ 179.294712][ T8268] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.342486][ T8273] netlink: 224 bytes leftover after parsing attributes in process `syz.0.636'. [ 179.472953][ T8279] 9pnet_virtio: no channels available for device syz [ 179.584269][ T8268] 9pnet_virtio: no channels available for device syz [ 179.972822][ T8287] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 180.928780][ T8309] 9pnet_virtio: no channels available for device syz [ 180.981457][ T8307] 9pnet_virtio: no channels available for device syz [ 181.485276][ T8320] 9pnet_virtio: no channels available for device syz [ 182.055645][ T8336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.070891][ T8336] 9pnet_virtio: no channels available for device syz [ 182.164676][ T8341] could not allocate digest TFM handle sha256-generic [ 182.197793][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 182.261045][ T8356] netlink: 52 bytes leftover after parsing attributes in process `syz.1.663'. [ 182.406451][ T8360] tmpfs: Unknown parameter 'mpol' [ 182.433785][ T6096] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.597545][ T6096] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.602058][ T6096] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 182.606017][ T6096] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 182.611028][ T6096] usb 5-1: New USB device found, idVendor=19d2, idProduct=1069, bcdDevice=c3.89 [ 182.614374][ T6096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.617023][ T6096] usb 5-1: Product: syz [ 182.618451][ T6096] usb 5-1: Manufacturer: syz [ 182.619970][ T6096] usb 5-1: SerialNumber: syz [ 183.010943][ T8368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.022879][ T8368] 9pnet_virtio: no channels available for device syz [ 183.043877][ T892] usb 5-1: USB disconnect, device number 3 [ 183.440551][ T8381] FAULT_INJECTION: forcing a failure. [ 183.440551][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 183.446126][ T8381] CPU: 1 UID: 0 PID: 8381 Comm: syz.3.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.446152][ T8381] Tainted: [L]=SOFTLOCKUP [ 183.446157][ T8381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.446168][ T8381] Call Trace: [ 183.446174][ T8381] [ 183.446180][ T8381] dump_stack_lvl+0x16c/0x1f0 [ 183.446209][ T8381] should_fail_ex+0x512/0x640 [ 183.446227][ T8381] ? fs_reclaim_acquire+0xae/0x150 [ 183.446255][ T8381] should_failslab+0xc2/0x120 [ 183.446280][ T8381] __kmalloc_noprof+0xeb/0x910 [ 183.446299][ T8381] ? tomoyo_encode2+0x100/0x3e0 [ 183.446325][ T8381] ? tomoyo_encode2+0x100/0x3e0 [ 183.446345][ T8381] tomoyo_encode2+0x100/0x3e0 [ 183.446370][ T8381] tomoyo_encode+0x29/0x50 [ 183.446390][ T8381] tomoyo_realpath_from_path+0x18f/0x6e0 [ 183.446421][ T8381] ? tomoyo_profile+0x47/0x60 [ 183.446447][ T8381] tomoyo_path_number_perm+0x245/0x580 [ 183.446464][ T8381] ? tomoyo_path_number_perm+0x237/0x580 [ 183.446485][ T8381] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 183.446531][ T8381] ? find_held_lock+0x2b/0x80 [ 183.446552][ T8381] ? hook_file_ioctl_common+0x144/0x410 [ 183.446578][ T8381] ? __fget_files+0x20e/0x3c0 [ 183.446599][ T8381] ? __fput_deferred+0x460/0x480 [ 183.446620][ T8381] security_file_ioctl_compat+0x9b/0x240 [ 183.446643][ T8381] __ia32_compat_sys_ioctl+0xc3/0x370 [ 183.446666][ T8381] __do_fast_syscall_32+0xe8/0x680 [ 183.446694][ T8381] do_fast_syscall_32+0x32/0x80 [ 183.446710][ T8381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.446730][ T8381] RIP: 0023:0xf704d579 [ 183.446743][ T8381] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 183.446758][ T8381] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 183.446773][ T8381] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008b100 [ 183.446784][ T8381] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.446793][ T8381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.446802][ T8381] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 183.446811][ T8381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.446835][ T8381] [ 183.446853][ T8381] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.548041][ T8384] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 183.551856][ T8384] block device autoloading is deprecated and will be removed. [ 183.607824][ T8387] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 183.647692][ T8389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.663054][ T8389] 9pnet_virtio: no channels available for device syz [ 184.063675][ T6096] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 184.234759][ T6096] usb 8-1: Using ep0 maxpacket: 32 [ 184.239352][ T6096] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 184.247126][ T6096] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 184.251197][ T6096] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 184.254950][ T6096] usb 8-1: Product: syz [ 184.256856][ T6096] usb 8-1: Manufacturer: syz [ 184.258753][ T6096] usb 8-1: SerialNumber: syz [ 184.265766][ T6096] usb 8-1: config 0 descriptor?? [ 184.274299][ T8394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.542483][ T8398] tipc: Started in network mode [ 184.544763][ T8398] tipc: Node identity eea473096c1d, cluster identity 4711 [ 184.548109][ T8398] tipc: Enabled bearer , priority 0 [ 184.551349][ T8398] syzkaller0: entered promiscuous mode [ 184.553216][ T8398] syzkaller0: entered allmulticast mode [ 184.585790][ T8398] syzkaller0: mtu greater than device maximum [ 184.596209][ T8399] netlink: 'syz.3.678': attribute type 13 has an invalid length. [ 184.603924][ T8397] tipc: Resetting bearer [ 184.638981][ T8397] tipc: Disabling bearer [ 184.711286][ T8401] binfmt_misc: register: failed to install interpreter file ./file0 [ 184.869015][ T1022] usb 8-1: USB disconnect, device number 2 [ 185.435269][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.438380][ T8422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 185.439158][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.888991][ T8429] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000006' [ 186.972828][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 187.173329][ T8451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.385031][ T8469] netlink: 360 bytes leftover after parsing attributes in process `syz.0.700'. [ 188.744919][ T8474] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 189.321417][ T8489] bridge1: entered promiscuous mode [ 189.323036][ T8489] bridge1: entered allmulticast mode [ 189.329972][ T8489] team0: Port device bridge1 added [ 189.337539][ T8489] bridge0: port 3(team0) entered blocking state [ 189.339595][ T8489] bridge0: port 3(team0) entered disabled state [ 189.341703][ T8489] team0: entered allmulticast mode [ 189.343355][ T8489] team_slave_0: entered allmulticast mode [ 189.346941][ T8489] team_slave_1: entered allmulticast mode [ 189.348761][ T8489] batadv1: entered allmulticast mode [ 189.351566][ T8489] team0: entered promiscuous mode [ 189.353111][ T8489] team_slave_0: entered promiscuous mode [ 189.356221][ T8489] team_slave_1: entered promiscuous mode [ 189.358229][ T8489] batadv1: entered promiscuous mode [ 189.360443][ T8489] bridge0: port 3(team0) entered blocking state [ 189.362482][ T8489] bridge0: port 3(team0) entered forwarding state [ 189.745043][ T6937] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 189.748133][ T6937] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 190.128304][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.133926][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.138027][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.142396][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.145556][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.176201][ T8507] lo speed is unknown, defaulting to 1000 [ 190.189120][ T8507] wg2 speed is unknown, defaulting to 1000 [ 190.400172][ T8507] lo speed is unknown, defaulting to 1000 [ 190.414157][ T6002] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 190.477393][ T8520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.485663][ T8520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.522851][ T8520] veth0_macvtap: left allmulticast mode [ 190.547113][ T9] lo speed is unknown, defaulting to 1000 [ 190.549121][ T9] syz: Port: 1 Link DOWN [ 190.562484][ T104] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.577780][ T104] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.581431][ T104] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.585692][ T104] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.697654][ T8507] chnl_net:caif_netlink_parms(): no params data found [ 190.760471][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.762689][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.765149][ T8507] bridge_slave_0: entered allmulticast mode [ 190.767962][ T8507] bridge_slave_0: entered promiscuous mode [ 190.770984][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.773126][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.775709][ T8507] bridge_slave_1: entered allmulticast mode [ 190.778602][ T8507] bridge_slave_1: entered promiscuous mode [ 190.795574][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.800493][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.817470][ T8507] team0: Port device team_slave_0 added [ 190.820696][ T8507] team0: Port device team_slave_1 added [ 190.833508][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.835796][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.843829][ T8507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.848790][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.850985][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.859629][ T8507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.889314][ T8507] hsr_slave_0: entered promiscuous mode [ 190.891532][ T8507] hsr_slave_1: entered promiscuous mode [ 190.896566][ T8507] debugfs: 'hsr0' already exists in 'hsr' [ 190.898369][ T8507] Cannot create hsr debugfs directory [ 190.980803][ T8507] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.985837][ T8507] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.989703][ T8507] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.996199][ T8507] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.010144][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.012343][ T8507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.014804][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.017014][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.045789][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.054192][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.058029][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.068755][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.076138][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.078661][ T6937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.083926][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.086882][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.223041][ T8507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.358810][ T8507] veth0_vlan: entered promiscuous mode [ 191.363810][ T8507] veth1_vlan: entered promiscuous mode [ 191.385840][ T8507] veth0_macvtap: entered promiscuous mode [ 191.392311][ T8507] veth1_macvtap: entered promiscuous mode [ 191.405644][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.421403][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.434078][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.440456][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.446199][ T1140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.448958][ T1140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.477789][ T6937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.482663][ T6937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.496087][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.498526][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.558818][ T40] audit: type=1326 audit(1766174627.949:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 191.574624][ T40] audit: type=1326 audit(1766174627.959:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 191.588875][ T40] audit: type=1326 audit(1766174627.959:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 191.603744][ T40] audit: type=1326 audit(1766174627.959:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 191.614256][ T40] audit: type=1326 audit(1766174627.959:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 191.624219][ T40] audit: type=1326 audit(1766174627.959:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 191.630632][ T40] audit: type=1326 audit(1766174627.959:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 191.641314][ T40] audit: type=1326 audit(1766174627.959:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 191.648368][ T40] audit: type=1326 audit(1766174627.959:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 191.655088][ T40] audit: type=1326 audit(1766174627.959:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.713" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 192.075967][ T8566] fuse: Bad value for 'fd' [ 192.080512][ T8566] binder: Binderfs stats mode cannot be changed during a remount [ 192.204745][ T5947] Bluetooth: hci1: command tx timeout [ 192.424156][ T8573] netlink: 'syz.1.725': attribute type 4 has an invalid length. [ 192.723369][ T8578] syzkaller1: entered promiscuous mode [ 192.725195][ T8578] syzkaller1: entered allmulticast mode [ 193.784638][ T8603] proc: Unknown parameter 'ni{card' [ 193.847890][ T8604] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.906575][ T8604] 9pnet_virtio: no channels available for device syz [ 194.283673][ T5947] Bluetooth: hci1: command tx timeout [ 194.720690][ T8616] nfs: Unknown parameter '#' [ 195.213747][ T8623] netlink: 68 bytes leftover after parsing attributes in process `syz.3.739'. [ 195.294411][ T8629] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 195.342160][ T8633] netlink: 224 bytes leftover after parsing attributes in process `syz.2.744'. [ 196.373826][ T5947] Bluetooth: hci1: command tx timeout [ 196.502029][ T8649] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 196.504635][ T8649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 196.507871][ T8649] vhci_hcd vhci_hcd.0: Device attached [ 196.794022][ T53] usb 40-1: SetAddress Request (10) to port 0 [ 196.796197][ T53] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 196.799011][ T8663] openvswitch: netlink: Invalid VLAN frame [ 196.858477][ T8666] FAULT_INJECTION: forcing a failure. [ 196.858477][ T8666] name failslab, interval 1, probability 0, space 0, times 0 [ 196.862932][ T8666] CPU: 3 UID: 0 PID: 8666 Comm: syz.4.751 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.862957][ T8666] Tainted: [L]=SOFTLOCKUP [ 196.862962][ T8666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.862970][ T8666] Call Trace: [ 196.862974][ T8666] [ 196.862981][ T8666] dump_stack_lvl+0x16c/0x1f0 [ 196.863008][ T8666] should_fail_ex+0x512/0x640 [ 196.863030][ T8666] should_failslab+0xc2/0x120 [ 196.863054][ T8666] kmem_cache_alloc_node_noprof+0x86/0x800 [ 196.863071][ T8666] ? __alloc_skb+0x156/0x410 [ 196.863091][ T8666] ? __alloc_skb+0x156/0x410 [ 196.863105][ T8666] __alloc_skb+0x156/0x410 [ 196.863120][ T8666] ? __alloc_skb+0x35d/0x410 [ 196.863134][ T8666] ? __pfx___alloc_skb+0x10/0x10 [ 196.863157][ T8666] hci_sock_sendmsg+0x1b0c/0x26b0 [ 196.863182][ T8666] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 196.863208][ T8666] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 196.863238][ T8666] sock_write_iter+0x566/0x610 [ 196.863257][ T8666] ? __pfx_sock_write_iter+0x10/0x10 [ 196.863279][ T8666] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 196.863311][ T8666] ? bpf_lsm_file_permission+0x9/0x10 [ 196.863329][ T8666] ? security_file_permission+0x71/0x210 [ 196.863345][ T8666] ? rw_verify_area+0xcf/0x6c0 [ 196.863366][ T8666] vfs_write+0x7d3/0x11d0 [ 196.863388][ T8666] ? __pfx_sock_write_iter+0x10/0x10 [ 196.863412][ T8666] ? __pfx_vfs_write+0x10/0x10 [ 196.863430][ T8666] ? find_held_lock+0x2b/0x80 [ 196.863461][ T8666] ksys_write+0x1f8/0x250 [ 196.863482][ T8666] ? __pfx_ksys_write+0x10/0x10 [ 196.863500][ T8666] ? syscall_trace_enter+0x1cb/0x220 [ 196.863519][ T8666] ? rcu_is_watching+0x12/0xc0 [ 196.863540][ T8666] __do_fast_syscall_32+0xe8/0x680 [ 196.863581][ T8666] do_fast_syscall_32+0x32/0x80 [ 196.863596][ T8666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.863614][ T8666] RIP: 0023:0xf7f54579 [ 196.863623][ T8666] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 196.863638][ T8666] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 196.863652][ T8666] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 196.863661][ T8666] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 196.863670][ T8666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.863678][ T8666] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 196.863686][ T8666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.863709][ T8666] [ 197.283463][ T8650] vhci_hcd: connection reset by peer [ 197.288181][ T13] vhci_hcd vhci_hcd.1: stop threads [ 197.290310][ T13] vhci_hcd vhci_hcd.1: release socket [ 197.294929][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 197.320955][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 197.553996][ T8670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.444098][ T5947] Bluetooth: hci1: command tx timeout [ 198.965429][ T8701] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 198.967879][ T8701] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.973650][ T8701] vhci_hcd vhci_hcd.0: Device attached [ 198.993029][ T8699] bond3: entered promiscuous mode [ 198.993062][ T8699] bond3: entered allmulticast mode [ 198.993308][ T8699] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.015408][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.017773][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.098254][ T8707] syz_tun: entered allmulticast mode [ 199.103260][ T8705] syz_tun: left allmulticast mode [ 199.146531][ T8711] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 199.148752][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.151657][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 199.156055][ T8711] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 199.158313][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.160888][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 199.164451][ T8711] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 199.166714][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 199.171064][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 199.174213][ T8701] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 199.177730][ T8711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 199.195873][ T8711] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 199.198469][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.221109][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 199.233119][ T8711] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(24) [ 199.235993][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 199.242532][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 199.246870][ T8711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 199.255692][ T8711] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(28) [ 199.258534][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.274197][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 199.286685][ T8724] vhci_hcd: connection closed [ 199.287189][ T8720] vhci_hcd: connection closed [ 199.287420][ T6888] vhci_hcd vhci_hcd.3: stop threads [ 199.293524][ T6888] vhci_hcd vhci_hcd.3: release socket [ 199.296117][ T8718] vhci_hcd: connection closed [ 199.299807][ T8716] vhci_hcd: connection closed [ 199.301924][ T8714] vhci_hcd: connection closed [ 199.304191][ T8712] vhci_hcd: connection closed [ 199.313734][ T6888] vhci_hcd vhci_hcd.3: disconnect device [ 199.318718][ T6888] vhci_hcd vhci_hcd.3: stop threads [ 199.320949][ T6888] vhci_hcd vhci_hcd.3: release socket [ 199.323213][ T6888] vhci_hcd vhci_hcd.3: disconnect device [ 199.333772][ T6888] vhci_hcd vhci_hcd.3: stop threads [ 199.336039][ T6888] vhci_hcd vhci_hcd.3: release socket [ 199.345826][ T6888] vhci_hcd vhci_hcd.3: disconnect device [ 199.353794][ T6888] vhci_hcd vhci_hcd.3: stop threads [ 199.356058][ T6888] vhci_hcd vhci_hcd.3: release socket [ 199.363655][ T6888] vhci_hcd vhci_hcd.3: disconnect device [ 199.366230][ T6888] vhci_hcd vhci_hcd.3: stop threads [ 199.368448][ T6888] vhci_hcd vhci_hcd.3: release socket [ 199.373707][ T6888] vhci_hcd vhci_hcd.3: disconnect device [ 199.381914][ T6888] vhci_hcd vhci_hcd.3: stop threads [ 199.383960][ T6888] vhci_hcd vhci_hcd.3: release socket [ 199.385738][ T6888] vhci_hcd vhci_hcd.3: disconnect device [ 199.403696][ T1022] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 199.407277][ T1022] usb 43-1: enqueue for inactive port 0 [ 199.474778][ T1022] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 199.855612][ T8731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.766'. [ 200.082130][ T8734] tipc: Enabling of bearer rejected, failed to enable media [ 200.259920][ T8740] bridge_slave_0: left allmulticast mode [ 200.261910][ T8740] bridge_slave_0: left promiscuous mode [ 200.266471][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.447459][ T8740] bridge_slave_1: left allmulticast mode [ 200.449379][ T8740] bridge_slave_1: left promiscuous mode [ 200.452171][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.469300][ T8740] bond0: (slave bond_slave_0): Releasing backup interface [ 200.479819][ T8740] bond0: (slave bond_slave_1): Releasing backup interface [ 200.512898][ T8740] team0: Port device team_slave_0 removed [ 200.522018][ T8740] team0: Port device team_slave_1 removed [ 200.526659][ T8740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.529942][ T8740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.535831][ T8740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.539065][ T8740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.544272][ T8740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.173727][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 201.173757][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 201.241276][ T8702] vhci_hcd: connection closed [ 201.242216][ T89] vhci_hcd vhci_hcd.1: stop threads [ 201.246358][ T89] vhci_hcd vhci_hcd.1: release socket [ 201.248211][ T89] vhci_hcd vhci_hcd.1: disconnect device [ 201.884086][ T53] usb 40-1: device descriptor read/8, error -110 [ 202.302567][ T8755] netlink: 'syz.3.773': attribute type 5 has an invalid length. [ 202.364402][ T8758] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 202.367248][ T8758] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.370698][ T8758] vhci_hcd vhci_hcd.0: Device attached [ 202.404080][ T53] usb usb40-port1: attempt power cycle [ 202.407569][ T8759] vhci_hcd: connection closed [ 202.487075][ T8765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.775'. [ 202.491799][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 202.494670][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 202.554077][ T6249] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 202.644285][ T6249] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 202.760714][ T8767] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 202.767107][ T89] vhci_hcd vhci_hcd.3: stop threads [ 202.768837][ T89] vhci_hcd vhci_hcd.3: release socket [ 202.779870][ T89] vhci_hcd vhci_hcd.3: disconnect device [ 203.023661][ T53] usb usb40-port1: unable to enumerate USB device [ 203.244547][ T8784] lo speed is unknown, defaulting to 1000 [ 203.251380][ T8784] wg2 speed is unknown, defaulting to 1000 [ 203.714673][ T8784] lo speed is unknown, defaulting to 1000 [ 203.947518][ T8791] ------------[ cut here ]------------ [ 203.949900][ T8791] WARNING: fs/exec.c:118 at path_noexec+0x1ca/0x230, CPU#1: syz.3.781/8791 [ 203.953127][ T8791] Modules linked in: [ 203.954841][ T8791] CPU: 1 UID: 0 PID: 8791 Comm: syz.3.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.958443][ T8791] Tainted: [L]=SOFTLOCKUP [ 203.959984][ T8791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.963360][ T8791] RIP: 0010:path_noexec+0x1ca/0x230 [ 203.965080][ T8791] Code: ff 83 e3 02 48 89 de e8 54 2c 82 ff 48 85 db 41 0f 95 c4 e8 78 31 82 ff 44 89 e0 5b 5d 41 5c e9 4c 6c 3c 09 e8 67 31 82 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 79 13 eb ff e9 a8 fe ff ff e8 6f 13 eb [ 203.971131][ T8791] RSP: 0018:ffffc900071f7c88 EFLAGS: 00010287 [ 203.973087][ T8791] RAX: 00000000000000be RBX: ffff88801c306aa0 RCX: ffffc9000c542000 [ 203.975636][ T8791] RDX: 0000000000080000 RSI: ffffffff823c2759 RDI: 0000000000000007 [ 203.978164][ T8791] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 203.980673][ T8791] R10: 0000000000000000 R11: ffff88802513d4b0 R12: 0000000080ffa000 [ 203.983236][ T8791] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000070 [ 203.985813][ T8791] FS: 0000000000000000(0000) GS:ffff8880977fc000(0063) knlGS:00000000f543db40 [ 203.988656][ T8791] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 203.990823][ T8791] CR2: 00000000f7416288 CR3: 000000006ab79000 CR4: 0000000000352ef0 [ 203.993361][ T8791] Call Trace: [ 203.994485][ T8791] [ 203.995483][ T8791] do_mmap+0xd23/0x1210 [ 203.996845][ T8791] ? __pfx_do_mmap+0x10/0x10 [ 203.998371][ T8791] ? __pfx_down_write_killable+0x10/0x10 [ 204.000159][ T8791] vm_mmap_pgoff+0x29e/0x470 [ 204.001658][ T8791] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 204.003297][ T8791] ? __fget_files+0x20e/0x3c0 [ 204.004822][ T8791] ksys_mmap_pgoff+0x32c/0x5c0 [ 204.006399][ T8791] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 204.008164][ T8791] __do_fast_syscall_32+0xe8/0x680 [ 204.009821][ T8791] do_fast_syscall_32+0x32/0x80 [ 204.011401][ T8791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.013431][ T8791] RIP: 0023:0xf704d579 [ 204.014748][ T8791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 204.020689][ T8791] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 204.023322][ T8791] RAX: ffffffffffffffda RBX: 0000000080ffa000 RCX: 0000000000004000 [ 204.025859][ T8791] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000005 [ 204.028381][ T8791] RBP: 000000006d56d000 R08: 0000000000000000 R09: 0000000000000000 [ 204.030887][ T8791] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 204.033476][ T8791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.036003][ T8791] [ 204.037042][ T8791] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.039343][ T8791] CPU: 1 UID: 0 PID: 8791 Comm: syz.3.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.042674][ T8791] Tainted: [L]=SOFTLOCKUP [ 204.044045][ T8791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 204.047497][ T8791] Call Trace: [ 204.048571][ T8791] [ 204.049529][ T8791] dump_stack_lvl+0x3d/0x1f0 [ 204.051002][ T8791] vpanic+0x640/0x6f0 [ 204.052275][ T8791] ? path_noexec+0x1ca/0x230 [ 204.053751][ T8791] panic+0xca/0xd0 [ 204.054960][ T8791] ? __pfx_panic+0x10/0x10 [ 204.056390][ T8791] check_panic_on_warn+0xab/0xb0 [ 204.057976][ T8791] __warn+0x108/0x3c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 204.059268][ T8791] __report_bug+0x2a0/0x520 [ 204.060930][ T8791] ? path_noexec+0x1ca/0x230 [ 204.062427][ T8791] ? __pfx___report_bug+0x10/0x10 [ 204.064009][ T8791] ? arch_get_unmapped_area_topdown+0x494/0x8f0 [ 204.066009][ T8791] ? path_noexec+0x1ca/0x230 [ 204.067482][ T8791] report_bug+0xb2/0x220 [ 204.068847][ T8791] ? path_noexec+0x1ca/0x230 [ 204.070331][ T8791] handle_bug+0x127/0x260 [ 204.071714][ T8791] exc_invalid_op+0x17/0x50 [ 204.073166][ T8791] asm_exc_invalid_op+0x1a/0x20 [ 204.074724][ T8791] RIP: 0010:path_noexec+0x1ca/0x230 [ 204.076386][ T8791] Code: ff 83 e3 02 48 89 de e8 54 2c 82 ff 48 85 db 41 0f 95 c4 e8 78 31 82 ff 44 89 e0 5b 5d 41 5c e9 4c 6c 3c 09 e8 67 31 82 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 79 13 eb ff e9 a8 fe ff ff e8 6f 13 eb [ 204.082402][ T8791] RSP: 0018:ffffc900071f7c88 EFLAGS: 00010287 [ 204.084319][ T8791] RAX: 00000000000000be RBX: ffff88801c306aa0 RCX: ffffc9000c542000 [ 204.086806][ T8791] RDX: 0000000000080000 RSI: ffffffff823c2759 RDI: 0000000000000007 [ 204.089298][ T8791] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 204.091770][ T8791] R10: 0000000000000000 R11: ffff88802513d4b0 R12: 0000000080ffa000 [ 204.094252][ T8791] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000070 [ 204.096740][ T8791] ? path_noexec+0x1c9/0x230 [ 204.098230][ T8791] ? path_noexec+0x1c9/0x230 [ 204.099700][ T8791] do_mmap+0xd23/0x1210 [ 204.101033][ T8791] ? __pfx_do_mmap+0x10/0x10 [ 204.102517][ T8791] ? __pfx_down_write_killable+0x10/0x10 [ 204.104290][ T8791] vm_mmap_pgoff+0x29e/0x470 [ 204.105793][ T8791] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 204.107422][ T8791] ? __fget_files+0x20e/0x3c0 [ 204.108919][ T8791] ksys_mmap_pgoff+0x32c/0x5c0 [ 204.110458][ T8791] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 204.112161][ T8791] __do_fast_syscall_32+0xe8/0x680 [ 204.113798][ T8791] do_fast_syscall_32+0x32/0x80 [ 204.115342][ T8791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.117351][ T8791] RIP: 0023:0xf704d579 [ 204.118650][ T8791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 204.124647][ T8791] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 204.127285][ T8791] RAX: ffffffffffffffda RBX: 0000000080ffa000 RCX: 0000000000004000 [ 204.129768][ T8791] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000005 [ 204.132238][ T8791] RBP: 000000006d56d000 R08: 0000000000000000 R09: 0000000000000000 [ 204.134717][ T8791] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 204.137197][ T8791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.139713][ T8791] [ 204.141332][ T8791] Kernel Offset: disabled [ 204.142705][ T8791] Rebooting in 86400 seconds..