last executing test programs: 50m41.218818372s ago: executing program 32 (id=35): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x3ff) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xdaf}}, './file0\x00'}) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x0, 0x2}, 0x18) sendfile(r6, r6, 0x0, 0x200000) 45m19.825940862s ago: executing program 33 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000002640)={[{@grpquota}, {@delalloc}, {@resuid}, {@grpquota}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) 42m15.3051918s ago: executing program 34 (id=1000): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xdaf}}, './file0\x00'}) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 40m47.836684583s ago: executing program 35 (id=1127): ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc00c5512, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x87) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_clone3(&(0x7f00000004c0)={0x80, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r2], 0x1}, 0x58) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r6 = dup(0xffffffffffffffff) syz_read_part_table(0x617, &(0x7f0000000000)="$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") ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000140)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c051}, 0x4) sendmmsg$inet(r0, &(0x7f0000002c40), 0x0, 0x0) 40m31.769428919s ago: executing program 36 (id=1148): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@oldalloc}, {@block_validity}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@i_version}, {@nomblk_io_submit}, {@nodioread_nolock}]}, 0x6, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000600)={[{@nobarrier}]}, 0xfe, 0x269, &(0x7f0000000200)="$eJzs3b1rJGUcB/Df7EvWmBCiNja+gIhoIMRCEGy0UQhIEBFBhYiIlSRCTNqslY2FvUoqmyB2RkuxCTb3B+TuUuSaa8IVF+7grthjZnaPzWZDXvZljsznA7szz87ztrDfZyeQmQ2gtGYj4t2IqEbEXETUIyLprvBy/phtF7cmd5cjWq2P7yRZvbyc67SbiohmRLwdUesc29j5/ODe3gev/bRef/X3nc8mx/X+uh0e7H949NvSj38tvrlRab823d52v49hSvq8Vksinh3FYE+IpFb0DDifP6+nuX8uIl7J8l+PSjuyP69N/FePN37t327iaLzzBEah1aqn34HNFlA6lewcOKnMR0S+X6nMz+fn8DeqSXy7uvb93Der6ytfF71SAUOQNPO/e/ff/6fx91RP/m9X8/yfy1sjnikwEmn+P/lo+2a6f1QtejbAWLyQb9L8z325+XrIP5SO/EN5yT+Ul/zDFXDJ7Mo/lJf8Q3nJP1xh9c5Os+/hwfN/v/0fhJefIjBuM9mz738or578F3I9LlCM7vwDAOXSahR8ATJQmKLXHwAAAAAAAAAAAAAAAAAA4KStyd3lzmNcY/7/S8ThexFROz5+IztazX6POOKp7Pnpu0la7bEkbzaQL14asIMB/THkq6+XGherP3NruONf1LUXR9PvD8eLp97bbnMloplWXqjVTn7+k/bn70yn9v/MGQ3rX51vgGFJesrvfDre8Xs93C52/MW9iH/T9Weh3/pXieezbf/1Z7r7FsuX9N2DATsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbB4FAAD//1eqcO0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1acd060, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) getgroups(0x0, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec48"], 0x208}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$eJzs3c9rXNUeAPDvnfxO3ntJw+O917fQgGgL2qRJWyki2CK4qqX+WAhuHJu01E5/0EQ0tdIU6kYQNy4EVy6sC/8HLQiu/AdcuHEllSLSjVJ05E7ujNNk7mQSMzNt5vOByZwz586cc5t8e86cOedOAD1rKv1RiNgdEReTiMm6sv7ICqdWj7vzy5WT6S2Jcvmln5O4cjVZqX+tJLsfi4i04PfxSL6JiMm+9fUuLl8+WyyVFi5l+ZmlcxdnFpcv7ztzrnh64fTC+bkn5w4fOnjo8Oz+umedem6z57erLn3s+htvjb9//NXPPrmbzH7+/fEkjtQanZ7XZl97I1MxFeVM/ePpv+vh7a6sS/pqfyd/SdY+sNazbWwQm1L9/Q1ExH9jPPrqfpvj8d4LXW0c0FblJGp9FNBrEvEPPao6Dqi+t2/tffBgm0clQCfcPhrxWC3+ByKiGv/9q3ODMVyZGxi9k9wzz5NExP5tqD+t49uvj19Pb9GmeTigsZVrQ9kU+Nr+P6nE5kQMV3Kjdwr3xH8hm8adyOYPX2xezXhewdSafFb/0FbPB2jdyrWI+F+j8f++ys9m8f9adp8+/voW68+JfwAAAAAAAGALbh6NiCcaff5XqK3/GWyw/mcsIo5sQ/0bf/5XuLUN1QAN3D4a8XTD9b+F6iETfVnun5X1AAPJqTOlhf0R8a+I2BsDQ2l+tv5Fv6h7dkTs+2Dy47z669f/pbe0/upawKwdt/rXrAaaLy4Vt+HUoefdvhbx//5G8Z/U+v+kQf+fxvfFFuuYfPTGibyyjeMfaJfypxF7Gvb/Se2YpPn1OWYq44GZ6qhgvYfe+fDLvPrFP3RP2v+PNo//oaT+ej2Lm3v9wYg4sNxfzivfKP7ToX+j8f9g8nJf1O1EfLu4tHRpNmIwObb+8bnNtRkeJMOtH/puRFTioRovafzvfaT5/F9t/F8XhyPZNb5a8Z8/xn7IK9P/Q/ek8T/fvP+fuLf/33xi7sbEV3n1n2hp/u9gpU/fmz1i/g+aazVAu91OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgQFSLiH5EUpmvpQmF6OmIsIv4do4XShcWlx09dePP8fFpW+f7/QvWbfsdX80n1+/8n6vJza/IHImJXRHzUN1LJT5+8UJrv9skDAAAAAAAAAAAAAAAAAADAfWJs9W7d/v/Uj33Nn/t8+5sHtFt/dr9BvAM7UH+3GwB0jfiH3iX+oXflx/+vd8sVHW0O0EGt9v/lq21uCNBxWxz/+7gAdgDv/6FXDbR22HC72wF0g/4fAAAAAAB2lF0P3/wuiYiVp0Yqt9RgVlb7YHCkW60D2qmQVzDU2XYAnWcNL/QuS3+gd7W4+BfYwZJa6reGm/3zV/8n7WkQAAAAAAAAAAAAALDOnt0t7P8HdqTc/f/Ajtdk/3+jjT0uFwA7iP3/0Ltc5guoDvbzvunf/n8AAAAAAAAAAAAAuA8MXz5bLJUWLi0ut5y4upmD/37ip8greqaTzdiuxErxvmjGg5AYiIg1ReXx1T/bs8XSK9HZ9lQjphN1DXawrpxEl/4/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1vkzAAD//y6EJ6E=") 36m38.345000726s ago: executing program 37 (id=1548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 35m55.981787551s ago: executing program 38 (id=1611): socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) unshare(0x2040400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x92) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240), 0x800000000001ff, 0x48c102) sched_setparam(r4, &(0x7f0000000000)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) 33m20.978793528s ago: executing program 39 (id=1812): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) mount(0x0, 0x0, 0x0, 0x50029, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) 32m1.105870658s ago: executing program 40 (id=1938): recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 23m2.123722843s ago: executing program 41 (id=6573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 23m0.193279187s ago: executing program 42 (id=6586): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='j', 0x1, 0x0, 0x0, 0x0) 20m40.242604936s ago: executing program 43 (id=7312): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x90, 0x0, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x7, 0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0x9}, {0x5, 0x4}, {0x0, 0x5}, {}, {0x4, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x5, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x7}, {0x2, 0x9}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x1}, {0x3, 0x2}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x7, 0x9, 0x7, 0x2, 0x400, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x5, 0xa202, 0x1, 0x4, 0x2]}}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f000000080003", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 20m21.516319549s ago: executing program 44 (id=7388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x3c}}, 0x10) 19m56.242152612s ago: executing program 45 (id=7587): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f00000003c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400), 0x24, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 19m56.213143217s ago: executing program 0 (id=7593): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0xb0}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)="7eb614981afc", 0x6}], 0x1}}], 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) 19m55.823715544s ago: executing program 0 (id=7601): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 19m55.14029624s ago: executing program 7 (id=7608): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@nombcache}, {@usrquota}, {@dax_inode}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x1, @desc2}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x1, @desc2}) 19m55.059441842s ago: executing program 0 (id=7610): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x10001, 0xff, 0x0, 0x2, 0xffffffff80000001, 0x81, 0x4, 0x4, 0x1, 0x5, 0x9, 0xfbc, 0x7, 0x100, 0x2, 0x0, {0x2, 0x5}, 0xc, 0x29}}) 19m54.791650112s ago: executing program 0 (id=7613): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) 19m54.561131869s ago: executing program 0 (id=7617): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x3200c00, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0xa, 0xac7, &(0x7f0000000400)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file1\x00') 19m54.503560391s ago: executing program 7 (id=7618): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) io_setup(0x209, &(0x7f00000000c0)) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount(&(0x7f0000000040)=@filename='.\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x8c, 0x0) 19m53.960120104s ago: executing program 7 (id=7624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire], 0x0, 0x0, 0x0}) 19m53.675715901s ago: executing program 7 (id=7628): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) 19m53.607813172s ago: executing program 7 (id=7629): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcggXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtlZe+3u2ptXO/TziWaf55ln5pnf/OZlXyJrAnxuXTiR9t10cuHEa7eq9sadhZWNOwvXevUkk0laSbtbpLieFB8k59Od8oVqZjNcMWw7v14+e/HDjzc+6rba2RqveukMD7A9yl6sN1Nmk4w15UPYNt4bDzbe5Fa12MxMlbDjvcTBfhtPUm7z46NbPYOUY32Nodc78PQouu+bfbrX/0xyKMlU7w1tvdvZevIR7um+7kXrjy8OAAAAODAO37ud3Mr0fscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5Pm+f9FM7V69dkUvef/T/Q9Y39in8MdbvfIpnqVu60nEQwAAAAAAAAAPF5fupffXSzL6V67LOr/83+5bhypX5/J27mZpazmZG5lMWtZy2rmk8z0DTRxa3FtbXW+t+anZVkOWfP0wDVPjxhw51HsNQAAAAAAAAD83zjXlD/LhUzvcywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBNkYx1i3o60qvPpNVOMpVkolpuPflHr/40u7vfAQAAAMATcPhe7uVWpnvtsqi/8x+tv/dP5e1cz1qWs5aVLOVS/VtA91t/a+POwsrGnYVr1fTZcb/9n636H6f3DKMeMd3fHgZv+Vi9RCeXs1zPOZk38lZWcimtes3KsV48g+N6r4qpONdVlqMl6FJTVnv+q6Y8GGbqjIxvZmSuia3KxrO7Z6L/6DzAlubT2vzl58h95Pzcrlsp/ts7Jod6c5Jnvr93zsfva2ceys5MnO47+47unonkK3/6/Y+urFy/eqVYP3FwTqP7MPmvratmZyYW+jLx4siZuHzz6czETq28sFm/kO/lhzmR2bye1SznJ1nMWpYym+/WtcXmfK5eZ3bP1Pltrdf3imKiOS5jO2L68uFuuVtML9frTmc5P8hbuZSlvFr/O535fCNnciZn+47wCyNc9a0BV/2fhwd//KtNpZPkl015MFR5fbYvr/333Jm6r39OK+Vkd73nHtm9cVP7i02lOhI/b8qDYTMTU9l8l+hF93wvA+MDM/Gb+rZyc+X61dUrizd2jFusD97eK9m++wfnRlKdL89VB6tubT87qr7nB/bN131HNvtaO/t+29ns2+tKnWg+w312pNN134sD+xbqvmN9fVuftz4ty7L7eQuAA+/Q1w5NdP7d+Xvn/c4vOlc6r019Z/Kbky9NZPxv499qz4290nqp+EPez0+z9zd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTzffeffq4srK0uqOSlmWt4d0PZZK2sm2OX/9S98ySeqHAY0+YLX0+VZSz2mnqdxfYLcfbHfee9Ak/LM5Jk8k4Y+kMjX0/NlZ+aQsy4MR8yiVsnFQ4tmPyr7eloAn4NTatRunbr7z7teXry2+ufTm0vWzZ86cnTt75tWFU5eXV5bmuq/7HSXwOPR9AgcAAAAAAAAAAACeEqP9cU7xcH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAQLpxI+26KzM+dnKvaG3cWVqqpV99a8pMkrSTFbFJ8kJxPd8pM33DFsO2sJxc//Hjjo26r3Uz18q3d1hvNejNlNslYUw4wNWhmeXvYeEU9zo3h442o2NzDKmHHe4mD/fa/AAAA///tbhq7") socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES32=r0], 0x0) 19m53.309664024s ago: executing program 5 (id=7634): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rename(&(0x7f0000000100)='./file2\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 19m52.905550853s ago: executing program 5 (id=7636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @remote}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19m52.667584193s ago: executing program 5 (id=7637): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0) socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 19m52.667409615s ago: executing program 0 (id=7638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) 19m52.350054421s ago: executing program 46 (id=7638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) 19m52.341728539s ago: executing program 5 (id=7640): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) 19m52.05044974s ago: executing program 5 (id=7641): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@v={0x93, 0x0, 0x90, 0x0, @MIDI_NOTEON=@special}) 19m51.633236211s ago: executing program 5 (id=7643): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0x10, 0xd, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 19m51.228808514s ago: executing program 47 (id=7643): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0x10, 0xd, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 19m51.183293066s ago: executing program 7 (id=7646): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f00000000c0)={0xa0002015}) 19m50.986265416s ago: executing program 48 (id=7646): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f00000000c0)={0xa0002015}) 5m0.216579694s ago: executing program 1 (id=11596): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x53, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file2'}, 0xb) tee(r3, r2, 0x9, 0x8) 4m59.067769481s ago: executing program 1 (id=11607): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x103003, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0xffffffffffffffff) 4m58.013175752s ago: executing program 1 (id=11611): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) munlock(&(0x7f0000e89000/0x4000)=nil, 0x4000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) 4m53.32787141s ago: executing program 1 (id=11624): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00') 4m53.175867083s ago: executing program 1 (id=11625): socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x0, 0x0, 0x70, 0x0, [{@remote}, {}, {@multicast1}, {@multicast2}, {@loopback}, {@dev}, {@empty}]}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_int(r8, 0x29, 0x46, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 4m52.733813829s ago: executing program 1 (id=11626): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x5b7a, 0x800}], 0x1) semop(r0, &(0x7f0000000380)=[{0x1, 0x82, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) 4m52.300224761s ago: executing program 49 (id=11626): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x5b7a, 0x800}], 0x1) semop(r0, &(0x7f0000000380)=[{0x1, 0x82, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) 17.131841666s ago: executing program 9 (id=12435): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x21, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd8e1, 0x0, 0x0, 0x0, 0x40000000}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @map_fd={0x18, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0x20, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @alu={0x4, 0x1, 0xd, 0x6, 0xb, 0xfffffffffffffff0, 0x7}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9d2}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}]}, &(0x7f0000000440)='GPL\x00', 0x9, 0x89, &(0x7f0000000480)=""/137, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x8, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f00000005c0)=[{0x2, 0x4, 0xf, 0x3}, {0x4, 0x4, 0x4, 0x2}, {0x4, 0x5, 0x4, 0x2}, {0x4, 0x5, 0x7, 0x7}, {0x3, 0x2, 0xe, 0xa}, {0x0, 0x4, 0x10, 0x8}, {0x5, 0x2, 0x10, 0x7}, {0x5, 0x4, 0x4, 0x7}], 0x10, 0x8}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd2b, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) 16.048951473s ago: executing program 4 (id=12440): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec204cd32308cdd8dde0400", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) 14.528748026s ago: executing program 6 (id=12444): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.733839324s ago: executing program 6 (id=12448): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20061700"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.834609438s ago: executing program 6 (id=12451): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 11.390924884s ago: executing program 6 (id=12455): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1a00840, &(0x7f0000000040)=ANY=[@ANYBLOB="6e66732c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c6669695f786c6174653d312c6e66733d6e6f7374616c655f726f6c73686f72746e616d653d6c6f7765722c757466383d302c696f636861727365743d63703835302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c696f636861727365743d6d6163726f6d616e69616e2c757466383d302c757466383d670e756e695f786c6174653d312cbb2a66383d312c00"], 0x1, 0x367, &(0x7f0000000c80)="$eJzs3U9om2UYAPAn+9qmHWztQRgKwqc3Qcv+4EFPHaODYS4qYepBDK5TaeqgwWB3WFYv4lHwqCcv4kEPHnYWQRFvHrw6QabiQXcbOHwlyZfmS5N2m5DN4e93CE+e933yvm/ytfn6tXn7ykqsn5uN89evX4v5+UrMrJxaiRuVWIosBi7HuLkJOQDg/nAjpfgz9d1mSWXKUwIApqz3/v/aoVLmna/365+8+wPAfa/4+X9hV3q2fGd+r+ILU5sWADBFY9f/Hx1pnhv9Vf9M6a8CAID71fMvvvTMyVrEc3k+H7HxbrversfTw/aT5+ONaMZaHI3FuBnRP1Ho3lR6t6fP1FaP5nneiV+Wot6taNcjNjrtev9M4WTWq6/GsViMpaK+ONtIKWWnv6itHst7IuJypzd+bFTa9dk4WIz/48FYi+ORxwNj9RFnaqvH8+IB6huD+k7E9vC6RXf+y7EY378aF6IZ5xbORkqD05ra6qVjeX4q1Ubq2/VqnNt5Fva8AgIAAAAAAAAAAAAAAAAAAAAAAP/Kcr5jaWf/mzTcv2d5eUJ7b3+cfn2xP9B2f3+gVE2R0h9vP1F/L4uR/YF278/Trs/EgXu7dAAAAAAAAAAAAAAAAAAAAPjPaG3NRaPZXNtsbV1cLwedzdbWgYjoZt789rOvFmK8zy2CmWKMUlNepC6uN1I26JyykT5FkHUHH2Q+vbIz43Kf6s4qJk6jundTs3nokZ8/HGYezgaP/PewTxaTF5jtmkY52Djcn9KdPFEXTxTB8Vt0vppSKmfKL8qll8erohIxc+cv3P5B6gbfXHv9wROtI0/2Ml+mvsceXzx79YOPf1tvNLsjdzU/mdts3UzrjeL+5INt7yArHT+V6AeV8pEws1/59mimkf3w+wsPvf/d7Y2eypm3JvTJ+sv5fLO1VSm+UnpNc/2gm9tVtdA8k0XsepzZCQf/FIIjH600rlz66dfbrSp9k7BRBwAAAAAAAAAAAAAAAAAA3BWlz4oXig/7zu5X9dSz058ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANw9w///Xwq2xzK3ClIn4q9OjDdV1zZbEYfv9TIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPif+ycAAP//iWFqmQ==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x10) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000400190008000c00", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 11.124473709s ago: executing program 4 (id=12456): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/216, 0xd8}], 0x1, 0x91, 0x20000002) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 9.474260166s ago: executing program 8 (id=12458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r5) 9.357980428s ago: executing program 2 (id=12459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc0000}, 0x8810) 8.751573229s ago: executing program 6 (id=12460): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r1, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000002040)=""/4078, 0xfee}, {&(0x7f00000018c0)=""/181, 0xb5}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000480)=""/120, 0x78}], 0x6}}], 0x1, 0x40000000, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a0000800000000", 0x13) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14}}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 7.548401901s ago: executing program 2 (id=12461): syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x208108c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)='F', 0x1) syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz7FtwkAABdB/jm05SqJskR1SZYpMwgBULENLScME7GMJdMgYmQ2A4r3mS3f/n3ThuZp8fU453I/6W7ZJjoflotbf1c9SeiupScm4Ke/z6C/tddo1p305f6RmPfW6PmOdJbsh3+nmB5L8bx/2TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4YZcAAAD//29cFYU=") 7.466241936s ago: executing program 4 (id=12462): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 7.464595085s ago: executing program 9 (id=12463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = timerfd_create(0x9, 0x80000) timerfd_settime(r1, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18) unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xffb) r6 = epoll_create(0xb3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40002009}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000040)={0xeb97, 0x0, 0x401, 0x2, &(0x7f0000000400)}) syz_emit_ethernet(0x66, &(0x7f0000000f80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xfffc}}}}}}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2719, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 6.719604575s ago: executing program 3 (id=12464): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.717934567s ago: executing program 8 (id=12465): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1, 0xb, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x800) sendmsg$NFT_BATCH(r6, 0x0, 0x24040884) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7, r7}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 6.548237666s ago: executing program 6 (id=12466): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000a40)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000100)={0x20, 0x0, 0x2, "c306"}, 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000000)='autofs\x00', 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0xa291dae356942430) 5.41583072s ago: executing program 9 (id=12467): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffd, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000000c0), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 5.293015805s ago: executing program 4 (id=12468): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r1, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000002040)=""/4078, 0xfee}, {&(0x7f00000018c0)=""/181, 0xb5}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000480)=""/120, 0x78}], 0x6}}], 0x1, 0x40000000, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a0000800000000", 0x13) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14}}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 3.596370525s ago: executing program 8 (id=12469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000140)=0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.483113306s ago: executing program 2 (id=12470): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r1, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000002040)=""/4078, 0xfee}, {&(0x7f00000018c0)=""/181, 0xb5}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000480)=""/120, 0x78}], 0x6}}], 0x1, 0x40000000, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a0000800000000", 0x13) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14}}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 3.44644904s ago: executing program 3 (id=12471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x100000000, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd20, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x802}, 0x8080) 3.312349786s ago: executing program 4 (id=12472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) 2.413916486s ago: executing program 8 (id=12473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000000801020000000000"], 0x34}, 0x1, 0x0, 0x0, 0xc0000}, 0x8810) 1.160490905s ago: executing program 2 (id=12474): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.153840151s ago: executing program 3 (id=12475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.115916295s ago: executing program 8 (id=12476): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000000940)=""/74, 0x4a}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) 1.017418217s ago: executing program 4 (id=12477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r5) 937.321664ms ago: executing program 3 (id=12478): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a9"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 763.672753ms ago: executing program 9 (id=12479): socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 720.027013ms ago: executing program 2 (id=12480): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 569.696001ms ago: executing program 3 (id=12481): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000640), 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x1c) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xa8) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 361.485382ms ago: executing program 9 (id=12482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}}, 0x20008040) 360.341353ms ago: executing program 8 (id=12483): syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x208108c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)='F', 0x1) syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz7FtwkAABdB/jm05SqJskR1SZYpMwgBULENLScME7GMJdMgYmQ2A4r3mS3f/n3ThuZp8fU453I/6W7ZJjoflotbf1c9SeiupScm4Ke/z6C/tddo1p305f6RmPfW6PmOdJbsh3+nmB5L8bx/2TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4YZcAAAD//29cFYU=") 190.991441ms ago: executing program 2 (id=12484): pipe2$9p(0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) close_range(r5, 0xffffffffffffffff, 0x0) 143.958885ms ago: executing program 3 (id=12485): socket$kcm(0xa, 0x1, 0x106) keyctl$reject(0x14, 0x0, 0x7, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) 0s ago: executing program 9 (id=12486): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0xe, 0x4, "bf7ad941"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x18, 0x3, "e8ad9f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="00018c"], 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 2853.288077][ T9635] netlink: 'syz.3.11491': attribute type 1 has an invalid length. [ 2853.324562][ T5636] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2853.638277][ T5636] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.133633][ T9276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2854.197649][ T9276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2854.261550][ T9276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2854.287032][ T9564] chnl_net:caif_netlink_parms(): no params data found [ 2854.322671][ T9276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2854.460883][ T7962] Bluetooth: hci0: command tx timeout [ 2854.861577][ T5636] bridge_slave_1: left allmulticast mode [ 2854.873110][ T5636] bridge_slave_1: left promiscuous mode [ 2854.894249][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 2854.968236][ T5636] bridge_slave_0: left allmulticast mode [ 2854.989891][ T5636] bridge_slave_0: left promiscuous mode [ 2855.008687][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.166685][ T5636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2856.179594][ T5636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2856.198237][ T5636] bond0 (unregistering): Released all slaves [ 2856.281612][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 2856.300754][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.308183][ T9564] bridge_slave_0: entered allmulticast mode [ 2856.343839][ T9564] bridge_slave_0: entered promiscuous mode [ 2856.384210][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 2856.401962][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 2856.430318][ T9564] bridge_slave_1: entered allmulticast mode [ 2856.454701][ T9564] bridge_slave_1: entered promiscuous mode [ 2856.543219][ T7962] Bluetooth: hci0: command tx timeout [ 2857.510934][ T9708] netlink: 'syz.2.11521': attribute type 1 has an invalid length. [ 2857.760548][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2857.815371][ T9713] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2857.878934][ T9713] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2857.955756][ T9714] macvlan2: entered promiscuous mode [ 2857.961457][ T9714] macvlan2: entered allmulticast mode [ 2858.036453][ T9722] netlink: 'syz.9.11523': attribute type 1 has an invalid length. [ 2858.087807][ T9714] bond1: entered promiscuous mode [ 2858.101846][ T9714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2858.129267][ T9714] bond1: left promiscuous mode [ 2858.347996][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2858.492954][ T5636] hsr_slave_0: left promiscuous mode [ 2858.499107][ T5636] hsr_slave_1: left promiscuous mode [ 2858.506699][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2858.514865][ T5636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2858.524548][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2858.532263][ T5636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2858.550630][ T5636] veth1_macvtap: left promiscuous mode [ 2858.556651][ T5636] veth0_macvtap: left promiscuous mode [ 2858.562754][ T5636] veth1_vlan: left promiscuous mode [ 2858.568339][ T5636] veth0_vlan: left promiscuous mode [ 2858.670803][ T8666] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2858.960128][ T8666] usb 9-1: Using ep0 maxpacket: 16 [ 2859.034617][ T8666] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2859.072216][ T8666] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 2859.092103][ T8666] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2859.116737][ T8666] usb 9-1: Product: syz [ 2859.160317][ T8666] usb 9-1: Manufacturer: syz [ 2859.165477][ T8666] usb 9-1: SerialNumber: syz [ 2859.208194][ T8666] usb 9-1: config 0 descriptor?? [ 2860.214752][ T8666] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2861.232074][ T5636] team0 (unregistering): Port device team_slave_1 removed [ 2861.270788][T13748] usb 9-1: Failed to submit usb control message: -110 [ 2861.306018][T13748] usb 9-1: unable to send the bmi data to the device: -110 [ 2861.335764][T13748] usb 9-1: unable to get target info from device [ 2861.342434][T13748] usb 9-1: could not get target info (-110) [ 2861.348819][T13748] usb 9-1: could not probe fw (-110) [ 2861.362275][ T5636] team0 (unregistering): Port device team_slave_0 removed [ 2863.181570][ T7962] Bluetooth: hci6: command 0x0406 tx timeout [ 2863.642846][ T9782] loop9: detected capacity change from 0 to 128 [ 2863.664640][ T9782] FAT-fs (loop9): Directory bread(block 32) failed [ 2863.682589][ T9782] FAT-fs (loop9): Directory bread(block 33) failed [ 2863.689206][ T9782] FAT-fs (loop9): Directory bread(block 34) failed [ 2863.709036][ T9782] FAT-fs (loop9): Directory bread(block 35) failed [ 2863.730227][ T9782] FAT-fs (loop9): Directory bread(block 36) failed [ 2863.736805][ T9782] FAT-fs (loop9): Directory bread(block 37) failed [ 2863.846431][ T9782] FAT-fs (loop9): Directory bread(block 38) failed [ 2863.868924][ T9782] FAT-fs (loop9): Directory bread(block 39) failed [ 2863.875955][ T9782] FAT-fs (loop9): Directory bread(block 40) failed [ 2863.882941][ T9782] FAT-fs (loop9): Directory bread(block 41) failed [ 2864.158989][ T9564] team0: Port device team_slave_0 added [ 2864.231467][ T9750] syzkaller0: entered promiscuous mode [ 2864.260812][ T9750] syzkaller0: entered allmulticast mode [ 2864.301524][ T9276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2864.356595][ T5964] usb 9-1: USB disconnect, device number 82 [ 2864.369765][ T9564] team0: Port device team_slave_1 added [ 2864.550418][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11544'. [ 2865.058358][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2865.066096][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2865.092469][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2865.219025][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2865.232889][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2865.395320][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2865.429057][ T9276] 8021q: adding VLAN 0 to HW filter on device team0 [ 2865.601121][T11484] bridge0: port 1(bridge_slave_0) entered blocking state [ 2865.608291][T11484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2865.686538][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 2865.693692][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2865.717122][ T9564] hsr_slave_0: entered promiscuous mode [ 2865.729430][ T9564] hsr_slave_1: entered promiscuous mode [ 2865.737105][ T9564] debugfs: 'hsr0' already exists in 'hsr' [ 2865.743353][ T9564] Cannot create hsr debugfs directory [ 2867.112345][ T9276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2867.553256][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11563'. [ 2868.175344][ T9276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2868.350255][ T7894] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2868.441442][ T9564] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2868.469417][ T9564] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2868.504656][ T7894] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2868.505812][ T9564] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2868.524430][ T7894] usb 9-1: config 0 has no interfaces? [ 2868.541897][ T9276] veth0_vlan: entered promiscuous mode [ 2868.555327][ T9564] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2868.557541][ T7894] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2868.601547][ T7894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2868.609631][ T7894] usb 9-1: Product: syz [ 2868.616541][ T7894] usb 9-1: Manufacturer: syz [ 2868.628666][ T7894] usb 9-1: SerialNumber: syz [ 2868.644114][ T9276] veth1_vlan: entered promiscuous mode [ 2868.654463][ T7894] usb 9-1: config 0 descriptor?? [ 2868.772391][ T9864] loop3: detected capacity change from 0 to 8192 [ 2868.838960][ T9276] veth0_macvtap: entered promiscuous mode [ 2868.895511][ T9276] veth1_macvtap: entered promiscuous mode [ 2868.945506][ T1131] usb 9-1: USB disconnect, device number 83 [ 2869.013810][ T9276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2869.051486][ T9276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2869.104639][ T5636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.140205][ T5636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.153304][ T9874] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 2869.162901][ T9874] FAT-fs (loop3): Filesystem has been set read-only [ 2869.197814][ T5636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.231694][ T5636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.271074][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2869.282789][ T9880] loop5: detected capacity change from 0 to 7 [ 2869.306106][ T9400] Dev loop5: unable to read RDB block 7 [ 2869.314526][ T9400] loop5: unable to read partition table [ 2869.321689][ T9400] loop5: partition table beyond EOD, truncated [ 2869.328768][ T9880] Dev loop5: unable to read RDB block 7 [ 2869.347471][ T9880] loop5: unable to read partition table [ 2869.392126][ T9880] loop5: partition table beyond EOD, truncated [ 2869.402782][ T9880] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2869.406119][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 2869.514480][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 2869.521691][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2869.616042][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 2869.623264][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2869.685100][ T5636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2869.709004][ T5636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2869.732210][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11577'. [ 2870.701763][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2870.723439][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2872.593442][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2872.810363][ T1131] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2872.995124][ T1131] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2873.012852][ T1131] usb 4-1: config 0 has no interfaces? [ 2873.038649][ T1131] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2873.058983][ T1131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.101187][ T1131] usb 4-1: Product: syz [ 2873.105415][ T1131] usb 4-1: Manufacturer: syz [ 2873.120465][ T1131] usb 4-1: SerialNumber: syz [ 2873.128090][ T1131] usb 4-1: config 0 descriptor?? [ 2873.428755][ T6049] usb 4-1: USB disconnect, device number 106 [ 2873.574062][ T9564] veth0_vlan: entered promiscuous mode [ 2873.588384][ T9564] veth1_vlan: entered promiscuous mode [ 2873.699336][ T9564] veth0_macvtap: entered promiscuous mode [ 2873.717889][ T9564] veth1_macvtap: entered promiscuous mode [ 2873.762513][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2873.828500][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2873.869096][ T6662] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2873.909872][ T6662] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2873.949412][ T6662] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2873.978511][ T9976] loop8: detected capacity change from 0 to 128 [ 2873.994819][ T6662] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2874.405588][ T9431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2874.443803][ T9431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2875.196580][ T6662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2875.228288][ T6662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2875.261254][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 2875.261275][ T31] audit: type=1800 audit(1767239736.033:1005): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11607" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2876.531360][T10012] IPv6: addrconf: prefix option has invalid lifetime [ 2876.721552][ T7962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2876.732152][ T7962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2876.740434][ T7962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2876.748459][ T7962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2876.756212][ T7962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2879.385206][ T9883] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2879.387795][T15919] Bluetooth: hci2: command tx timeout [ 2879.976740][ T9883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2880.002170][ T9883] usb 5-1: config 0 has no interfaces? [ 2880.021396][ T9883] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2880.042812][ T9883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2880.097214][ T9883] usb 5-1: Product: syz [ 2880.121852][ T9883] usb 5-1: Manufacturer: syz [ 2880.126502][ T9883] usb 5-1: SerialNumber: syz [ 2880.174637][ T9883] usb 5-1: config 0 descriptor?? [ 2880.223135][ T5190] bridge0: port 3(syz_tun) entered disabled state [ 2880.286834][ T5190] syz_tun (unregistering): left allmulticast mode [ 2880.298674][ T5190] syz_tun (unregistering): left promiscuous mode [ 2880.319095][ T5190] bridge0: port 3(syz_tun) entered disabled state [ 2880.492847][ T5964] usb 5-1: USB disconnect, device number 113 [ 2880.630883][T31831] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2880.684149][T10016] chnl_net:caif_netlink_parms(): no params data found [ 2880.884650][T31831] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.082906][T31831] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.310896][ T7962] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2881.319951][ T7962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2881.328074][ T7962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2881.361126][ T7962] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2881.391166][ T7962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2881.420736][ T7962] Bluetooth: hci2: command tx timeout [ 2881.606815][T31831] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.736678][T10026] IPVS: starting estimator thread 0... [ 2881.850399][T10061] IPVS: using max 24 ests per chain, 57600 per kthread [ 2882.117401][T10016] bridge0: port 1(bridge_slave_0) entered blocking state [ 2882.129023][T10016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2882.303207][T10016] bridge_slave_0: entered allmulticast mode [ 2882.369662][T10016] bridge_slave_0: entered promiscuous mode [ 2882.437707][T10016] bridge0: port 2(bridge_slave_1) entered blocking state [ 2882.458492][T10016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2882.477683][T10016] bridge_slave_1: entered allmulticast mode [ 2882.498907][T10016] bridge_slave_1: entered promiscuous mode [ 2883.305823][T10016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2883.495752][T10016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2883.508122][T15919] Bluetooth: hci2: command tx timeout [ 2883.508130][ T7962] Bluetooth: hci4: command tx timeout [ 2883.827080][T10016] team0: Port device team_slave_0 added [ 2883.877161][T10016] team0: Port device team_slave_1 added [ 2884.049054][T31831] bridge_slave_1: left allmulticast mode [ 2884.049087][T31831] bridge_slave_1: left promiscuous mode [ 2884.049345][T31831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2884.069227][T31831] bridge_slave_0: left allmulticast mode [ 2884.069287][T31831] bridge_slave_0: left promiscuous mode [ 2884.069514][T31831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2884.546079][T10081] overlayfs: failed to resolve './file1': -2 [ 2884.572964][T10081] overlayfs: failed to resolve './file1': -2 [ 2884.684809][ T5964] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2884.750978][T10088] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11639'. [ 2884.765928][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11639'. [ 2884.860266][ T5964] usb 4-1: Using ep0 maxpacket: 16 [ 2884.881259][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2884.908017][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2884.947741][ T5964] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2884.958384][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2884.990798][ T5964] usb 4-1: config 0 descriptor?? [ 2885.408926][T31831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2885.449671][T31831] bond_slave_0: left promiscuous mode [ 2885.482684][T31831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2885.529140][T31831] bond_slave_1: left promiscuous mode [ 2885.567365][T31831] bond0 (unregistering): Released all slaves [ 2885.580149][ T7962] Bluetooth: hci4: command tx timeout [ 2885.587732][ T7962] Bluetooth: hci2: command tx timeout [ 2885.667893][ T5964] HID 045e:07da: Invalid code 65791 type 1 [ 2885.698509][ T5964] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002F/input/input57 [ 2885.771945][ T5964] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 2886.054284][T31831] bond1 (unregistering): Released all slaves [ 2886.265948][T31831] bond2 (unregistering): Released all slaves [ 2886.289800][T31831] bond3 (unregistering): Released all slaves [ 2886.329692][T31831] bond4 (unregistering): Released all slaves [ 2886.363360][T31831] bond5 (unregistering): Released all slaves [ 2886.395343][T31831] bond6 (unregistering): Released all slaves [ 2886.434872][T31831] bond7 (unregistering): Released all slaves [ 2886.470999][T31831] bond8 (unregistering): Released all slaves [ 2886.518892][T10016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2886.526028][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2886.560562][T10016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2886.726479][T10108] loop4: detected capacity change from 0 to 512 [ 2886.736921][T10108] EXT4-fs: Ignoring removed oldalloc option [ 2886.765579][T10108] EXT4-fs: Ignoring removed i_version option [ 2886.804707][T10108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2886.839094][T10108] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2886.866607][T10016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2886.874023][T10026] usb 4-1: USB disconnect, device number 107 [ 2886.885319][T10108] EXT4-fs (loop4): 1 truncate cleaned up [ 2886.912780][T10108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2886.923721][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2886.951840][T10016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2887.034025][ T31] audit: type=1800 audit(1767239747.803:1006): pid=10108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11646" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 2887.762112][ T7962] Bluetooth: hci4: command tx timeout [ 2887.868777][ T9564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2888.074940][T10016] hsr_slave_0: entered promiscuous mode [ 2888.098525][T10016] hsr_slave_1: entered promiscuous mode [ 2889.750215][T10016] debugfs: 'hsr0' already exists in 'hsr' [ 2889.756004][T10016] Cannot create hsr debugfs directory [ 2889.820064][ T7962] Bluetooth: hci4: command tx timeout [ 2891.039053][T31831] hsr_slave_0: left promiscuous mode [ 2891.065362][T31831] hsr_slave_1: left promiscuous mode [ 2891.091918][T31831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2891.114158][T10141] loop2: detected capacity change from 0 to 256 [ 2891.130097][T31831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2891.138514][T10141] vfat: Unknown parameter 'fii_xlate' [ 2891.168673][T31831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2891.186635][T31831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2891.218403][T31831] veth1_macvtap: left promiscuous mode [ 2891.227206][T31831] veth0_macvtap: left promiscuous mode [ 2891.602783][T31831] team0 (unregistering): Port device batadv3 removed [ 2891.661957][T31831] team0 (unregistering): Port device batadv2 removed [ 2891.716818][T31831] team0 (unregistering): Port device batadv1 removed [ 2893.920627][T31831] team0 (unregistering): Port device team_slave_1 removed [ 2894.013426][T31831] team0 (unregistering): Port device team_slave_0 removed [ 2894.834225][T10163] loop4: detected capacity change from 0 to 256 [ 2894.841639][T10163] vfat: Unknown parameter 'fii_xlate' [ 2898.224087][T10047] chnl_net:caif_netlink_parms(): no params data found [ 2898.290699][T10177] loop2: detected capacity change from 0 to 256 [ 2898.321157][T10177] vfat: Unknown parameter 'fii_xlate' [ 2900.783167][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 2900.795748][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 2900.822501][T10047] bridge_slave_0: entered allmulticast mode [ 2900.840683][T10047] bridge_slave_0: entered promiscuous mode [ 2900.890561][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 2900.911579][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 2900.930832][T10047] bridge_slave_1: entered allmulticast mode [ 2900.945386][T10047] bridge_slave_1: entered promiscuous mode [ 2901.122221][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2901.207926][T31831] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2901.301159][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2901.311258][T10211] loop4: detected capacity change from 0 to 256 [ 2901.318636][T10211] vfat: Unknown parameter 'fii_xlate' [ 2901.408464][T31831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2902.080842][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2902.087558][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2902.277958][T10217] loop3: detected capacity change from 0 to 256 [ 2902.311264][T10217] vfat: Unknown parameter 'fii_xlate' [ 2902.648837][T31831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2903.210337][ T5964] IPVS: starting estimator thread 0... [ 2903.247265][T10047] team0: Port device team_slave_0 added [ 2903.320122][T10229] IPVS: using max 24 ests per chain, 57600 per kthread [ 2903.494091][T10235] loop5: detected capacity change from 0 to 7 [ 2903.541192][T10235] Dev loop5: unable to read RDB block 7 [ 2903.611987][T10047] team0: Port device team_slave_1 added [ 2903.622506][T10235] loop5: AHDI p1 p2 p3 [ 2903.630896][T10235] loop5: partition table partially beyond EOD, truncated [ 2903.724742][T10235] loop5: p1 start 1818582900 is beyond EOD, truncated [ 2903.757566][T10235] loop5: p3 start 335544320 is beyond EOD, truncated [ 2903.925793][T31831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2904.576213][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2904.603149][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2904.693750][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2904.716221][T10016] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2904.818632][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2904.841770][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2904.875686][T10252] loop2: detected capacity change from 0 to 256 [ 2904.883229][T10252] vfat: Unknown parameter 'fii_xlate' [ 2905.074120][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2905.177895][T10016] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2905.365418][T10016] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2905.444702][T10047] hsr_slave_0: entered promiscuous mode [ 2905.472053][T10047] hsr_slave_1: entered promiscuous mode [ 2905.489348][T10047] debugfs: 'hsr0' already exists in 'hsr' [ 2905.504505][T10047] Cannot create hsr debugfs directory [ 2905.549768][T10016] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2905.881504][T10264] loop2: detected capacity change from 0 to 256 [ 2905.888909][T10264] vfat: Unknown parameter 'fii_xlate' [ 2906.862718][T31831] bridge_slave_1: left allmulticast mode [ 2906.910735][T31831] bridge_slave_1: left promiscuous mode [ 2906.916592][T31831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2906.990585][T31831] bridge_slave_0: left allmulticast mode [ 2907.001948][T31831] bridge_slave_0: left promiscuous mode [ 2907.021799][T31831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2907.124955][T10277] loop5: detected capacity change from 0 to 7 [ 2907.141155][T10277] Dev loop5: unable to read RDB block 7 [ 2907.158189][T10277] loop5: AHDI p1 p2 p3 [ 2907.168336][T10277] loop5: partition table partially beyond EOD, truncated [ 2907.181809][T10277] loop5: p1 start 1818582900 is beyond EOD, truncated [ 2907.210362][T10277] loop5: p3 start 335544320 is beyond EOD, truncated [ 2908.517859][T31831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2908.529346][T31831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2908.539741][T31831] bond0 (unregistering): Released all slaves [ 2908.945886][T10293] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11704'. [ 2909.779390][T10315] loop3: detected capacity change from 0 to 256 [ 2909.807266][T10315] vfat: Unknown parameter 'fii_xlate' [ 2910.015313][T31831] hsr_slave_0: left promiscuous mode [ 2910.035667][T31831] hsr_slave_1: left promiscuous mode [ 2910.055929][T31831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2910.112608][T31831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2910.716681][T31831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2910.724750][T31831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2910.763575][T31831] veth1_macvtap: left promiscuous mode [ 2910.769701][T31831] veth0_macvtap: left promiscuous mode [ 2910.775569][T31831] veth1_vlan: left promiscuous mode [ 2910.780990][T31831] veth0_vlan: left promiscuous mode [ 2912.658944][T31831] team0 (unregistering): Port device team_slave_1 removed [ 2912.738437][T31831] team0 (unregistering): Port device team_slave_0 removed [ 2914.230372][T10016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2914.361112][T10359] loop8: detected capacity change from 0 to 256 [ 2914.368404][T10359] vfat: Unknown parameter 'fii_xlate' [ 2914.643239][T10016] 8021q: adding VLAN 0 to HW filter on device team0 [ 2914.747023][T10173] bridge0: port 1(bridge_slave_0) entered blocking state [ 2914.754343][T10173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2914.827155][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 2914.834436][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2914.999795][T10343] loop3: detected capacity change from 0 to 32768 [ 2915.037417][T10343] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11722 (10343) [ 2915.450543][T10343] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2915.491473][T10343] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm [ 2915.533563][T10047] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2915.632252][T10047] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2915.701564][T10047] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2915.779069][T10047] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2915.939410][T10343] BTRFS info (device loop3): setting nodatasum [ 2915.974993][T10343] BTRFS info (device loop3): enabling ssd optimizations [ 2916.007589][T10343] BTRFS info (device loop3): turning on async discard [ 2916.131474][T10343] BTRFS info (device loop3): enabling free space tree [ 2916.302286][ T31] audit: type=1800 audit(1767239777.063:1007): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11722" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 2916.363997][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11722'. [ 2916.377078][T10016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2916.489868][T10343] 9p: Bad value for 'rfdno' [ 2916.687650][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2916.887548][T10047] 8021q: adding VLAN 0 to HW filter on device team0 [ 2916.938833][T10173] bridge0: port 1(bridge_slave_0) entered blocking state [ 2916.946050][T10173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2917.007785][T10173] bridge0: port 2(bridge_slave_1) entered blocking state [ 2917.014964][T10173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2917.051748][T30924] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2918.274273][T10016] veth0_vlan: entered promiscuous mode [ 2918.343863][T10016] veth1_vlan: entered promiscuous mode [ 2919.028084][T10432] netlink: 'syz.4.11737': attribute type 1 has an invalid length. [ 2919.505330][T10437] loop2: detected capacity change from 0 to 256 [ 2919.520922][T10437] vfat: Unknown parameter 'fii_xlate' [ 2919.764383][T10434] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2919.863792][T10434] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2919.992472][T10435] macvlan2: entered promiscuous mode [ 2919.998010][T10435] macvlan2: entered allmulticast mode [ 2920.052345][T10435] bond1: entered promiscuous mode [ 2920.076544][T10435] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2920.122514][T10435] bond1: left promiscuous mode [ 2920.378554][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2920.449935][T10016] veth0_macvtap: entered promiscuous mode [ 2920.565954][T10016] veth1_macvtap: entered promiscuous mode [ 2920.775149][T10016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2920.855616][T10016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2920.914428][ T6662] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.944541][ T6662] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.965675][ T6662] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2920.992476][ T6662] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2921.250853][T10450] loop8: detected capacity change from 0 to 512 [ 2921.262513][T10450] EXT4-fs: Ignoring removed oldalloc option [ 2921.290930][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2921.299004][T10450] EXT4-fs: Ignoring removed i_version option [ 2921.310032][T10450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2921.353623][T10450] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 2921.373419][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2921.422778][T10450] EXT4-fs (loop8): 1 truncate cleaned up [ 2921.525299][T10450] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2921.566965][ T6662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2921.572979][T10455] netlink: 'syz.3.11742': attribute type 10 has an invalid length. [ 2921.578109][T10047] veth0_vlan: entered promiscuous mode [ 2921.588610][ T6662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2921.654007][T10455] team0: Port device netdevsim0 added [ 2921.654911][ T31] audit: type=1800 audit(1767239782.423:1008): pid=10450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11740" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 2921.743094][T10047] veth1_vlan: entered promiscuous mode [ 2922.047022][T29823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2922.096960][T10047] veth0_macvtap: entered promiscuous mode [ 2922.125895][T10047] veth1_macvtap: entered promiscuous mode [ 2922.251442][T10047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2922.302765][T10047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2922.408988][T11484] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2922.451230][T11484] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2922.461220][T10479] loop8: detected capacity change from 0 to 256 [ 2922.468585][T10479] vfat: Unknown parameter 'fii_xlate' [ 2922.492603][T11484] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2922.867168][T10481] syzkaller0: entered promiscuous mode [ 2922.910346][T10481] syzkaller0: entered allmulticast mode [ 2922.985303][T11484] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2924.411459][T10500] loop8: detected capacity change from 0 to 256 [ 2924.418864][T10500] vfat: Unknown parameter 'fii_xlate' [ 2925.140902][T10504] netlink: 'syz.4.11758': attribute type 10 has an invalid length. [ 2925.870469][T10509] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11760'. [ 2926.381441][T10515] netlink: 'syz.9.11762': attribute type 10 has an invalid length. [ 2927.212067][T10504] team0: Port device netdevsim0 added [ 2927.217544][T10511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11761'. [ 2927.274690][T10515] team0: Port device netdevsim0 added [ 2927.529897][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2927.537771][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2927.813075][ T6035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2927.844648][T10534] sctp: [Deprecated]: syz.8.11767 (pid 10534) Use of int in max_burst socket option. [ 2927.844648][T10534] Use struct sctp_assoc_value instead [ 2927.880056][ T6035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.044639][T10551] netlink: 268 bytes leftover after parsing attributes in process `syz.9.11775'. [ 2929.594056][T10557] loop9: detected capacity change from 0 to 256 [ 2929.649202][T10557] vfat: Unknown parameter 'fii_xlate' [ 2930.341220][T15919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2930.352481][T15919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2930.364944][T15919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2930.373645][T15919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2930.381617][T15919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2932.460103][T15919] Bluetooth: hci5: command tx timeout [ 2932.521969][T10570] chnl_net:caif_netlink_parms(): no params data found [ 2932.912799][T10507] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2933.130578][T10507] usb 7-1: Using ep0 maxpacket: 32 [ 2933.159251][T10507] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2933.192377][T31831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2933.207951][T10615] netlink: 'syz.9.11799': attribute type 10 has an invalid length. [ 2933.230257][T10507] usb 7-1: config 0 has no interface number 0 [ 2933.246835][T10507] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2933.299873][T10507] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2933.318071][T10507] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2933.370360][T10507] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2933.430759][T10507] usb 7-1: Product: syz [ 2933.434935][T10507] usb 7-1: Manufacturer: syz [ 2933.439508][T10507] usb 7-1: SerialNumber: syz [ 2933.508952][T10507] usb 7-1: config 0 descriptor?? [ 2933.536324][T10610] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2933.624967][T10600] syzkaller0: entered promiscuous mode [ 2933.655629][T10600] syzkaller0: entered allmulticast mode [ 2933.875244][T31831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2934.026473][T10507] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2934.061494][T10507] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 2934.171751][T10507] usb 7-1: USB disconnect, device number 4 [ 2934.344540][T31831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2934.610115][T15919] Bluetooth: hci5: command tx timeout [ 2935.743233][T10652] netlink: 'syz.9.11810': attribute type 10 has an invalid length. [ 2935.811028][T10654] loop6: detected capacity change from 0 to 512 [ 2935.818318][T10654] EXT4-fs: Ignoring removed oldalloc option [ 2935.854653][T10654] EXT4-fs: Ignoring removed i_version option [ 2935.864255][T10654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2935.899258][T10654] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2935.987730][T10654] EXT4-fs (loop6): 1 truncate cleaned up [ 2935.999711][T10654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2936.063268][ T31] audit: type=1800 audit(1767239796.813:1009): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11812" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 2936.623578][T15919] Bluetooth: hci5: command tx timeout [ 2936.748461][T10047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2936.979585][T10667] netlink: 'syz.4.11816': attribute type 10 has an invalid length. [ 2938.700592][T15919] Bluetooth: hci5: command tx timeout [ 2940.896664][T10694] loop4: detected capacity change from 0 to 512 [ 2940.941528][T10694] EXT4-fs: Ignoring removed oldalloc option [ 2940.947539][T10694] EXT4-fs: Ignoring removed i_version option [ 2940.953355][T31831] team0: Port device netdevsim0 removed [ 2940.990487][T10694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2940.999206][T31831] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2941.033686][T10694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2941.098472][T10570] bridge0: port 1(bridge_slave_0) entered blocking state [ 2941.106271][T10694] EXT4-fs (loop4): 1 truncate cleaned up [ 2941.136818][T10570] bridge0: port 1(bridge_slave_0) entered disabled state [ 2941.154002][T10694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2941.167057][T10570] bridge_slave_0: entered allmulticast mode [ 2941.190590][ T31] audit: type=1800 audit(1767239801.953:1010): pid=10694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11826" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 2941.202206][T10570] bridge_slave_0: entered promiscuous mode [ 2941.255794][T10570] bridge0: port 2(bridge_slave_1) entered blocking state [ 2941.279197][T10570] bridge0: port 2(bridge_slave_1) entered disabled state [ 2941.315621][T10570] bridge_slave_1: entered allmulticast mode [ 2941.350231][T10570] bridge_slave_1: entered promiscuous mode [ 2941.850298][T10570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2941.872091][ T9564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2942.034539][T10570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2943.597877][T10570] team0: Port device team_slave_0 added [ 2943.652143][T10570] team0: Port device team_slave_1 added [ 2944.022185][T31831] bridge_slave_1: left allmulticast mode [ 2944.060261][T31831] bridge_slave_1: left promiscuous mode [ 2944.066060][T31831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2944.113705][T31831] bridge_slave_0: left allmulticast mode [ 2944.143649][T31831] bridge_slave_0: left promiscuous mode [ 2944.149516][T31831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2945.538893][T31831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2945.547913][T31831] bond_slave_0: left promiscuous mode [ 2945.555858][T31831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2945.565050][T31831] bond_slave_1: left promiscuous mode [ 2945.572891][T31831] bond0 (unregistering): Released all slaves [ 2945.690373][T31831] bond1 (unregistering): Released all slaves [ 2945.706870][T31831] bond2 (unregistering): Released all slaves [ 2945.723015][T31831] bond3 (unregistering): Released all slaves [ 2945.739153][T10570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2945.746382][T10570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2945.772982][T10570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2946.013895][T10736] syzkaller0: entered promiscuous mode [ 2946.031129][T10736] syzkaller0: entered allmulticast mode [ 2946.052301][T10570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2946.081777][T10570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2946.135899][T10570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2949.051846][ T9883] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 2949.214750][ T9883] usb 10-1: Using ep0 maxpacket: 8 [ 2949.263183][ T9883] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2949.273681][ T9883] usb 10-1: config 4 interface 0 has no altsetting 0 [ 2949.294281][ T9883] usb 10-1: string descriptor 0 read error: -22 [ 2949.301020][ T9883] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2949.310653][ T9883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.334388][ T9883] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2949.393955][ T9883] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2949.415577][ T9883] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2949.423543][ T9883] usb 10-1: media controller created [ 2949.489364][ T9883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2950.541786][ T9883] zl10353_read_register: readreg error (reg=127, ret==0) [ 2950.660624][ T9883] usb 10-1: USB disconnect, device number 71 [ 2950.817616][T10797] netlink: 'syz.8.11858': attribute type 1 has an invalid length. [ 2951.426564][T10798] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2952.222562][ T9883] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 2952.661879][T10798] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 2952.737682][T10799] macvlan0: entered promiscuous mode [ 2952.742855][ T9883] usb 10-1: Using ep0 maxpacket: 16 [ 2952.748360][T10799] macvlan0: entered allmulticast mode [ 2952.789296][T10799] bond6: entered promiscuous mode [ 2952.789836][ T9883] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2952.880343][ T9883] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2952.902912][ T9883] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2952.910299][T10799] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2952.931544][ T9883] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2952.952125][ T9883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2952.966389][T10799] bond6: left promiscuous mode [ 2952.995968][ T9883] usb 10-1: config 0 descriptor?? [ 2953.214505][T10570] hsr_slave_0: entered promiscuous mode [ 2953.226019][T10570] hsr_slave_1: entered promiscuous mode [ 2953.433210][T31831] hsr_slave_0: left promiscuous mode [ 2953.448766][ T9883] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 2953.468092][T31831] hsr_slave_1: left promiscuous mode [ 2953.479978][ T9883] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 2953.487876][T31831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2953.500348][ T9883] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 2953.512056][T31831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2953.521844][ T9883] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 2953.536105][T31831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2953.544067][ T9883] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 2953.559353][T31831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2953.574150][ T9883] input: HID 0955:7214 Haptics as /devices/virtual/input/input58 [ 2953.635478][T31831] veth1_macvtap: left promiscuous mode [ 2953.654265][ T9883] shield 0003:0955:7214.0030: Registered Thunderstrike controller [ 2953.665637][T31831] veth0_macvtap: left promiscuous mode [ 2953.685401][ T9883] shield 0003:0955:7214.0030: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 2953.781216][ T1133] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2953.799460][ T9883] usb 10-1: USB disconnect, device number 72 [ 2953.827891][ T1133] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2953.870114][ T1133] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2953.929470][ T1133] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2954.287403][T31831] team0 (unregistering): Port device batadv4 removed [ 2955.142948][T31831] team0 (unregistering): Port device batadv3 removed [ 2955.264821][T31831] team0 (unregistering): Port device batadv2 removed [ 2955.325708][T31831] team0 (unregistering): Port device batadv1 removed [ 2957.581165][T31831] team0 (unregistering): Port device team_slave_1 removed [ 2957.625525][T31831] team0 (unregistering): Port device team_slave_0 removed [ 2958.290347][ T6049] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2958.472083][ T6049] usb 3-1: Using ep0 maxpacket: 16 [ 2958.531819][ T6049] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2958.632516][ T6049] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 2958.660897][ T6049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2958.694919][ T6049] usb 3-1: Product: syz [ 2958.710128][ T6049] usb 3-1: Manufacturer: syz [ 2958.725907][ T6049] usb 3-1: SerialNumber: syz [ 2958.755258][ T6049] usb 3-1: config 0 descriptor?? [ 2958.833836][ T6049] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2959.156714][T10884] netlink: 'syz.4.11883': attribute type 1 has an invalid length. [ 2959.170457][ T1132] usb 9-1: new full-speed USB device number 84 using dummy_hcd [ 2959.356389][ T1132] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 2959.380106][ T1132] usb 9-1: config 0 has no interface number 0 [ 2959.405803][ T1132] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2959.416168][ T1132] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2959.424570][ T1132] usb 9-1: Product: syz [ 2959.428895][ T1132] usb 9-1: Manufacturer: syz [ 2959.434349][ T1132] usb 9-1: SerialNumber: syz [ 2959.460465][ T1132] usb 9-1: config 0 descriptor?? [ 2959.655165][T10888] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2959.667535][T10888] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 2959.735388][T10891] macvlan2: entered promiscuous mode [ 2959.761235][T10891] macvlan2: entered allmulticast mode [ 2959.781200][T10891] bond2: entered promiscuous mode [ 2959.808451][T10891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2959.833782][T10891] bond2: left promiscuous mode [ 2959.885449][ T1132] usb 9-1: Firmware version (0.0) predates our first public release. [ 2959.894128][ T1132] usb 9-1: Please update to version 0.2 or newer [ 2959.902173][ T6771] usb 3-1: Failed to submit usb control message: -110 [ 2959.909807][ T6771] usb 3-1: unable to send the bmi data to the device: -110 [ 2959.932891][ T6771] usb 3-1: unable to get target info from device [ 2959.939626][ T6771] usb 3-1: could not get target info (-110) [ 2959.940187][T10887] syzkaller0: entered promiscuous mode [ 2959.946866][ T6771] usb 3-1: could not probe fw (-110) [ 2959.971756][T10887] syzkaller0: entered allmulticast mode [ 2960.093411][T31831] IPVS: stop unused estimator thread 0... [ 2960.123371][ T1132] usb 9-1: USB disconnect, device number 84 [ 2962.043265][ T6049] usb 3-1: USB disconnect, device number 3 [ 2962.376677][T10570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2962.456444][T10570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2962.526186][T10570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2962.672272][T10570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2962.966963][T10924] syzkaller0: entered promiscuous mode [ 2962.972678][T10924] syzkaller0: entered allmulticast mode [ 2963.183793][T10570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2963.226102][T10570] 8021q: adding VLAN 0 to HW filter on device team0 [ 2963.414430][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 2963.421606][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2963.525652][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2963.542278][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2971.113395][T15919] Bluetooth: hci0: command 0x0406 tx timeout [ 2971.199255][T10986] netlink: 'syz.2.11913': attribute type 10 has an invalid length. [ 2972.283794][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 2972.290999][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2972.350616][T10986] team0: Port device netdevsim0 added [ 2972.878675][ T7894] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2973.061212][ T7894] usb 9-1: Using ep0 maxpacket: 8 [ 2973.072932][ T7894] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2973.093998][ T7894] usb 9-1: config 4 interface 0 has no altsetting 0 [ 2973.133195][ T7894] usb 9-1: string descriptor 0 read error: -22 [ 2973.139501][ T7894] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2973.199195][ T7894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2974.055473][ T7894] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2974.221081][ T7894] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2974.252924][ T7894] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2974.298127][ T7894] usb 9-1: media controller created [ 2974.702379][ T1133] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2974.954706][ T7894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2975.034066][T10570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2975.060859][ T7894] zl10353_read_register: readreg error (reg=127, ret==0) [ 2975.100262][ T1133] usb 3-1: Using ep0 maxpacket: 32 [ 2975.129825][ T1133] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2975.208912][ T1133] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2975.284255][ T7894] usb 9-1: USB disconnect, device number 85 [ 2975.292034][ T1133] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2975.322782][ T1133] usb 3-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 2975.377061][ T1133] usb 3-1: Product: syz [ 2975.388965][T11029] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11925'. [ 2975.398350][ T1133] usb 3-1: Manufacturer: syz [ 2975.401547][T10570] veth0_vlan: entered promiscuous mode [ 2975.409035][ T1133] usb 3-1: SerialNumber: syz [ 2975.482616][T10570] veth1_vlan: entered promiscuous mode [ 2975.975788][T10570] veth0_macvtap: entered promiscuous mode [ 2976.169730][ T1133] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 2976.649384][ T1133] cdc_ncm 3-1:1.0: bind() failure [ 2976.730430][T10570] veth1_macvtap: entered promiscuous mode [ 2976.826413][ T1133] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2976.844246][ T1133] cdc_ncm 3-1:1.1: bind() failure [ 2976.917083][ T1133] usb 3-1: USB disconnect, device number 4 [ 2976.946207][T10570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2976.986752][T10570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2977.049776][T13260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.120108][T13260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.156528][T11037] netlink: 'syz.9.11927': attribute type 10 has an invalid length. [ 2977.171369][T13260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.199478][T13260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.366941][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11929'. [ 2977.734210][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2977.789777][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2977.989781][T13260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2978.080501][T13260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2978.418026][T11061] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11777'. [ 2978.493757][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11777'. [ 2979.970038][ T6435] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2980.151455][ T6435] usb 3-1: Using ep0 maxpacket: 16 [ 2980.183115][ T6435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2980.236594][ T6435] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2980.281006][ T6435] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 2980.311424][ T6435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2980.341570][ T6435] usb 3-1: config 0 descriptor?? [ 2981.223888][ T6435] usbhid 3-1:0.0: can't add hid device: -71 [ 2981.684645][ T6435] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2981.719801][ T6435] usb 3-1: USB disconnect, device number 5 [ 2981.862979][T11082] overlayfs: missing 'lowerdir' [ 2982.480088][ T6435] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2982.529300][T11103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2982.590931][T11103] batadv_slave_0: entered promiscuous mode [ 2982.943664][ T6435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2982.999661][ T6435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2983.053109][ T6435] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2983.193887][T15919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2983.212747][T15919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2983.222337][T15919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2983.231093][T15919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2983.801933][T15919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2983.927904][ T6435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2983.941312][ T6435] usb 5-1: config 0 descriptor?? [ 2984.051219][T11118] netlink: 388 bytes leftover after parsing attributes in process `syz.6.11952'. [ 2984.405553][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2984.472540][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2984.479679][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2984.558075][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2984.629376][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2984.662616][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2984.728197][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2984.748521][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2984.826997][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2984.883669][ T6435] lg-g15 0003:046D:C222.0031: unknown main item tag 0x0 [ 2985.143748][ T6435] lg-g15 0003:046D:C222.0031: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 2985.255844][T11109] chnl_net:caif_netlink_parms(): no params data found [ 2986.103568][T15919] Bluetooth: hci3: command tx timeout [ 2986.103833][ T6435] usb 5-1: USB disconnect, device number 114 [ 2986.708101][T11130] fido_id[11130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2987.372105][T11109] bridge0: port 1(bridge_slave_0) entered blocking state [ 2987.392265][T11109] bridge0: port 1(bridge_slave_0) entered disabled state [ 2987.422267][T11109] bridge_slave_0: entered allmulticast mode [ 2987.438629][T11109] bridge_slave_0: entered promiscuous mode [ 2987.899439][T11109] bridge0: port 2(bridge_slave_1) entered blocking state [ 2987.996865][T11109] bridge0: port 2(bridge_slave_1) entered disabled state [ 2988.122648][T11109] bridge_slave_1: entered allmulticast mode [ 2988.140301][T15919] Bluetooth: hci3: command tx timeout [ 2988.353179][T11109] bridge_slave_1: entered promiscuous mode [ 2988.554474][ T31] audit: type=1326 audit(1767239849.323:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2988.671765][ T31] audit: type=1326 audit(1767239849.343:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2988.900296][ T31] audit: type=1326 audit(1767239849.353:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2989.019646][ T31] audit: type=1326 audit(1767239849.353:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2989.046529][T11109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2989.074592][T11166] netlink: 'syz.6.11966': attribute type 39 has an invalid length. [ 2989.080453][T11109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2989.106139][ T31] audit: type=1326 audit(1767239849.353:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2989.180802][ T31] audit: type=1326 audit(1767239849.353:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2989.233216][ T31] audit: type=1326 audit(1767239849.353:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2989.743853][ T31] audit: type=1326 audit(1767239849.353:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2990.138262][ T31] audit: type=1326 audit(1767239849.353:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2990.222857][T15919] Bluetooth: hci3: command tx timeout [ 2990.953363][ T31] audit: type=1326 audit(1767239849.353:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.4.11963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eef98f749 code=0x7ffc0000 [ 2991.212069][T11109] team0: Port device team_slave_0 added [ 2992.063663][T11109] team0: Port device team_slave_1 added [ 2992.320515][T15919] Bluetooth: hci3: command tx timeout [ 2992.664970][T11186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2992.683565][T11186] batadv_slave_0: entered promiscuous mode [ 2992.817333][T11109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2992.845448][T11195] Bluetooth: MGMT ver 1.23 [ 2992.869506][T11109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2992.956011][T11198] netlink: 'syz.2.11974': attribute type 1 has an invalid length. [ 2992.964856][T11109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2993.137394][T11109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2993.180123][T11109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2993.215671][ T1137] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 2993.261120][T11109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2993.392097][ T1137] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2993.409504][ T1137] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2993.449608][ T1137] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2993.459258][ T1137] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2993.471965][ T1137] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2993.502501][ T1137] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2993.529774][ T1137] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2993.544986][ T1137] usb 10-1: Product: syz [ 2993.564159][T10174] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2993.573567][ T1137] usb 10-1: Manufacturer: syz [ 2993.596716][ T1137] cdc_wdm 10-1:1.0: skipping garbage [ 2993.617848][ T1137] cdc_wdm 10-1:1.0: skipping garbage [ 2993.623803][ T1137] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2993.760053][T10174] usb 4-1: Using ep0 maxpacket: 32 [ 2993.767512][T10174] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2993.779403][T10174] usb 4-1: config 0 has no interface number 0 [ 2993.791861][ T39] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2993.819682][T10174] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2993.841079][ T6435] usb 10-1: USB disconnect, device number 73 [ 2993.857344][T10174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.892263][T10174] usb 4-1: Product: syz [ 2993.897455][T10174] usb 4-1: Manufacturer: syz [ 2993.903341][T10174] usb 4-1: SerialNumber: syz [ 2993.921847][T10174] usb 4-1: config 0 descriptor?? [ 2993.953351][T10174] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2994.070305][ T6049] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2994.266281][T10174] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2994.957672][T10174] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2995.004668][ T6049] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2995.058104][ T6049] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2995.121536][ T6049] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2995.140115][ T6049] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2995.143405][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2995.160756][T10174] usb 4-1: USB disconnect, device number 108 [ 2995.165775][ T6049] usb 7-1: Manufacturer: syz [ 2995.177041][ T6049] usb 7-1: config 0 descriptor?? [ 2995.228302][T10174] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2995.259837][T10174] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2995.294395][T10174] quatech2 4-1:0.51: device disconnected [ 2995.612752][ T6049] usbhid 7-1:0.0: can't add hid device: -71 [ 2995.625894][ T6049] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2995.649700][ T6049] usb 7-1: USB disconnect, device number 5 [ 2995.685708][ T39] bond0 (unregistering): Released all slaves [ 2996.211806][T11218] loop5: detected capacity change from 0 to 7 [ 2996.258198][T11218] Dev loop5: unable to read RDB block 7 [ 2996.298889][T11218] loop5: AHDI p1 p2 p3 [ 2996.392515][T11218] loop5: partition table partially beyond EOD, truncated [ 2996.399786][T11218] loop5: p1 start 1818582900 is beyond EOD, truncated [ 2996.430568][T11218] loop5: p3 start 335544320 is beyond EOD, truncated [ 2996.439702][ T39] bond1 (unregistering): Released all slaves [ 2997.696079][ T1137] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2997.859485][ T39] bond2 (unregistering): Released all slaves [ 2998.310035][ T1137] usb 3-1: Using ep0 maxpacket: 16 [ 2998.325876][ T1137] usb 3-1: config 0 has an invalid interface number: 174 but max is 0 [ 2998.393436][ T1137] usb 3-1: config 0 has no interface number 0 [ 2998.503069][ T1137] usb 3-1: New USB device found, idVendor=0b05, idProduct=171f, bcdDevice=ec.b2 [ 2998.506590][ T39] bond3 (unregistering): Released all slaves [ 2998.551742][ T1137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2998.571745][ T39] bond4 (unregistering): Released all slaves [ 2998.580075][ T1137] usb 3-1: Product: syz [ 2998.611225][ T1137] usb 3-1: Manufacturer: syz [ 2998.616394][ T39] bond5 (unregistering): Released all slaves [ 2998.634921][ T1137] usb 3-1: SerialNumber: syz [ 2998.657807][ T39] bond6 (unregistering): Released all slaves [ 2998.663284][ T1137] usb 3-1: config 0 descriptor?? [ 2998.754702][ T5636] bond0: (slave bond_slave_0): interface is now down [ 2998.764684][ T5636] bond0: (slave bond_slave_1): interface is now down [ 2998.890074][ T1137] dvb-usb: found a 'ASUS My Cinema U3000 Mini DVBT Tuner' in cold state, will try to load a firmware [ 2998.933452][ T5636] bond0: now running without any active interface! [ 2998.971653][ T1137] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2998.981351][ T1137] dib0700: firmware download failed at 7 with -22 [ 2999.124535][ T1125] usb 3-1: USB disconnect, device number 6 [ 2999.333223][T11109] hsr_slave_0: entered promiscuous mode [ 2999.358410][T11109] hsr_slave_1: entered promiscuous mode [ 2999.365136][T11109] debugfs: 'hsr0' already exists in 'hsr' [ 2999.370984][T11109] Cannot create hsr debugfs directory [ 2999.640585][ T1125] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2999.734714][T11250] netlink: 'syz.6.11992': attribute type 1 has an invalid length. [ 2999.800107][ T1125] usb 5-1: Using ep0 maxpacket: 32 [ 2999.807617][ T1125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2999.838897][ T1125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2999.881297][ T1125] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2999.899604][ T1125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2999.926874][ T1125] usb 5-1: config 0 descriptor?? [ 2999.955387][ T1125] hub 5-1:0.0: USB hub found [ 3000.120718][T11257] loop5: detected capacity change from 0 to 7 [ 3001.091082][ T1125] hub 5-1:0.0: 1 port detected [ 3001.100532][T11257] Dev loop5: unable to read RDB block 7 [ 3001.143007][T11257] loop5: AHDI p1 p2 p3 [ 3001.147226][T11257] loop5: partition table partially beyond EOD, truncated [ 3001.165684][T11257] loop5: p1 start 1818582900 is beyond EOD, truncated [ 3001.180224][T11257] loop5: p3 start 335544320 is beyond EOD, truncated [ 3001.424927][T15919] Bluetooth: hci2: command 0x0406 tx timeout [ 3001.640124][ T1137] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 3001.663648][ T1125] hub 5-1:0.0: activate --> -90 [ 3002.065926][T10174] usb 5-1: USB disconnect, device number 115 [ 3002.081019][ T1125] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 3002.130064][ T1137] usb 10-1: Using ep0 maxpacket: 32 [ 3002.148731][ T1137] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3002.189610][ T1137] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3002.243107][ T1137] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3002.260060][ T1137] usb 10-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 3002.301802][ T1137] usb 10-1: Product: syz [ 3002.325766][ T1137] usb 10-1: Manufacturer: syz [ 3002.333546][ T1137] usb 10-1: SerialNumber: syz [ 3004.490163][ T39] hsr_slave_0: left promiscuous mode [ 3004.505251][ T1137] cdc_ncm 10-1:1.0: bind() failure [ 3004.559298][ T39] hsr_slave_1: left promiscuous mode [ 3004.593592][ T1137] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 3004.700054][ T1137] cdc_ncm 10-1:1.1: bind() failure [ 3004.730120][ T1137] usb 10-1: USB disconnect, device number 74 [ 3004.776437][ T39] team0 (unregistering): Port device batadv4 removed [ 3004.843162][ T39] team0 (unregistering): Port device batadv3 removed [ 3004.912482][ T39] team0 (unregistering): Port device batadv2 removed [ 3004.949051][ T39] team0 (unregistering): Port device batadv1 removed [ 3004.998092][ T39] pim6reg (unregistering): left allmulticast mode [ 3005.940082][ T1133] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 3006.149695][ T1133] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3006.555377][T15919] Bluetooth: hci4: command 0x0406 tx timeout [ 3006.959092][ T1133] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.969142][ T1133] usb 10-1: Product: syz [ 3006.973488][ T1133] usb 10-1: Manufacturer: syz [ 3006.978161][ T1133] usb 10-1: SerialNumber: syz [ 3006.987367][ T1133] usb 10-1: config 0 descriptor?? [ 3007.063174][T11304] loop6: detected capacity change from 0 to 16 [ 3007.074384][T11304] erofs (device loop6): mounted with root inode @ nid 36. [ 3007.211997][ T1133] usb-storage 10-1:0.0: USB Mass Storage device detected [ 3007.240336][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12012'. [ 3007.297315][ T1133] usb 10-1: USB disconnect, device number 75 [ 3007.495024][T11311] netlink: 'syz.3.12013': attribute type 1 has an invalid length. [ 3007.993826][T11900] bond0: (slave bond_slave_0): interface is now down [ 3008.011315][T11900] bond0: (slave bond_slave_1): interface is now down [ 3008.086627][T11277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3008.105123][T11277] batadv_slave_0: entered promiscuous mode [ 3008.151796][ T1080] bond0: (slave bond_slave_0): interface is now down [ 3008.174889][ T1080] bond0: (slave bond_slave_1): interface is now down [ 3008.384846][ T6023] bond0: (slave bond_slave_0): interface is now down [ 3008.400776][T11313] macvlan2: entered promiscuous mode [ 3008.413624][ T6023] bond0: (slave bond_slave_1): interface is now down [ 3008.434494][T11313] macvlan2: entered allmulticast mode [ 3008.571296][T13260] bond0: (slave bond_slave_0): interface is now down [ 3008.642399][T13260] bond0: (slave bond_slave_1): interface is now down [ 3009.420117][T11900] bond0: (slave bond_slave_0): interface is now down [ 3009.456501][T11900] bond0: (slave bond_slave_1): interface is now down [ 3009.630905][T11900] bond0: (slave bond_slave_0): interface is now down [ 3009.637645][T11900] bond0: (slave bond_slave_1): interface is now down [ 3010.206378][T11484] bond0: (slave bond_slave_0): interface is now down [ 3010.548198][T11484] bond0: (slave bond_slave_1): interface is now down [ 3010.711812][T11333] syzkaller0: entered promiscuous mode [ 3010.717492][T11333] syzkaller0: entered allmulticast mode [ 3010.781948][T11484] bond0: (slave bond_slave_0): interface is now down [ 3010.788682][T11484] bond0: (slave bond_slave_1): interface is now down [ 3010.961097][T10802] bond0: (slave bond_slave_0): interface is now down [ 3010.972585][T10802] bond0: (slave bond_slave_1): interface is now down [ 3011.133747][T11484] bond0: (slave bond_slave_0): interface is now down [ 3011.155662][T11484] bond0: (slave bond_slave_1): interface is now down [ 3011.310644][T31831] bond0: (slave bond_slave_0): interface is now down [ 3011.317378][T31831] bond0: (slave bond_slave_1): interface is now down [ 3011.692465][ T5964] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3011.763253][ T5636] bond0: (slave bond_slave_0): interface is now down [ 3011.964099][ T5636] bond0: (slave bond_slave_1): interface is now down [ 3012.122179][ T5964] usb 4-1: Using ep0 maxpacket: 32 [ 3012.146657][ T5964] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 3012.169625][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3012.178284][ T5964] usb 4-1: Product: syz [ 3012.195100][ T5964] usb 4-1: Manufacturer: syz [ 3012.199814][ T5964] usb 4-1: SerialNumber: syz [ 3012.208547][T10173] bond0: (slave bond_slave_0): interface is now down [ 3012.218072][T10173] bond0: (slave bond_slave_1): interface is now down [ 3012.244754][ T5964] usb 4-1: config 0 descriptor?? [ 3012.264369][ T5964] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 3012.396245][T28505] bond0: (slave bond_slave_0): interface is now down [ 3012.403404][T28505] bond0: (slave bond_slave_1): interface is now down [ 3012.557700][T31831] bond0: (slave bond_slave_0): interface is now down [ 3012.564785][T31831] bond0: (slave bond_slave_1): interface is now down [ 3012.713773][T28505] bond0: (slave bond_slave_0): interface is now down [ 3012.723135][T28505] bond0: (slave bond_slave_1): interface is now down [ 3012.746828][ T5964] gspca_ov534_9: reg_w failed -71 [ 3012.880852][T11002] bond0: (slave bond_slave_0): interface is now down [ 3012.888754][T11002] bond0: (slave bond_slave_1): interface is now down [ 3013.040136][T11002] bond0: (slave bond_slave_0): interface is now down [ 3013.047003][T11002] bond0: (slave bond_slave_1): interface is now down [ 3013.190399][ T5964] gspca_ov534_9: Unknown sensor 0000 [ 3013.190487][ T5964] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 3013.197785][T11484] bond0: (slave bond_slave_0): interface is now down [ 3013.212047][T11484] bond0: (slave bond_slave_1): interface is now down [ 3013.214085][ T5964] usb 4-1: USB disconnect, device number 109 [ 3013.362146][T31831] bond0: (slave bond_slave_0): interface is now down [ 3013.368919][T31831] bond0: (slave bond_slave_1): interface is now down [ 3013.511103][T31831] bond0: (slave bond_slave_0): interface is now down [ 3013.517916][T31831] bond0: (slave bond_slave_1): interface is now down [ 3013.670659][ T6662] bond0: (slave bond_slave_0): interface is now down [ 3013.678026][ T6662] bond0: (slave bond_slave_1): interface is now down [ 3013.830197][ T1080] bond0: (slave bond_slave_0): interface is now down [ 3013.837194][ T1080] bond0: (slave bond_slave_1): interface is now down [ 3013.956515][ T39] IPVS: stop unused estimator thread 0... [ 3013.990942][T10802] bond0: (slave bond_slave_0): interface is now down [ 3014.006806][T10802] bond0: (slave bond_slave_1): interface is now down [ 3014.018003][T10802] bond0: now running without any active interface! [ 3014.126930][T11109] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3014.183996][T11109] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3014.295989][T11109] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3014.365418][T11109] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3014.441356][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12036'. [ 3014.472780][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12036'. [ 3014.552078][T11087] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 3014.667088][T11109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3014.719829][T11109] 8021q: adding VLAN 0 to HW filter on device team0 [ 3014.731132][T11087] usb 5-1: Using ep0 maxpacket: 32 [ 3014.738446][T11002] bridge0: port 1(bridge_slave_0) entered blocking state [ 3014.745644][T11002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3014.745703][T11087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3014.754226][ T1137] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 3014.784010][T11002] bridge0: port 2(bridge_slave_1) entered blocking state [ 3014.785732][T11087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3014.791192][T11002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3014.835149][T11087] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3014.850221][T11087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3014.861514][ T1132] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 3014.902055][T11087] usb 5-1: config 0 descriptor?? [ 3014.925512][T11087] hub 5-1:0.0: USB hub found [ 3014.930583][ T1137] usb 4-1: Using ep0 maxpacket: 32 [ 3014.950968][ T7894] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 3014.967366][ T1137] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 3014.977935][ T1137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3014.995548][ T1137] usb 4-1: Product: syz [ 3014.999745][ T1137] usb 4-1: Manufacturer: syz [ 3015.004616][ T1137] usb 4-1: SerialNumber: syz [ 3015.021376][ T1137] usb 4-1: config 0 descriptor?? [ 3015.030068][ T1132] usb 3-1: Using ep0 maxpacket: 16 [ 3015.039003][ T1132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3015.161114][T11398] loop6: detected capacity change from 0 to 8192 [ 3015.185107][ T7894] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3015.198716][ T1137] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 3015.210416][ T1132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3015.224855][ T7894] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3015.431703][T11087] hub 5-1:0.0: 1 port detected [ 3015.667856][T11109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3015.807696][ T1132] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3015.821479][ T7894] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3015.832111][ T1132] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 3015.843082][ T7894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3015.851275][ T1132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3015.863864][ T7894] usb 10-1: config 0 descriptor?? [ 3015.869080][ T9402] loop6: p1 < > p2 p3 < > p4 < p5 > [ 3015.877964][ T7894] hub 10-1:0.0: bad descriptor, ignoring hub [ 3015.888077][ T1132] usb 3-1: config 0 descriptor?? [ 3015.893191][ T9402] loop6: partition table partially beyond EOD, truncated [ 3015.900506][ T7894] hub 10-1:0.0: probe with driver hub failed with error -5 [ 3015.911387][ T9402] loop6: p1 start 100663296 is beyond EOD, truncated [ 3015.918179][ T9402] loop6: p2 start 201130427 is beyond EOD, truncated [ 3015.940507][ T7894] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 3015.950377][ T9402] loop6: p3 start 4294967295 is beyond EOD, truncated [ 3015.973489][ T9402] loop6: p5 start 201130427 is beyond EOD, truncated [ 3015.997408][T11087] hub 5-1:0.0: activate --> -90 [ 3016.008112][ T1137] gspca_ov534_9: reg_w failed -71 [ 3016.016536][T11398] loop6: p1 < > p2 p3 < > p4 < p5 > [ 3016.022627][T11398] loop6: partition table partially beyond EOD, truncated [ 3016.030034][T11398] loop6: p1 start 100663296 is beyond EOD, truncated [ 3016.038204][T11398] loop6: p2 start 201130427 is beyond EOD, truncated [ 3016.045043][T11398] loop6: p3 start 4294967295 is beyond EOD, truncated [ 3016.054073][T11398] loop6: p5 start 201130427 is beyond EOD, truncated [ 3016.419131][ T9402] udevd[9402]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 3016.438176][ T5964] usb 5-1: USB disconnect, device number 116 [ 3016.492144][ T1132] usbhid 3-1:0.0: can't add hid device: -71 [ 3016.510080][ T1132] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3016.570161][ T9402] udevd[9402]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 3016.641079][ T1132] usb 3-1: USB disconnect, device number 7 [ 3016.782032][ T1137] gspca_ov534_9: Unknown sensor 0000 [ 3016.782137][ T1137] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 3016.814961][T11109] veth0_vlan: entered promiscuous mode [ 3016.818122][ T1137] usb 4-1: USB disconnect, device number 110 [ 3017.078480][T11109] veth1_vlan: entered promiscuous mode [ 3017.754485][T11420] tipc: Failed to remove unknown binding: 66,1,1/0:4165546424/4165546426 [ 3017.894065][T11424] tipc: Failed to remove unknown binding: 66,1,1/0:4165546424/4165546426 [ 3017.936468][T11109] veth0_macvtap: entered promiscuous mode [ 3017.975146][T11424] tipc: Failed to remove unknown binding: 66,1,1/0:4165546424/4165546426 [ 3018.027130][T11109] veth1_macvtap: entered promiscuous mode [ 3018.053356][ T1132] usb 10-1: USB disconnect, device number 76 [ 3018.164425][T11109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3018.218158][T11109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3018.261411][ T3960] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.294277][ T3960] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.335746][ T3960] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.357280][ T3960] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.367999][T11438] loop3: detected capacity change from 0 to 256 [ 3018.376491][T11438] vfat: Unknown parameter 'fii_xlate' [ 3019.514743][ T1132] IPVS: starting estimator thread 0... [ 3019.650034][T11452] IPVS: using max 26 ests per chain, 62400 per kthread [ 3019.709986][T11002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3019.750047][T11002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3020.965267][ T1132] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 3020.985097][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3020.993065][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3021.810016][ T1132] usb 7-1: Using ep0 maxpacket: 8 [ 3021.832001][ T1132] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3021.954235][ T1132] usb 7-1: config 4 interface 0 has no altsetting 0 [ 3022.009344][ T1132] usb 7-1: string descriptor 0 read error: -22 [ 3022.040350][ T1132] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 3022.049457][ T1132] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3022.312163][ T1132] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 3022.425707][ T1132] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3022.508233][ T1132] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 3022.522026][T11460] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 3022.548174][ T1132] usb 7-1: media controller created [ 3022.685559][T11485] loop9: detected capacity change from 0 to 256 [ 3022.694672][T11485] vfat: Unknown parameter 'fii_xlate' [ 3022.705304][ T1132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3024.412323][ T1132] usb 7-1: USB disconnect, device number 6 [ 3024.952364][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 3024.958875][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 3025.520026][ T8666] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 3025.913384][ T8666] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3025.924001][ T8666] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3025.932149][ T8666] usb 10-1: Product: syz [ 3025.936396][ T8666] usb 10-1: Manufacturer: syz [ 3025.941157][ T8666] usb 10-1: SerialNumber: syz [ 3025.948707][ T8666] usb 10-1: config 0 descriptor?? [ 3026.952206][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12083'. [ 3027.000610][ T8666] usb-storage 10-1:0.0: USB Mass Storage device detected [ 3028.110260][ T8998] usb 10-1: USB disconnect, device number 77 [ 3028.250930][ T1128] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 3029.668225][ T5636] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 3029.674425][ T1128] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3029.688462][ T5636] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 3029.840898][ T1128] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3029.866270][ T5636] bond0: active interface up! [ 3029.868554][ T1128] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3029.971847][ T1128] usb 7-1: config 0 descriptor?? [ 3031.387665][ T1128] usb 7-1: can't set config #0, error -71 [ 3031.411861][ T1128] usb 7-1: USB disconnect, device number 7 [ 3031.948620][T11559] wireguard0: entered promiscuous mode [ 3031.970440][T11559] wireguard0: entered allmulticast mode [ 3032.011893][T11554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.710151][ T8998] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 3033.320195][ T8998] usb 10-1: Using ep0 maxpacket: 16 [ 3033.334056][ T8998] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3033.362673][ T8998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3033.396575][ T8998] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3033.418697][ T8998] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3033.440070][ T8998] usb 10-1: Product: syz [ 3033.455970][ T8998] usb 10-1: Manufacturer: syz [ 3033.470149][ T8998] usb 10-1: SerialNumber: syz [ 3033.522077][ T8998] usb 10-1: config 0 descriptor?? [ 3033.578630][ T8998] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3033.616714][ T8998] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 3034.265359][T11579] usb usb5: usbfs: process 11579 (syz.3.12100) did not claim interface 0 before use [ 3034.791981][ T8998] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 3034.925652][ T8998] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 3034.933951][ T8998] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 3034.943182][ T8998] em28xx 10-1:0.0: No AC97 audio processor [ 3034.957802][ T8998] usb 10-1: USB disconnect, device number 78 [ 3034.966044][ T8998] em28xx 10-1:0.0: Disconnecting em28xx [ 3035.013667][ T8998] em28xx 10-1:0.0: Freeing device [ 3035.098679][T11589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12103'. [ 3035.187456][ T1133] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 3035.315519][T15919] Bluetooth: hci3: link tx timeout [ 3035.321594][T15919] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 3035.350036][ T1133] usb 7-1: Using ep0 maxpacket: 8 [ 3035.375247][ T1133] usb 7-1: config 0 has an invalid interface number: 237 but max is 0 [ 3035.437598][ T1133] usb 7-1: config 0 has no interface number 0 [ 3035.468749][ T1133] usb 7-1: New USB device found, idVendor=093a, idProduct=2460, bcdDevice=2a.87 [ 3035.505388][ T1133] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3035.545105][ T1133] usb 7-1: Product: syz [ 3035.560096][ T1133] usb 7-1: Manufacturer: syz [ 3035.570050][ T1133] usb 7-1: SerialNumber: syz [ 3035.597639][ T1133] usb 7-1: config 0 descriptor?? [ 3035.622266][T11601] fuse: Bad value for 'fd' [ 3035.893525][ T1133] gspca_main: pac207-2.14.0 probing 093a:2460 [ 3035.928985][ T1133] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 3035.988469][ T1133] usb 7-1: USB disconnect, device number 8 [ 3036.121345][T11607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3036.200059][ T7894] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 3036.212223][ T8998] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 3036.230157][ T5964] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 3036.380397][ T7894] usb 10-1: Using ep0 maxpacket: 16 [ 3036.396444][ T8998] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3036.412335][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 3036.421823][ T5964] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3036.429474][ T8998] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3036.445221][ T7894] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3036.446340][ T5964] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3036.474561][ T5964] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3036.478467][ T7894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3036.478973][ T8998] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3036.488072][ T5964] usb 5-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 3036.513373][ T5964] usb 5-1: Product: syz [ 3036.519278][ T5964] usb 5-1: Manufacturer: syz [ 3036.524561][ T5964] usb 5-1: SerialNumber: syz [ 3036.544000][ T7894] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3036.548169][ T5964] usb 5-1: selecting invalid altsetting 1 [ 3036.554631][ T8998] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3036.577248][ T7894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3036.595901][ T7894] usb 10-1: Product: syz [ 3036.601450][ T8998] usb 9-1: Manufacturer: syz [ 3036.610970][ T7894] usb 10-1: Manufacturer: syz [ 3036.632030][ T8998] usb 9-1: config 0 descriptor?? [ 3036.637928][ T7894] usb 10-1: SerialNumber: syz [ 3036.661992][ T7894] usb 10-1: config 0 descriptor?? [ 3036.691151][ T7894] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3036.739306][ T7894] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 3036.960125][ T5964] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 3036.994798][ T5964] cdc_ncm 5-1:1.0: bind() failure [ 3037.095695][T11624] wireguard0: entered promiscuous mode [ 3037.110109][T11624] wireguard0: entered allmulticast mode [ 3037.249821][ T8998] usbhid 9-1:0.0: can't add hid device: -71 [ 3037.268273][ T8998] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 3037.313332][ T8998] usb 9-1: USB disconnect, device number 86 [ 3037.345005][ T7894] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 3037.346606][T15919] Bluetooth: hci3: command 0x0406 tx timeout [ 3037.386646][ T7894] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 3037.421626][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12118'. [ 3037.433109][ T7894] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 3037.445584][ T7894] em28xx 10-1:0.0: No AC97 audio processor [ 3037.479004][ T7894] usb 10-1: USB disconnect, device number 79 [ 3037.517239][ T7894] em28xx 10-1:0.0: Disconnecting em28xx [ 3037.526099][T13260] bond0: (slave bond_slave_0): interface is now down [ 3037.547411][ T7894] em28xx 10-1:0.0: Freeing device [ 3037.579014][T13260] bond0: (slave bond_slave_1): interface is now down [ 3037.604741][T13260] bond0: now running without any active interface! [ 3037.943513][T11648] fuse: Bad value for 'fd' [ 3038.836547][ T5964] usb 5-1: USB disconnect, device number 117 [ 3039.376885][T11654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.886541][T31831] bond0: (slave bond_slave_0): interface is now down [ 3042.106411][T31831] bond0: (slave bond_slave_1): interface is now down [ 3042.948014][T31831] bond0: now running without any active interface! [ 3043.309249][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12135'. [ 3044.270757][T11687] fuse: Unknown parameter 'grou00000000000000000000' [ 3045.062770][ T8998] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 3045.220732][ T8998] usb 9-1: device descriptor read/64, error -71 [ 3045.246450][T11704] syzkaller1: entered promiscuous mode [ 3045.265145][T11704] syzkaller1: entered allmulticast mode [ 3045.460518][ T8998] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 3045.620778][ T8998] usb 9-1: device descriptor read/64, error -71 [ 3045.705466][T11708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.730302][ T1125] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 3045.760394][ T8998] usb usb9-port1: attempt power cycle [ 3046.071353][ T1125] usb 3-1: Using ep0 maxpacket: 32 [ 3046.079871][ T1125] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3046.096126][ T1125] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3046.112204][ T1125] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3046.122969][ T1125] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 3046.133477][ T1125] usb 3-1: Product: syz [ 3046.159738][ T1125] usb 3-1: Manufacturer: syz [ 3046.185035][ T1125] hub 3-1:4.0: USB hub found [ 3046.210022][ T8998] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 3046.290789][ T8998] usb 9-1: device descriptor read/8, error -71 [ 3046.380712][ T1125] hub 3-1:4.0: 2 ports detected [ 3046.703588][ T8998] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 3046.772226][T11718] usb usb5: usbfs: process 11718 (syz.4.12147) did not claim interface 0 before use [ 3047.030142][ T7894] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 3047.580797][ T8998] usb 9-1: device descriptor read/8, error -71 [ 3047.700440][ T8998] usb usb9-port1: unable to enumerate USB device [ 3047.800092][ T7894] usb 4-1: Using ep0 maxpacket: 16 [ 3047.826085][ T7894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3047.852279][ T7894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3047.883545][ T7894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3047.905236][T11725] netlink: 'syz.8.12149': attribute type 1 has an invalid length. [ 3047.918330][ T7894] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 3047.953936][ T7894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3047.991003][ T7894] usb 4-1: config 0 descriptor?? [ 3047.996373][ T1125] usb 3-1: USB disconnect, device number 8 [ 3048.030327][ T8666] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 3048.209222][T11726] macvlan2: entered promiscuous mode [ 3048.218475][T11726] macvlan2: entered allmulticast mode [ 3048.224064][ T8666] usb 5-1: Using ep0 maxpacket: 16 [ 3048.236952][ T8666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3048.253267][ T8666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3048.264484][ T8666] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 3048.274271][ T8666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3048.324080][ T8666] usb 5-1: config 0 descriptor?? [ 3048.410224][ T8998] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 3048.461306][ T7894] hid_parser_main: 1 callbacks suppressed [ 3048.461334][ T7894] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 3048.490964][ T7894] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 3048.507150][ T7894] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 3048.520026][ T7894] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 3048.536487][ T7894] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 3048.565018][ T7894] input: HID 0955:7214 Haptics as /devices/virtual/input/input59 [ 3048.575199][ T8998] usb 7-1: Using ep0 maxpacket: 32 [ 3048.630838][ T8998] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 3048.661873][ T8998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3048.680018][ T8998] usb 7-1: Product: syz [ 3048.697087][ T8998] usb 7-1: Manufacturer: syz [ 3048.722670][ T8998] usb 7-1: SerialNumber: syz [ 3048.745633][ T7894] shield 0003:0955:7214.0032: Registered Thunderstrike controller [ 3048.770352][ T8998] usb 7-1: config 0 descriptor?? [ 3048.793349][ T7894] shield 0003:0955:7214.0032: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 3048.799833][ T8666] usbhid 5-1:0.0: can't add hid device: -71 [ 3048.828792][ T8666] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3048.832489][ T8998] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 3048.908732][ T8666] usb 5-1: USB disconnect, device number 118 [ 3048.930586][ T9883] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 3048.948242][ T9883] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 3048.965778][ T7894] usb 4-1: USB disconnect, device number 111 [ 3048.999036][ T9883] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 3049.041292][ T9883] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 3049.160981][T11736] fuse: Unknown parameter 'group_i00000000000000000000' [ 3049.242942][ T8998] gspca_ov534_9: reg_w failed -71 [ 3050.658791][T11002] bond0: (slave bond_slave_0): interface is now down [ 3050.688398][T11002] bond0: (slave bond_slave_1): interface is now down [ 3050.690582][ T8998] gspca_ov534_9: Unknown sensor 0000 [ 3050.733100][ T8998] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 3050.823774][T11002] bond0: now running without any active interface! [ 3050.853120][ T8998] usb 7-1: USB disconnect, device number 9 [ 3050.923531][T11752] fuse: Bad value for 'fd' [ 3052.120031][ T8666] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 3052.391070][ T8666] usb 9-1: device descriptor read/64, error -71 [ 3052.622549][T15919] Bluetooth: hci5: command 0x0406 tx timeout [ 3052.715465][T11777] fuse: Unknown parameter 'group_i00000000000000000000' [ 3052.780152][ T8666] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 3052.930003][ T8666] usb 9-1: device descriptor read/64, error -71 [ 3053.040397][ T8666] usb usb9-port1: attempt power cycle [ 3053.410018][ T8666] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 3053.460752][ T8666] usb 9-1: device descriptor read/8, error -71 [ 3053.860068][ T8666] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 3053.915161][ T8666] usb 9-1: device descriptor read/8, error -71 [ 3054.230727][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 3054.741718][ T8666] usb usb9-port1: unable to enumerate USB device [ 3054.951837][T11802] netlink: 64 bytes leftover after parsing attributes in process `syz.8.12176'. [ 3054.967890][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12176'. [ 3055.797243][T11808] usb usb5: usbfs: process 11808 (syz.2.12177) did not claim interface 0 before use [ 3057.540081][ T1128] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 3057.854011][ T1128] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3057.880712][ T1128] usb 3-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 3057.918828][ T1128] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3057.939156][ T1128] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3057.982197][ T1128] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3057.998005][ T1128] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3058.010889][ T1128] usb 3-1: Product: syz [ 3058.015080][ T1128] usb 3-1: Manufacturer: syz [ 3058.021489][ T8666] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 3058.037513][ T1128] cdc_wdm 3-1:1.0: skipping garbage [ 3058.043164][ T1128] cdc_wdm 3-1:1.0: skipping garbage [ 3058.048394][ T1128] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3058.123269][ T7894] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 3058.180438][ T8666] usb 5-1: Using ep0 maxpacket: 32 [ 3058.201690][ T8666] usb 5-1: config 0 has an invalid interface number: 134 but max is 0 [ 3058.215963][ T8666] usb 5-1: config 0 has no interface number 0 [ 3058.234410][ T8666] usb 5-1: New USB device found, idVendor=10b8, idProduct=1fa0, bcdDevice=cd.3b [ 3058.264039][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3058.283458][ T8666] usb 5-1: Product: syz [ 3058.290103][ T8666] usb 5-1: Manufacturer: syz [ 3058.299740][ T1133] usb 3-1: USB disconnect, device number 9 [ 3058.300438][ T8666] usb 5-1: SerialNumber: syz [ 3058.307391][ T7894] usb 10-1: Using ep0 maxpacket: 8 [ 3058.373870][ T8666] usb 5-1: config 0 descriptor?? [ 3058.519313][T11842] overlayfs: missing 'lowerdir' [ 3058.616197][ T8666] dvb-usb: found a 'DiBcom STK8096GP reference design' in cold state, will try to load a firmware [ 3058.661621][ T8666] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3058.686723][ T8666] dib0700: firmware download failed at 7 with -22 [ 3058.700197][ T1128] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 3058.719739][ T8666] usb 5-1: USB disconnect, device number 119 [ 3058.779820][T11845] loop8: detected capacity change from 0 to 256 [ 3058.787261][T11845] vfat: Unknown parameter 'fii_xlate' [ 3058.830696][ T7894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3058.876979][ T7894] usb 10-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 3058.918567][ T7894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3058.979367][ T7894] usb 10-1: config 0 descriptor?? [ 3059.020815][ T1128] usb 7-1: device descriptor read/64, error -71 [ 3059.260193][ T1128] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 3059.415349][ T1128] usb 7-1: device descriptor read/64, error -71 [ 3059.435412][ T7894] usbhid 10-1:0.0: can't add hid device: -71 [ 3059.457722][ T7894] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3059.490894][ T7894] usb 10-1: USB disconnect, device number 80 [ 3059.532305][ T1128] usb usb7-port1: attempt power cycle [ 3059.980030][ T1128] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 3060.000661][ T1128] usb 7-1: device descriptor read/8, error -71 [ 3060.096691][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12196'. [ 3060.326717][T11862] usb usb5: usbfs: process 11862 (syz.3.12195) did not claim interface 0 before use [ 3060.960048][ T1128] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 3061.080734][ T1128] usb 7-1: device descriptor read/8, error -71 [ 3061.257236][ T1128] usb usb7-port1: unable to enumerate USB device [ 3061.346983][T11870] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12199'. [ 3061.589535][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12199'. [ 3062.577602][T11888] overlayfs: missing 'lowerdir' [ 3063.315473][T11896] usb usb5: usbfs: process 11896 (syz.2.12205) did not claim interface 0 before use [ 3064.935755][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12211'. [ 3067.285877][T11932] usb usb5: usbfs: process 11932 (syz.4.12216) did not claim interface 0 before use [ 3068.029250][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12215'. [ 3068.289111][T11939] fuse: Bad value for 'fd' [ 3069.195147][T11941] loop4: detected capacity change from 0 to 256 [ 3069.273888][T11941] vfat: Unknown parameter 'fii_xlate' [ 3073.270417][ T1125] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 3073.500050][ T1125] usb 5-1: Using ep0 maxpacket: 8 [ 3073.592859][ T1125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3073.836864][ T1125] usb 5-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 3073.977349][ T1125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.067370][ T1125] usb 5-1: config 0 descriptor?? [ 3074.240014][ T1128] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 3074.319384][ T1125] usbhid 5-1:0.0: can't add hid device: -71 [ 3074.320009][T10174] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 3074.336246][ T1125] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3074.372033][ T1125] usb 5-1: USB disconnect, device number 120 [ 3074.423080][ T1128] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 3074.443213][ T1128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.472632][ T1128] usb 3-1: config 0 descriptor?? [ 3074.481845][T11987] fuse: Bad value for 'fd' [ 3074.495201][ T1128] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 3074.532110][T10174] usb 7-1: Using ep0 maxpacket: 8 [ 3074.546426][T10174] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3074.574076][T10174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3074.603796][T10174] usb 7-1: Product: syz [ 3074.632305][T10174] usb 7-1: Manufacturer: syz [ 3074.645493][T10174] usb 7-1: SerialNumber: syz [ 3074.663679][T10174] usb 7-1: config 0 descriptor?? [ 3074.911010][ T1128] gspca_sn9c2028: read1 error -71 [ 3074.932350][T10174] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3074.955092][ T1128] gspca_sn9c2028: read1 error -71 [ 3074.977481][ T1128] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 3075.690717][ T1128] usb 3-1: USB disconnect, device number 10 [ 3076.022764][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12239'. [ 3076.848624][T12008] loop2: detected capacity change from 0 to 1024 [ 3076.857305][T12008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 3076.923639][T12008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3077.174836][ T8666] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 3077.941269][T10174] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3077.973552][T10174] usb 7-1: USB disconnect, device number 14 [ 3078.240383][ T8666] usb 10-1: Using ep0 maxpacket: 8 [ 3078.628271][ T8666] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3078.658100][ T8666] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3078.679113][ T7960] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3078.698250][ T8666] usb 10-1: Product: syz [ 3078.734235][ T8666] usb 10-1: Manufacturer: syz [ 3078.795954][ T8666] usb 10-1: SerialNumber: syz [ 3078.844700][ T8666] usb 10-1: config 0 descriptor?? [ 3079.030891][T12030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12244'. [ 3081.549212][ T8666] usb 10-1: can't set config #0, error -71 [ 3081.588042][ T8666] usb 10-1: USB disconnect, device number 81 [ 3081.768830][ T6045] bond0: (slave bond_slave_0): interface is now down [ 3081.769854][T11793] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 3081.788005][ T6045] bond0: (slave bond_slave_1): interface is now down [ 3081.830457][T11793] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 3081.853076][T11793] bond0: active interface up! [ 3081.912725][T12046] syzkaller1: entered promiscuous mode [ 3081.918226][T12046] syzkaller1: entered allmulticast mode [ 3081.960167][T11793] bond0: (slave bond_slave_0): interface is now down [ 3081.988469][T11793] bond0: (slave bond_slave_1): interface is now down [ 3082.027732][T11793] bond0: now running without any active interface! [ 3086.385470][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 3086.392095][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 3087.983002][T12080] fuse: Bad value for 'fd' [ 3090.104377][T11793] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 3090.140979][T11793] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 3090.282996][T11793] bond0: active interface up! [ 3090.511051][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12267'. [ 3091.845324][T12111] fuse: Bad value for 'fd' [ 3092.350354][T10174] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 3093.560048][T10174] usb 3-1: Using ep0 maxpacket: 16 [ 3093.584445][T10174] usb 3-1: config 0 has no interfaces? [ 3093.593454][T10174] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3093.612640][T10174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3093.640109][T10174] usb 3-1: Product: syz [ 3093.650340][T10174] usb 3-1: Manufacturer: syz [ 3093.666860][T10174] usb 3-1: SerialNumber: syz [ 3094.511214][ T5636] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 3094.540591][T10174] usb 3-1: config 0 descriptor?? [ 3094.570487][ T5636] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 3095.412000][ T5636] bond0: active interface up! [ 3095.535933][T10174] usb 3-1: USB disconnect, device number 11 [ 3095.745276][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12284'. [ 3097.190409][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12287'. [ 3097.216018][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12289'. [ 3099.558572][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12299'. [ 3107.127753][T13304] bond0: (slave bond_slave_0): interface is now down [ 3107.310476][T13304] bond0: (slave bond_slave_1): interface is now down [ 3107.321314][T13304] bond0: now running without any active interface! [ 3108.570225][ T8666] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 3109.839941][ T8666] usb 10-1: Using ep0 maxpacket: 32 [ 3109.880753][ T8666] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3109.891348][ T8666] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3109.911492][T12250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3109.913613][ T8666] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3111.035381][ T8666] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3111.659992][ T8666] usb 10-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 3111.672999][ T8666] usb 10-1: Product: syz [ 3111.682453][ T8666] usb 10-1: Manufacturer: syz [ 3111.688359][ T8666] usb 10-1: SerialNumber: syz [ 3112.775636][ T8666] usb 10-1: can't set config #1, error -71 [ 3112.834360][ T8666] usb 10-1: USB disconnect, device number 82 [ 3113.412650][T12262] tipc: Failed to remove unknown binding: 66,1,1/0:3494273100/3494273102 [ 3113.444246][T12262] tipc: Failed to remove unknown binding: 66,1,1/0:3494273100/3494273102 [ 3113.453486][T12262] tipc: Failed to remove unknown binding: 66,1,1/0:3494273100/3494273102 [ 3117.172263][T12288] fuse: Bad value for 'fd' [ 3117.400033][ T6435] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 3117.580190][ T6435] usb 10-1: Using ep0 maxpacket: 16 [ 3117.722361][ T6435] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 3118.479991][ T6435] usb 10-1: config 0 has no interface number 0 [ 3118.531271][ T6435] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 3118.572428][ T6435] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.640468][ T6435] usb 10-1: Product: syz [ 3118.644828][ T6435] usb 10-1: Manufacturer: syz [ 3118.670112][ T6435] usb 10-1: SerialNumber: syz [ 3118.693152][ T6435] usb 10-1: config 0 descriptor?? [ 3118.737017][ T6435] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 3118.822946][T12303] fuse: Bad value for 'fd' [ 3119.125695][T12305] netlink: 'syz.6.12330': attribute type 39 has an invalid length. [ 3120.288109][ T6435] gspca_spca1528: reg_w err -110 [ 3120.330049][ T6435] spca1528 10-1:0.1: probe with driver spca1528 failed with error -110 [ 3120.361517][ T6435] usb 10-1: USB disconnect, device number 83 [ 3120.424981][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12321'. [ 3122.312112][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12339'. [ 3123.723495][ T1132] libceph: connect (1)[c::]:6789 error -101 [ 3124.963673][ T3960] bond0: (slave bond_slave_0): interface is now down [ 3124.989827][ T3960] bond0: (slave bond_slave_1): interface is now down [ 3124.990317][ T1132] libceph: mon0 (1)[c::]:6789 connect error [ 3125.007692][T12346] ceph: No mds server is up or the cluster is laggy [ 3125.027477][ T3960] bond0: now running without any active interface! [ 3125.360481][ T8666] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 3125.423779][T12356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3125.712296][ T8666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3125.754029][ T8666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3125.790376][ T8666] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3125.829992][ T8666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3125.852811][ T8666] usb 4-1: config 0 descriptor?? [ 3125.891455][ T8666] hub 4-1:0.0: USB hub found [ 3126.080418][ T8666] hub 4-1:0.0: 1 port detected [ 3126.106770][T12362] tipc: Failed to remove unknown binding: 66,1,1/0:228742312/228742314 [ 3126.230692][T12363] tipc: Failed to remove unknown binding: 66,1,1/0:228742312/228742314 [ 3126.272453][ T8666] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 3126.278832][ T8666] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 3126.327680][T12363] tipc: Failed to remove unknown binding: 66,1,1/0:228742312/228742314 [ 3126.403169][ T8666] usbhid 4-1:0.0: can't add hid device: -71 [ 3126.409218][ T8666] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3126.481706][ T8666] usb 4-1: USB disconnect, device number 112 [ 3127.745955][T12374] team0: Port device team_slave_0 removed [ 3127.773694][T12374] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 3127.981708][ T1131] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 3128.205331][ T1131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3128.253158][ T1131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3128.325321][ T1131] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 3128.507616][ T1131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3128.531525][ T1131] usb 3-1: config 0 descriptor?? [ 3130.282051][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.282091][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.282117][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.282144][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.282169][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.282195][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.282220][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.282245][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.282271][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.282297][ T1131] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 3130.341956][ T1131] lg-g15 0003:046D:C222.0033: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 3130.549142][ T1131] usb 3-1: USB disconnect, device number 12 [ 3131.000401][T12400] fido_id[12400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3131.871082][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12362'. [ 3132.529059][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12363'. [ 3135.760300][T12451] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.12373'. [ 3137.708890][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12377'. [ 3140.160569][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12383'. [ 3147.830431][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 3148.219192][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 3148.492115][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12412'. [ 3148.829951][ T1128] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 3149.867439][ T1128] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3150.041286][ T1128] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3150.050793][T12550] tipc: Failed to remove unknown binding: 66,1,1/0:1007766093/1007766095 [ 3150.084184][ T1128] usb 10-1: Product: syz [ 3150.102006][ T1128] usb 10-1: Manufacturer: syz [ 3150.122789][ T1128] usb 10-1: SerialNumber: syz [ 3150.128829][T12550] tipc: Failed to remove unknown binding: 66,1,1/0:1007766093/1007766095 [ 3150.462063][T12550] tipc: Failed to remove unknown binding: 66,1,1/0:1007766093/1007766095 [ 3150.579886][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12418'. [ 3151.575539][ T1128] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3151.616749][T12596] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3151.651706][ T1128] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 3152.290926][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12420'. [ 3152.992990][T12610] loop2: detected capacity change from 0 to 8192 [ 3153.766563][ T9402] loop2: p1 < > p2 p3 < > p4 < p5 > [ 3153.801123][ T9402] loop2: partition table partially beyond EOD, truncated [ 3153.852467][ T9402] loop2: p1 start 100663296 is beyond EOD, truncated [ 3153.899942][ T9402] loop2: p2 start 201130427 is beyond EOD, truncated [ 3153.929341][ T9402] loop2: p3 start 4294967295 is beyond EOD, truncated [ 3153.974897][ T9402] loop2: p5 start 201130427 is beyond EOD, truncated [ 3154.005528][T12610] loop2: p1 < > p2 p3 < > p4 < p5 > [ 3154.010934][T12610] loop2: partition table partially beyond EOD, truncated [ 3154.018183][T12610] loop2: p1 start 100663296 is beyond EOD, truncated [ 3154.024925][T12610] loop2: p2 start 201130427 is beyond EOD, truncated [ 3154.031733][T12610] loop2: p3 start 4294967295 is beyond EOD, truncated [ 3154.040758][T12610] loop2: p5 start 201130427 is beyond EOD, truncated [ 3154.742865][ T9402] udevd[9402]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 3154.887482][ T9402] udevd[9402]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 3154.940296][T11925] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3155.142654][T11925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3155.217375][T11925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3155.256676][T11925] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 3155.577690][T11925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3155.842672][T12632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3155.851782][T11925] usb 3-1: config 0 descriptor?? [ 3155.900562][T12632] batadv_slave_0: entered promiscuous mode [ 3156.241349][ T1128] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 3156.328778][ T1128] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3156.373029][ T1128] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3156.408223][T11925] hid_parser_main: 1 callbacks suppressed [ 3156.408249][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.460049][ T1128] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 3156.479338][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.540436][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.564289][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.574394][ T1128] usb 10-1: USB disconnect, device number 84 [ 3156.592875][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.645817][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.660263][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.679944][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.695844][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.751589][T11925] lg-g15 0003:046D:C222.0034: unknown main item tag 0x0 [ 3156.795261][T11925] lg-g15 0003:046D:C222.0034: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 3156.851384][T11925] usb 3-1: USB disconnect, device number 13 [ 3157.178903][T12650] fido_id[12650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3161.170694][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12450'. [ 3161.762049][T12696] random: crng reseeded on system resumption [ 3165.811433][ T7962] Bluetooth: hci3: command 0x0406 tx timeout [ 3166.032898][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12460'. [ 3169.316062][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12468'. [ 3170.155719][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12471'. [ 3171.321478][T12775] netlink: 32 bytes leftover after parsing attributes in process `syz.8.12473'. [ 3171.546479][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12470'. [ 3172.993798][T12796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3173.063298][T12796] batadv_slave_0: entered promiscuous mode [ 3173.314542][T12802] overlayfs: failed to clone upperpath [ 3174.367524][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12485'. [ 3279.409813][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 3279.416823][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1131/1:b..l P12742/1:b..l P11793/1:b..l [ 3279.427914][ C0] rcu: (detected by 0, t=10502 jiffies, g=302909, q=847 ncpus=2) [ 3279.435733][ C0] task:kworker/u8:30 state:R running task stack:24568 pid:11793 tgid:11793 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 3279.451197][ C0] Workqueue: iou_exit io_ring_exit_work [ 3279.456793][ C0] Call Trace: [ 3279.460087][ C0] [ 3279.463032][ C0] __schedule+0x149b/0x4fd0 [ 3279.467558][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 3279.472697][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 3279.477677][ C0] ? __pfx___schedule+0x10/0x10 [ 3279.482561][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.488211][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 3279.493226][ C0] preempt_schedule_irq+0x4d/0xa0 [ 3279.498262][ C0] irqentry_exit+0x5d8/0x660 [ 3279.502868][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.508524][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3279.514522][ C0] RIP: 0010:unwind_next_frame+0x4fb/0x23d0 [ 3279.520411][ C0] Code: 03 02 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 <49> 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 [ 3279.540140][ C0] RSP: 0018:ffffc9000424f158 EFLAGS: 00000246 [ 3279.546227][ C0] RAX: 0000000000000000 RBX: ffffffff8f95eb70 RCX: 0000000000000000 [ 3279.554213][ C0] RDX: ffffffff8f95eb70 RSI: ffffffff900fd692 RDI: ffffffff8bc08380 [ 3279.562196][ C0] RBP: ffffffff8f95eb70 R08: 0000000000000001 R09: ffffffff8df41aa0 [ 3279.570174][ C0] R10: dffffc0000000000 R11: ffffffff81acf3d0 R12: ffffffff812ad362 [ 3279.578156][ C0] R13: ffffffff8f95eb70 R14: ffffc9000424f228 R15: 0000000000000000 [ 3279.586139][ C0] ? io_ring_exit_work+0x3b2/0x8d0 [ 3279.591267][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3279.597454][ C0] ? unwind_next_frame+0xd4/0x23d0 [ 3279.602583][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 3279.607702][ C0] ? io_ring_exit_work+0x3b3/0x8d0 [ 3279.612822][ C0] ? io_ring_exit_work+0x3b3/0x8d0 [ 3279.617949][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3279.624137][ C0] arch_stack_walk+0x11c/0x150 [ 3279.628919][ C0] ? io_ring_exit_work+0x3b3/0x8d0 [ 3279.634045][ C0] stack_trace_save+0x9c/0xe0 [ 3279.638752][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 3279.644149][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.649793][ C0] ? stack_depot_save_flags+0x33/0x810 [ 3279.655284][ C0] kasan_save_track+0x3e/0x80 [ 3279.659970][ C0] ? kasan_save_track+0x3e/0x80 [ 3279.664826][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 3279.669857][ C0] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 3279.675511][ C0] ? fill_pool+0x100/0x570 [ 3279.679948][ C0] ? debug_object_activate+0x498/0x540 [ 3279.685420][ C0] ? call_rcu+0x43/0x890 [ 3279.689672][ C0] ? kmem_cache_free+0x488/0x620 [ 3279.694610][ C0] ? __io_req_caches_free+0x1c1/0x270 [ 3279.699999][ C0] ? io_req_caches_free+0x21/0x60 [ 3279.705038][ C0] ? io_ring_exit_work+0x3b3/0x8d0 [ 3279.710214][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.715861][ C0] __kasan_slab_alloc+0x6c/0x80 [ 3279.720734][ C0] kmem_cache_alloc_noprof+0x37d/0x710 [ 3279.726213][ C0] ? __io_req_caches_free+0x1c1/0x270 [ 3279.731598][ C0] ? io_req_caches_free+0x21/0x60 [ 3279.736645][ C0] ? fill_pool+0x100/0x570 [ 3279.741114][ C0] fill_pool+0x100/0x570 [ 3279.745397][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.751054][ C0] ? __pfx_fill_pool+0x10/0x10 [ 3279.755859][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 3279.762031][ C0] ? debug_object_activate+0x46f/0x540 [ 3279.767516][ C0] debug_object_activate+0x498/0x540 [ 3279.772833][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 3279.779009][ C0] call_rcu+0x43/0x890 [ 3279.783101][ C0] ? __phys_addr+0xd3/0x180 [ 3279.787627][ C0] kmem_cache_free+0x488/0x620 [ 3279.792401][ C0] ? __io_req_caches_free+0x1c1/0x270 [ 3279.797909][ C0] __io_req_caches_free+0x1c1/0x270 [ 3279.803135][ C0] io_req_caches_free+0x21/0x60 [ 3279.808176][ C0] io_ring_exit_work+0x3b3/0x8d0 [ 3279.813147][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 3279.818638][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.824301][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 3279.830039][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 3279.835773][ C0] process_scheduled_works+0xad1/0x1770 [ 3279.841369][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3279.847396][ C0] ? do_raw_spin_lock+0x121/0x290 [ 3279.852450][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.858105][ C0] worker_thread+0x8a0/0xda0 [ 3279.862726][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.868380][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.874047][ C0] ? __kthread_parkme+0x7b/0x200 [ 3279.879015][ C0] kthread+0x711/0x8a0 [ 3279.883117][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3279.888243][ C0] ? __pfx_kthread+0x10/0x10 [ 3279.892938][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.898594][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3279.903816][ C0] ? __pfx_kthread+0x10/0x10 [ 3279.908510][ C0] ret_from_fork+0x510/0xa50 [ 3279.913120][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3279.918235][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.923886][ C0] ? __switch_to+0xc9e/0x1480 [ 3279.928591][ C0] ? __pfx_kthread+0x10/0x10 [ 3279.933209][ C0] ret_from_fork_asm+0x1a/0x30 [ 3279.938015][ C0] [ 3279.941035][ C0] task:syz.6.12466 state:R running task stack:23584 pid:12742 tgid:12737 ppid:10047 task_flags:0x400140 flags:0x00080002 [ 3279.954559][ C0] Call Trace: [ 3279.957848][ C0] [ 3279.960783][ C0] __schedule+0x149b/0x4fd0 [ 3279.965316][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 3279.970279][ C0] ? __pfx___schedule+0x10/0x10 [ 3279.975155][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3279.980798][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 3279.985764][ C0] preempt_schedule_irq+0x4d/0xa0 [ 3279.990800][ C0] irqentry_exit+0x5d8/0x660 [ 3279.995397][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.001047][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3280.007043][ C0] RIP: 0010:lock_acquire+0x222/0x340 [ 3280.012340][ C0] Code: ff ff ff e8 00 a1 bb 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0a 20 e2 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 da 50 72 ff cc 48 8d 3d 37 77 e7 [ 3280.031959][ C0] RSP: 0018:ffffc90003e3ed40 EFLAGS: 00000282 [ 3280.038052][ C0] RAX: 922ec5333e78e700 RBX: 0000000000000000 RCX: 0000000000000046 [ 3280.046040][ C0] RDX: 000000001e37a7c0 RSI: ffffffff8d975f94 RDI: ffffffff8bc083e0 [ 3280.054034][ C0] RBP: ffffffff81ab6b1d R08: ffffffff81ab6b1d R09: ffffffff8df41aa0 [ 3280.062021][ C0] R10: dffffc0000000000 R11: ffffffff81acf3d0 R12: 0000000000000002 [ 3280.070000][ C0] R13: ffffffff8df41aa0 R14: 0000000000000000 R15: 0000000000000246 [ 3280.077998][ C0] ? is_module_text_address+0x1d/0x1e0 [ 3280.083484][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3280.089671][ C0] ? is_module_text_address+0x1d/0x1e0 [ 3280.095161][ C0] ? is_module_text_address+0x1d/0x1e0 [ 3280.100635][ C0] is_module_text_address+0x39/0x1e0 [ 3280.105931][ C0] ? is_module_text_address+0x1d/0x1e0 [ 3280.111407][ C0] kernel_text_address+0x94/0xe0 [ 3280.116372][ C0] __kernel_text_address+0xd/0x40 [ 3280.121432][ C0] unwind_get_return_address+0x4d/0x90 [ 3280.126918][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3280.133107][ C0] arch_stack_walk+0xfc/0x150 [ 3280.137809][ C0] stack_trace_save+0x9c/0xe0 [ 3280.142503][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 3280.147910][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.153552][ C0] save_stack+0xf5/0x1f0 [ 3280.157800][ C0] ? __pfx_save_stack+0x10/0x10 [ 3280.162650][ C0] ? __free_frozen_pages+0xbc8/0xd30 [ 3280.167934][ C0] ? vfree+0x25a/0x400 [ 3280.172012][ C0] ? nf_tables_newset+0x1f25/0x2540 [ 3280.177228][ C0] ? nfnetlink_rcv+0x11d9/0x2590 [ 3280.182168][ C0] ? netlink_unicast+0x82f/0x9e0 [ 3280.187108][ C0] ? netlink_sendmsg+0x805/0xb30 [ 3280.192053][ C0] ? __sock_sendmsg+0x21c/0x270 [ 3280.196913][ C0] ? ____sys_sendmsg+0x505/0x820 [ 3280.201857][ C0] ? ___sys_sendmsg+0x21f/0x2a0 [ 3280.206733][ C0] ? __x64_sys_sendmsg+0x19b/0x260 [ 3280.211850][ C0] ? do_syscall_64+0xec/0xf80 [ 3280.216532][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3280.222621][ C0] __reset_page_owner+0x71/0x1f0 [ 3280.227572][ C0] __free_frozen_pages+0xbc8/0xd30 [ 3280.232710][ C0] vfree+0x25a/0x400 [ 3280.236629][ C0] nf_tables_newset+0x1f25/0x2540 [ 3280.241671][ C0] ? __pfx_nf_tables_newset+0x10/0x10 [ 3280.247050][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.252717][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.258367][ C0] ? __nla_parse+0x40/0x60 [ 3280.262803][ C0] nfnetlink_rcv+0x11d9/0x2590 [ 3280.267619][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3280.272756][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.278394][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 3280.283464][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.289105][ C0] ? __netlink_deliver_tap+0x807/0x850 [ 3280.294576][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 3280.299787][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.305445][ C0] netlink_unicast+0x82f/0x9e0 [ 3280.310225][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 3280.315517][ C0] ? __alloc_skb+0x198/0x3a0 [ 3280.320110][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.325753][ C0] ? skb_put+0x11b/0x210 [ 3280.329999][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.335732][ C0] netlink_sendmsg+0x805/0xb30 [ 3280.340526][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3280.345828][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.351467][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3280.356415][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.362057][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.367692][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3280.372991][ C0] __sock_sendmsg+0x21c/0x270 [ 3280.377693][ C0] ____sys_sendmsg+0x505/0x820 [ 3280.382491][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3280.387815][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.393461][ C0] ? import_iovec+0x74/0xa0 [ 3280.397981][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 3280.402671][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 3280.407883][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.413529][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.419170][ C0] ? futex_wait+0x285/0x360 [ 3280.423714][ C0] ? __fget_files+0x2a/0x420 [ 3280.428318][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.433960][ C0] ? __fget_files+0x3a0/0x420 [ 3280.438694][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 3280.443675][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3280.449167][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.454821][ C0] ? rcu_is_watching+0x15/0xb0 [ 3280.459619][ C0] do_syscall_64+0xec/0xf80 [ 3280.464134][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3280.470213][ C0] ? trace_irq_disable+0x37/0x100 [ 3280.475281][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3280.481191][ C0] RIP: 0033:0x7f36eb98f749 [ 3280.485611][ C0] RSP: 002b:00007f36ec874038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3280.494045][ C0] RAX: ffffffffffffffda RBX: 00007f36ebbe5fa0 RCX: 00007f36eb98f749 [ 3280.502029][ C0] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 3280.510011][ C0] RBP: 00007f36eba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 3280.518000][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3280.525988][ C0] R13: 00007f36ebbe6038 R14: 00007f36ebbe5fa0 R15: 00007ffe060d4af8 [ 3280.533993][ C0] [ 3280.537018][ C0] task:kworker/1:1 state:R running task stack:21576 pid:1131 tgid:1131 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 3280.550634][ C0] Workqueue: events drain_vmap_area_work [ 3280.556303][ C0] Call Trace: [ 3280.559583][ C0] [ 3280.562520][ C0] __schedule+0x149b/0x4fd0 [ 3280.567043][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.572708][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.578366][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 3280.583324][ C0] ? __pfx___schedule+0x10/0x10 [ 3280.588204][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.593853][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 3280.598824][ C0] preempt_schedule_irq+0x4d/0xa0 [ 3280.603864][ C0] irqentry_exit+0x5d8/0x660 [ 3280.608472][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.614124][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3280.620114][ C0] RIP: 0010:lock_release+0x2d8/0x3b0 [ 3280.625420][ C0] Code: 34 e2 10 00 00 00 00 eb b5 e8 64 6f bb 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 74 ee e1 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 44 1f 72 ff cc 48 8d 3d 11 49 e7 [ 3280.645040][ C0] RSP: 0018:ffffc900045af2c0 EFLAGS: 00000286 [ 3280.651131][ C0] RAX: d70daa7a5e1b0400 RBX: 0000000000000202 RCX: 0000000000000046 [ 3280.659200][ C0] RDX: 0000000000000003 RSI: ffffffff8d975f94 RDI: ffffffff8bc083e0 [ 3280.667186][ C0] RBP: ffff88802ae7c8a8 R08: ffffc900045af890 R09: ffffc900045af418 [ 3280.675173][ C0] R10: dffffc0000000000 R11: fffff520008b5e85 R12: 0000000000000003 [ 3280.683155][ C0] R13: 0000000000000003 R14: ffffffff8df41aa0 R15: ffff88802ae7bd00 [ 3280.691163][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 3280.696291][ C0] unwind_next_frame+0x1ab1/0x23d0 [ 3280.701434][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 3280.706565][ C0] ? __apply_to_page_range+0xb66/0x13d0 [ 3280.712132][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3280.718309][ C0] arch_stack_walk+0x11c/0x150 [ 3280.723099][ C0] ? __kasan_release_vmalloc+0xa2/0xd0 [ 3280.728573][ C0] stack_trace_save+0x9c/0xe0 [ 3280.733269][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 3280.738659][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.744314][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.749967][ C0] save_stack+0xf5/0x1f0 [ 3280.754214][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 3280.759161][ C0] ? __pfx_save_stack+0x10/0x10 [ 3280.764456][ C0] ? __free_frozen_pages+0xbc8/0xd30 [ 3280.769769][ C0] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 3280.775755][ C0] ? __apply_to_page_range+0xb66/0x13d0 [ 3280.781328][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.786977][ C0] ? page_ext_put+0x97/0xc0 [ 3280.791493][ C0] __reset_page_owner+0x71/0x1f0 [ 3280.796443][ C0] __free_frozen_pages+0xbc8/0xd30 [ 3280.801578][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 3280.807305][ C0] __apply_to_page_range+0xb66/0x13d0 [ 3280.812707][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 3280.819142][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 3280.824966][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.830614][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.836261][ C0] ? smp_call_function_many_cond+0xdca/0x1260 [ 3280.842360][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.848057][ C0] __kasan_release_vmalloc+0xa2/0xd0 [ 3280.853354][ C0] purge_vmap_node+0x214/0x8d0 [ 3280.858149][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.863806][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 3280.869106][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.874766][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.880424][ C0] ? flush_tlb_kernel_range+0x358/0x470 [ 3280.886003][ C0] __purge_vmap_area_lazy+0x77a/0xb00 [ 3280.891398][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 3280.897130][ C0] drain_vmap_area_work+0x27/0x40 [ 3280.902160][ C0] process_scheduled_works+0xad1/0x1770 [ 3280.907742][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3280.913730][ C0] ? do_raw_spin_lock+0x121/0x290 [ 3280.918785][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.924439][ C0] worker_thread+0x8a0/0xda0 [ 3280.929048][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.934689][ C0] ? __kthread_parkme+0x7b/0x200 [ 3280.939648][ C0] kthread+0x711/0x8a0 [ 3280.943736][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3280.948860][ C0] ? __pfx_kthread+0x10/0x10 [ 3280.953467][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.959110][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3280.964325][ C0] ? __pfx_kthread+0x10/0x10 [ 3280.968927][ C0] ret_from_fork+0x510/0xa50 [ 3280.973524][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3280.978635][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3280.984272][ C0] ? __switch_to+0xc9e/0x1480 [ 3280.988971][ C0] ? __pfx_kthread+0x10/0x10 [ 3280.993574][ C0] ret_from_fork_asm+0x1a/0x30 [ 3280.998370][ C0] [ 3281.001383][ C0] rcu: rcu_preempt kthread starved for 10340 jiffies! g302909 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 3281.012669][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3281.022647][ C0] rcu: RCU grace-period kthread stack dump: [ 3281.028529][ C0] task:rcu_preempt state:R running task stack:27688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 3281.042051][ C0] Call Trace: [ 3281.045336][ C0] [ 3281.048268][ C0] __schedule+0x149b/0x4fd0 [ 3281.052807][ C0] ? __pfx___schedule+0x10/0x10 [ 3281.057940][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3281.063584][ C0] ? schedule+0x91/0x360 [ 3281.067834][ C0] schedule+0x165/0x360 [ 3281.071992][ C0] schedule_timeout+0x12b/0x270 [ 3281.076856][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 3281.082257][ C0] ? __pfx_process_timeout+0x10/0x10 [ 3281.087560][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3281.093284][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3281.099197][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3281.104920][ C0] ? prepare_to_swait_event+0x341/0x380 [ 3281.110547][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 3281.115423][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 3281.121590][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 3281.126881][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 3281.132102][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3281.137933][ C0] rcu_gp_kthread+0x99/0x390 [ 3281.142624][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3281.147845][ C0] ? __kthread_parkme+0x7b/0x200 [ 3281.152808][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3281.158467][ C0] ? __kthread_parkme+0x1a1/0x200 [ 3281.163511][ C0] kthread+0x711/0x8a0 [ 3281.167608][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3281.172821][ C0] ? __pfx_kthread+0x10/0x10 [ 3281.177429][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3281.183076][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3281.188290][ C0] ? __pfx_kthread+0x10/0x10 [ 3281.192888][ C0] ret_from_fork+0x510/0xa50 [ 3281.197485][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3281.202684][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3281.208323][ C0] ? __switch_to+0xc9e/0x1480 [ 3281.213012][ C0] ? __pfx_kthread+0x10/0x10 [ 3281.217619][ C0] ret_from_fork_asm+0x1a/0x30 [ 3281.222416][ C0] [ 3281.225455][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 3281.231773][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 3281.242272][ C0] Tainted: [L]=SOFTLOCKUP [ 3281.246588][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3281.256632][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 3281.262358][ C0] Code: 3e b4 b6 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 13 b4 b6 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 3281.281963][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2 [ 3281.288038][ C0] RAX: 0000000003e074d7 RBX: ffffffff819713ee RCX: 0000000080000001 [ 3281.296006][ C0] RDX: 0000000000000001 RSI: ffffffff8d79207b RDI: ffffffff8bc083e0 [ 3281.303973][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 3281.311940][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270 [ 3281.319907][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 3281.327877][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 3281.336803][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3281.343381][ C0] CR2: 000056207a2f6a38 CR3: 000000002a230000 CR4: 0000000000350ef0 [ 3281.351356][ C0] Call Trace: [ 3281.354629][ C0] [ 3281.357558][ C0] default_idle+0x13/0x20 [ 3281.361894][ C0] default_idle_call+0x73/0xb0 [ 3281.366667][ C0] do_idle+0x1be/0x4d0 [ 3281.370743][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3281.376380][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 3281.381591][ C0] ? __pfx_do_idle+0x10/0x10 [ 3281.386205][ C0] cpu_startup_entry+0x44/0x60 [ 3281.390972][ C0] rest_init+0x2de/0x300 [ 3281.395224][ C0] start_kernel+0x381/0x3d0 [ 3281.399733][ C0] x86_64_start_reservations+0x24/0x30 [ 3281.405202][ C0] x86_64_start_kernel+0x143/0x1c0 [ 3281.410410][ C0] common_startup_64+0x13e/0x147 [ 3281.415386][ C0] [ 3283.580290][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 3283.586614][ T1295] ieee802154 phy1 wpan1: encryption failed: -22