last executing test programs: 11m27.712423393s ago: executing program 32 (id=83): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) memfd_create(0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mremap(&(0x7f00001f6000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000920000/0x1000)=nil) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) process_vm_readv(r4, &(0x7f0000001900)=[{&(0x7f0000000380)=""/8, 0x8}, {&(0x7f0000001b00)=""/17, 0x11}, {&(0x7f0000000580)=""/92, 0x5c}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/97, 0x61}, {&(0x7f0000001740)=""/35, 0x23}, {&(0x7f0000001780)=""/92, 0x5c}, {&(0x7f0000001800)=""/248, 0xf8}], 0x8, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/80, 0x50}, {&(0x7f0000001a00)=""/179, 0xb3}], 0x2, 0x0) recvfrom$l2tp6(r0, 0x0, 0x94, 0x40000002, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000001b40)="cadc975bf7ad90add25f1f0c8a000c0aa256897ab47729ed7059cf34d2ffa78638e79c95bca220f8424e95d48a718607378021c786c141abbc1da247aea3b04a584c30cd39bb3c2d49fdfc675943caf221748ebb92b4def19905115ceff31e18b272f65440ac3bb6dea9d76c32476d0a13d1f3") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m48.231029505s ago: executing program 33 (id=204): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f00000003c0)={r2, 0x7, 0x1, 0x8, 0x6, [], [0x9, 0x8001, 0x9, 0x2], [0x4, 0x7, 0x0, 0xffffff75], [0x0, 0x8, 0x100000001, 0x5]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r3}) 8m5.872295352s ago: executing program 34 (id=807): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) sendmmsg(r1, &(0x7f0000004380), 0x34000, 0x0) 1m59.931763573s ago: executing program 35 (id=2193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1m51.794158674s ago: executing program 5 (id=2281): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, 0x0) 1m51.754523142s ago: executing program 5 (id=2284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}}}]}]}, 0x60}}, 0x2400c000) 1m51.360265276s ago: executing program 5 (id=2290): socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0xb25, 0x72c) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @broadcast, @void, {@ipv4={0x800, @dccp={{0xb, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0x0, 0x21, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0xb, 0x89, [@broadcast, @empty]}, @cipso={0x86, 0x8, 0x1, [{0x5, 0x2}]}, @end, @end]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, "7f23c4", 0x5, "ea6a93"}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") 1m50.86247048s ago: executing program 36 (id=2288): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffd, 0x490420, 0x2}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1m50.855168643s ago: executing program 5 (id=2293): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m50.633036371s ago: executing program 5 (id=2295): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, 0x0) 1m50.233705988s ago: executing program 5 (id=2299): ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000001c0)={0x39, &(0x7f0000000040)=[{0x14, '\x00', @data=0x48af, 0x6}]}) 1m49.877045421s ago: executing program 37 (id=2299): ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000001c0)={0x39, &(0x7f0000000040)=[{0x14, '\x00', @data=0x48af, 0x6}]}) 1m42.417112007s ago: executing program 8 (id=2355): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) gettid() openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, 0x0, 0x0, 0x8e90385f0ccb53ea}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) 1m40.249180243s ago: executing program 8 (id=2362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x400000000010, 0x3, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) write$UHID_INPUT(r7, &(0x7f00000021c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) r8 = syz_io_uring_setup(0x4b4, &(0x7f0000000180)={0x0, 0x10c8, 0x0, 0x80004, 0x330}, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000000)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r10, 0xffffd000) 1m39.211733191s ago: executing program 8 (id=2363): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000000c0)=0x1, 0x4) r3 = dup(r2) sendmmsg$inet(r3, 0x0, 0x0, 0x95) read$FUSE(r3, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000500)=ANY=[], 0x258) read$FUSE(r3, &(0x7f0000002a00)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xd, 0x0, 0x0, 0x9, 0x40, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) read$snapshot(r0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xf3a, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0) getsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000140)=""/103, &(0x7f00000001c0)=0x67) syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x24020400) pselect6(0xffffffffffffff41, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe9d, 0x1, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m38.161102456s ago: executing program 4 (id=2368): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7) 1m38.035643506s ago: executing program 4 (id=2370): syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$kcm(0x21, 0x2, 0x2) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40242) epoll_create(0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 1m37.643933288s ago: executing program 4 (id=2372): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f00000010c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110200000000000000000100000030000180060005004e210000140004000047d0000000000000000000000000010800060001000000060001000a000000"], 0x44}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26) 1m36.860283365s ago: executing program 9 (id=2373): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n'], 0x48) socket$inet(0x2, 0x80001, 0x84) mkdir(&(0x7f00000000c0)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x9f1, 0x7aa, 0x3, 0xb, 0x100, 0xfffffffffffffffc, 0xd}) 1m36.598838183s ago: executing program 4 (id=2374): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m36.406322892s ago: executing program 8 (id=2375): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m36.1940919s ago: executing program 8 (id=2376): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'nr0\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'bond_slave_0\x00', {0x2, 0x0, @local}}) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000240)={{0xfffffffffffffffd, 0x3}, {0x10000, 0x7}, 0x4, 0x1}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xef}, "ea0867bd3dcfce0c962a68d8bfde37d0eae3e0757e2d71e8965e77cb1240ccc4f79f53a6fe83aa77c40e66500ca2b3026cbb4ebd14cded3dd7711476fa96750407aa0e7d880a231a8aed1d8a0d264dd0b06a338bf1260d4aefdd5c9beac5644ec75ad5fe7616b2dfc104201b298a519dbf804900d373b7ac2ae9fd4ff7a28b9bdbd406bea9dd0310f4698385ae42351282a9115b719b87cb9100189e2121c8791e906afea46e310038e4756ce905734d7bd3ac3827a5c9f85607eaad4802d999224d10924b26cd947a16de5b1befb49db574a1130a3c21b5f28d45db3fda2d46b9736e0477a22f848959de745c1a45"}, 0xf3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x405}}}, 0x7) sched_setattr(r2, &(0x7f0000000d80)={0x38, 0x0, 0x40, 0x6, 0x3, 0x7, 0xa, 0x7, 0x8, 0x4}, 0x0) 1m36.186057353s ago: executing program 4 (id=2377): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m36.158038893s ago: executing program 9 (id=2378): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 1m35.792413693s ago: executing program 9 (id=2379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xad}, @NL80211_ATTR_SSID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 1m35.748078131s ago: executing program 8 (id=2380): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n'], 0x48) socket$inet(0x2, 0x80001, 0x84) mkdir(&(0x7f00000000c0)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x9f1, 0x7aa, 0x3, 0xb, 0x100, 0xfffffffffffffffc, 0xd}) 1m35.19728487s ago: executing program 38 (id=2380): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n'], 0x48) socket$inet(0x2, 0x80001, 0x84) mkdir(&(0x7f00000000c0)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x9f1, 0x7aa, 0x3, 0xb, 0x100, 0xfffffffffffffffc, 0xd}) 1m35.191733364s ago: executing program 9 (id=2382): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m35.190532097s ago: executing program 4 (id=2384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x10000004a5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r6, 0x0, 0x0) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) 1m35.171704177s ago: executing program 39 (id=2384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x10000004a5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r6, 0x0, 0x0) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) 1m34.905122611s ago: executing program 9 (id=2385): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xf, 0x0, 0x9, 0xff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, 0xfffffffffffffffe) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xc2, 0x60, 0x21}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$FIONREAD(r3, 0x40082104, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000080)}], 0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, 0x1, 0x8, 0x943566fb674d2be7, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1f7d4ea0}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 1m34.558032386s ago: executing program 2 (id=2386): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x41, 0xffffff7f}}], 0x20, 0x4048008}, 0x0) 1m34.421988423s ago: executing program 2 (id=2387): userfaultfd(0x801) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x1}, 0x8) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x1}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r3, 0x25, 0x0, @val=@netkit}, 0x1c) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r3, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000001c00)=ANY=[], 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x59a, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x59a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast2, 0x4}, 0x18, 0x0}}], 0x1, 0x40040c5) (async) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast2, 0x4}, 0x18, 0x0}}], 0x1, 0x40040c5) r6 = socket$inet6(0xa, 0x2, 0xfffffffe) memfd_secret(0x0) mmap(&(0x7f0000c6b000/0x2000)=nil, 0x2000, 0x1a, 0x110, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc0046209, 0x0) socket(0xa, 0x2, 0x0) (async) r8 = socket(0xa, 0x2, 0x0) preadv(r6, 0x0, 0x0, 0x4, 0x8b) (async) preadv(r6, 0x0, 0x0, 0x4, 0x8b) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000000000000000000000000000061108100200000004000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 1m34.132104054s ago: executing program 2 (id=2388): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x1, 0x2, 0xff, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 1m34.131849408s ago: executing program 9 (id=2389): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'nr0\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'bond_slave_0\x00', {0x2, 0x0, @local}}) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000240)={{0xfffffffffffffffd, 0x3}, {0x10000, 0x7}, 0x4, 0x1}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xef}, "ea0867bd3dcfce0c962a68d8bfde37d0eae3e0757e2d71e8965e77cb1240ccc4f79f53a6fe83aa77c40e66500ca2b3026cbb4ebd14cded3dd7711476fa96750407aa0e7d880a231a8aed1d8a0d264dd0b06a338bf1260d4aefdd5c9beac5644ec75ad5fe7616b2dfc104201b298a519dbf804900d373b7ac2ae9fd4ff7a28b9bdbd406bea9dd0310f4698385ae42351282a9115b719b87cb9100189e2121c8791e906afea46e310038e4756ce905734d7bd3ac3827a5c9f85607eaad4802d999224d10924b26cd947a16de5b1befb49db574a1130a3c21b5f28d45db3fda2d46b9736e0477a22f848959de745c1a45"}, 0xf3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x405}}}, 0x7) sched_setattr(r2, &(0x7f0000000d80)={0x38, 0x0, 0x40, 0x6, 0x3, 0x7, 0xa, 0x7, 0x8, 0x4}, 0x0) 1m33.839668818s ago: executing program 40 (id=2389): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'nr0\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'bond_slave_0\x00', {0x2, 0x0, @local}}) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000240)={{0xfffffffffffffffd, 0x3}, {0x10000, 0x7}, 0x4, 0x1}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xef}, "ea0867bd3dcfce0c962a68d8bfde37d0eae3e0757e2d71e8965e77cb1240ccc4f79f53a6fe83aa77c40e66500ca2b3026cbb4ebd14cded3dd7711476fa96750407aa0e7d880a231a8aed1d8a0d264dd0b06a338bf1260d4aefdd5c9beac5644ec75ad5fe7616b2dfc104201b298a519dbf804900d373b7ac2ae9fd4ff7a28b9bdbd406bea9dd0310f4698385ae42351282a9115b719b87cb9100189e2121c8791e906afea46e310038e4756ce905734d7bd3ac3827a5c9f85607eaad4802d999224d10924b26cd947a16de5b1befb49db574a1130a3c21b5f28d45db3fda2d46b9736e0477a22f848959de745c1a45"}, 0xf3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x405}}}, 0x7) sched_setattr(r2, &(0x7f0000000d80)={0x38, 0x0, 0x40, 0x6, 0x3, 0x7, 0xa, 0x7, 0x8, 0x4}, 0x0) 1m33.758429655s ago: executing program 2 (id=2392): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m33.596334028s ago: executing program 2 (id=2393): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n'], 0x48) socket$inet(0x2, 0x80001, 0x84) mkdir(&(0x7f00000000c0)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x9f1, 0x7aa, 0x3, 0xb, 0x100, 0xfffffffffffffffc, 0xd}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0xfffffffffffffeca) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r5, 0x36}, 0x8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x3a98c2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x10001, {}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 1m33.26807331s ago: executing program 2 (id=2394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000000)={0x1}, 0x1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="4005010e"], 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) 1m32.898004752s ago: executing program 41 (id=2394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000000)={0x1}, 0x1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="4005010e"], 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) 23.332005267s ago: executing program 6 (id=2576): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40cc2, 0xd7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) 23.244231601s ago: executing program 6 (id=2577): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x0, 0xffffffffffff7fff}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000009c0)={0x28, 0x4, r1, r1, 0x7ffffffffffffffe, 0xfffffffffffffffc}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x20}, {0x0, 0x1}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0xfffffffe, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {0x4}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xe68}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(0x0, 0x10, 0x202a80) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fddbdf2508000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48c0) 21.648354041s ago: executing program 6 (id=2582): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0xfffb, 0x0, 0x0, 0xfffc, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket(0x2, 0x80805, 0x0) close(r1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 20.590454728s ago: executing program 6 (id=2584): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 20.317106773s ago: executing program 6 (id=2587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (fail_nth: 4) 19.136360728s ago: executing program 6 (id=2594): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x7, 0x32315241, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0x2}, {0x1002}, {0x7}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0x100000, 0x13ff}], 0x0, 0x0, 0x7}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x190) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 17.656833462s ago: executing program 42 (id=2594): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x7, 0x32315241, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0x2}, {0x1002}, {0x7}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0x100000, 0x13ff}], 0x0, 0x0, 0x7}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x190) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 13.993678768s ago: executing program 0 (id=2613): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x1) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406104724e00000000000109022d0001000000830904000001030001000921fcff0001220b0009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {0x20, 0xf1}, {}, {}, {0x3}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff3, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xb, 0x4, 0xc, 0x0, 0x7, 0x5, 0xc, 0x3, 0x7, 0x8, 0xd, 0xc, 0xe, 0xf, 0xb, 0x8], 0x0, [0x7, 0x3, 0x2, 0x2, 0x823, 0x8000, 0x9, 0x7, 0x9, 0xeaf, 0x8, 0x8, 0x0, 0x100, 0x3ff, 0x9], [0xe, 0x7, 0x2, 0x0, 0x3, 0x2, 0x7, 0x7, 0x7, 0x3, 0x8, 0x3, 0x8, 0x8, 0x4bc3, 0xff]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004070}, 0x24000890) write$char_usb(r4, &(0x7f0000000040), 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x1b0, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe0}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfc6}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "42155fa1663b7713428ca9da6baeb2d4127086c0a3c75aa144e7d313ec95e5"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "cbecab9a1dc0cb5f9305e5354a713be04989b5edb1c2ac506ba632595926d4bdc109"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x339}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8800}, 0x11) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r11}, 0x48) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4048aecb, &(0x7f0000000080)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x48e300, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 12.091692489s ago: executing program 7 (id=2616): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xf, 0x0, 0x9, 0xff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, 0xfffffffffffffffe) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xc2, 0x60, 0x21}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$FIONREAD(r1, 0x40082104, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000080)}], 0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, 0x1, 0x8, 0x943566fb674d2be7, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1f7d4ea0}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 11.945742589s ago: executing program 3 (id=2618): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0xfd6, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() setrlimit(0x0, &(0x7f0000000180)={0x0, 0x100000000}) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000100000000000000000000007912000000000000952b23d1985ac513bfff55793ecc845751b839330b7e2991b5db3c98bc996a17a00e353dd85e82487e2b4acfcee48722d3be865fba07904ae758417a3c190b067d039097da2c917ebf33baf262f9692a113c5557e9c580fd84230f7217dbb8d101d5b6c67266cb61906eee426f225cb5529bd1218d1ab99fe0160401938954bea06ad33f4cd515afdc31493557ccda2a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000380)=@mmap={0x800, 0x1, 0x4, 0x100, 0x81, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', r6, 0x0, 0x0, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x0, 0xfffffffe, 0x6}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11.077986163s ago: executing program 0 (id=2619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x39) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x551040, 0x4) r4 = syz_open_dev$MSR(0x0, 0xffff, 0x0) read$msr(r4, &(0x7f0000000280)=""/130, 0x82) getrlimit(0x5, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0a00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001be83037f4c34db5c38ca97bba706000000000000000000"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) accept4(r6, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000100)=0x80, 0x80000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r5, &(0x7f0000000440), 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 10.841287115s ago: executing program 3 (id=2620): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x6, 0x18, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x101000) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x0) r2 = dup3(r1, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x179) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') socket(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff00"/49], 0x210) mount(&(0x7f0000000340)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x8004, 0x0) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) 9.024096599s ago: executing program 3 (id=2621): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb32, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000f9ffffff711005080000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3cf641ddf620000200000000000000000000000000736646055a00", @ANYRESHEX=r1, @ANYRES16=r0, @ANYRESOCT, @ANYBLOB], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) fcntl$getown(r5, 0x9) write$P9_RLERRORu(r6, &(0x7f0000000100)=ANY=[], 0xe) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 6.785542441s ago: executing program 0 (id=2623): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0xfd6, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() setrlimit(0x0, &(0x7f0000000180)={0x0, 0x100000000}) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000100000000000000000000007912000000000000952b23d1985ac513bfff55793ecc845751b839330b7e2991b5db3c98bc996a17a00e353dd85e82487e2b4acfcee48722d3be865fba07904ae758417a3c190b067d039097da2c917ebf33baf262f9692a113c5557e9c580fd84230f7217dbb8d101d5b6c67266cb61906eee426f225cb5529bd1218d1ab99fe0160401938954bea06ad33f4cd515afdc31493557ccda2a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000380)=@mmap={0x800, 0x1, 0x4, 0x100, 0x81, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', r6, 0x0, 0x0, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x0, 0xfffffffe, 0x6}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6.698136266s ago: executing program 3 (id=2624): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 6.139835661s ago: executing program 1 (id=2625): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004d4000/0x18000)=nil, 0x0, 0x0, 0x66, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) epoll_create1(0x0) epoll_create1(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x101) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.933132491s ago: executing program 0 (id=2626): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 4.824262514s ago: executing program 7 (id=2627): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, 0x0, 0x0, 0x8e90385f0ccb53ea}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) 4.594913987s ago: executing program 1 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 4.348384817s ago: executing program 0 (id=2629): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200), 0x3018409, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000040)={0x770a608d, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x480941, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8957000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0xfffffffd}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c0002800800014000000003080002400000000b08000300000000230900010073797a3100000000140000001100010000000000f50000000000000a"], 0xcc}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getpid() 4.087708187s ago: executing program 1 (id=2630): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) r1 = getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0xc, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r4 = userfaultfd(0x801) timerfd_create(0x0, 0x800) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) syz_pidfd_open(r1, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000200)) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, r8}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1) r9 = dup2(r6, r6) read$FUSE(r9, 0x0, 0x44) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000100)=0x3) 3.160943657s ago: executing program 7 (id=2631): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, 0x0, 0x0, 0x8e90385f0ccb53ea}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r7, 0x8b1a, &(0x7f0000000040)) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) 2.799964618s ago: executing program 3 (id=2632): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa2886dd6142a05f00000000000000000000000000bbfe8000000000000000000000000000aa3303000000000000c204", @ANYRESOCT], 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@link_local, @local, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x20, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @private=0xa010102, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x5, 0x2100, @void}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002a000000000008000300", @ANYRES32=r7], 0x5c}}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={'batadv0\x00', {0x2, 0x4e22, @private=0xa010100}}) 2.786953315s ago: executing program 1 (id=2633): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="832a0a65bd8c602b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x629ae1f6ab20f1ba) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) close_range(r1, 0xffffffffffffffff, 0x0) 2.26363408s ago: executing program 1 (id=2634): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x1135010, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9b9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}}, 0x0) 2.212683233s ago: executing program 3 (id=2635): fsopen(0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES16], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) write$char_usb(r0, 0x0, 0x0) 1.753517978s ago: executing program 7 (id=2636): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xf, 0x0, 0x9, 0xff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, 0xfffffffffffffffe) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xc2, 0x60, 0x21}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$FIONREAD(r1, 0x40082104, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000080)}], 0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, 0x1, 0x8, 0x943566fb674d2be7, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1f7d4ea0}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 1.421417751s ago: executing program 0 (id=2637): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) (async) openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.356133741s ago: executing program 7 (id=2638): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.176531036s ago: executing program 7 (id=2639): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140), 0x0) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffff4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000340)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x10a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x40) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000019680)={0x2020}, 0xfffffffffffffe32) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb5, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000000680)=""/102392, 0x18ff8) tkill(r2, 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 0s ago: executing program 1 (id=2640): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mmap(&(0x7f00008b7000/0x1000)=nil, 0x1000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0xbcc45000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200629000000a94b9f7c686ca673126ab012122c92203c9a8088439ca758d91f3b24ec302da7f75e"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): read RDB block 7 [ 645.700892][ T5183] loop5: unable to read partition table [ 645.706948][ T5183] loop5: partition table beyond EOD, truncated [ 646.852868][ T29] audit: type=1800 audit(1776523800.453:1723): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2129" name="nullb0" dev="tmpfs" ino=2825 res=0 errno=0 [ 647.222116][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 647.228409][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 647.243599][ T5885] usb 5-1: USB disconnect, device number 92 [ 647.430320][ T5183] Dev loop5: unable to read RDB block 7 [ 647.436136][ T5183] loop5: unable to read partition table [ 647.442643][ T5183] loop5: partition table beyond EOD, truncated [ 647.672431][T14505] lo speed is unknown, defaulting to 1000 [ 649.577733][ T5183] Dev loop5: unable to read RDB block 7 [ 649.591687][ T5183] loop5: unable to read partition table [ 649.606784][ T5183] loop5: partition table beyond EOD, truncated [ 649.964761][ T5183] Dev loop5: unable to read RDB block 7 [ 649.975050][ T5183] loop5: unable to read partition table [ 649.982451][ T5183] loop5: partition table beyond EOD, truncated [ 650.016614][T13021] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 650.019555][T13021] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 650.069127][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 650.078681][T14532] netlink: 'syz.3.2139': attribute type 30 has an invalid length. [ 650.087534][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 650.099485][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 650.110953][T14532] netlink: 'syz.3.2139': attribute type 30 has an invalid length. [ 650.118992][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 650.441508][T13021] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 650.588348][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2149'. [ 650.660961][ T3097] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 650.835735][ T3097] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 650.860441][ T3097] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 650.879057][ T3097] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 650.899717][ T5183] Dev loop5: unable to read RDB block 7 [ 650.917110][ T3097] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 650.928408][ T5183] loop5: unable to read partition table [ 650.935027][ T5183] loop5: partition table beyond EOD, truncated [ 650.941431][ T3097] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 650.963483][ T3097] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 650.980537][ T3097] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 650.995642][ T3097] usb 4-1: Product: syz [ 650.999970][ T3097] usb 4-1: Manufacturer: syz [ 651.011867][ T3097] cdc_wdm 4-1:1.0: skipping garbage [ 651.017463][ T3097] cdc_wdm 4-1:1.0: skipping garbage [ 651.024767][ T3097] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 651.030839][ T3097] cdc_wdm 4-1:1.0: Unknown control protocol [ 651.130724][ T5919] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 651.175732][T14572] fuse: fd is not a fuse device [ 651.253466][ T5815] usb 4-1: USB disconnect, device number 55 [ 651.291406][ T5183] Dev loop5: unable to read RDB block 7 [ 651.303550][ T5183] loop5: unable to read partition table [ 651.329270][ T5183] loop5: partition table beyond EOD, truncated [ 651.336194][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 651.345726][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 651.351469][ T5919] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 651.367614][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.387078][ T5919] usb 5-1: Product: syz [ 651.393068][ T5919] usb 5-1: Manufacturer: syz [ 651.408151][ T5919] usb 5-1: SerialNumber: syz [ 651.418467][ T5919] usb 5-1: config 0 descriptor?? [ 651.458604][ T5919] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 651.481328][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 651.521851][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 651.539721][ T5919] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 651.549325][ T5919] usb 5-1: media controller created [ 651.581241][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.627957][T14586] overlayfs: overlapping lowerdir path [ 651.666338][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 651.731632][ T29] audit: type=1400 audit(1776523805.009:1724): avc: denied { bind } for pid=14591 comm="syz.7.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 651.794667][ T5919] DVB: Unable to find symbol mt352_attach() [ 651.808335][ T29] audit: type=1400 audit(1776523805.018:1725): avc: denied { setopt } for pid=14591 comm="syz.7.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 651.830335][ T5919] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 651.843059][ T29] audit: type=1400 audit(1776523805.018:1726): avc: denied { write } for pid=14591 comm="syz.7.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 651.895239][ T29] audit: type=1326 audit(1776523805.121:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14593 comm="syz.1.2165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f0199c819 code=0x0 [ 651.954181][ T5919] rc_core: IR keymap rc-dvico-portable not found [ 651.960838][ T5919] Registered IR keymap rc-empty [ 651.967357][ T5919] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 651.984460][ T5919] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 652.003401][ T5919] dvb-usb: schedule remote query interval to 100 msecs. [ 652.011615][ T5919] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 652.037050][T14596] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 652.054864][ T5919] usb 5-1: USB disconnect, device number 93 [ 652.278003][ T5919] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 652.355045][ T5183] Dev loop5: unable to read RDB block 7 [ 652.370167][ T5183] loop5: unable to read partition table [ 652.377354][ T5183] loop5: partition table beyond EOD, truncated [ 652.553172][T14610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2171'. [ 652.567414][ T29] audit: type=1400 audit(1776523805.804:1728): avc: denied { bind } for pid=14609 comm="syz.4.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 652.706622][ T29] audit: type=1400 audit(1776523805.926:1729): avc: denied { read } for pid=14615 comm="syz.4.2173" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 652.772473][ T29] audit: type=1400 audit(1776523805.926:1730): avc: denied { open } for pid=14615 comm="syz.4.2173" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 652.811623][ T29] audit: type=1400 audit(1776523805.954:1731): avc: denied { ioctl } for pid=14615 comm="syz.4.2173" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 652.918241][T14624] bridge_slave_1: entered allmulticast mode [ 653.611044][ T5815] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 653.787848][ T5815] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 653.819558][ T5815] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.874664][ T5815] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 653.920800][ T5815] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.970876][ T5815] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 653.996486][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 654.029877][ T5815] usb 8-1: Product: syz [ 654.047598][ T5815] usb 8-1: Manufacturer: syz [ 654.080328][ T5815] cdc_wdm 8-1:1.0: skipping garbage [ 654.120163][ T5815] cdc_wdm 8-1:1.0: skipping garbage [ 654.161773][ T5815] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 654.191675][ T5815] cdc_wdm 8-1:1.0: Unknown control protocol [ 654.527581][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 654.542138][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.551785][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.562939][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 654.570400][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 654.636862][T14665] lo speed is unknown, defaulting to 1000 [ 654.762519][T14665] chnl_net:caif_netlink_parms(): no params data found [ 654.844136][T14665] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.851566][T14665] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.859335][T14665] bridge_slave_0: entered allmulticast mode [ 654.867308][T14665] bridge_slave_0: entered promiscuous mode [ 654.875389][T14665] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.882862][T14665] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.890089][T14665] bridge_slave_1: entered allmulticast mode [ 654.898020][T14665] bridge_slave_1: entered promiscuous mode [ 654.927490][T14665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.940783][T14665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.976153][T14665] team0: Port device team_slave_0 added [ 654.984177][T14665] team0: Port device team_slave_1 added [ 655.019456][T14665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.027125][T14665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.054880][T14665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.067340][T14665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.075851][T14665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.111698][T14665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.170051][T14665] hsr_slave_0: entered promiscuous mode [ 655.190287][T14665] hsr_slave_1: entered promiscuous mode [ 655.201990][T14665] debugfs: 'hsr0' already exists in 'hsr' [ 655.207845][T14665] Cannot create hsr debugfs directory [ 655.731559][T14665] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 655.740026][T14686] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 655.769908][T14665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.777618][T14665] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 655.794625][T14665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.807065][T14665] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 655.817790][T14665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 655.826051][T14665] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 655.836897][T14665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.940769][T14665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.971919][T14665] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.988126][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.995315][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.010635][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.017843][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.033068][T14680] NFSD: Failed to start, no listeners configured. [ 656.354199][T14665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.550644][ T5941] usb 8-1: USB disconnect, device number 40 [ 656.595944][T14709] bridge_slave_1: entered allmulticast mode [ 656.715508][T14716] 9pnet_virtio: no channels available for device syz [ 656.815828][ T5821] Bluetooth: hci0: command tx timeout [ 656.886839][T14665] veth0_vlan: entered promiscuous mode [ 656.906137][T14665] veth1_vlan: entered promiscuous mode [ 656.949191][T14665] veth0_macvtap: entered promiscuous mode [ 656.965723][T14665] veth1_macvtap: entered promiscuous mode [ 656.982159][T14665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.003194][T14665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.018521][ T5815] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 657.038356][ T47] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.068881][ T47] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.093211][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.136056][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.189903][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 657.230228][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 657.267352][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 657.281160][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 657.304184][ T5815] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.337888][ T5815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 657.356185][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.363407][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.383332][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.468457][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.476438][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.547721][ T29] audit: type=1400 audit(1776523810.446:1732): avc: denied { mounton } for pid=14665 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 657.621165][T14743] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 657.636584][ T5815] usb 5-1: usb_control_msg returned -32 [ 657.646820][ T5815] usbtmc 5-1:16.0: can't read capabilities [ 657.680931][T14743] xt_hashlimit: size too large, truncated to 1048576 [ 657.767584][ T5821] Bluetooth: hci3: Malformed Event: 0x2f [ 658.029209][T14762] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 658.224153][T14774] syzkaller0: entered promiscuous mode [ 658.230720][T14774] syzkaller0: entered allmulticast mode [ 658.427300][T14786] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 658.761799][ T29] audit: type=1400 audit(1776523811.578:1733): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=49754 daddr=10.128.1.10 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 659.059780][ T5821] Bluetooth: hci0: command tx timeout [ 659.325364][T14790] fuse: fd is not a fuse device [ 659.357484][T14792] overlayfs: failed to clone upperpath [ 659.631770][T14810] fuse: fd is not a fuse device [ 659.997625][ T5919] usb 5-1: USB disconnect, device number 94 [ 660.209760][T14832] usb usb3: usbfs: process 14832 (syz.5.2256) did not claim interface 0 before use [ 660.236236][T14826] evm: overlay not supported [ 660.640261][T14842] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 660.939630][T14852] lo speed is unknown, defaulting to 1000 [ 660.978587][T14861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.252694][ T5821] Bluetooth: hci0: command tx timeout [ 662.037199][T14879] syzkaller0: entered promiscuous mode [ 662.053519][T14879] syzkaller0: entered allmulticast mode [ 662.054310][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 662.296235][T14883] batman_adv: batadv0: Adding interface: gretap1 [ 662.332806][T14883] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.441728][T14883] batman_adv: batadv0: Interface activated: gretap1 [ 662.473943][T14895] fuse: Bad value for 'fd' [ 662.661393][ T5821] Bluetooth: hci4: Malformed Event: 0x2f [ 662.830850][T14903] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:14aa [ 663.483439][ T5821] Bluetooth: hci0: command tx timeout [ 663.589585][T14916] fuse: Bad value for 'fd' [ 664.034447][T13021] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 664.059379][T13021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 664.068926][T13021] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 664.080715][T13021] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 664.093710][T13021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 664.169984][T14923] lo speed is unknown, defaulting to 1000 [ 664.504656][T14923] chnl_net:caif_netlink_parms(): no params data found [ 664.530698][ T5815] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 664.589435][ T29] audit: type=1400 audit(1776523817.052:1734): avc: denied { read } for pid=14934 comm="syz.1.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 664.667482][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 664.686475][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 664.695807][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 664.707565][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 664.720813][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 664.754125][ T5815] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 664.797761][ T5815] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x3 is Bulk; changing to Interrupt [ 664.807332][T14936] lo speed is unknown, defaulting to 1000 [ 664.822995][T14923] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.831647][ T5815] usb 9-1: config 1 interface 0 has no altsetting 0 [ 664.832123][T14923] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.847281][T14923] bridge_slave_0: entered allmulticast mode [ 664.855423][ T5815] usb 9-1: string descriptor 0 read error: -22 [ 664.861945][ T5815] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.872167][T14923] bridge_slave_0: entered promiscuous mode [ 664.879878][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.890464][T14923] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.899260][T14926] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 664.906850][T14923] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.914104][T14926] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 664.922415][T14923] bridge_slave_1: entered allmulticast mode [ 664.931198][ T5815] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 664.943967][T14923] bridge_slave_1: entered promiscuous mode [ 665.012160][T14923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.034809][T14923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.082634][T14923] team0: Port device team_slave_0 added [ 665.104516][T14923] team0: Port device team_slave_1 added [ 665.163998][ T5815] usb 9-1: USB disconnect, device number 2 [ 665.191549][T14923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.203734][T14923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.240639][T14923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.264813][T14923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.289515][T14923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.318202][T14923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.350298][T14936] chnl_net:caif_netlink_parms(): no params data found [ 665.398724][T14923] hsr_slave_0: entered promiscuous mode [ 665.405688][T14923] hsr_slave_1: entered promiscuous mode [ 665.412230][T14923] debugfs: 'hsr0' already exists in 'hsr' [ 665.418146][T14923] Cannot create hsr debugfs directory [ 665.539573][T14936] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.547535][T14936] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.555010][T14936] bridge_slave_0: entered allmulticast mode [ 665.564605][T14936] bridge_slave_0: entered promiscuous mode [ 665.608978][T14936] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.632434][T14936] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.665664][T14936] bridge_slave_1: entered allmulticast mode [ 665.689568][T14936] bridge_slave_1: entered promiscuous mode [ 665.703692][T14951] fuse: Bad value for 'fd' [ 665.877765][ T5821] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 665.933142][T14936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.020879][T14936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.131237][T14967] Bluetooth: MGMT ver 1.23 [ 666.224825][T14936] team0: Port device team_slave_0 added [ 666.249668][T14936] team0: Port device team_slave_1 added [ 666.296390][ T5821] Bluetooth: hci1: command tx timeout [ 666.390312][T14936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.410132][T14936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.440391][T14936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.467962][T14936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.490176][T14936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.536681][T14936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.734969][T14936] hsr_slave_0: entered promiscuous mode [ 666.741393][T14936] hsr_slave_1: entered promiscuous mode [ 666.747952][T14936] debugfs: 'hsr0' already exists in 'hsr' [ 666.754045][T14936] Cannot create hsr debugfs directory [ 666.840634][T14923] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 666.850970][T14923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 666.875483][T14923] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 666.887426][T14923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 666.894683][ T5821] Bluetooth: hci2: command tx timeout [ 666.901678][T14923] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 666.902889][ T5892] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 666.922300][T14923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 666.953817][T14923] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 666.964440][T14923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.077673][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 667.093559][ T5892] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 667.113606][ T5892] usb 5-1: config 0 has no interface number 0 [ 667.127702][ T5892] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 667.149461][ T5892] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 667.182951][ T5892] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 667.216161][ T5892] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 667.234719][ T5892] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 667.260520][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.281638][ T5892] usb 5-1: config 0 descriptor?? [ 667.313922][ T5892] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 667.357445][T14923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.557122][ T5892] usb 5-1: USB disconnect, device number 95 [ 667.563124][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 667.689796][ T5892] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 667.737963][T14923] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.876847][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.884040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.915516][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.922701][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.227984][ T5878] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 668.427334][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 668.453278][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 668.474278][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 668.501580][ T5878] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 668.516667][ T5821] Bluetooth: hci1: command tx timeout [ 668.526882][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.559381][ T5878] usb 9-1: Product: syz [ 668.563711][ T5878] usb 9-1: Manufacturer: syz [ 668.568759][ T5878] usb 9-1: SerialNumber: syz [ 668.601711][ T5878] usb 9-1: config 0 descriptor?? [ 668.950723][ T5878] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 669.017708][T14923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.038954][T14936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 669.058686][T14936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.075176][T14936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.097721][T14936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.114760][T14936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 669.122254][ T5821] Bluetooth: hci2: command tx timeout [ 669.152832][T14936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.178063][ T76] usb 9-1: USB disconnect, device number 3 [ 669.196291][T14936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 669.257407][T14936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 669.324844][T15104] 9p: Bad value for 'rfdno' [ 669.871864][T14936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.946737][T14936] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.995166][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.002364][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.024027][T14923] veth0_vlan: entered promiscuous mode [ 670.050777][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.057903][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.121967][T14923] veth1_vlan: entered promiscuous mode [ 670.354947][ T76] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 670.372773][T14936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.458468][T14923] veth0_macvtap: entered promiscuous mode [ 670.516654][T14923] veth1_macvtap: entered promiscuous mode [ 670.576722][ T76] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 670.591359][T14923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.612459][ T76] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.652544][T14923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.669650][ T76] usb 5-1: config 0 has no interfaces? [ 670.711896][ T76] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 670.725065][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.750006][ T5821] Bluetooth: hci1: command tx timeout [ 670.764844][ T76] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.776495][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.793308][ T76] usb 5-1: config 0 descriptor?? [ 670.829984][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.877548][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.197293][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.214272][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.246818][T14936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.284935][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.303570][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.338757][ T5821] Bluetooth: hci2: command tx timeout [ 671.362797][T14936] veth0_vlan: entered promiscuous mode [ 671.396596][T14936] veth1_vlan: entered promiscuous mode [ 671.471241][T14936] veth0_macvtap: entered promiscuous mode [ 671.482178][T14936] veth1_macvtap: entered promiscuous mode [ 671.524532][T14936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.550184][T14936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.570461][T12825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.589632][T12825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.631057][T12825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.652671][T12825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.890011][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.907656][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.619551][T15184] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 672.692014][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.714268][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.963101][ T5821] Bluetooth: hci1: command tx timeout [ 673.462868][ T5892] usb 5-1: USB disconnect, device number 96 [ 673.571523][ T5821] Bluetooth: hci2: command tx timeout [ 673.715584][T15209] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 674.413086][ T5816] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 674.850126][ T13] wlan1: Trigger new scan to find an IBSS to join [ 675.013732][ T5816] usb 10-1: Using ep0 maxpacket: 32 [ 675.026721][ T5816] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 675.059082][ T5816] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 675.134701][ T5816] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 675.144220][ T5816] usb 10-1: Product: syz [ 675.148911][ T5816] usb 10-1: Manufacturer: syz [ 675.164911][ T5816] usb 10-1: SerialNumber: syz [ 675.201368][ T5816] usb 10-1: config 0 descriptor?? [ 675.229659][T13021] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 675.231695][T15214] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 675.248946][T13021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 675.265520][T13021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 675.283244][T13021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 675.289825][ T5816] hub 10-1:0.0: bad descriptor, ignoring hub [ 675.297151][T13021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 675.311144][ T29] audit: type=1400 audit(1776523827.065:1735): avc: denied { append } for pid=15225 comm="syz.8.2363" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 675.315762][ T5816] hub 10-1:0.0: probe with driver hub failed with error -5 [ 675.467341][T15222] lo speed is unknown, defaulting to 1000 [ 675.506821][T15227] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 675.509163][T15228] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input19 [ 675.610030][T15227] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 675.660671][T15227] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 675.680555][T15227] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 675.691073][ T5816] usb 10-1: USB disconnect, device number 2 [ 675.721095][ T5821] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 675.738535][T15227] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 675.757764][ T5821] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 675.863436][T15227] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 675.947604][T15227] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 676.061622][T15227] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 676.091609][T15227] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 676.161612][T15227] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 676.220797][T15227] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 676.232620][T15227] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 676.485627][T15265] netlink: 'syz.2.2369': attribute type 10 has an invalid length. [ 676.545038][T15227] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 676.555520][T15265] syz_tun: entered promiscuous mode [ 676.658319][T15265] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 677.039826][T15277] misc userio: Invalid payload size [ 677.048601][T15277] misc userio: Invalid payload size [ 677.749521][T13021] Bluetooth: hci0: command 0x0c1a tx timeout [ 677.931168][T13021] Bluetooth: hci1: command 0x0c1a tx timeout [ 677.976583][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.080477][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.266653][T13021] Bluetooth: hci2: command 0x0c1a tx timeout [ 678.438040][T13021] Bluetooth: hci5: command 0x041b tx timeout [ 678.716959][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.756429][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.850380][T15222] chnl_net:caif_netlink_parms(): no params data found [ 679.128817][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.166776][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.605960][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.621931][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.637366][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.645517][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.653328][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 679.748541][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.759328][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.796140][T13021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 679.810335][T13021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 679.827703][T13021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 679.839706][T13021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 679.851795][T13021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 680.001395][T15222] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.008787][T15222] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.016785][T15222] bridge_slave_0: entered allmulticast mode [ 680.026227][T15222] bridge_slave_0: entered promiscuous mode [ 680.034235][T15222] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.043123][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.054287][T15222] bridge_slave_1: entered allmulticast mode [ 680.064943][T15222] bridge_slave_1: entered promiscuous mode [ 680.172549][T15222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.216905][T15222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.235269][ T47] wlan1: Trigger new scan to find an IBSS to join [ 680.258336][T15330] lo speed is unknown, defaulting to 1000 [ 680.323328][T15332] lo speed is unknown, defaulting to 1000 [ 680.333215][T15352] syzkaller0: entered promiscuous mode [ 680.341461][T15352] syzkaller0: entered allmulticast mode [ 680.366014][T15222] team0: Port device team_slave_0 added [ 680.384289][T15222] team0: Port device team_slave_1 added [ 680.485273][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 680.659822][ T5821] Bluetooth: hci5: command 0x041b tx timeout [ 680.716887][T15222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.747079][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.774232][T13021] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 680.792630][T13021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 680.802416][T13021] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 680.814928][T13021] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 680.822885][T13021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 680.844237][T15222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.948893][T14936] bond0: (slave syz_tun): Releasing backup interface [ 680.962157][T15222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.969563][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.997608][T15222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.225199][ T79] wlan1: Creating new IBSS network, BSSID 82:7c:87:38:d6:95 [ 681.252856][ T13] vlan2: left allmulticast mode [ 681.269178][ T13] geneve0: left allmulticast mode [ 681.286717][ T13] bridge0: port 1(vlan2) entered disabled state [ 681.307536][ T13] bridge_slave_1: left allmulticast mode [ 681.320587][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 681.506529][ T13] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 681.575332][T13021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.589991][T13021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.599603][T13021] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.615035][T13021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.643850][T13021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 681.713141][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 681.849882][ T13] bond0 (unregistering): Released all slaves [ 681.856466][ T5821] Bluetooth: hci0: command tx timeout [ 681.867565][ T13] bond1 (unregistering): Released all slaves [ 681.879804][ T13] bond2 (unregistering): Released all slaves [ 681.894036][ T13] bond3 (unregistering): Released all slaves [ 681.918446][T15222] hsr_slave_0: entered promiscuous mode [ 681.924579][T15222] hsr_slave_1: entered promiscuous mode [ 681.930804][T15222] debugfs: 'hsr0' already exists in 'hsr' [ 681.936534][T15222] Cannot create hsr debugfs directory [ 681.956525][T15370] lo speed is unknown, defaulting to 1000 [ 682.105136][T15397] lo speed is unknown, defaulting to 1000 [ 682.111199][ T5821] Bluetooth: hci3: command tx timeout [ 682.232009][ T13] IPVS: stopping backup sync thread 10490 ... [ 682.383067][T15332] chnl_net:caif_netlink_parms(): no params data found [ 682.400813][T15330] chnl_net:caif_netlink_parms(): no params data found [ 682.752832][T15332] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.762595][T15332] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.769862][T15332] bridge_slave_0: entered allmulticast mode [ 682.778514][T15332] bridge_slave_0: entered promiscuous mode [ 682.788947][T15332] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.796616][T15332] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.804138][T15332] bridge_slave_1: entered allmulticast mode [ 682.811462][T15332] bridge_slave_1: entered promiscuous mode [ 682.820446][ T13] hsr_slave_0: left promiscuous mode [ 682.831952][ T13] hsr_slave_1: left promiscuous mode [ 682.878489][ T5821] Bluetooth: hci5: command 0x041b tx timeout [ 683.049703][ T5821] Bluetooth: hci1: command tx timeout [ 683.110036][ T5478] 8021q: adding VLAN 0 to HW filter on device eth1 [ 683.116931][T15330] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.126936][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.134125][T15330] bridge_slave_0: entered allmulticast mode [ 683.141978][T15330] bridge_slave_0: entered promiscuous mode [ 683.178114][T15330] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.186469][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.194085][T15330] bridge_slave_1: entered allmulticast mode [ 683.203345][T15330] bridge_slave_1: entered promiscuous mode [ 683.255593][T15332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.266671][T15332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.377728][T15332] team0: Port device team_slave_0 added [ 683.385856][T15330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.438746][T15332] team0: Port device team_slave_1 added [ 683.465655][T15330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.481538][T15370] chnl_net:caif_netlink_parms(): no params data found [ 683.494234][T15397] chnl_net:caif_netlink_parms(): no params data found [ 683.639737][T15332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.646787][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.675871][T15332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.688539][T15332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.697494][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.732157][T15332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.808351][ T13] IPVS: stop unused estimator thread 0... [ 683.877636][T15330] team0: Port device team_slave_0 added [ 683.916295][ T5821] Bluetooth: hci2: command tx timeout [ 683.928085][T15332] hsr_slave_0: entered promiscuous mode [ 683.934505][T15332] hsr_slave_1: entered promiscuous mode [ 683.941176][T15332] debugfs: 'hsr0' already exists in 'hsr' [ 683.946921][T15332] Cannot create hsr debugfs directory [ 683.957675][T15330] team0: Port device team_slave_1 added [ 683.977571][T15330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.986717][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.018964][T15330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.054206][T15330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.061268][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.089776][T15330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.096743][ T5821] Bluetooth: hci0: command tx timeout [ 684.227754][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.250202][T15370] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.257801][T15370] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.264955][T15370] bridge_slave_0: entered allmulticast mode [ 684.272728][T15370] bridge_slave_0: entered promiscuous mode [ 684.303917][T15330] hsr_slave_0: entered promiscuous mode [ 684.310161][T15330] hsr_slave_1: entered promiscuous mode [ 684.316789][T15330] debugfs: 'hsr0' already exists in 'hsr' [ 684.322937][T15330] Cannot create hsr debugfs directory [ 684.328517][T15397] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.335661][ T5821] Bluetooth: hci3: command tx timeout [ 684.341485][T15397] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.348820][T15397] bridge_slave_0: entered allmulticast mode [ 684.355691][T15397] bridge_slave_0: entered promiscuous mode [ 684.362476][T15370] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.369717][T15370] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.377035][T15370] bridge_slave_1: entered allmulticast mode [ 684.383740][T15370] bridge_slave_1: entered promiscuous mode [ 684.422485][T15397] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.429682][T15397] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.436839][T15397] bridge_slave_1: entered allmulticast mode [ 684.443978][T15397] bridge_slave_1: entered promiscuous mode [ 684.485247][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.575732][T15397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.587223][T15370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.600795][T15222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 684.609186][T15222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.637423][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.656378][T15397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.667577][T15370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.688903][T15222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 684.701306][T15222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.709827][T15222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 684.718642][T15222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.764002][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.835534][T15222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 684.845395][T15222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.871865][T15370] team0: Port device team_slave_0 added [ 684.889167][T15370] team0: Port device team_slave_1 added [ 684.906607][T15397] team0: Port device team_slave_0 added [ 684.914689][T15397] team0: Port device team_slave_1 added [ 685.019342][T15397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.026710][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.053741][T15397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.066567][T15397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.073620][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.099954][T15397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.111635][T15370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.118652][ T5821] Bluetooth: hci5: command 0x041b tx timeout [ 685.125187][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.151408][T15370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.179386][T15370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.186348][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.213165][T15370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.263867][T15397] hsr_slave_0: entered promiscuous mode [ 685.269966][T15397] hsr_slave_1: entered promiscuous mode [ 685.278944][T15397] debugfs: 'hsr0' already exists in 'hsr' [ 685.282993][ T5821] Bluetooth: hci1: command tx timeout [ 685.285738][T15397] Cannot create hsr debugfs directory [ 685.318694][T15370] hsr_slave_0: entered promiscuous mode [ 685.324863][T15370] hsr_slave_1: entered promiscuous mode [ 685.331135][T15370] debugfs: 'hsr0' already exists in 'hsr' [ 685.337574][T15370] Cannot create hsr debugfs directory [ 685.610210][T15222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.637244][T15222] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.652431][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.659609][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.686300][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.693479][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.912719][T15222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.960986][T15222] veth0_vlan: entered promiscuous mode [ 685.975854][T15222] veth1_vlan: entered promiscuous mode [ 686.012777][T15222] veth0_macvtap: entered promiscuous mode [ 686.027860][T15222] veth1_macvtap: entered promiscuous mode [ 686.055089][T15222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.071402][T15222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.090836][ T198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.102269][ T198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.116806][ T198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.130672][ T5821] Bluetooth: hci2: command tx timeout [ 686.154127][ T198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.232559][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.248724][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.295685][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.303922][ T5821] Bluetooth: hci0: command tx timeout [ 686.321789][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.511905][T15504] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 686.557131][ T5821] Bluetooth: hci3: command tx timeout [ 687.097216][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.213679][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.306180][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.324228][ T5821] Bluetooth: hci5: command 0x041b tx timeout [ 687.408984][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.506850][ T5821] Bluetooth: hci1: command tx timeout [ 687.722991][T15532] misc userio: Invalid payload size [ 687.728537][T15532] misc userio: Invalid payload size [ 687.823091][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.947454][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.066772][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.160489][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.360760][ T5821] Bluetooth: hci2: command tx timeout [ 688.526466][ T5821] Bluetooth: hci0: command tx timeout [ 688.544132][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.777873][ T5821] Bluetooth: hci3: command tx timeout [ 688.787519][ T35] wlan1: Trigger new scan to find an IBSS to join [ 688.945099][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.382408][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.557751][ T5821] Bluetooth: hci5: command 0x041b tx timeout [ 689.569307][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.734088][ T5821] Bluetooth: hci1: command tx timeout [ 689.783803][ T13] bridge_slave_1: left allmulticast mode [ 689.789626][ T13] bridge_slave_1: left promiscuous mode [ 689.815841][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.843103][ T13] bridge_slave_0: left allmulticast mode [ 689.859750][ T13] bridge_slave_0: left promiscuous mode [ 689.877196][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.943694][ T13] bridge_slave_1: left allmulticast mode [ 689.964474][ T13] bridge_slave_1: left promiscuous mode [ 689.982265][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.034346][ T13] bridge_slave_0: left allmulticast mode [ 690.055371][ T13] bridge_slave_0: left promiscuous mode [ 690.081890][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.144383][ T13] vlan2: left allmulticast mode [ 690.164695][ T13] geneve0: left allmulticast mode [ 690.188226][ T13] bridge0: port 3(vlan2) entered disabled state [ 690.226231][ T13] bridge_slave_1: left allmulticast mode [ 690.251701][ T13] bridge_slave_1: left allmulticast mode [ 690.266341][ T13] bridge_slave_1: left promiscuous mode [ 690.278376][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.304195][ T13] bridge_slave_0: left allmulticast mode [ 690.319632][ T13] bridge_slave_0: left promiscuous mode [ 690.331771][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.583236][ T5821] Bluetooth: hci2: command tx timeout [ 690.638558][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.651885][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.671326][ T13] bond0 (unregistering): Released all slaves [ 690.907023][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.918327][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.928096][ T13] bond0 (unregistering): Released all slaves [ 691.373438][ T13] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 691.382187][ T13] gretap1 (unregistering): left allmulticast mode [ 691.410200][ T13] bond3 (unregistering): (slave gretap2): Releasing active interface [ 691.431650][ T13] bond2 (unregistering): (slave geneve2): Releasing active interface [ 691.502058][ T13] bond0 (unregistering): Released all slaves [ 691.516829][ T13] bond1 (unregistering): Released all slaves [ 691.528415][ T13] bond2 (unregistering): Released all slaves [ 691.539679][ T13] bond3 (unregistering): Released all slaves [ 691.690964][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.707064][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.728297][ T13] bond0 (unregistering): Released all slaves [ 691.919121][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 691.990534][ T5478] 8021q: adding VLAN 0 to HW filter on device eth1 [ 692.323230][ T9] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 692.355938][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.391190][ T9] usb 2-1: config 0 has no interfaces? [ 692.396738][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 692.409187][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.429160][ T9] usb 2-1: config 0 descriptor?? [ 692.845936][ T5478] 8021q: adding VLAN 0 to HW filter on device eth2 [ 693.035751][T15330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 693.046954][T15330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.055094][T15330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 693.071686][T15330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.106216][T15330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 693.120104][T15330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 693.130445][T15330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 693.144886][T15330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 693.217032][T15397] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.375525][T15397] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.569994][T15330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.621957][T15397] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.764138][T15397] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.831530][T15330] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.878636][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.885804][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.936943][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.944106][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.079262][ T12] wlan1: Trigger new scan to find an IBSS to join [ 694.129068][T15330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 694.150091][T15330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.220773][ T13] hsr_slave_0: left promiscuous mode [ 694.235145][ T13] hsr_slave_1: left promiscuous mode [ 694.242607][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.269625][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.286473][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.295770][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.313910][ T13] hsr_slave_0: left promiscuous mode [ 694.320063][ T13] hsr_slave_1: left promiscuous mode [ 694.326463][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.335761][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.344325][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.357160][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.373154][ T13] hsr_slave_0: left promiscuous mode [ 694.388762][ T13] hsr_slave_1: left promiscuous mode [ 694.406103][ T13] hsr_slave_0: left promiscuous mode [ 694.416178][ T13] hsr_slave_1: left promiscuous mode [ 694.422591][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.431360][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.439485][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.447294][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.518154][ T13] veth1_macvtap: left promiscuous mode [ 694.523816][ T13] veth0_macvtap: left promiscuous mode [ 694.532592][ T13] veth1_vlan: left promiscuous mode [ 694.538324][ T13] veth0_vlan: left promiscuous mode [ 694.544945][ T13] veth1_macvtap: left promiscuous mode [ 694.553245][ T13] veth0_macvtap: left promiscuous mode [ 694.559398][ T13] veth1_vlan: left promiscuous mode [ 694.566763][ T13] veth0_vlan: left promiscuous mode [ 694.573896][ T13] veth1_macvtap: left promiscuous mode [ 694.579597][ T13] veth0_macvtap: left promiscuous mode [ 694.585528][ T13] veth1_vlan: left promiscuous mode [ 694.593300][ T13] veth0_vlan: left promiscuous mode [ 694.603296][ T13] veth1_macvtap: left promiscuous mode [ 694.608908][ T13] veth0_macvtap: left promiscuous mode [ 694.615187][ T13] veth1_vlan: left promiscuous mode [ 694.620608][ T13] veth0_vlan: left promiscuous mode [ 694.905150][ T9] usb 2-1: string descriptor 0 read error: -71 [ 694.926910][ T9] usb 2-1: USB disconnect, device number 16 [ 694.952227][T15674] F2FS-fs: Conflicting test_dummy_encryption options [ 694.967149][ T29] audit: type=1400 audit(1776523845.482:1736): avc: denied { write } for pid=15673 comm="syz.1.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 695.064862][ T29] audit: type=1400 audit(1776523845.566:1737): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.10 dest=43028 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 695.093464][ T12] wlan1: Creating new IBSS network, BSSID 46:64:b8:f7:7e:1b [ 695.127532][ T13] team0 (unregistering): Port device team_slave_1 removed [ 695.143196][ T13] team0 (unregistering): Port device team_slave_0 removed [ 695.301150][ T13] team0 (unregistering): Port device team_slave_1 removed [ 695.331878][ T13] team0 (unregistering): Port device team_slave_0 removed [ 695.434638][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 695.602232][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.618899][ T35] smbdirect: ib_dev[syz2] removed [ 695.635593][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.646789][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.660129][ T9] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 695.676937][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.695717][ T9] usb 2-1: config 0 descriptor?? [ 695.761881][ T13] team0 (unregistering): Port device team_slave_1 removed [ 695.794955][ T13] team0 (unregistering): Port device team_slave_0 removed [ 695.905145][T15174] lo speed is unknown, defaulting to 1000 [ 695.912649][T15174] infiniband syz2: ib_query_port failed (-19) [ 696.057762][T15330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.330149][T15330] veth0_vlan: entered promiscuous mode [ 696.362673][T15397] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 696.378731][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 696.390230][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 696.392538][T15397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.404839][ T9] usb 2-1: USB disconnect, device number 17 [ 696.414023][T15397] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 696.428134][T15397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.439792][T15397] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 696.449142][T15397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.463837][T15397] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 696.518271][T15397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.534253][T15330] veth1_vlan: entered promiscuous mode [ 696.606993][T15370] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.688140][ T5478] 8021q: adding VLAN 0 to HW filter on device eth3 [ 696.751245][T15370] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.809276][T15330] veth0_macvtap: entered promiscuous mode [ 696.864263][T15370] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.890780][T15330] veth1_macvtap: entered promiscuous mode [ 696.954216][T15370] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.042268][T15330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.073271][T15397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.084450][T15330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.226858][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.267294][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.394395][T15397] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.406348][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.443030][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.456640][ T29] audit: type=1400 audit(1776523847.793:1738): avc: denied { create } for pid=15714 comm="syz.1.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 697.609450][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.616621][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.218533][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.225703][T12825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.400061][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.408376][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.444005][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.458357][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.571909][ T5478] 8021q: adding VLAN 0 to HW filter on device eth4 [ 698.602446][T15332] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 698.620157][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.629158][T15332] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 698.640451][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.693614][T15332] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 698.713185][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.736410][T15332] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 698.753759][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.759851][T15735] Bluetooth: MGMT ver 1.23 [ 698.765354][T15735] Bluetooth: hci0: unsupported parameter 255 [ 698.772453][T15735] Bluetooth: hci0: unsupported parameter 255 [ 698.839982][T15730] syzkaller0: entered promiscuous mode [ 698.846762][T15730] syzkaller0: entered allmulticast mode [ 698.874833][ T13] IPVS: stop unused estimator thread 0... [ 699.347212][T15747] misc userio: Invalid payload size [ 699.355758][T15747] misc userio: Invalid payload size [ 700.408954][T15751] misc userio: Invalid payload size [ 700.417671][T15751] misc userio: Invalid payload size [ 701.090968][T15753] net_ratelimit: 8 callbacks suppressed [ 701.090986][T15753] openvswitch: netlink: IPv4 tunnel dst address is zero [ 702.824581][T15370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 702.849542][T15370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 702.861857][T15370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 702.893373][T15370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.916357][T15370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 702.927777][T15370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 702.955956][T15370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 702.970114][T15370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 703.142947][T15768] misc userio: Invalid payload size [ 703.149271][T15768] misc userio: Invalid payload size [ 703.535277][T15332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.616928][T15332] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.644569][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.651754][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.674228][T15397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.698326][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.705514][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.968620][T15793] random: crng reseeded on system resumption [ 703.985012][T15793] Restarting kernel threads ... [ 703.990688][T15793] Done restarting kernel threads. [ 704.058369][ T29] audit: type=1400 audit(1776523853.895:1739): avc: denied { write } for pid=15769 comm="syz.0.2415" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 704.089220][T15332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.119724][ T29] audit: type=1400 audit(1776523853.895:1740): avc: denied { open } for pid=15769 comm="syz.0.2415" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 704.146070][ T29] audit: type=1400 audit(1776523853.913:1741): avc: denied { ioctl } for pid=15769 comm="syz.0.2415" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 704.206599][T15370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.662783][ T5478] 8021q: adding VLAN 0 to HW filter on device eth10 [ 704.737715][T15370] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.771084][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.778213][T12825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.801817][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.809037][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.941412][T15370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.977097][T15370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.056489][T15397] veth0_vlan: entered promiscuous mode [ 705.120196][T15397] veth1_vlan: entered promiscuous mode [ 705.416234][T15814] 9pnet_fd: Insufficient options for proto=fd [ 705.496418][T15332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.561081][T15397] veth0_macvtap: entered promiscuous mode [ 705.584987][T15397] veth1_macvtap: entered promiscuous mode [ 705.652435][T15397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.695430][T15397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.967510][ T1152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.088370][ T1152] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.110478][ T1152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.229883][ T1152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.376543][T15836] ubi: mtd0 is already attached to ubi16 [ 706.526639][T15370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.747188][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.804590][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.228904][T15849] ubi: mtd0 is already attached to ubi16 [ 707.403805][T15850] 9pnet_fd: Insufficient options for proto=fd [ 707.462933][T15370] veth0_vlan: entered promiscuous mode [ 707.490999][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.516323][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.564666][T15370] veth1_vlan: entered promiscuous mode [ 707.964572][T15332] veth0_vlan: entered promiscuous mode [ 708.031101][T15370] veth0_macvtap: entered promiscuous mode [ 708.068944][ T29] audit: type=1400 audit(1776523857.741:1742): avc: denied { write } for pid=15860 comm="syz.0.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 708.093395][T15370] veth1_macvtap: entered promiscuous mode [ 708.133679][ T29] audit: type=1400 audit(1776523857.741:1743): avc: denied { nlmsg_write } for pid=15860 comm="syz.0.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 708.158947][T15332] veth1_vlan: entered promiscuous mode [ 708.160847][ T29] audit: type=1400 audit(1776523857.825:1744): avc: denied { read } for pid=15860 comm="syz.0.2424" name="file0" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 708.207057][ T5478] 8021q: adding VLAN 0 to HW filter on device eth11 [ 708.277215][T15370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.328065][T15370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.531293][T15332] veth0_macvtap: entered promiscuous mode [ 708.548473][T15332] veth1_macvtap: entered promiscuous mode [ 708.555310][ T6672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.574412][ T6672] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.616730][ T6672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.654381][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2428'. [ 708.671660][T15332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.686830][ T6672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.760188][ T5815] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 708.825228][T15332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.928773][ T3507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.938607][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 708.946685][ T3507] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.968406][ T5815] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 708.991288][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.019850][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.022167][ T5815] usb 1-1: Product: syz [ 709.032981][ T5815] usb 1-1: Manufacturer: syz [ 709.040950][ T5815] usb 1-1: SerialNumber: syz [ 709.045123][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.065844][ T5815] usb 1-1: config 0 descriptor?? [ 709.077450][ T5815] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 709.131974][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.249002][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.324189][ T5815] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 709.346003][ T5815] visor 1-1:0.0: probe with driver visor failed with error -71 [ 709.412429][ T5815] usb 1-1: USB disconnect, device number 7 [ 709.565778][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.590097][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.608902][T12825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.635617][ T5478] 8021q: adding VLAN 0 to HW filter on device eth12 [ 709.649292][T12825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.744210][T12825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.758780][T12825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.298399][ T29] audit: type=1400 audit(1776523859.818:1745): avc: denied { write } for pid=15917 comm="syz.7.2431" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 711.073250][T15942] netlink: 'syz.3.2433': attribute type 10 has an invalid length. [ 711.116519][T15942] syz_tun: entered promiscuous mode [ 711.185295][T15942] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 712.137643][ T5478] 8021q: adding VLAN 0 to HW filter on device eth13 [ 713.095827][T15967] 9p: Bad value for 'rfdno' [ 713.642330][T15979] misc userio: Invalid payload size [ 713.651066][T15979] misc userio: Invalid payload size [ 714.252946][T15174] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 714.407201][T15985] geneve1: entered allmulticast mode [ 714.509298][T15174] usb 1-1: Using ep0 maxpacket: 32 [ 714.531653][T15174] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 714.560030][T15174] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 714.597707][T15174] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.649629][T15174] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 714.999522][T15174] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 715.024686][T15174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.102997][T15174] usb 1-1: Product: syz [ 715.125349][T15174] usb 1-1: Manufacturer: syz [ 715.164102][T15174] usb 1-1: SerialNumber: syz [ 715.502146][T16000] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 715.517588][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 715.626219][T15174] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input20 [ 715.944694][T16007] 9p: Bad value for 'rfdno' [ 716.045807][T16014] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2454'. [ 716.092130][T15174] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 716.105565][T15174] (id 0x00) [ 716.520183][T15174] rc_core: IR keymap rc-imon-pad not found [ 716.536837][T15174] Registered IR keymap rc-empty [ 716.555563][T15174] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 716.593688][T15174] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 716.761538][T15174] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 716.830469][T16035] FAULT_INJECTION: forcing a failure. [ 716.830469][T16035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.843753][T16035] CPU: 0 UID: 0 PID: 16035 Comm: syz.6.2458 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.843783][T16035] Tainted: [L]=SOFTLOCKUP [ 716.843790][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 716.843800][T16035] Call Trace: [ 716.843807][T16035] [ 716.843814][T16035] dump_stack_lvl+0x100/0x190 [ 716.843840][T16035] should_fail_ex.cold+0x5/0xa [ 716.843870][T16035] _copy_from_iter+0x1f4/0x1690 [ 716.843892][T16035] ? __asan_memset+0x23/0x50 [ 716.843917][T16035] ? __pfx__copy_from_iter+0x10/0x10 [ 716.843936][T16035] ? __pfx___alloc_skb+0x10/0x10 [ 716.843971][T16035] netlink_sendmsg+0x808/0xda0 [ 716.843996][T16035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.844015][T16035] ? __might_fault+0x80/0x140 [ 716.844046][T16035] ____sys_sendmsg+0x9e1/0xb70 [ 716.844065][T16035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.844087][T16035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.844118][T16035] ___sys_sendmsg+0x190/0x1e0 [ 716.844141][T16035] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.844191][T16035] __sys_sendmsg+0x170/0x220 [ 716.844218][T16035] ? __pfx___sys_sendmsg+0x10/0x10 [ 716.844254][T16035] ? rcu_is_watching+0x12/0xc0 [ 716.844284][T16035] do_syscall_64+0x10b/0xf80 [ 716.844313][T16035] ? clear_bhb_loop+0x40/0x90 [ 716.844334][T16035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.844353][T16035] RIP: 0033:0x7fe14539c819 [ 716.844368][T16035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.844385][T16035] RSP: 002b:00007fe14627d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.844404][T16035] RAX: ffffffffffffffda RBX: 00007fe145616180 RCX: 00007fe14539c819 [ 716.844416][T16035] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 716.844426][T16035] RBP: 00007fe14627d090 R08: 0000000000000000 R09: 0000000000000000 [ 716.844437][T16035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.844448][T16035] R13: 00007fe145616218 R14: 00007fe145616180 R15: 00007fff1e63cf38 [ 716.844472][T16035] [ 717.067235][T15174] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input21 [ 717.086210][T15174] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:8> initialized [ 718.053531][T16077] geneve2: entered promiscuous mode [ 718.071227][T16075] nvme_fabrics: unknown parameter or missing value 'uů4\kz|3[tb5apM(2 #pjm*qSҸ)Ȱy$K-Qd̺*gx~FQ–pm\7K= /)0ݜ <>j;V(~Bsg8a:mL)@֝pa3H qʄϘ#Hoif' in ctrl creation request [ 718.452160][T16077] vlan2: entered promiscuous mode [ 718.462030][T16077] bridge0: entered promiscuous mode [ 718.920053][ T29] audit: type=1400 audit(1776523867.885:1746): avc: denied { remount } for pid=16094 comm="syz.1.2469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 718.955607][T16095] hugetlbfs: Unknown parameter 'dyn' [ 719.035728][ T29] audit: type=1400 audit(1776523867.997:1747): avc: denied { unmount } for pid=15222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 719.083004][ T5878] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 719.399108][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 719.638815][ T29] audit: type=1400 audit(1776523868.428:1748): avc: denied { node_bind } for pid=16100 comm="syz.1.2470" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 719.741491][ T56] wlan1: Trigger new scan to find an IBSS to join [ 719.789329][ T5878] usb 4-1: not running at top speed; connect to a high speed hub [ 720.115374][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.200781][ T76] usb 1-1: USB disconnect, device number 8 [ 720.207114][ T5816] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 720.341654][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 720.428516][ T5878] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 720.492662][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.525913][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 720.627615][ T5816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 720.707703][ T5878] usb 4-1: Product: syz [ 720.784536][ T5878] usb 4-1: Manufacturer: syz [ 720.816178][ T5816] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 720.892843][ T5878] usb 4-1: SerialNumber: syz [ 720.973613][ T5816] usb 2-1: config 4 has no interface number 0 [ 721.096520][ T5816] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 721.098940][T16110] ubi: mtd0 is already attached to ubi16 [ 721.269079][ T5816] usb 2-1: config 4 interface 86 has no altsetting 0 [ 721.376565][ T5816] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 721.449061][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.529482][ T5816] usb 2-1: Product: syz [ 721.552726][ T5816] usb 2-1: Manufacturer: syz [ 721.584697][ T5816] usb 2-1: SerialNumber: syz [ 722.386729][T16125] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 722.757326][ T5878] usb 4-1: can't set config #1, error -71 [ 722.786591][ T5878] usb 4-1: USB disconnect, device number 56 [ 723.065622][ T5816] cypress_m8 2-1:4.86: DeLorme Earthmate USB converter detected [ 723.096723][ T5816] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 723.144662][ T5816] usb 2-1: USB disconnect, device number 18 [ 723.208727][ T5816] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 723.258930][ T5816] cypress_m8 2-1:4.86: device disconnected [ 723.437914][T16145] FAULT_INJECTION: forcing a failure. [ 723.437914][T16145] name failslab, interval 1, probability 0, space 0, times 0 [ 723.479326][T16145] CPU: 1 UID: 0 PID: 16145 Comm: syz.0.2480 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.479356][T16145] Tainted: [L]=SOFTLOCKUP [ 723.479363][T16145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 723.479377][T16145] Call Trace: [ 723.479384][T16145] [ 723.479392][T16145] dump_stack_lvl+0x100/0x190 [ 723.479418][T16145] should_fail_ex.cold+0x5/0xa [ 723.479447][T16145] should_failslab+0xc2/0x120 [ 723.479464][T16145] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 723.479484][T16145] ? skb_clone+0x190/0x400 [ 723.479515][T16145] skb_clone+0x190/0x400 [ 723.479542][T16145] netlink_deliver_tap+0xaed/0xcc0 [ 723.479568][T16145] netlink_unicast+0x62b/0x850 [ 723.479592][T16145] ? __pfx_netlink_unicast+0x10/0x10 [ 723.479625][T16145] netlink_sendmsg+0x8b0/0xda0 [ 723.479650][T16145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.479669][T16145] ? __might_fault+0x80/0x140 [ 723.479703][T16145] ____sys_sendmsg+0x9e1/0xb70 [ 723.479722][T16145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.479742][T16145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.479771][T16145] ___sys_sendmsg+0x190/0x1e0 [ 723.479792][T16145] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.479840][T16145] __sys_sendmsg+0x170/0x220 [ 723.479866][T16145] ? __pfx___sys_sendmsg+0x10/0x10 [ 723.479900][T16145] ? rcu_is_watching+0x12/0xc0 [ 723.479930][T16145] do_syscall_64+0x10b/0xf80 [ 723.479953][T16145] ? clear_bhb_loop+0x40/0x90 [ 723.479974][T16145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.479991][T16145] RIP: 0033:0x7f9066d9c819 [ 723.480006][T16145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.480022][T16145] RSP: 002b:00007f9064ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.480040][T16145] RAX: ffffffffffffffda RBX: 00007f9067015fa0 RCX: 00007f9066d9c819 [ 723.480052][T16145] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 723.480062][T16145] RBP: 00007f9064ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 723.480073][T16145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.480082][T16145] R13: 00007f9067016038 R14: 00007f9067015fa0 R15: 00007ffffdaaeed8 [ 723.480106][T16145] [ 724.488914][T16149] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 725.110329][ T13] wlan1: Trigger new scan to find an IBSS to join [ 725.192420][T16174] raw_sendmsg: syz.3.2485 forgot to set AF_INET. Fix it! [ 726.445089][T16213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.267426][T12825] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 727.290560][ T47] wlan1: Trigger new scan to find an IBSS to join [ 728.440759][T12825] wlan1: Trigger new scan to find an IBSS to join [ 729.063677][T16249] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 729.552136][T16255] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 729.958539][ T47] wlan1: Creating new IBSS network, BSSID 2e:4c:9e:e3:78:cb [ 730.386703][T16278] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2508'. [ 731.851160][T16290] ISOFS: Unable to identify CD-ROM format. [ 732.577289][ T35] wlan1: Trigger new scan to find an IBSS to join [ 732.974845][T15174] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 733.052106][T16325] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 733.172476][T15174] usb 7-1: config 5 has an invalid interface number: 71 but max is 0 [ 733.186995][T15174] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 733.204198][T15174] usb 7-1: config 5 has no interface number 0 [ 733.211296][T15174] usb 7-1: config 5 interface 71 has no altsetting 0 [ 733.240854][T15174] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a3c, bcdDevice=71.4c [ 733.264661][T15174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.281483][T15174] usb 7-1: Product: syz [ 733.302307][T15174] usb 7-1: Manufacturer: syz [ 733.317993][T15174] usb 7-1: SerialNumber: syz [ 733.576287][T16320] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2516'. [ 733.605919][T15174] uvcvideo 7-1:5.71: Found Unit with invalid ID 0 [ 733.628483][T15174] uvcvideo 7-1:5.71: Found UVC 0.00 device syz (0bb4:0a3c) [ 733.654483][T15174] uvcvideo 7-1:5.71: No valid video chain found. [ 733.660997][T12825] wlan1: Trigger new scan to find an IBSS to join [ 733.926262][T16349] 9p: Bad value for 'wfdno' [ 734.032398][T15174] usb 7-1: USB disconnect, device number 24 [ 735.718161][ T79] wlan1: Trigger new scan to find an IBSS to join [ 736.179458][T16378] 9p: Bad value for 'wfdno' [ 736.693565][ T798] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 737.639530][ T798] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 737.662182][ T798] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.682145][ T5885] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 737.707976][ T798] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 737.776672][ T798] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.806252][ T798] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 737.818206][T15174] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 737.835820][ T798] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 737.844140][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 737.860164][ T798] usb 2-1: Product: syz [ 737.865850][ T56] wlan1: Trigger new scan to find an IBSS to join [ 737.872919][ T798] usb 2-1: Manufacturer: syz [ 737.891074][ T798] cdc_wdm 2-1:1.0: skipping garbage [ 737.906960][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.926463][ T798] cdc_wdm 2-1:1.0: skipping garbage [ 737.940085][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.962380][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.985618][ T5885] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 737.996592][T15174] usb 1-1: device descriptor read/64, error -32 [ 738.003323][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.012777][ T798] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 738.026371][ T798] cdc_wdm 2-1:1.0: Unknown control protocol [ 738.047189][ T5885] usb 7-1: config 0 descriptor?? [ 738.196747][T16430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2535'. [ 738.253865][T15174] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 738.280288][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 738.424836][T15174] usb 1-1: device descriptor read/64, error -32 [ 738.495104][ T5885] usbhid 7-1:0.0: can't add hid device: -71 [ 738.513200][ T5885] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 738.539568][ T5885] usb 7-1: USB disconnect, device number 25 [ 738.555937][T15174] usb usb1-port1: attempt power cycle [ 738.709025][T16444] fuse: Bad value for 'fd' [ 738.711329][T16435] FAULT_INJECTION: forcing a failure. [ 738.711329][T16435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.743647][T16435] CPU: 1 UID: 0 PID: 16435 Comm: syz.3.2536 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.743668][T16435] Tainted: [L]=SOFTLOCKUP [ 738.743672][T16435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 738.743678][T16435] Call Trace: [ 738.743684][T16435] [ 738.743691][T16435] dump_stack_lvl+0x100/0x190 [ 738.743715][T16435] should_fail_ex.cold+0x5/0xa [ 738.743738][T16435] copy_fpstate_to_sigframe+0x842/0xb00 [ 738.743758][T16435] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 738.743776][T16435] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 738.743790][T16435] ? posixtimer_deliver_signal+0x3c3/0x690 [ 738.743806][T16435] ? x86_task_fpu+0x5f/0x90 [ 738.743823][T16435] get_sigframe+0x3fb/0x940 [ 738.743854][T16435] ? __pfx_get_sigframe+0x10/0x10 [ 738.743880][T16435] ? siginfo_layout+0x156/0x290 [ 738.743905][T16435] x64_setup_rt_frame+0x12f/0xce0 [ 738.743926][T16435] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 738.743946][T16435] arch_do_signal_or_restart+0x59e/0x7a0 [ 738.743963][T16435] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 738.743990][T16435] ? __do_sys_prctl+0x187/0x2310 [ 738.744012][T16435] ? rcu_is_watching+0x12/0xc0 [ 738.744037][T16435] exit_to_user_mode_loop+0x86/0x4a0 [ 738.744055][T16435] ? do_syscall_64+0x52d/0xf80 [ 738.744071][T16435] do_syscall_64+0x706/0xf80 [ 738.744084][T16435] ? clear_bhb_loop+0x40/0x90 [ 738.744099][T16435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.744110][T16435] RIP: 0033:0x7f97f979c817 [ 738.744122][T16435] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 738.744138][T16435] RSP: 002b:00007f97fa5f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 738.744155][T16435] RAX: 000000000000009d RBX: 00007f97f9a15fa0 RCX: 00007f97f979c819 [ 738.744165][T16435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 738.744174][T16435] RBP: 00007f97fa5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 738.744184][T16435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.744193][T16435] R13: 00007f97f9a16038 R14: 00007f97f9a15fa0 R15: 00007ffdc07320b8 [ 738.744208][T16435] [ 738.966745][ T56] wlan1: Trigger new scan to find an IBSS to join [ 739.033772][T15174] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 739.044952][ T56] wlan1: Creating new IBSS network, BSSID b2:b9:ad:31:2f:9f [ 739.726852][ T3097] usb 2-1: USB disconnect, device number 19 [ 740.050716][T16465] openvswitch: netlink: Flow actions attr not present in new flow. [ 740.075849][ T56] wlan1: Trigger new scan to find an IBSS to join [ 740.172533][ T6672] wlan1: Creating new IBSS network, BSSID 12:85:13:88:c2:3b [ 740.316078][ T5892] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 740.569403][ T5892] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 740.628335][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.658035][ T798] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 740.700483][ T5892] usb 7-1: Product: syz [ 740.728390][ T5892] usb 7-1: Manufacturer: syz [ 740.759335][ T5892] usb 7-1: SerialNumber: syz [ 740.896307][ T798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 211, changing to 7 [ 740.923905][ T798] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 740.948781][ T798] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 740.959672][ T798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 740.985294][ T798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 784, setting to 64 [ 741.023417][ T798] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 741.037142][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.069496][ T798] usb 4-1: Product: ѕ [ 741.088181][ T798] usb 4-1: Manufacturer: 틟溴髾ࡢ襤泮끂哃⧶맟楱ꊨ䂰Ɐ﫶♊赴ꓱᥬ䣕뜗泟侺㙀쬂멻纓抪아荊豎慩昼 [ 741.155089][ T798] usb 4-1: SerialNumber: 㠁 [ 741.239156][ T6672] wlan1: Creating new IBSS network, BSSID 82:ba:fd:b7:9b:58 [ 741.293885][ T5892] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 741.319020][ T5892] usb 7-1: USB disconnect, device number 26 [ 741.349515][ T5892] usblp0: removed [ 741.404403][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.420584][ T5885] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 741.443939][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.541959][T16499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.570044][T16499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.596286][T16499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.612823][T16499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.630643][ T5885] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.651886][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.673004][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.703286][ T5885] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 741.724854][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.755325][ T5885] usb 8-1: config 0 descriptor?? [ 742.359050][ T5885] usbhid 8-1:0.0: can't add hid device: -71 [ 742.385715][ T5885] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 742.436628][ T5885] usb 8-1: USB disconnect, device number 41 [ 742.667510][ T3097] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 742.811206][T16519] 9p: Bad value for 'wfdno' [ 743.033164][ T3097] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 743.105005][ T3097] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.155877][ T5478] 8021q: adding VLAN 0 to HW filter on device eth14 [ 743.171736][T16524] netlink: 'syz.7.2548': attribute type 1 has an invalid length. [ 743.201377][ T3097] usb 7-1: config 0 has no interfaces? [ 743.215776][ T3097] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 743.229648][ T3097] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.256290][ T3097] usb 7-1: config 0 descriptor?? [ 743.605532][ T798] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 743.667266][ T798] usb 4-1: MIDIStreaming interface descriptor not found [ 743.746547][ T9] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 743.982049][ T5878] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 743.982171][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.092302][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.186217][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.199611][ T798] usb 4-1: USB disconnect, device number 57 [ 744.234676][ T5878] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 744.264891][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.295135][ T9] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 744.336494][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 744.388282][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.436354][ T5878] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.500258][ T9] usb 8-1: config 0 descriptor?? [ 744.524857][ T5878] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 744.594691][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 744.661027][ T5878] usb 2-1: Product: syz [ 744.702352][ T5878] usb 2-1: Manufacturer: syz [ 744.760644][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 744.810424][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 744.860098][T15174] usb 1-1: unable to read config index 0 descriptor/start: -110 [ 744.889781][T15174] usb 1-1: can't read configurations, error -110 [ 744.925362][ T5878] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 744.970639][ T5878] cdc_wdm 2-1:1.0: Unknown control protocol [ 744.988889][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.055925][T16543] overlayfs: failed lookup in lower (newroot/24, name='file2', err=-40): overlapping layers [ 745.078681][ T5878] usb 2-1: USB disconnect, device number 20 [ 745.093528][T15174] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 745.204814][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 745.241291][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 745.293686][ T9] usb 8-1: USB disconnect, device number 42 [ 745.501722][ T5478] 8021q: adding VLAN 0 to HW filter on device eth15 [ 746.173000][ T3097] usb 7-1: string descriptor 0 read error: -71 [ 746.232616][ T3097] usb 7-1: USB disconnect, device number 27 [ 746.631485][T15174] usb 1-1: device descriptor read/8, error -71 [ 746.759178][ T29] audit: type=1400 audit(1776523893.938:1749): avc: denied { execute } for pid=16577 comm="syz.1.2557" path="pipe:[55150]" dev="pipefs" ino=55150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 746.778780][T16579] binder: 16567:16579 ioctl c0306201 0 returned -14 [ 746.806636][T15174] usb usb1-port1: unable to enumerate USB device [ 746.849090][T16583] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 746.866100][T16583] audit: out of memory in audit_log_start [ 747.508401][ T9] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 747.568769][T16595] netlink: 'syz.1.2562': attribute type 21 has an invalid length. [ 747.576748][T16595] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2562'. [ 747.669736][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 747.688025][ T5478] 8021q: adding VLAN 0 to HW filter on device eth16 [ 747.696558][ T9] usb 8-1: config 251 has an invalid interface number: 202 but max is 0 [ 747.705363][ T9] usb 8-1: config 251 has no interface number 0 [ 747.714332][ T9] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 747.736561][ T9] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 747.757791][ T9] usb 8-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 747.782462][ T9] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 747.810036][ T9] usb 8-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 747.840544][ T9] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.866945][ T9] usb 8-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.894620][ T9] usb 8-1: config 251 interface 202 has no altsetting 0 [ 747.913995][ T9] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 747.923282][ T9] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 747.933817][ T9] usb 8-1: Product: syz [ 747.949367][ T9] usb 8-1: SerialNumber: syz [ 748.490888][ T5815] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 748.639474][ T9] cxacru 8-1:251.202: cxacru_bind: interface has incorrect endpoints [ 748.648377][ T9] cxacru 8-1:251.202: usbatm_usb_probe: bind failed: -19! [ 748.662246][ T9] usb 8-1: USB disconnect, device number 43 [ 748.665076][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.690606][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.702974][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.713402][ T5815] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 748.731084][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.759528][ T5815] usb 4-1: config 0 descriptor?? [ 749.631894][ T5815] usbhid 4-1:0.0: can't add hid device: -71 [ 749.823409][ T5815] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 749.844328][ T5815] usb 4-1: USB disconnect, device number 58 [ 750.057030][T16660] /dev/sg0: Can't lookup blockdev [ 750.970284][ T9] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 751.165325][ T9] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.195277][ T5478] 8021q: adding VLAN 0 to HW filter on device eth17 [ 751.203875][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 751.228560][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid maxpacket 2047, setting to 64 [ 751.299122][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 751.493882][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 751.928270][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 751.936614][ T9] usb 4-1: Product: syz [ 751.940793][ T9] usb 4-1: Manufacturer: syz [ 751.945470][ T9] usb 4-1: SerialNumber: syz [ 751.955877][ T9] usb 4-1: config 0 descriptor?? [ 751.961639][T16677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 752.043553][T16698] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 752.062409][ T47] wlan1: Selected IBSS BSSID 12:85:13:88:c2:3b based on configured SSID [ 752.347478][ T9] usb 4-1: selecting invalid altsetting 0 [ 753.052637][T16714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2575'. [ 753.500123][ T5816] usb 4-1: USB disconnect, device number 59 [ 754.485654][T16747] misc userio: Invalid payload size [ 754.494442][T16747] misc userio: Invalid payload size [ 755.130280][T16752] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 755.142777][ T79] wlan1: Selected IBSS BSSID 12:85:13:88:c2:3b based on configured SSID [ 756.561738][ T198] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.608811][ T5478] 8021q: adding VLAN 0 to HW filter on device eth18 [ 756.818039][ T29] audit: type=1400 audit(1776523906.359:1750): avc: denied { watch watch_reads } for pid=16773 comm="syz.1.2598" path="/proc/188/map_files" dev="proc" ino=64295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 756.845373][ T198] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.004758][T13021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 757.022620][T13021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 757.031675][T13021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 757.041907][T13021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 757.059805][T13021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 757.141285][ T198] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.193565][T16797] binder: 16787:16797 ioctl c0046209 200000000000000 returned -22 [ 757.288368][ T198] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.833878][T16791] chnl_net:caif_netlink_parms(): no params data found [ 757.860764][T16818] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 757.937170][ T29] audit: type=1400 audit(1776523907.398:1751): avc: denied { write } for pid=16815 comm="syz.7.2603" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 758.003527][ T29] audit: type=1400 audit(1776523907.398:1752): avc: denied { ioctl } for pid=16815 comm="syz.7.2603" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 758.007982][ T12] tipc: Subscription rejected, illegal request [ 758.056011][ T5478] 8021q: adding VLAN 0 to HW filter on device eth19 [ 758.483019][T16843] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 758.594213][ T198] bridge_slave_1: left allmulticast mode [ 758.610646][ T29] audit: type=1400 audit(1776523908.025:1753): avc: denied { setopt } for pid=16847 comm="syz.1.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 758.639086][ T198] bridge_slave_1: left promiscuous mode [ 758.655347][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 758.668402][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.696381][ T198] bridge_slave_0: left allmulticast mode [ 758.712535][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 758.726773][ T198] bridge_slave_0: left promiscuous mode [ 758.750753][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.395074][ T5821] Bluetooth: hci3: command tx timeout [ 759.629849][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.645800][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.659096][ T198] bond0 (unregistering): Released all slaves [ 759.675560][T16791] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.684590][T16791] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.696312][T16791] bridge_slave_0: entered allmulticast mode [ 759.751706][T16791] bridge_slave_0: entered promiscuous mode [ 759.942902][T16791] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.951057][T16791] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.958919][T16791] bridge_slave_1: entered allmulticast mode [ 759.966366][T16791] bridge_slave_1: entered promiscuous mode [ 760.156473][ T29] audit: type=1400 audit(1776523909.476:1754): avc: denied { ioctl } for pid=16861 comm="syz.7.2610" path="socket:[65677]" dev="sockfs" ino=65677 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 760.193788][T16791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.243211][T16791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.426208][T16791] team0: Port device team_slave_0 added [ 760.469263][T16791] team0: Port device team_slave_1 added [ 760.474934][T15174] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 760.509980][T16791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.527593][T16791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.579768][T16791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.593907][T16791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.611011][T16791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.641029][ T5815] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 760.655741][T16791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.670419][ T198] hsr_slave_0: left promiscuous mode [ 760.678156][T15174] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.691150][ T198] hsr_slave_1: left promiscuous mode [ 760.692083][T15174] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 760.700153][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.710166][T15174] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 760.722567][T15174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.730864][T15174] usb 8-1: Product: syz [ 760.735059][T15174] usb 8-1: Manufacturer: syz [ 760.740069][T15174] usb 8-1: SerialNumber: syz [ 760.740140][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.770606][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.782211][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.814239][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.860216][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.872045][ T198] veth1_macvtap: left promiscuous mode [ 760.877723][ T198] veth0_macvtap: left promiscuous mode [ 760.883368][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.893965][ T198] veth1_vlan: left promiscuous mode [ 760.900383][ T198] veth0_vlan: left promiscuous mode [ 760.906376][ T5815] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 760.921937][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.978602][ T5815] usb 1-1: config 0 descriptor?? [ 761.241385][T15174] usb 8-1: USB disconnect, device number 44 [ 761.440295][T12884] udevd[12884]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.544202][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 761.613354][ T5821] Bluetooth: hci3: command tx timeout [ 761.649461][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2614'. [ 761.714817][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2614'. [ 761.725772][ T198] team0 (unregistering): Port device team_slave_1 removed [ 761.769790][ T198] team0 (unregistering): Port device team_slave_0 removed [ 762.021251][ T5478] 8021q: adding VLAN 0 to HW filter on device eth9 [ 762.091117][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 762.217252][ T5815] usbhid 1-1:0.0: can't add hid device: -71 [ 762.252217][ T5815] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 762.280431][ T5815] usb 1-1: USB disconnect, device number 13 [ 762.339695][T16791] hsr_slave_0: entered promiscuous mode [ 762.362125][T16791] hsr_slave_1: entered promiscuous mode [ 762.408965][T16791] debugfs: 'hsr0' already exists in 'hsr' [ 762.427303][T16791] Cannot create hsr debugfs directory [ 763.640385][T16925] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 763.667039][ T29] audit: type=1400 audit(1776523912.760:1755): avc: denied { relabelto } for pid=16922 comm="syz.3.2620" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 763.769701][ T3097] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 763.838887][ T5821] Bluetooth: hci3: command tx timeout [ 763.921246][T16929] /dev/sg0: Can't lookup blockdev [ 763.953861][ T3097] usb 1-1: Using ep0 maxpacket: 32 [ 763.962463][ T3097] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.802334][ T29] audit: type=1400 audit(1776523912.760:1756): avc: denied { associate } for pid=16922 comm="syz.3.2620" name="ptmx" dev="devtmpfs" ino=615 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 764.852983][ T3097] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.878413][ T3097] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 764.887747][ T3097] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 764.896223][ T3097] usb 1-1: Product: syz [ 764.903077][ T3097] usb 1-1: Manufacturer: syz [ 764.922855][ T3097] hub 1-1:4.0: USB hub found [ 765.395654][T16935] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 765.711840][T16791] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.818318][T16941] netlink: 'syz.3.2621': attribute type 1 has an invalid length. [ 766.074277][ T5821] Bluetooth: hci3: command tx timeout [ 767.397370][T16941] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 767.478545][ T3097] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 768.113997][ T3097] usb 1-1: USB disconnect, device number 14 [ 768.349113][T16791] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.944306][ T29] audit: type=1400 audit(1776523917.692:1757): avc: denied { append } for pid=16957 comm="syz.1.2625" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 769.023882][ T29] audit: type=1400 audit(1776523917.692:1758): avc: denied { open } for pid=16957 comm="syz.1.2625" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 769.168558][ T3097] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 769.237684][ T5478] 8021q: adding VLAN 0 to HW filter on device eth8 [ 769.337237][ T3097] usb 4-1: device descriptor read/64, error -71 [ 769.702865][ T3097] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 769.895186][ T3097] usb 4-1: device descriptor read/64, error -71 [ 769.899704][T16791] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.089953][ T3097] usb usb4-port1: attempt power cycle [ 770.196859][T16979] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 770.313226][T16791] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.749238][ T3097] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 771.466962][ T3097] usb 4-1: device descriptor read/8, error -71 [ 771.639470][T16995] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 771.976415][T16999] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2632'. [ 772.027954][ T29] audit: type=1400 audit(1776523920.593:1759): avc: denied { ioctl } for pid=16997 comm="syz.3.2632" path="socket:[65230]" dev="sockfs" ino=65230 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 772.438766][T16791] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 772.479402][T16791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.510164][T16791] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 772.559693][T16791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.604239][T16791] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 772.648405][T16791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.680362][T16791] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 772.692077][ T29] audit: type=1400 audit(1776523921.173:1760): avc: denied { write } for pid=17021 comm="syz.7.2636" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 772.736825][ T3097] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 772.790699][T16791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.801105][ T3097] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 772.842548][ T3097] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.896201][ T5478] 8021q: adding VLAN 0 to HW filter on device eth5 [ 772.905068][ T3097] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 772.927171][ T3097] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.941134][ T3097] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 772.965747][ T3097] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 773.001419][ T3097] usb 4-1: Product: syz [ 773.018236][ T3097] usb 4-1: Manufacturer: syz [ 773.072705][ T3097] cdc_wdm 4-1:1.0: skipping garbage [ 773.099965][ T3097] cdc_wdm 4-1:1.0: skipping garbage [ 773.144131][ T3097] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 773.170911][T16791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.179299][ T3097] cdc_wdm 4-1:1.0: Unknown control protocol [ 773.335988][ T5816] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 773.362736][ T1152] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 773.377275][T16791] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.437087][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.444205][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.491758][T17048] virtio-fs: tag not found [ 773.540266][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.547455][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.587966][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 773.616556][ T5816] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.652807][ T5816] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 773.726679][ T5816] usb 1-1: config 0 interface 0 has no altsetting 0 [ 773.768772][ T5816] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 773.792443][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 773.810979][T17040] ceph: No mds server is up or the cluster is laggy [ 773.846618][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.855899][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 773.907370][ T5816] usb 1-1: config 0 descriptor?? [ 774.181067][ T79] wlan1: Trigger new scan to find an IBSS to join [ 774.222177][T15174] libceph: connect (1)[c::]:6789 error -101 [ 774.303913][T15174] libceph: mon0 (1)[c::]:6789 connect error [ 774.419257][T16791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.456286][T17060] [ 774.458657][T17060] ============================================ [ 774.464789][T17060] WARNING: possible recursive locking detected [ 774.470910][T17060] syzkaller #0 Tainted: G L [ 774.476855][T17060] -------------------------------------------- [ 774.482979][T17060] syz.0.2637/17060 is trying to acquire lock: [ 774.489019][T17060] ffffffff8f7c0610 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 774.499267][T17060] [ 774.499267][T17060] but task is already holding lock: [ 774.506615][T17060] ffffffff8f7c0610 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 774.516872][T17060] [ 774.516872][T17060] other info that might help us debug this: [ 774.524920][T17060] Possible unsafe locking scenario: [ 774.524920][T17060] [ 774.532360][T17060] CPU0 [ 774.535633][T17060] ---- [ 774.538893][T17060] lock(qp_broker_list.mutex); [ 774.543733][T17060] lock(qp_broker_list.mutex); [ 774.548570][T17060] [ 774.548570][T17060] *** DEADLOCK *** [ 774.548570][T17060] [ 774.556693][T17060] May be due to missing lock nesting notation [ 774.556693][T17060] [ 774.565008][T17060] 1 lock held by syz.0.2637/17060: [ 774.570117][T17060] #0: ffffffff8f7c0610 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 774.580814][T17060] [ 774.580814][T17060] stack backtrace: [ 774.586693][T17060] CPU: 1 UID: 0 PID: 17060 Comm: syz.0.2637 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.586710][T17060] Tainted: [L]=SOFTLOCKUP [ 774.586715][T17060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 774.586721][T17060] Call Trace: [ 774.586726][T17060] [ 774.586731][T17060] dump_stack_lvl+0x100/0x190 [ 774.586749][T17060] print_deadlock_bug.cold+0xbd/0xca [ 774.586774][T17060] __lock_acquire+0x12bb/0x2630 [ 774.586797][T17060] lock_acquire+0x1b1/0x370 [ 774.586816][T17060] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 774.586832][T17060] ? __pfx___might_resched+0x10/0x10 [ 774.586847][T17060] ? kasan_save_stack+0x3f/0x50 [ 774.586863][T17060] __mutex_lock+0x1a4/0x1b10 [ 774.586880][T17060] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 774.586897][T17060] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 774.586915][T17060] ? vmci_host_close+0x115/0x1a0 [ 774.586929][T17060] ? __fput+0x3ff/0xb50 [ 774.586947][T17060] ? task_work_run+0x150/0x240 [ 774.586968][T17060] ? exit_to_user_mode_loop+0x100/0x4a0 [ 774.586981][T17060] ? do_syscall_64+0x706/0xf80 [ 774.586996][T17060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.587007][T17060] ? __pfx___mutex_lock+0x10/0x10 [ 774.587025][T17060] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 774.587043][T17060] vmci_qp_broker_detach+0x14c/0x11e0 [ 774.587063][T17060] ? kasan_quarantine_put+0x104/0x240 [ 774.587085][T17060] ? lockdep_hardirqs_on+0x78/0x100 [ 774.587105][T17060] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 774.587118][T17060] ? ctx_free_ctx+0x440/0xda0 [ 774.587131][T17060] ? ctx_free_ctx+0x4bd/0xda0 [ 774.587144][T17060] ? kfree+0x223/0x6c0 [ 774.587157][T17060] ctx_free_ctx+0x517/0xda0 [ 774.587171][T17060] ? __pfx___schedule+0x10/0x10 [ 774.587190][T17060] ? __pfx_ctx_free_ctx+0x10/0x10 [ 774.587210][T17060] ? preempt_schedule_thunk+0x16/0x30 [ 774.587233][T17060] ? preempt_schedule_common+0x42/0xc0 [ 774.587252][T17060] ? preempt_schedule_thunk+0x16/0x30 [ 774.587269][T17060] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 774.587284][T17060] vmci_datagram_dispatch+0x3db/0xc60 [ 774.587299][T17060] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 774.587315][T17060] ? find_held_lock+0x2b/0x80 [ 774.587338][T17060] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 774.587356][T17060] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 774.587377][T17060] qp_notify_peer+0x1a6/0x230 [ 774.587395][T17060] ? __pfx_qp_notify_peer+0x10/0x10 [ 774.587415][T17060] vmci_qp_broker_detach+0xa20/0x11e0 [ 774.587435][T17060] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 774.587450][T17060] ? ctx_free_ctx+0x440/0xda0 [ 774.587465][T17060] ? ctx_free_ctx+0x4bd/0xda0 [ 774.587484][T17060] ? kfree+0x223/0x6c0 [ 774.587503][T17060] ctx_free_ctx+0x517/0xda0 [ 774.587536][T17060] ? synchronize_rcu_expedited+0x3c3/0x450 [ 774.587551][T17060] ? __pfx_ctx_free_ctx+0x10/0x10 [ 774.587564][T17060] ? __pfx_autoremove_wake_function+0x10/0x10 [ 774.587577][T17060] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 774.587591][T17060] vmci_ctx_destroy+0x150/0x1c0 [ 774.587605][T17060] vmci_host_close+0x115/0x1a0 [ 774.587620][T17060] ? __pfx_vmci_host_close+0x10/0x10 [ 774.587636][T17060] __fput+0x3ff/0xb50 [ 774.587655][T17060] task_work_run+0x150/0x240 [ 774.587673][T17060] ? __pfx_task_work_run+0x10/0x10 [ 774.587690][T17060] ? rcu_is_watching+0x12/0xc0 [ 774.587705][T17060] exit_to_user_mode_loop+0x100/0x4a0 [ 774.587718][T17060] ? do_syscall_64+0x52d/0xf80 [ 774.587732][T17060] do_syscall_64+0x706/0xf80 [ 774.587745][T17060] ? clear_bhb_loop+0x40/0x90 [ 774.587762][T17060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.587779][T17060] RIP: 0033:0x7f9066d9c819 [ 774.587793][T17060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.587808][T17060] RSP: 002b:00007f9064fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 774.587824][T17060] RAX: 0000000000000000 RBX: 00007f9067016090 RCX: 00007f9066d9c819 [ 774.587834][T17060] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 774.587840][T17060] RBP: 00007f9066e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 774.587846][T17060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.587853][T17060] R13: 00007f9067016128 R14: 00007f9067016090 R15: 00007ffffdaaeed8 [ 774.587862][T17060] [ 775.119644][ T5478] 8021q: adding VLAN 0 to HW filter on device eth6 [ 775.173966][T13524] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 775.298648][T16791] veth0_vlan: entered promiscuous mode [ 775.335428][T13524] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 775.341121][T16791] veth1_vlan: entered promiscuous mode [ 775.346476][T13524] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 775.364812][T13524] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 775.373959][T13524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.384121][T13524] usb 2-1: config 0 descriptor?? [ 775.393279][ T5885] usb 4-1: USB disconnect, device number 63 [ 775.484748][T16791] veth0_macvtap: entered promiscuous mode [ 775.520317][T16791] veth1_macvtap: entered promiscuous mode [ 775.562673][T16791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.590270][T16791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.627253][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.657811][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.682587][T16791] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 775.692554][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.711488][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.734406][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.747313][T16791] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 775.759215][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.798246][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.807151][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.822620][T13524] hid_parser_main: 4007 callbacks suppressed [ 775.822642][T13524] zydacron 0003:13EC:0006.000E: unknown main item tag 0x7 [ 775.869878][T13524] zydacron 0003:13EC:0006.000E: unknown main item tag 0x1 [ 775.895980][T13524] zydacron 0003:13EC:0006.000E: unknown main item tag 0x2 [ 775.920733][T13524] zydacron 0003:13EC:0006.000E: unknown main item tag 0x4 [ 775.950002][T13524] zydacron 0003:13EC:0006.000E: item fetching failed at offset 32/41 [ 775.959009][T13524] zydacron 0003:13EC:0006.000E: parse failed [ 775.967746][T13524] zydacron 0003:13EC:0006.000E: probe with driver zydacron failed with error -22 [ 776.041594][ T5892] usb 2-1: USB disconnect, device number 21 [ 776.159647][ T5478] 8021q: adding VLAN 0 to HW filter on device eth7 [ 776.357333][ T5478] 8021q: adding VLAN 0 to HW filter on device eth20 [ 778.540336][ T56] wlan1: Trigger new scan to find an IBSS to join [ 779.311128][ T5816] usbhid 1-1:0.0: can't add hid device: -32 [ 779.317094][ T5816] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 779.502163][ T56] wlan1: Creating new IBSS network, BSSID be:cc:39:53:6d:f0