last executing test programs: 31m15.725313417s ago: executing program 3 (id=548): socket(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000035c0)={0x65c4, 0x401, 0x0, 0xfff8, 0xc, "0d5ccf343f4ac540"}) write(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$notify(r0, 0x402, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) r2 = socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x44, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0xa70410b) 31m15.459578626s ago: executing program 3 (id=550): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0xff00, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xfffc) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r6, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x0, 0x0, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xca, 0x7}, {0xffff, 0x5, 0x1, 0x7, 0x6, 0xfe}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x900, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a"], 0x38}}, 0x40408c0) 31m12.037203228s ago: executing program 3 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 31m11.788699764s ago: executing program 3 (id=569): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a9785000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x120) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) unshare(0x2040400) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') preadv(r5, &(0x7f0000003580)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, 0x33, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040844) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 31m11.00307306s ago: executing program 3 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 31m10.062656248s ago: executing program 3 (id=577): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000002500)=""/4137, 0x1029}, {0x0}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000340)=""/144, 0x90}], 0x5}, 0x0) 30m54.382874982s ago: executing program 32 (id=577): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000002500)=""/4137, 0x1029}, {0x0}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000340)=""/144, 0x90}], 0x5}, 0x0) 19m10.48457137s ago: executing program 0 (id=2972): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 19m8.214541525s ago: executing program 4 (id=2981): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x7ffd}, &(0x7f0000000340)=0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x11}}], 0x1, 0x4000800) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000001d00)={0xbf9f, 0x23b4b4b239d825f2, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200", 0x0, 0x2}) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_io_uring_setup(0x24fe, &(0x7f00000003c0)={0x0, 0x793, 0x10100}, &(0x7f0000000100), 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x4000010, r7, 0x3000) io_uring_enter(r6, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 19m7.083940318s ago: executing program 0 (id=2984): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x7f, 0x8, 0x1008, 0x3, 0x1, 0x6, 0x2, 0x7}}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000180)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x7, 0x4, 0x0, 0xb}) fcntl$notify(r0, 0x402, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) chdir(&(0x7f0000000200)='./file0\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, &(0x7f0000000240)="87b0ae520e80176a9162c5bf2ed146f782bdc7f9fa4ba787ea912f603d82a4d0c6b24d63281e5c138a95f48916af9e100c1c6044d12952c1fe386ab464c2344930e122a7461f9036cad366b341a0c49ec8fd26c15c550a37281a683ea1f4ab4bb2c40b0ad93c78f0f3dcada26c85480df10e66ac30a28fd604e17021e5014501897e90263763fb6fcd901c67e7f4c6cf0d76e6e8ee8a25c38f2a99bf5329e95ebdc214758b479cf8b3e961b1c1a0b73604571030cb3372e1026699213c40", 0xbe, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x7, @local, 0x4}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) readlinkat(r3, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/191, 0xbf) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000480)=0xc7000000, 0x4) mkdir(&(0x7f00000004c0)='./file0\x00', 0x84) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r5, 0x4004510f, &(0x7f0000000540)=0x1ff) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000580)) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000700)={0x0, 0x101, 0x0, 0x6}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x200001, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000780)=0x6) getsockname$packet(r3, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000900)={'sit0\x00', &(0x7f00000008c0)={@mcast1, @multicast1, 0x2, 0x1c}}) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000940)=0x4, 0x4) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000980)={0x0, {0x5, 0x10000}}) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000009c0)=0x81, &(0x7f0000000a00)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000a80)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000b80)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000c00)={0x0, 0x2, 0x1000, 0x0, 0x994}) 19m6.437551816s ago: executing program 4 (id=2985): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, 0x0, 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 19m5.412108599s ago: executing program 0 (id=2987): r0 = gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x26}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000480)=ANY=[], 0xffdf, 0x1) chdir(&(0x7f0000000480)='./bus\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x0, 0x0, 0x3) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304f9fffffffe8cb2cd85a7d560dbdf2500007400", @ANYRES32=0x0, @ANYBLOB="079c0138fe50050008000000", @ANYRES32=r0, @ANYBLOB="1400030076657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 19m5.156183121s ago: executing program 4 (id=2990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$overlay(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x42800, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x1010082, 0x0, 0x0, 0x14, 0x6, 0x0, 0x0, 0x0, 0x7}}, 0x50) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00') syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x1, 0x0, 0x7, 0x1, 0x2, 0xe2, {0x5, 0x62, 0x4, 0x0, 0x100000001, 0x9, 0x1, 0x3, 0x2, 0x8000, 0x2, r3, r4, 0xfffffffe, 0xc71}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m4.964897264s ago: executing program 0 (id=2991): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 19m4.460293441s ago: executing program 4 (id=2992): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) (fail_nth: 1) 19m3.651846242s ago: executing program 0 (id=2994): epoll_create(0x10000e9) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(0x0, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x17, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6100272400303afffc000000000000000000000000000001ff0200000000000000000000000000019078000000006d2308d31000000120010000000000000000000000000001ff010000000000000000000000000001"], 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000200)='cgroup.controllers\x00', &(0x7f00000002c0)="0f149407", 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r5, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5}) ftruncate(r0, 0xffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 19m3.528098704s ago: executing program 4 (id=2995): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x7ffd}, &(0x7f0000000340)=0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x11}}], 0x1, 0x4000800) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000001d00)={0xbf9f, 0x23b4b4b239d825f2, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200", 0x0, 0x2}) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_io_uring_setup(0x24fe, &(0x7f00000003c0)={0x0, 0x793, 0x10100}, &(0x7f0000000100), 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x4000010, r7, 0x3000) io_uring_enter(r6, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 19m3.230247434s ago: executing program 4 (id=2997): socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) read$usbfs(r6, &(0x7f0000001040)=""/192, 0xc0) write$tun(r6, &(0x7f0000000400)=ANY=[], 0xa2) 19m2.553778246s ago: executing program 33 (id=2997): socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) read$usbfs(r6, &(0x7f0000001040)=""/192, 0xc0) write$tun(r6, &(0x7f0000000400)=ANY=[], 0xa2) 19m2.53928219s ago: executing program 0 (id=2999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}]}, 0x3c}}, 0x0) 19m2.539120519s ago: executing program 34 (id=2999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}]}, 0x3c}}, 0x0) 12m43.352173662s ago: executing program 7 (id=3980): socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000fe0f000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 12m40.507621047s ago: executing program 7 (id=3987): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req={0x0, 0x6, 0x5, 0x8}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xb, 0x1, 'mangle\x00'}]}, 0x30}}, 0x0) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f00000000c0)="d295ac693cf1db5a86a9fd1f3978815ee39816c9b08f52862ce8fc9a5ae0490d28562cd9cb61669c1fe9ed25533c94b6eb918ea8138eb52837320c09e3841862a9237b905b0bb949f4d639eb44eb8bb187c174cdf7205fbc8f3de8a1a4a7dbcc1c46063ed029da59b227f6269a60906a43e15ef7ab04c47eff1bcc8159efd9a31de2e3f355", 0x85}, {&(0x7f0000000240)="88ec5e7ad9bcaf303fe940845b2e82641889edae138327766f6fbb9f1d23dddd807c7108f88d2f792df41f6ce26fe1e5d3db43a80eaad23017cc5573aa18c7c4fe0e2a025d07d82a26c610c8f2d9709264fe8d97e842dfe7f3d023741be3688172615c2ca26aaae3939d5c52e82c321e67f6a5c834b60f658ad2579eb0af9a1f78aad9b301886982685610471c40d10f532e0f1fd611", 0x96}, {&(0x7f0000000300)="34a2382f90a82db6e9f2803e883e1ca869d4c9ae64f43da74f21e4479bd362afb86054791c63599a111bce10441c29a11eaaa373071f5ad27e38e2d7522334ab572731ad217741b2541642a095a74080fafcc564703a0a923144a6ad543f24da9523a6940f058eeedebb", 0x6a}, {&(0x7f0000000000)="abe3d97250c2a06a", 0x8}, {&(0x7f0000000380)="402175c33ef7f3b3f4cfaa057d4912c5a68119a684ba00f2892daed2e6ff2331fe5d70957f98836b6a649453a761dfd6e40e6c9c044fa6e2651952d55eb188f04fd8f89c05a450860a34b1b1edb5ffed6f41f829b9edf2d696491ee7f17522cce75913712958d90a1df4d2eb29cb06c0f3301ee7f30cf99c1a3b6932978f0964195f83c0f3625bead02329e12b29450d930298001587ffc9186e02ac9517598a806937d91bfa60a408a575a98ef678f87d8d16e7e532a50fc95972916172ab5998a71d1f7ecaefbf4e88e7954f62a504cf9e725b59b007ccc120", 0xda}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="d313ef7483d48a1b3c6efa4f696a2d5e8c1c2e2df961074b396b76822c1b08b4aa14659e33b7a3bbe316bdb85398a3d24eddcaf8e22dfe0c73b1f876b3edb4867945f703b885839bd5dc596fe842a7eb2d66f1e8bb67c2d1d143be2d6d12b8d1e38fced24c104ac5728871f5209ea71440b62e2271075981e0d988f9d91d9bcf7a96c48cf0ab3fe9d80a70950d2947177409f3c4d8365123e68f40094c41e800f4fbaf86d139240ef032bedd7ea3ace584f070374418", 0xb6}], 0x7, 0x10000, 0x6, 0xe7cf93f027e51cd4) 12m40.323107059s ago: executing program 7 (id=3989): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x402, 0x101300) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f000000a0c0)=[{{&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000000700)="68f49366011f59cfc6bb0417753823f92151d95af37ba431ccc4bd110050a487f7f88f89734f1bbc8ba36f4dba45600caf61bdaabc", 0x35}, {&(0x7f0000000a40)="cd5b61c120618bf04a7c0b1e19a0318d09d26485f3d08d7c983dfe45bbb94a3a78860219eb48fa5e4f06862f4a992a7c6ad3bf3bdddb2b2d66bf17b020388209", 0x40}, {&(0x7f0000000e80)="c2aceadd6083441a32de344ade6ede733c55cdeae4e441a6508442c0cbdf2791f597947a424e442c399e29bb8a05f993791e0f2ede679ee3d2b5ed69696851254802b77f5835729876e3b34dc539b43ab0e40fdfa99b3a3ff25e9635699400d6136bb2667e88f0f342d2620208fc523990f6868708a9adf8763c62ae0c0e0c43719699b2f6cd6c0525c7226b6a99b0887b6b141f3d59357043f951b96c1e7e7c60035303006146bafb93f000475c286ae65cba9abcfc44a6bafb59547027841a72a0d001b2d0daba9f4f6f66d4a57134", 0xd0}, {&(0x7f0000000c00)="0e263a1d8ae4baef73529a0b3bfbbdec", 0x10}, {&(0x7f0000002700)="87a3960f9873a2d6c2d01d9fba1458c7153352de2e7346518ebbc59337d0d2f6f30a0443b6005d87af28db5c258da1193c122799879f2763d6dd651c0575e6435b4617b6b4dad6ecd0e7846c36c6fe361fd557d3be7388d40014339c5b4329ff550b09481367b4732124b3ff974bb551b9e7beee1ed95a599fd77ca7cad00c3a21e9400ebff67aec3da03b57ef1804ce35e21b5284f6fe10d907f85da484bda94a9dab7d010602dbb8b5e4a4d27a349e75f9bb", 0xb3}], 0x5, 0x0, 0x0, 0x20000020}}, {{&(0x7f0000002880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002fc0)}}, {{&(0x7f0000002c80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002d00)="5ce0cec42059293e45cf36b3d80fe18c3edd5c280c029c3766395b51613b592879e769", 0x23}], 0x1, &(0x7f0000005400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98, 0x6a561febc81c55f6}}, {{&(0x7f00000054c0)=@abs={0x1, 0x0, 0xfffffff7}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005540)="bca402e5660593320d3589fdf0d2b0c390c88ef58644cb1da73d3d6c80eca05ed90e63b5f848fd55f1df2c3ce7f0142dad4c3c2e23934781eedf367488c9b11640c14c5798cb38a83471fbf505923f765f7028b02c4c656f4889ce94ea335d108faf7f0d45f13bcf05dae68e0f125d955decfcfa4cd17fd52a3f057916def0d31d5fb28a28abcccfc98e", 0x8a}], 0x1, &(0x7f0000003500)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRESOCT=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES64=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000090000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x40040}}, {{&(0x7f0000005700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005d80)=[{&(0x7f0000005780)="f670886d37affa4b99619bcc7324df5bb8a571804462e7c1252d080341de4b", 0x1f}, {&(0x7f00000057c0)="38a9a4ef8574ac4ac5e88f1cbf792585e5d235230d67eff32ff719f9f970f40ba120de5f3741f94fee1cda2643835b", 0x2f}, {&(0x7f0000005800)="4e98aeab6db792165c7f268ec28a421f6d038560dbb0442d37b78ad594fddd982c79023af01de6238466991e4bf12127757b0fd2d47d88a5bfab866b712f61bc36a34e1e47c03609a3835fb7b50f4ce42303d1494d1f73d95bdfb977e12239781384879a155fef5d943073b6647fc325c7af0bef5e4b20321bf61086dc4f178c44f67f3e", 0x84}, {&(0x7f00000058c0)="151bba6c2e963db5ee54b83427b09e65b5bff36df8047dbfb6f977e22a2a43d7b369d9fdeaf75f9ca74fc41dd35d43b296ec5e288196e9a7ad4af75384b8241e3fcf598ae5efeab2a7094152ba72e8bed09236658f3c3ed776e6117071140b23d34c451408777a77c4fe710bfe7c1ca07c33481d8cb875fa805753e801f20f8fb06931bf0fbb032c1b80439d41ebe416023e0cac73f431d3cced02eeb9beeb3ff3ac45fd7b106303b87ebb881598857bd2", 0xb1}, {&(0x7f00000059c0)="5be48085685eaeab3e2967b54b6f7292b059344a13eb7cebba43e4da0225e070c8b8f48fc33c9ec759c23d42828a7e79069a7d1a5147981ce53adccfa5f6e43a923850681e0cc3571ce2823c03db3004652c14a57d0ca1fd278121d127fb0315de4ffaf0678cffa9151d083e9afce8cccf87e3abf1985120abc0600026bbb70cd819ec5551859ef86a7a972d05c55d482ef761816714fc41e23130529e82628ddc02d4498d77b42c84707d6705c26ef3e858e18a7ecda32dda77bc72769b0383d4cf0f6cbf2200f63538db8c237708c87c94cc19efa677", 0xd7}, {&(0x7f0000005ac0)="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", 0xfb}, {&(0x7f0000005bc0)="ba34aae78aa094a844b0dce9a5a81c71c0984eaa66229bcc612da6cdaa873356fc458a266637d24c3048191973b7c6f1456539a7b68c1bd52c1d0a6abe87bcac08ccea9cf9bdd0627a1a5efe8542d46d3200a136654ac787e38fb9d9eeeec613ce1e9167b2953d960254a00ee77ed114a022ea1bf4801236", 0x78}, {&(0x7f0000005c40)="3fe104", 0x3}, {&(0x7f0000002d80)="77e2042d2c91b1b818acb6c83016df7a88f3defc9ef3d8ab6ccc3610a84515fc6e477bc6f0ade4a81e89cda3bdc52377d5ac57c6e4c4a2e800a9cb983d13fb4bb274dc390f8c92c711aa11f603a0011d22f6429132666f3df2c0d395a5fa252610fe507fda6b85d0c79cc4eb9f38109d7f", 0x71}, {&(0x7f0000005d00)="84dbcc4dcc0a447ab3a82680df6bdab73b03c1afe89b987f41437666a9132e08f25261b0ace8e8c39fa53144fea2e9fea2f0ebed2dc9b077cf367634455eb4b7c67aad90e9d52bbba511d298e616e4a16901d8b042ba0ff0a43c", 0x5a}], 0xa, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, r4]}}, @rights={{0x2c, 0x1, 0x1, [r4, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130, 0x40002}}, {{0x0, 0x0, &(0x7f00000094c0)=[{&(0x7f00000082c0)="c554e7fd18d5e547cda3e4158dfb128b99c0001a84d392a84369a9588b3c812163c5fba646d34c21a2fecf8e3f093be4b6bcb10a38b108a47506898403dcbfd9d0262c2c7ff1a93c862cc78dc47b44ad90075945ac8859974edf3b09c9487e066860d76467e2b84569cc8aaf58d0e905dc13e0d12e86ec816187929815f4f00d070a9714ba3732c2abca0eab472b6b1cc55ea45649e9bf6a3df7e51730dd1473c3d16ac10dd3d66c898b2ecee66bb2a6eb356cf684f607952dcb38554cb9d2285d1175dafc8fe52dc3c5f8a5cdff004c953a33a32c2278a22e77ba40f38f08af7b42", 0xe2}, {&(0x7f00000083c0)="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", 0x1000}, {&(0x7f00000093c0)="d5c2587ba036f85ac31767453742b1813399e7b6521fba75e03fb3d73ca5e9945c8305c3", 0x24}, {&(0x7f0000009400)="d9448b46269ff53758744a1a57c3b9cc149753fca4a16de4920f338f27958d748804eccdc7fd986877fab39114e9d78e85666fb5c04667c2853a3144e0d235d81a416c488ad2b625cda2a7607b0c9640962893eecbfbc37797a869508e256090b98edb09fc28423232a5b1ce799b016f20b8250c0b729109dc959c9b1ceeb2574b56", 0x82}], 0x4, &(0x7f0000009640)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000014000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x20008004}}, {{0x0, 0x0, &(0x7f0000009a40), 0x0, &(0x7f0000009b40)=[@cred={{0x1c}}], 0x20, 0x44890}}, {{&(0x7f0000009b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000009c00)="06b5733582cd98f453aeeb3eed6194d1e7cdf49611e21ba682ed884ee82339cef60ef470844d7d5a77", 0x29}, {0x0}, {&(0x7f0000009d40)="4b9d09afa32ee13f0b7eef29dbe3eb658d689115e80cfedb741b3102d4a0dd73d7ea159b53", 0x25}, {&(0x7f0000009d80)="8a27abc4c84627719005bd5165d2a963430e55c2533abc1db9e3e66469adcea4a63e87522f70b14235779d34349889d828cea3681fb859897cdf8af6ff910200292c7a94f07dce360cc2bccfd98f8723560f65d70e7061790de9ce2cb0cd1a66f6ca0cd34d6a59e09507334fb0d7fae10ee85c31cd31be9c63ae93d4ef56c2beddb7e83a7eee0347753a3f990e2e09ebd909ebc66204e5c7eedd5a7c9e8efaca4edf74b616180a74dd195870c581c595c8d7c8d7deffdbf38d6cebd781e9dcf1fddca618adb24ff4f43a3de3ccfc72df736112cd94b01ddcf0b440efb98f381f183eadc099338eacb3cc", 0xea}, {&(0x7f0000009e80)}, {&(0x7f0000003040)}, {&(0x7f0000003140)="231594ed3f289bccdbba5892427df98307632ec7290c28e001baa436c367f6eb5f1a8ef3d6bb23ebd5cc7e9595417ce7a36046d4455f4230d902da7ffb8438ddc1d082b7ff6bd57df73c9a6c86145f463b7a6f99d09609d547218c3d7d604a97990e00afb778319293e62d2a55771dfd7c16c3f34797895017d9", 0x7a}, {&(0x7f00000031c0)="3c995679a552499dea54354894dfafb07fc66dd1311a30dfd395d563c6ea3ef2c6c5d7a340c371e80cd5fa73b2307ef00b0c5798103211e07ab01361c8e432b108c2dc5ba24df8116d8d625b5341cf6915fd7e0c0da3fc0b93e716280cf4f8dd40208d6d34843e1c8eab507333514912d3460edf9ba4da9707d4aeca47403b9fb0723b0a080f21dc868f63a649ffd8bb89605dcb6c71afb9535cc49f190cc04decb9ea3a", 0xa4}, {&(0x7f00000032c0)="63937013f124137fd0e0e9f090934773c66252b2d60591f55c7f0b5fba7f81e4115458e13e7b739e0651e7a3831d6fe924cb1cbfe7aa02769edb6c567ae815189499c8a12a5fd5386dc15b31c7803e2da1fb122bfa20acbc18b0c2bc029b2f278760bb33b39aa03603eaf452dd0656d55046e061bb2122e59f2f3437f4873bf667d4759f2ef9de693eaf805a14cc542df7ada47acc08c28f1a12913038d821b5", 0xa0}], 0x9, 0x0, 0x0, 0xa61fdec6b50d9133}}], 0x8, 0x4000000) recvmmsg(r3, &(0x7f0000002540)=[{{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000008c0)=""/243, 0xf3}, {&(0x7f0000002640)=""/157, 0x9d}], 0x2}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a80)=""/171, 0xab}, {&(0x7f0000000b40)=""/152, 0x98}, {&(0x7f00000007c0)=""/15, 0xf}, {&(0x7f0000000c00)}], 0x4, &(0x7f0000000c80)=""/86, 0x56}, 0x5}, {{&(0x7f0000000d00)=@isdn, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/4096, 0x1000}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001fc0)=""/174, 0xae}, {&(0x7f0000002080)=""/255, 0xff}, {&(0x7f0000002180)=""/184, 0xb8}, {&(0x7f0000002240)=""/133, 0x85}, {&(0x7f0000002300)=""/245, 0xf5}], 0x5, &(0x7f0000002480)=""/135, 0x87}, 0x7}], 0x4, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) vmsplice(r7, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ff7f0000000000dd111ead97a92200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = request_key(&(0x7f0000000440)='ceph\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='[\\%\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000540)={0x0, 0x0, r10}, &(0x7f0000000d80)=""/102, 0x66, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000034000107000000000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4864}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095000000eaffffffc60c67a86adc8467ff2990cc28943926379a204acc4afb1b9f233c33fa20ee6c25765e7abeccadfd36a0441648e270de69494b09b8d28eb6959435f9847425783a260c94662341f7e6c17bfa63dfe889f51a7f170a3829"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x42, 0x0, &(0x7f00000005c0)="c1188e99b95d02ff4284860186dd0e44839aa70694509a016a981c1133b229b56cecdf5892a9afeac4d2cc3653fa2fa80562e2548e652ca4ac2ff05706d1afc5af71", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x22) 12m39.075805477s ago: executing program 7 (id=3993): r0 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x958f7003, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefc, 0x0, 0x0, 0x0}, 0x90) socket$caif_seqpacket(0x25, 0x5, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000740), &(0x7f00000007c0)=r4}, 0x20) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1, 0xffffffffffffffff}, 0x4) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc63}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x80000001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0x9, 0x8, 0x4, 0x50}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @ldst={0x0, 0x3, 0x6, 0x9, 0xa, 0xffffffffffffffea}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfffff3c2, 0x62, &(0x7f0000000240)=""/98, 0x41100, 0x0, '\x00', r2, @fallback=0x9, r4, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xb, 0xfffff800, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000005c0)=[r5, r6, r7, r8, r9, r10], &(0x7f0000000600)=[{0x0, 0x1, 0x4, 0x6}, {0x4, 0x2, 0xf}, {0x2, 0x1, 0x2, 0x9}, {0x5, 0x1, 0x10, 0xa}, {0x4, 0x4, 0xe, 0x4}], 0x10, 0x1000}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r11, &(0x7f0000000000)=""/5, 0x37) r12 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, 0x0) r13 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r14, r15, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r12, 0xc02064b6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}) io_uring_enter(r13, 0x2def, 0x0, 0x0, 0x0, 0x0) 12m36.612384311s ago: executing program 7 (id=3997): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x4, @remote, 0xfffffff1}, 0x1c) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x1, @local, 0x7ff}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x86) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r1, &(0x7f0000000340)="13ea7c4afe0901e6ffef1a3766ee0ef2ed69d2dc47", 0x15, 0x884, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') pread64(r3, &(0x7f0000000140)=""/216, 0xd8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) fgetxattr(r3, &(0x7f0000000480)=ANY=[@ANYBLOB='seuripy.\x00'], &(0x7f00000004c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x38, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000240)={0x0, 0xa1aa, 0x0, 0x100000000, 0x4}, &(0x7f00000002c0)=0x18) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x2, 0x8002, 0x1, 0x4, r7}, 0x10) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000020ae336b16d292854b8dd97cb83c26751200", @ANYRES16=r5, @ANYBLOB="00022bbd7000fddbdf251a000000200022801c00008008000400020000000800020001800000080006000400000008009a0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 12m35.564117941s ago: executing program 7 (id=3999): ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000004c0)={r1, r2, r3, 0xffffffff, 0x3ff, 0x2, 0x3, 0x10, 0x800, 0xbb400000, 0xffffffff, 0xf4b6}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xffffffff, @local, 0xf}}, 0x24) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x80, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd07, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$inet6(r4, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 12m19.670728541s ago: executing program 35 (id=3999): ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000004c0)={r1, r2, r3, 0xffffffff, 0x3ff, 0x2, 0x3, 0x10, 0x800, 0xbb400000, 0xffffffff, 0xf4b6}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xffffffff, @local, 0xf}}, 0x24) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x80, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd07, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$inet6(r4, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 7m25.48416418s ago: executing program 6 (id=4829): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x40, 0x8, 0x6, 0x0, 0xfffffff8]}) 7m25.447578737s ago: executing program 6 (id=4831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x4, 0x0) 7m24.486185918s ago: executing program 6 (id=4834): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7m23.001431244s ago: executing program 6 (id=4836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x4}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000300)=""/246, 0xf6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) recvmmsg(r5, 0x0, 0x0, 0x10022, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1, 0x0, 0x10000}, 0x1c}}, 0x0) 7m21.974371569s ago: executing program 6 (id=4837): unshare(0x400) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xe) getsockopt$ax25_int(r0, 0x101, 0x5, 0x0, 0x0) 7m21.728098629s ago: executing program 6 (id=4838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x5}], 0x1, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 7m5.622208702s ago: executing program 36 (id=4838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x5}], 0x1, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 20.85377827s ago: executing program 1 (id=6016): r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000001c0)={0x8, @raw_data="fcdc643d72ceced0166b0c6d82ac36413eb645224babc3bbdec91600ea1cc10eb1b860b786ab2619b7a823da07bca0689c658090c3dea7e9a9f448442f7db3e5bdc73d49a0d861088d8267a6cccd0adc778ae47b2712a66ed45cfbe19a1bab9a5841f81aef138c341bc96081682d2ac25989d06d8ac70047915134b67e33d5768e3da627edb14a097595da1fae3196bd3dfc5e849c6c72f8adc5c839339001dd98e44b54a5e501c5e7f10ab875c52673075fba47e714fcb2c36622634e78b6d12257f1ee9bbe1517"}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) chdir(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = gettid() setpriority(0x1, r5, 0x8) ioctl(r4, 0x8b2c, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x0, 0x0, 0x1, 0x10}, 0x20) timer_create(0x5, &(0x7f0000000200)={0x0, 0x24, 0x4, @tid=r5}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000000300)='\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="ee9e59043322543e8ef59df7efcbf2bb6a28a5eb806caf73c576ed735317617b4084a9e24a3dc408220395ec2e1473298d4a121bbc", @ANYRESHEX=r0, @ANYBLOB=',pcr=00000000000000000058,permit_directio,obj_type=mountinfo\x00,\x00']) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000440)=0x4) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1402000102000000005a96ed8e721d51da00005dd121a58c9dab14bbcde560eff7e6d86ba44216acf273eb617ffb59f27d0ba148db4d58a9e44f5de648168d9e67a4fe8b044f0d5325a0398f5328f05141e1e8145cd2e61a4da48dc8e7bc157e5d4e8451d7"], 0x14}}, 0x0) openat$cgroup_procs(r1, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) socket$inet(0x2, 0x6, 0x4c) 17.839982648s ago: executing program 1 (id=6021): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20940, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) r4 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$isdn(0x22, 0x2, 0x26) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15.731378602s ago: executing program 2 (id=6028): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000101000000c3ffffffffffffff00", @ANYRES32=r3], 0x20}}, 0x20008040) 15.719095242s ago: executing program 1 (id=6029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) fcntl$addseals(r6, 0x409, 0xc) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xb8, 0x8, 0xfa04, 0xb8, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x90, 0xb8, 0x0, {0x0, 0x74020000}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x240c0081}, 0x20000000) 13.969199242s ago: executing program 1 (id=6033): epoll_create(0x10000e9) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(0x0, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)="0f149407", 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5}) ftruncate(0xffffffffffffffff, 0xffff) mq_open(&(0x7f0000000180)='$@\x00', 0x842, 0x121, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 13.387942671s ago: executing program 2 (id=6035): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xb8) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000100)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x0, 0x6, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x208d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x2000094}, 0x800) r6 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r7, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 12.609570416s ago: executing program 1 (id=6037): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x9, [{0x8f, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x7fffffff, 0xffffff78}, {0x5, 0xfdfd}, {0xfffffffb, 0x10}, {0xffff, 0x400003}], 0x9, 0x2, 0x2, 0x1, 0x6}}) (fail_nth: 5) 12.208166067s ago: executing program 1 (id=6038): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = timerfd_create(0x7, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) timerfd_gettime(r4, 0x0) 12.207816078s ago: executing program 5 (id=6039): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)=0x0) capget(&(0x7f0000000300)={0x20071026, r4}, &(0x7f0000000340)={0xd1, 0x15e, 0xffff, 0x8, 0x4, 0xf378}) socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000240)="245a6691580a2bf5e94180388337f07834ae96ab817bc04402d342d479d633c5c58a2dea3c4e70c10fb252b993700dc61d493febc7712422fb735e0c463d9d3510b92f0731154714f6ca53bba37d838f8e324471e4eb00bdefb5195d", 0x5c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0xff00, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xfffc) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000140)=0xfffffffd, 0x4) r8 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x390, 0x280, 0x280, 0x0, 0x280, 0x390, 0x350, 0x350, 0x390, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fb048abaa303de86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe91e59fb2978f6fc3ede666a84d0f6a748acdf95f03c3555c84f5009700"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="33030000000004000000150000b8216c11800800030007000000"], 0x20}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$key(r5, &(0x7f0000000100)={0x900, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="000afc000700000028bd7000fe"], 0x38}}, 0x40408c4) 9.371308997s ago: executing program 2 (id=6044): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="0a000100aa"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@report={0xd8, 0x20, 0x2, 0x70bd29, 0x25dfdbfc, {0x6c, {@in=@broadcast, @in6=@loopback, 0x4e22, 0x800, 0x4e21, 0x5, 0xa, 0x80, 0x20, 0xff, r2, r3}}, [@proto={0x5, 0x19, 0x6c}, @algo_aead={0x81, 0x12, {{'authencesn(wp256,cts-cbc-aes-ce)\x00'}, 0x1a8, 0x100, "4a3702bdba0e28f6e30e1901d83e62c07e19a664b4fc18c771bace12e4eea54ef0cc18a796dcdbcd29767539d19debc9d20df6d8e6"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x5}, 0x200480c0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 8.829834336s ago: executing program 8 (id=6047): epoll_create(0x10000e9) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(0x0, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)="0f149407", 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5}) ftruncate(0xffffffffffffffff, 0xffff) mq_open(&(0x7f0000000180)='$@\x00', 0x842, 0x121, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 8.632217435s ago: executing program 5 (id=6048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc810}, 0xc0) 8.028470194s ago: executing program 5 (id=6049): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) times(&(0x7f0000000180)) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='cramfs\x00', 0x8080, &(0x7f00000001c0)='discard') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x200008, 0xb}}) 7.860955795s ago: executing program 8 (id=6051): epoll_create(0x10000e9) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(0x0, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x17, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) getpid() syz_emit_ethernet(0x66, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6100272400303afffc000000000000000000000000000001ff0200000000000000000000000000019078000000006d2308d31000000120010000000000000000000000000001ff010000000000000000000000000001"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r3, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5}) mq_open(&(0x7f0000000180)='$@\x00', 0x842, 0x121, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 7.684561765s ago: executing program 8 (id=6052): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000006080)=""/4097, 0x1001}, {&(0x7f0000000000)=""/215, 0xd7}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002f00)=""/4107, 0x100b}, {&(0x7f0000001ac0)=""/4112, 0x1010}, {&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000001180)=""/35, 0x23}, {&(0x7f00000011c0)=""/158, 0x9e}], 0x5, 0x0, 0x300}, 0xf}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 7.376764862s ago: executing program 2 (id=6053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f00000000c0)=0x300) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a2a20dea2a2a8"], 0xa) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80) socket(0x1, 0x803, 0x5bd) ioctl$CEC_RECEIVE(r8, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, "260000001000", 0x0, 0x0, 0x4a, 0x0, 0x0, 0x9, 0xe}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) 7.375879989s ago: executing program 8 (id=6054): socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1015c, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x1, @pix_mp={0xf, 0x5be7, 0x0, 0x0, 0x3, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x3, 0xb}, {0x4, 0x489aa92e}, {0x20005, 0x100000}, {0xff, 0x7}], 0x2, 0x2c, 0x2, 0x0, 0x3}}, 0x7ff}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x3c, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r2, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000040)={0x0, "747af63ae5deef293c7c54e5e8d96e882dd0433054e704e27e91085a1b590777", 0x2}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r5, 0x0) getrandom(0x0, 0x0, 0x2) socket(0x1e, 0x5, 0x0) mkdir(0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) 6.444265974s ago: executing program 2 (id=6057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x28f5c27, &(0x7f0000000000)=0x3, 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000"], 0x7c}}, 0x10) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000280)=[0x0, 0x8, 0x7, 0xffffff9d, 0xef, 0x796f, 0x5, 0x5]) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0218ff7f00000000000000000000000003001a000020000002004e090000000100000000000000007fe8c4307c4b82f07b81d5bc1c46d7aa0e3f76685618e3622a13076d0dd6ef1dc0de23414cc922cc0dba515f442ff312ba858c07f795bbf7cd11cf7f9fe16e461ac35721"], 0x28}, 0x1, 0x7}, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 5.854744718s ago: executing program 9 (id=6059): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r6 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r6, 0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r9) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x3, 0x1, {0xa, 0x4e1f, 0x9, @private2, 0x9a}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r9, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) fsmount(r9, 0x0, 0xfb) timer_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000060000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 5.352031297s ago: executing program 9 (id=6060): epoll_create(0x10000e9) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(0x0, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)="0f149407", 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5}) ftruncate(0xffffffffffffffff, 0xffff) mq_open(&(0x7f0000000180)='$@\x00', 0x842, 0x121, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4.742446556s ago: executing program 8 (id=6061): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x500, 0x0, 0x52424752, 0x2, 0x0, [{0x5, 0xffffffff}, {}, {}, {0x10000000, 0xfffffff8}, {0x3, 0xffffffff}, {0xfffffffe, 0x1}], 0x0, 0x8, 0x0, 0x0, 0x1}}) 4.611833268s ago: executing program 8 (id=6062): r0 = creat(0x0, 0x182) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100020ba058a87dd50072ea0000", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4], 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87df}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000500)) 4.454208904s ago: executing program 5 (id=6063): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') setuid(0xee01) mlockall(0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x769f00b363895778, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket(0x22, 0x2, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100104b3ec10030478fa0300000003010902120001000400400904"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4.375225895s ago: executing program 9 (id=6064): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000000}) 3.747508095s ago: executing program 5 (id=6065): mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_dev$media(&(0x7f0000000040), 0x75a, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0x7, @loopback={0xffffff7f00000000}, 0x100008}], 0x1c) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x249249249249269, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x7}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x7f, 0x0, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x3, 0x200, 0xfff, 0xfffffff1, 0x7, 0x0, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x1fe, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x9, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x2, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0x4, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x7, 0x391, 0x0, 0x0, 0x401, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2002, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffef6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x981, 0x9, 0x1, 0x3c, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0xffffffff, 0x400, 0x1, 0x8a, 0xec, 0x6, 0x0, 0xfffffffb, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x2, 0xd87, 0x80000001, 0x48e0, 0x8, 0xa, 0x40, 0x400, 0x20000005, 0x2, 0x4e1b, 0x1, 0x1000, 0x9, 0x4, 0x3, 0x0, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x0, 0x79, 0x8, 0x9, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x6, 0x9, 0x2}}]}]}}]}, 0x478}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001d40)='f', 0x1}], 0x1}}], 0x1, 0x0) 3.327452546s ago: executing program 9 (id=6066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f00000000c0)=0x300) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a2a20dea2a2a8"], 0xa) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80) socket(0x1, 0x803, 0x5bd) ioctl$CEC_RECEIVE(r8, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, "260000001000", 0x0, 0x0, 0x4a, 0x0, 0x0, 0x9, 0xe}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) 2.2336617s ago: executing program 9 (id=6067): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x82, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x34, 0x0, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) copy_file_range(r3, &(0x7f00000008c0)=0xfffffffffffffffc, r1, 0x0, 0x3, 0x0) fstat(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) write$smackfs_ptrace(r3, &(0x7f0000000080)=0x2, 0x14) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)='L', 0x1}) writev(r8, &(0x7f0000000a40)=[{&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0a38bc757e61b5aab090000000000000051ed697ff263589940cf437f1efae8e2342bb1adc1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab63a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9", 0xb8}, {0x0}], 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000400)=@ethtool_test={0x1a, 0xc, 0x1c, 0x4, [0x463, 0x8, 0x3c3, 0x4e8]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0001}]}) 1.927730812s ago: executing program 2 (id=6068): socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x7, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x2004, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x801, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) 69.72116ms ago: executing program 5 (id=6069): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280480, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) epoll_wait(r3, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x410000, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000380)={r8, @in6={{0xa, 0x4e21, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xebc}}}, 0x84) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="1400000038000b63d2c57022f5d8f1781024fc60", 0x14}], 0x1}, 0x0) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 9 (id=6070): r0 = socket(0x6, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRESHEX, @ANYRESOCT=r0]) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES8=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64=r1, @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x200040b4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c000280050001000000000014000180080001007f00000108000200ac141400080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020109040000000000000000021f"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0xffffffffffffff00, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES16=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x48080) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="dd9d480e", 0x4) kernel console output (not intermixed with test programs): [ 1687.843082][ T6601] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1687.949030][ T6603] Bluetooth: hci3: command 0x0405 tx timeout [ 1688.509996][ T7433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1688.542529][ T7433] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1688.675914][ T7433] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1689.254420][ T7433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1689.261321][ T6603] Bluetooth: hci0: command 0x0c1a tx timeout [ 1689.269299][ T7433] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1689.314562][ T7433] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1689.531173][ T6749] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1689.560629][ T6749] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1689.625412][ T6749] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1689.645885][ T6749] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1690.008780][ T6601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.404398][ T6601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1690.450882][ T747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.458166][ T747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1691.341583][ T6603] Bluetooth: hci3: command 0x0405 tx timeout [ 1691.348398][T26184] Bluetooth: hci0: command 0x0c1a tx timeout [ 1691.704609][T17988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.711918][T17988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.810164][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1692.306802][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.356292][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.606471][T29958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.613740][T29958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.762633][T29958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.769972][T29958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.256924][ T6603] Bluetooth: hci3: command 0x0405 tx timeout [ 1694.263351][T26184] Bluetooth: hci0: command 0x0c1a tx timeout [ 1696.106136][ T6601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.295377][T26184] Bluetooth: hci3: command 0x0405 tx timeout [ 1696.532805][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1698.602908][ T6601] veth0_vlan: entered promiscuous mode [ 1698.719474][ T6601] veth1_vlan: entered promiscuous mode [ 1698.746836][T31251] IPVS: starting estimator thread 0... [ 1698.966487][ T7648] IPVS: using max 31 ests per chain, 74400 per kthread [ 1699.547613][ T6601] veth0_macvtap: entered promiscuous mode [ 1699.611326][ T6601] veth1_macvtap: entered promiscuous mode [ 1699.834899][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1699.903314][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.195605][ T6601] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.195832][ T6601] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.196021][ T6601] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.210779][ T6601] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.807102][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.815098][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.967678][ T6749] veth0_vlan: entered promiscuous mode [ 1701.006202][ T7697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4947'. [ 1701.013344][T13312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.567630][T13312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.609105][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4947'. [ 1701.635445][ T6749] veth1_vlan: entered promiscuous mode [ 1701.887904][ T6749] veth0_macvtap: entered promiscuous mode [ 1701.924172][ T6749] veth1_macvtap: entered promiscuous mode [ 1702.758628][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1702.777714][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1702.788815][ T6749] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.797743][ T6749] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.814152][ T7708] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1703.007115][ T6749] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.016154][ T6749] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.650428][ T7730] syz.1.4955: attempt to access beyond end of device [ 1704.650428][ T7730] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1704.663508][ T7730] vxfs: unable to read disk superblock at 1 [ 1704.670014][ T7730] syz.1.4955: attempt to access beyond end of device [ 1704.670014][ T7730] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1704.682952][ T7730] vxfs: unable to read disk superblock at 8 [ 1704.689782][ T7730] vxfs: can't find superblock. [ 1704.976652][T13312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.984589][T13312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.010906][ T708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.025059][ T708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.056530][ T1209] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1706.831135][ T1209] usb 9-1: Using ep0 maxpacket: 8 [ 1706.860324][ T1209] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.874475][ T1209] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1706.888878][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.925567][ T1209] usb 9-1: config 0 descriptor?? [ 1707.022184][ T1209] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1707.927393][ T1209] gspca_vc032x: reg_r err -110 [ 1707.967025][ T1209] vc032x 9-1:0.0: probe with driver vc032x failed with error -110 [ 1708.006505][T22736] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1708.255712][T22736] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1708.269081][ T7787] syz.9.4967: attempt to access beyond end of device [ 1708.269081][ T7787] nbd9: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1708.282360][ T7787] vxfs: unable to read disk superblock at 1 [ 1708.289084][ T7787] syz.9.4967: attempt to access beyond end of device [ 1708.289084][ T7787] nbd9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1708.302074][ T7787] vxfs: unable to read disk superblock at 8 [ 1708.308144][ T7787] vxfs: can't find superblock. [ 1708.325655][T22736] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1708.340760][T22736] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1708.360477][T22736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.703725][T22736] usb 2-1: GET_CAPABILITIES returned 0 [ 1708.733918][T22736] usbtmc 2-1:16.0: can't read capabilities [ 1708.984654][ T1209] usb 2-1: USB disconnect, device number 84 [ 1709.185872][ T4832] usb 9-1: USB disconnect, device number 16 [ 1709.390819][ T7826] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1709.496601][T22736] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1709.684988][T22736] usb 6-1: Using ep0 maxpacket: 16 [ 1709.714011][T22736] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.989259][T22736] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1710.006830][T22736] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1710.023295][T22736] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1710.034483][T22736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1710.044150][T22736] usb 6-1: SerialNumber: syz [ 1711.072482][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.089062][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.326056][ T7814] random: crng reseeded on system resumption [ 1712.309363][ T1209] usb 6-1: USB disconnect, device number 77 [ 1712.742211][ T7898] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1712.759983][ T7898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4982'. [ 1713.623019][ T7918] delete_channel: no stack [ 1713.734381][ T7926] syz_tun: entered allmulticast mode [ 1713.818035][ T7925] syz_tun: left allmulticast mode [ 1714.685273][ T7940] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4985'. [ 1714.765617][ T30] audit: type=1326 audit(1755802493.353:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.9.4979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f940eb8ebe9 code=0x0 [ 1718.986744][T30898] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1719.455837][T30898] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1719.487930][T30898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1719.521551][T30898] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1719.557016][ T5928] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1719.575290][T30898] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1719.605316][T30898] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1719.627125][T30898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.655841][T30898] usb 6-1: Product: syz [ 1719.660189][T30898] usb 6-1: Manufacturer: syz [ 1719.664811][T30898] usb 6-1: SerialNumber: syz [ 1719.703916][T30898] smsusb:smsusb_probe: board id=8, interface number 0 [ 1719.728824][ T1209] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1719.737016][ T5928] usb 10-1: Using ep0 maxpacket: 16 [ 1719.758008][ T5928] usb 10-1: config 1 has an invalid interface number: 27 but max is 0 [ 1719.786885][ T5928] usb 10-1: config 1 has no interface number 0 [ 1719.815860][ T5928] usb 10-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1719.852844][ T5928] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1719.862099][ T5928] usb 10-1: Product: syz [ 1719.871644][ T5928] usb 10-1: Manufacturer: syz [ 1719.877224][ T5928] usb 10-1: SerialNumber: syz [ 1719.910251][ T7965] cramfs: Unknown parameter 'discard@@ u $' [ 1719.926566][ T1209] usb 9-1: Using ep0 maxpacket: 16 [ 1719.936279][ T1209] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.959656][ T1209] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1720.205502][ T1209] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1720.665856][ T1209] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1720.690530][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1720.742348][ T5928] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1720.752252][ T1209] usb 9-1: SerialNumber: syz [ 1720.894129][ T5928] usb 10-1: USB disconnect, device number 2 [ 1720.966055][ T8016] syz_tun: entered allmulticast mode [ 1720.982862][ T8015] syz_tun: left allmulticast mode [ 1721.045563][ T7986] random: crng reseeded on system resumption [ 1721.290418][ T5905] usb 9-1: USB disconnect, device number 17 [ 1722.226016][T30898] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1722.245222][T30898] smsusb 6-1:1.0: probe with driver smsusb failed with error -71 [ 1722.352560][T30898] usb 6-1: USB disconnect, device number 78 [ 1726.109349][ T8090] syz_tun: entered allmulticast mode [ 1726.116111][ T8088] syz_tun: left allmulticast mode [ 1727.862959][ T8112] binder: Bad value for 'max' [ 1727.899781][ T4832] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1728.280539][ T8107] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1728.317506][ T8107] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5014'. [ 1728.544334][ T4832] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1729.098827][ T4832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.132732][ T4832] usb 9-1: config 0 descriptor?? [ 1729.285450][ T4832] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1730.054911][ T4832] gspca_spca508: reg_read err -110 [ 1730.093892][ T4832] gspca_spca508: reg_read err -32 [ 1730.105616][ T4832] gspca_spca508: reg_read err -32 [ 1730.117292][ T4832] gspca_spca508: reg_read err -32 [ 1730.141659][ T4832] gspca_spca508: reg write: error -32 [ 1730.152200][ T4832] spca508 9-1:0.0: probe with driver spca508 failed with error -32 [ 1730.272075][ T8143] befs: (nullb0): No write support. Marking filesystem read-only [ 1730.294359][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.336949][ T8143] befs: (nullb0): invalid magic header [ 1734.865390][ T8182] nfs4: Unexpected value for 'acl' [ 1736.214968][ T8200] befs: (nullb0): No write support. Marking filesystem read-only [ 1736.374660][ T5905] usb 9-1: USB disconnect, device number 18 [ 1736.411758][ T8200] befs: (nullb0): invalid magic header [ 1738.026741][ T8229] delete_channel: no stack [ 1738.041575][ T8240] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1738.085184][ T8240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5042'. [ 1738.637840][ T8247] tipc: Started in network mode [ 1738.695839][ T8247] tipc: Node identity 8a6be03e800e, cluster identity 4711 [ 1738.729278][ T8247] tipc: Enabled bearer , priority 0 [ 1738.904344][ T8244] tipc: Resetting bearer [ 1740.078975][T30898] tipc: Node number set to 174448702 [ 1740.527519][ T8242] tipc: Disabling bearer [ 1740.770486][ T8289] nfs4: Unexpected value for 'acl' [ 1741.760331][ T8305] syz.9.5054: attempt to access beyond end of device [ 1741.760331][ T8305] nbd9: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1741.774633][ T8305] vxfs: unable to read disk superblock at 1 [ 1741.780696][ T8305] syz.9.5054: attempt to access beyond end of device [ 1741.780696][ T8305] nbd9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1741.793566][ T8305] vxfs: unable to read disk superblock at 8 [ 1741.799500][ T8305] vxfs: can't find superblock. [ 1747.907387][ T8371] syz_tun: entered allmulticast mode [ 1747.933436][ T8365] syz_tun: left allmulticast mode [ 1749.290605][T30898] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1749.504095][ T8397] nfs4: Unexpected value for 'acl' [ 1749.541891][T30898] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1749.986486][T30898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.029665][T30898] usb 6-1: config 0 descriptor?? [ 1750.040042][ T8400] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1750.075105][T30898] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1750.138109][ T8400] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5074'. [ 1750.847233][T30898] gspca_spca508: reg_read err -110 [ 1750.925740][T30898] gspca_spca508: reg_read err -32 [ 1750.956564][T30898] gspca_spca508: reg_read err -32 [ 1751.439672][T30898] gspca_spca508: reg_read err -32 [ 1751.459751][T30898] gspca_spca508: reg write: error -32 [ 1751.522822][T30898] spca508 6-1:0.0: probe with driver spca508 failed with error -32 [ 1752.769008][ T8414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1753.350896][ T8414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1754.846499][T26184] Bluetooth: hci0: command 0x0c1a tx timeout [ 1755.416495][T26184] Bluetooth: hci3: command 0x0405 tx timeout [ 1756.666255][ T8462] nfs4: Unexpected value for 'acl' [ 1757.071746][ T4832] usb 6-1: USB disconnect, device number 79 [ 1758.104263][ T8482] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1758.449388][ T8493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1759.741772][ T8476] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5090'. [ 1760.817323][T22736] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1761.135510][T22736] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1761.164484][T22736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.189594][T22736] usb 2-1: config 0 descriptor?? [ 1761.204805][T22736] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1761.991707][ T8529] delete_channel: no stack [ 1762.036824][T22736] gspca_spca508: reg_read err -110 [ 1762.063243][T22736] gspca_spca508: reg_read err -32 [ 1762.197383][T22736] gspca_spca508: reg_read err -32 [ 1762.202845][T22736] gspca_spca508: reg_read err -32 [ 1762.224673][T22736] gspca_spca508: reg write: error -32 [ 1762.838831][T22736] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 1764.685436][ T8562] nfs4: Unexpected value for 'acl' [ 1765.534977][ T8577] nfs4: Unexpected value for 'acl' [ 1766.289385][ T1503] usb 2-1: USB disconnect, device number 85 [ 1766.896870][ T8596] loop6: detected capacity change from 0 to 63 [ 1766.958720][ T8361] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.967365][ T8361] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.976039][ T8361] Buffer I/O error on dev loop6, logical block 0, async page read [ 1767.007552][ T8361] Buffer I/O error on dev loop6, logical block 0, async page read [ 1767.016165][ T8361] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.679768][ T8637] nfs4: Unexpected value for 'acl' [ 1770.665983][ T8656] tipc: Enabled bearer , priority 0 [ 1770.687242][ T8656] syzkaller0: entered promiscuous mode [ 1770.795366][ T8656] syzkaller0: entered allmulticast mode [ 1771.100918][ T8656] tipc: Resetting bearer [ 1771.249600][ T8652] tipc: Resetting bearer [ 1772.190016][ T8652] tipc: Disabling bearer [ 1773.296564][ T8694] loop6: detected capacity change from 0 to 63 [ 1773.328214][ T8694] Buffer I/O error on dev loop6, logical block 0, async page read [ 1773.339612][ T8694] Buffer I/O error on dev loop6, logical block 1, async page read [ 1773.348195][ T8694] Buffer I/O error on dev loop6, logical block 2, async page read [ 1773.356441][ T8694] Buffer I/O error on dev loop6, logical block 3, async page read [ 1773.365306][ T8694] Buffer I/O error on dev loop6, logical block 0, async page read [ 1773.373807][ T8694] Buffer I/O error on dev loop6, logical block 1, async page read [ 1773.382235][ T8694] Buffer I/O error on dev loop6, logical block 2, async page read [ 1773.390579][ T8694] Buffer I/O error on dev loop6, logical block 3, async page read [ 1773.399747][ T8694] Buffer I/O error on dev loop6, logical block 0, async page read [ 1773.408639][ T8694] Buffer I/O error on dev loop6, logical block 1, async page read [ 1775.534924][ T8714] binder: Bad value for 'max' [ 1777.979145][ T8767] syz_tun: entered allmulticast mode [ 1778.015088][ T8765] syz_tun: left allmulticast mode [ 1778.093589][ T8781] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1778.625104][ T8791] tipc: Enabled bearer , priority 0 [ 1779.060547][ T8797] tipc: Resetting bearer [ 1779.927394][ T8790] tipc: Disabling bearer [ 1781.143352][ T8826] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1781.262713][ T8823] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5167'. [ 1783.712385][ T8866] binder: Bad value for 'max' [ 1783.986235][ T8882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1785.631355][ T8903] No control pipe specified [ 1788.170272][ T8931] binder: Bad value for 'max' [ 1788.979488][ T8936] MTD: Couldn't look up './cgroup': -15 [ 1788.985109][ T8936] ./cgroup: Can't lookup blockdev [ 1791.746962][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.305398][ T8992] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1793.392220][ T8992] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5215'. [ 1793.602066][ T8993] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1796.681616][ T9037] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1796.837146][ T9036] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5230'. [ 1797.252973][ T9041] nfs4: Unexpected value for 'acl' [ 1799.787369][ T9076] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1799.807399][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5243'. [ 1801.408179][ T9111] syz.8.5250: attempt to access beyond end of device [ 1801.408179][ T9111] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1801.425872][ T9111] vxfs: unable to read disk superblock at 1 [ 1801.476283][ T9114] syz_tun: entered allmulticast mode [ 1801.480133][ T9111] syz.8.5250: attempt to access beyond end of device [ 1801.480133][ T9111] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1801.495165][ T9111] vxfs: unable to read disk superblock at 8 [ 1801.498886][ T9113] syz_tun: left allmulticast mode [ 1801.508026][ T9111] vxfs: can't find superblock. [ 1802.443466][ T9125] binder: Bad value for 'max' [ 1803.501498][ T9128] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1803.697862][ T9136] MTD: Couldn't look up './cgroup': -15 [ 1803.705979][ T9136] ./cgroup: Can't lookup blockdev [ 1805.929812][ T9157] delete_channel: no stack [ 1805.983423][ T9161] nfs4: Unexpected value for 'acl' [ 1807.768748][ T9189] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1807.806628][ T4832] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1807.996441][ T4832] usb 10-1: Using ep0 maxpacket: 16 [ 1808.081143][ T4832] usb 10-1: config 1 has an invalid interface number: 27 but max is 0 [ 1808.106592][ T4832] usb 10-1: config 1 has no interface number 0 [ 1808.693095][ T4832] usb 10-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1808.703465][ T4832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1808.711893][ T4832] usb 10-1: Product: syz [ 1808.716414][ T4832] usb 10-1: Manufacturer: syz [ 1808.721128][ T4832] usb 10-1: SerialNumber: syz [ 1808.971720][ T4832] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1810.363274][ T4832] usb 10-1: USB disconnect, device number 3 [ 1813.689698][ T9267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1814.966839][ T1209] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1815.166748][ T1209] usb 9-1: Using ep0 maxpacket: 16 [ 1815.180269][ T1209] usb 9-1: config 1 has an invalid interface number: 27 but max is 0 [ 1815.199661][ T1209] usb 9-1: config 1 has no interface number 0 [ 1815.214373][ T1209] usb 9-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1815.224550][ T1209] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1815.233219][ T1209] usb 9-1: Product: syz [ 1815.238283][ T1209] usb 9-1: Manufacturer: syz [ 1815.242997][ T1209] usb 9-1: SerialNumber: syz [ 1815.472699][ T1209] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1815.697468][ T1209] usb 9-1: USB disconnect, device number 19 [ 1817.374871][ T9329] tipc: Enabled bearer , priority 0 [ 1817.392985][ T9329] syzkaller0: entered promiscuous mode [ 1817.402105][ T9329] syzkaller0: entered allmulticast mode [ 1817.426804][ T1209] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1817.527872][ T9329] tipc: Resetting bearer [ 1817.541389][ T9327] tipc: Resetting bearer [ 1817.597821][ T1209] usb 6-1: Using ep0 maxpacket: 16 [ 1817.605082][ T1209] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.616984][ T1209] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1817.633248][ T9327] tipc: Disabling bearer [ 1817.640111][ T1209] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1817.656178][ T1209] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1817.666011][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1817.698925][ T1209] usb 6-1: SerialNumber: syz [ 1817.941697][ T9322] random: crng reseeded on system resumption [ 1818.017646][T31251] usb 6-1: USB disconnect, device number 80 [ 1818.180112][ T9347] loop6: detected capacity change from 0 to 63 [ 1818.307523][ T9347] buffer_io_error: 7 callbacks suppressed [ 1818.307536][ T9347] Buffer I/O error on dev loop6, logical block 0, async page read [ 1818.368253][ T9347] Buffer I/O error on dev loop6, logical block 1, async page read [ 1818.436722][ T9347] Buffer I/O error on dev loop6, logical block 2, async page read [ 1818.476848][ T9347] Buffer I/O error on dev loop6, logical block 3, async page read [ 1818.549363][ T9180] Buffer I/O error on dev loop6, logical block 0, async page read [ 1818.598052][ T9180] Buffer I/O error on dev loop6, logical block 1, async page read [ 1818.646768][ T9180] Buffer I/O error on dev loop6, logical block 2, async page read [ 1818.655006][ T9180] Buffer I/O error on dev loop6, logical block 3, async page read [ 1818.664732][ T9180] Buffer I/O error on dev loop6, logical block 0, async page read [ 1818.672984][ T9180] Buffer I/O error on dev loop6, logical block 1, async page read [ 1821.338324][ T1209] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1821.536681][ T1209] usb 10-1: Using ep0 maxpacket: 16 [ 1821.569324][ T1209] usb 10-1: config 1 has an invalid interface number: 27 but max is 0 [ 1821.610579][ T1209] usb 10-1: config 1 has no interface number 0 [ 1821.781562][ T1209] usb 10-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1822.346488][ T1209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1822.354886][ T1209] usb 10-1: Product: syz [ 1822.366784][ T1209] usb 10-1: Manufacturer: syz [ 1822.371529][ T1209] usb 10-1: SerialNumber: syz [ 1822.642032][ T1209] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1822.666740][ T5905] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1822.711845][ T9439] tipc: Enabled bearer , priority 0 [ 1822.720250][ T9439] syzkaller0: entered promiscuous mode [ 1822.725941][ T9439] syzkaller0: entered allmulticast mode [ 1822.796712][ T1209] usb 10-1: USB disconnect, device number 4 [ 1822.798755][ T9439] tipc: Resetting bearer [ 1822.840966][ T9435] tipc: Resetting bearer [ 1822.847425][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 1822.863286][ T5905] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.887338][ T5905] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1822.908502][ T5905] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1822.957868][ T9435] tipc: Disabling bearer [ 1822.965095][ T5905] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1822.974598][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1822.996695][ T5905] usb 6-1: SerialNumber: syz [ 1823.212892][ T9417] random: crng reseeded on system resumption [ 1823.443526][ T1209] usb 6-1: USB disconnect, device number 81 [ 1826.512851][ T9503] syz_tun: entered allmulticast mode [ 1826.537225][ T9502] syz_tun: left allmulticast mode [ 1826.914385][ T9514] nfs4: Unexpected value for 'acl' [ 1827.684174][ T9517] binder: Bad value for 'max' [ 1828.100101][ T9519] tipc: Enabled bearer , priority 0 [ 1828.132580][ T9519] syzkaller0: entered promiscuous mode [ 1828.156049][ T9519] syzkaller0: entered allmulticast mode [ 1828.500530][ T9519] tipc: Resetting bearer [ 1828.638602][ T9518] tipc: Resetting bearer [ 1828.746037][ T9518] tipc: Disabling bearer [ 1828.978633][ T9536] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1831.188106][ T9553] loop6: detected capacity change from 0 to 63 [ 1831.203749][ T9553] buffer_io_error: 14 callbacks suppressed [ 1831.203769][ T9553] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.217781][ T9553] Buffer I/O error on dev loop6, logical block 1, async page read [ 1831.225826][ T9553] Buffer I/O error on dev loop6, logical block 2, async page read [ 1831.233827][ T9553] Buffer I/O error on dev loop6, logical block 3, async page read [ 1831.241908][ T9553] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.250277][ T9553] Buffer I/O error on dev loop6, logical block 1, async page read [ 1831.262392][ T9553] Buffer I/O error on dev loop6, logical block 2, async page read [ 1831.270892][ T9553] Buffer I/O error on dev loop6, logical block 3, async page read [ 1831.279364][ T9553] Buffer I/O error on dev loop6, logical block 0, async page read [ 1831.287777][ T9553] Buffer I/O error on dev loop6, logical block 1, async page read [ 1832.111050][ T9567] MTD: Couldn't look up './cgroup': -15 [ 1832.117931][ T9567] ./cgroup: Can't lookup blockdev [ 1832.904511][ T9571] nfs4: Unexpected value for 'acl' [ 1833.568638][ T9582] tipc: Enabled bearer , priority 0 [ 1833.622807][ T9578] tipc: Resetting bearer [ 1833.799241][ T9576] tipc: Disabling bearer [ 1834.626715][ T9601] MTD: Couldn't look up './cgroup': -15 [ 1834.632455][ T9601] ./cgroup: Can't lookup blockdev [ 1835.220182][ T9614] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1835.245501][ T9614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5354'. [ 1836.059704][ T9624] nfs4: Unexpected value for 'acl' [ 1837.947691][ T9641] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1838.036626][ T9641] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5361'. [ 1838.868488][ T9647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1839.697754][ T9651] syz_tun: entered allmulticast mode [ 1839.726196][ T9649] syz_tun: left allmulticast mode [ 1841.352177][ T9669] binder: Bad value for 'max' [ 1841.694234][ T9674] nfs4: Unexpected value for 'acl' [ 1842.354749][ T9689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1843.115986][ T9694] syz_tun: entered allmulticast mode [ 1843.681506][ T9702] loop6: detected capacity change from 0 to 63 [ 1843.701252][ T9667] buffer_io_error: 7 callbacks suppressed [ 1843.701268][ T9667] Buffer I/O error on dev loop6, logical block 0, async page read [ 1843.758114][ T9667] Buffer I/O error on dev loop6, logical block 0, async page read [ 1843.829658][ T9667] Buffer I/O error on dev loop6, logical block 0, async page read [ 1843.843220][ T9667] Buffer I/O error on dev loop6, logical block 0, async page read [ 1843.889692][ T9667] Buffer I/O error on dev loop6, logical block 0, async page read [ 1845.659886][ T9713] delete_channel: no stack [ 1849.116591][ T1503] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1849.286581][ T1503] usb 2-1: Using ep0 maxpacket: 16 [ 1849.296880][ T1503] usb 2-1: config 1 has an invalid interface number: 27 but max is 0 [ 1849.308418][ T9767] delete_channel: no stack [ 1849.321209][ T1503] usb 2-1: config 1 has no interface number 0 [ 1849.342515][ T9770] tipc: Started in network mode [ 1849.349261][ T1503] usb 2-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1849.376662][ T9770] tipc: Node identity ba0056f8f15b, cluster identity 4711 [ 1849.378896][ T1503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1849.384306][ T9770] tipc: Enabled bearer , priority 0 [ 1849.414853][ T1503] usb 2-1: Product: syz [ 1849.419191][ T1503] usb 2-1: Manufacturer: syz [ 1849.423828][ T1503] usb 2-1: SerialNumber: syz [ 1849.465474][ T9774] syzkaller0: entered promiscuous mode [ 1849.492146][ T9774] syzkaller0: entered allmulticast mode [ 1849.535216][ T9770] tipc: Resetting bearer [ 1849.545941][ T9768] tipc: Resetting bearer [ 1849.748234][ T1503] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1849.764016][ T9768] tipc: Disabling bearer [ 1849.786888][ T9783] syz_tun: entered allmulticast mode [ 1850.301218][ T1503] usb 2-1: USB disconnect, device number 86 [ 1851.786695][T31251] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1851.795271][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1851.936596][T31251] usb 2-1: device descriptor read/64, error -32 [ 1852.623813][T31251] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1852.816874][T31251] usb 2-1: Using ep0 maxpacket: 16 [ 1852.859786][T31251] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.913660][T31251] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1852.980702][T31251] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1853.179723][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.219252][T31251] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1854.253237][T31251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1854.268966][T31251] usb 2-1: SerialNumber: syz [ 1854.380728][T31251] usb 2-1: USB disconnect, device number 88 [ 1856.818280][ T9889] delete_channel: no stack [ 1857.117485][ T9904] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1857.256380][ T9901] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5417'. [ 1857.825669][ T9914] loop6: detected capacity change from 0 to 63 [ 1857.839707][ T9914] Buffer I/O error on dev loop6, logical block 0, async page read [ 1857.847841][ T9914] Buffer I/O error on dev loop6, logical block 1, async page read [ 1857.855896][ T9914] Buffer I/O error on dev loop6, logical block 2, async page read [ 1857.864105][ T9914] Buffer I/O error on dev loop6, logical block 3, async page read [ 1857.872655][ T9914] Buffer I/O error on dev loop6, logical block 0, async page read [ 1857.880980][ T9914] Buffer I/O error on dev loop6, logical block 1, async page read [ 1857.889743][ T9914] Buffer I/O error on dev loop6, logical block 2, async page read [ 1857.898178][ T9914] Buffer I/O error on dev loop6, logical block 3, async page read [ 1857.908235][ T9667] Buffer I/O error on dev loop6, logical block 0, async page read [ 1857.908433][T31251] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1857.943702][ T9667] Buffer I/O error on dev loop6, logical block 1, async page read [ 1858.831093][T31251] usb 6-1: Using ep0 maxpacket: 16 [ 1858.876191][T31251] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.902345][T31251] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1858.918350][T31251] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1858.954599][T31251] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1858.977416][T31251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1858.985648][T31251] usb 6-1: SerialNumber: syz [ 1860.163949][ T9955] random: crng reseeded on system resumption [ 1861.346378][ T1503] usb 6-1: USB disconnect, device number 82 [ 1861.409357][ T9962] delete_channel: no stack [ 1866.143243][T10033] syz.5.5445: attempt to access beyond end of device [ 1866.143243][T10033] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1866.158081][T10033] vxfs: unable to read disk superblock at 1 [ 1866.165852][T10033] syz.5.5445: attempt to access beyond end of device [ 1866.165852][T10033] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1866.180646][T10033] vxfs: unable to read disk superblock at 8 [ 1866.187028][T10033] vxfs: can't find superblock. [ 1869.222067][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1871.712110][T10116] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1871.863782][T10113] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5471'. [ 1872.789071][T10126] nfs4: Unexpected value for 'acl' [ 1876.269280][ T4832] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1876.436497][ T4832] usb 2-1: Using ep0 maxpacket: 8 [ 1876.456593][ T4832] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1876.528265][ T4832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1876.554256][ T4832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1876.585408][ T4832] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1876.607333][ T4832] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1876.623872][ T4832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.431455][ T4832] usb 2-1: GET_CAPABILITIES returned 0 [ 1877.512035][T10195] syz.8.5487: attempt to access beyond end of device [ 1877.512035][T10195] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1877.514828][ T4832] usbtmc 2-1:16.0: can't read capabilities [ 1877.579779][T10195] vxfs: unable to read disk superblock at 1 [ 1877.615388][T10195] syz.8.5487: attempt to access beyond end of device [ 1877.615388][T10195] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1877.633715][T10195] vxfs: unable to read disk superblock at 8 [ 1877.649180][T10195] vxfs: can't find superblock. [ 1877.674187][ T4832] usb 2-1: USB disconnect, device number 89 [ 1878.316543][ T5928] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1878.486469][ T5928] usb 10-1: Using ep0 maxpacket: 16 [ 1878.550419][ T5928] usb 10-1: config 1 has an invalid interface number: 27 but max is 0 [ 1878.569309][ T5928] usb 10-1: config 1 has no interface number 0 [ 1878.614379][ T5928] usb 10-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1878.624242][ T5928] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1878.643669][ T5928] usb 10-1: Product: syz [ 1878.658894][ T5928] usb 10-1: Manufacturer: syz [ 1878.669137][ T5928] usb 10-1: SerialNumber: syz [ 1880.196656][T30898] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1880.499256][T30898] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1880.552937][T30898] usb 6-1: config 52 has too many interfaces: 78, using maximum allowed: 32 [ 1880.586446][T30898] usb 6-1: config 52 has an invalid descriptor of length 70, skipping remainder of the config [ 1880.622229][T30898] usb 6-1: config 52 has 0 interfaces, different from the descriptor's value: 78 [ 1880.764447][T30898] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1880.934661][T30898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.986453][T30898] usb 6-1: Product: 色ᆙꖎᯪᴈ罄눱i [ 1881.037291][T30898] usb 6-1: Manufacturer: ␉ [ 1881.041936][T30898] usb 6-1: SerialNumber: syz [ 1881.079375][ T5928] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1881.747351][T30898] usb 6-1: USB disconnect, device number 83 [ 1881.755846][ T5928] usb 10-1: USB disconnect, device number 5 [ 1884.519358][ T6603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1884.531293][ T6603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1884.549922][ T6603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1884.586613][ T6603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1884.599845][ T6603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1884.616834][T30898] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1884.947177][T30898] usb 6-1: Using ep0 maxpacket: 8 [ 1884.963586][T30898] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1884.986976][T30898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1885.008741][ T5202] syz_tun (unregistering): left allmulticast mode [ 1885.009601][T30898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1885.027064][T30898] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1885.062588][T30898] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1885.108033][T30898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.365716][T30898] usb 6-1: GET_CAPABILITIES returned 0 [ 1885.372720][T30898] usbtmc 6-1:16.0: can't read capabilities [ 1885.571947][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5502'. [ 1885.810227][T17972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.814248][T30898] usb 6-1: USB disconnect, device number 84 [ 1886.308102][T17972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.688102][ T6603] Bluetooth: hci6: command tx timeout [ 1887.118834][T17972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.664823][T17972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.249998][T10297] chnl_net:caif_netlink_parms(): no params data found [ 1888.468753][T17972] bridge_slave_1: left allmulticast mode [ 1888.474598][T17972] bridge_slave_1: left promiscuous mode [ 1888.494438][T17972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.816527][ T6603] Bluetooth: hci6: command tx timeout [ 1888.879035][T17972] bridge_slave_0: left allmulticast mode [ 1888.884697][T17972] bridge_slave_0: left promiscuous mode [ 1889.036549][T17972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.637901][T10496] random: crng reseeded on system resumption [ 1890.707149][T17972] dvmrp17 (unregistering): left allmulticast mode [ 1890.846644][ T6603] Bluetooth: hci6: command tx timeout [ 1892.090948][T17972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1892.106110][T17972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1892.119177][T17972] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1892.131268][T17972] bond0 (unregistering): Released all slaves [ 1892.490574][T17972] tipc: Disabling bearer [ 1892.598117][T17972] tipc: Left network mode [ 1892.927003][ T6603] Bluetooth: hci6: command tx timeout [ 1892.981829][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.045257][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.092431][T10570] loop6: detected capacity change from 0 to 63 [ 1893.096598][T10297] bridge_slave_0: entered allmulticast mode [ 1893.109205][T10570] buffer_io_error: 22 callbacks suppressed [ 1893.109223][T10570] Buffer I/O error on dev loop6, logical block 0, async page read [ 1893.123145][T10570] Buffer I/O error on dev loop6, logical block 1, async page read [ 1893.131512][T10570] Buffer I/O error on dev loop6, logical block 2, async page read [ 1893.139556][T10570] Buffer I/O error on dev loop6, logical block 3, async page read [ 1893.147635][T10570] Buffer I/O error on dev loop6, logical block 0, async page read [ 1893.155554][T10570] Buffer I/O error on dev loop6, logical block 1, async page read [ 1893.163486][T10570] Buffer I/O error on dev loop6, logical block 2, async page read [ 1893.171682][T10570] Buffer I/O error on dev loop6, logical block 3, async page read [ 1893.179750][T10570] Buffer I/O error on dev loop6, logical block 0, async page read [ 1893.187857][T10570] Buffer I/O error on dev loop6, logical block 1, async page read [ 1893.219421][T10297] bridge_slave_0: entered promiscuous mode [ 1893.605440][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.637311][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.644701][T10297] bridge_slave_1: entered allmulticast mode [ 1893.666767][T10297] bridge_slave_1: entered promiscuous mode [ 1894.541350][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1894.611806][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1894.752830][T17972] hsr_slave_0: left promiscuous mode [ 1894.777429][T17972] hsr_slave_1: left promiscuous mode [ 1894.793851][T17972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1894.807534][T17972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1894.854018][T17972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1894.876006][T17972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1895.008357][T17972] veth1_vlan: left promiscuous mode [ 1895.029912][T17972] veth0_vlan: left promiscuous mode [ 1895.522115][T10639] syz.9.5527: attempt to access beyond end of device [ 1895.522115][T10639] nbd9: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1895.535144][T10639] vxfs: unable to read disk superblock at 1 [ 1895.541610][T10639] syz.9.5527: attempt to access beyond end of device [ 1895.541610][T10639] nbd9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1895.554565][T10639] vxfs: unable to read disk superblock at 8 [ 1895.560548][T10639] vxfs: can't find superblock. [ 1897.607326][T17972] team_slave_1 (unregistering): left promiscuous mode [ 1897.622784][T17972] team0 (unregistering): Port device team_slave_1 removed [ 1897.686478][ T4832] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1897.890632][ T4832] usb 9-1: Using ep0 maxpacket: 16 [ 1897.944615][ T4832] usb 9-1: config 1 has an invalid interface number: 27 but max is 0 [ 1897.953546][ T4832] usb 9-1: config 1 has no interface number 0 [ 1897.973976][ T4832] usb 9-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1897.991274][ T4832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1897.999820][ T4832] usb 9-1: Product: syz [ 1898.004916][ T4832] usb 9-1: Manufacturer: syz [ 1898.014585][ T4832] usb 9-1: SerialNumber: syz [ 1898.660788][T10297] team0: Port device team_slave_0 added [ 1898.680837][T10297] team0: Port device team_slave_1 added [ 1898.829114][ T4832] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1898.939214][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1898.996562][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1899.237490][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1899.503414][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1899.922437][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1899.998144][ T4832] usb 9-1: USB disconnect, device number 20 [ 1900.047554][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1900.691031][T10751] sctp: [Deprecated]: syz.5.5537 (pid 10751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1900.691031][T10751] Use struct sctp_sack_info instead [ 1900.867202][T10297] hsr_slave_0: entered promiscuous mode [ 1900.880888][T10297] hsr_slave_1: entered promiscuous mode [ 1900.966432][T22736] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1901.121227][T22736] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1901.148630][T22736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.179714][T22736] usb 2-1: Product: syz [ 1901.194628][T22736] usb 2-1: Manufacturer: syz [ 1901.213232][T22736] usb 2-1: SerialNumber: syz [ 1901.247256][T22736] usb 2-1: config 0 descriptor?? [ 1901.271495][T22736] ch341 2-1:0.0: ch341-uart converter detected [ 1901.306166][T10743] delete_channel: no stack [ 1902.102827][T10297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1902.145251][T10297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1902.180629][T10297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1902.230341][T10297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1902.476595][ T5928] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1902.546774][T22736] ch341-uart ttyUSB0: failed to read break control: -71 [ 1902.554482][T22736] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1902.585461][T22736] usb 2-1: USB disconnect, device number 90 [ 1902.599113][T22736] ch341 2-1:0.0: device disconnected [ 1903.132149][T10905] random: crng reseeded on system resumption [ 1903.186388][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 1903.202231][ T5928] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1903.243231][ T5928] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1903.275691][ T5928] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1903.302334][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.321772][ T5928] usb 6-1: Product: syz [ 1903.325989][ T5928] usb 6-1: Manufacturer: syz [ 1903.386186][ T5928] usb 6-1: SerialNumber: syz [ 1903.452446][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1903.921009][ T5928] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1903.937051][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 1903.948875][ T5928] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1903.959123][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.966444][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1903.996083][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.003550][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.030809][ T5928] usb 6-1: USB disconnect, device number 85 [ 1904.154822][T10173] udevd[10173]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1904.946717][ T5910] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1905.797292][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 1905.834205][ T5910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.856023][ T5910] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1905.889124][ T5910] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1905.913229][ T5910] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1905.936718][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1905.944785][ T5910] usb 2-1: SerialNumber: syz [ 1906.115659][T10297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1906.446624][T10986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1907.067288][T10297] veth0_vlan: entered promiscuous mode [ 1907.069178][T10949] random: crng reseeded on system resumption [ 1907.136614][T10988] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1907.527124][T10297] veth1_vlan: entered promiscuous mode [ 1908.036694][T10980] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5552'. [ 1908.100503][T10297] veth0_macvtap: entered promiscuous mode [ 1908.145108][T10297] veth1_macvtap: entered promiscuous mode [ 1908.164953][ T1209] usb 2-1: USB disconnect, device number 91 [ 1908.252442][T10297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1908.297148][T10297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1908.735916][T10297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.765954][T10297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.779522][T10297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.791059][T10297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.099589][T11023] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1909.536990][T11022] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5559'. [ 1909.542255][ T708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1910.500401][ T708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.517883][ T708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1911.553865][ T708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.596794][T11053] binder: Bad value for 'max' [ 1914.620167][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.658544][T11073] binder: Bad value for 'max' [ 1916.661410][T11084] loop6: detected capacity change from 0 to 63 [ 1916.673670][T11084] buffer_io_error: 7 callbacks suppressed [ 1916.673682][T11084] Buffer I/O error on dev loop6, logical block 0, async page read [ 1916.689062][T11084] Buffer I/O error on dev loop6, logical block 1, async page read [ 1916.697925][T11084] Buffer I/O error on dev loop6, logical block 2, async page read [ 1916.706728][T11084] Buffer I/O error on dev loop6, logical block 3, async page read [ 1916.715272][T11084] Buffer I/O error on dev loop6, logical block 0, async page read [ 1916.723560][T11084] Buffer I/O error on dev loop6, logical block 1, async page read [ 1916.731496][T11084] Buffer I/O error on dev loop6, logical block 2, async page read [ 1916.739472][T11084] Buffer I/O error on dev loop6, logical block 3, async page read [ 1916.747775][T11084] Buffer I/O error on dev loop6, logical block 0, async page read [ 1916.755974][T11084] Buffer I/O error on dev loop6, logical block 1, async page read [ 1917.641555][T11111] binder: Bad value for 'max' [ 1917.686626][ T5910] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1917.999746][T11112] netlink: 'syz.5.5578': attribute type 1 has an invalid length. [ 1918.196518][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 1918.223889][ T5910] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 1919.346490][ T5910] usb 3-1: config 1 has no interface number 0 [ 1919.406763][ T5910] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1919.466511][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1919.475006][ T5910] usb 3-1: Product: syz [ 1919.700094][T11137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1921.009685][ T5910] usb 3-1: Manufacturer: syz [ 1921.036094][ T5910] usb 3-1: SerialNumber: syz [ 1921.771322][ T5910] usb 3-1: can't set config #1, error -71 [ 1921.819320][ T5910] usb 3-1: USB disconnect, device number 60 [ 1922.037847][T30898] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1922.236619][T30898] usb 9-1: Using ep0 maxpacket: 16 [ 1922.305905][T30898] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.339586][T30898] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1922.616781][T11173] binder: Bad value for 'max' [ 1922.635110][T30898] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1922.932891][T30898] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1922.944311][T30898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1922.964676][T30898] usb 9-1: SerialNumber: syz [ 1922.995611][T11175] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1923.093776][T11166] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5588'. [ 1923.432677][T11147] random: crng reseeded on system resumption [ 1924.628140][T30898] usb 9-1: USB disconnect, device number 21 [ 1925.876896][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5598'. [ 1925.986469][T11220] openvswitch: netlink: Flow actions attr not present in new flow. [ 1927.012701][T11235] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1927.372802][T11235] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5603'. [ 1928.083787][T11252] netlink: 'syz.5.5606': attribute type 1 has an invalid length. [ 1929.671278][T21397] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1929.972539][T21397] usb 9-1: Using ep0 maxpacket: 16 [ 1929.979735][T21397] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.994455][T21397] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1930.026718][T21397] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1930.061780][T21397] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1930.085359][T21397] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1930.095931][T21397] usb 9-1: SerialNumber: syz [ 1930.810362][T11267] random: crng reseeded on system resumption [ 1931.026858][T21397] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1932.116457][T21397] usb 6-1: Using ep0 maxpacket: 16 [ 1932.125919][T11303] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1932.147021][T21397] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1932.155706][T21397] usb 6-1: config 0 has no interface number 0 [ 1932.172894][T11303] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5617'. [ 1932.195643][T21397] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1932.223147][T21397] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1932.235933][ T1503] usb 9-1: USB disconnect, device number 22 [ 1932.257705][T21397] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1932.279769][T21397] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1932.291968][T21397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.321434][T21397] usb 6-1: Product: syz [ 1932.346555][T21397] usb 6-1: Manufacturer: syz [ 1932.351435][T21397] usb 6-1: SerialNumber: syz [ 1932.394314][T21397] usb 6-1: config 0 descriptor?? [ 1932.411502][T11293] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1932.419208][T11293] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1932.632754][T11293] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1932.640718][T11293] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1933.050093][T21397] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 1933.072773][T11349] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1933.084129][T11349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1933.165710][T11349] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1933.204864][T11349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1934.306001][ T5928] usb 6-1: USB disconnect, device number 86 [ 1936.672710][T31251] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1936.837608][T31251] usb 9-1: Using ep0 maxpacket: 16 [ 1936.869255][T31251] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1936.907450][T31251] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1936.955172][T31251] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1937.033128][T11403] binder: Bad value for 'max' [ 1937.114686][T31251] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1937.154183][T31251] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1937.327501][T31251] usb 9-1: SerialNumber: syz [ 1937.516746][T21397] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1938.207117][T21397] usb 10-1: Using ep0 maxpacket: 32 [ 1938.313932][T21397] usb 10-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 1938.315019][T11385] random: crng reseeded on system resumption [ 1938.359306][T21397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.404732][T21397] usb 10-1: config 0 descriptor?? [ 1938.439276][T31251] usb 9-1: USB disconnect, device number 23 [ 1938.442815][T21397] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1938.461988][T21397] gspca_mr97310a: reg write [21] error -22 [ 1938.476868][T21397] mr97310a 10-1:0.0: probe with driver mr97310a failed with error -22 [ 1938.659158][T21397] usb 10-1: USB disconnect, device number 6 [ 1939.429572][T11451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1939.850687][T11454] MTD: Couldn't look up './cgroup': -15 [ 1939.851368][T11454] ./cgroup: Can't lookup blockdev [ 1940.816888][T31251] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1941.136698][T31251] usb 3-1: Using ep0 maxpacket: 8 [ 1941.145096][T31251] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1941.155870][T31251] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1941.165463][T31251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.716081][T31251] usb 3-1: config 0 descriptor?? [ 1941.772807][T31251] usb 3-1: bad CDC descriptors [ 1941.791666][T31251] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 1941.811524][T31251] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 1941.900795][T31251] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1941.985024][T11481] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.5649'. [ 1943.200153][T11489] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1943.207830][T11489] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1943.218590][T11489] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1943.347385][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5651'. [ 1943.504695][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5651'. [ 1943.627209][ T1503] usb 3-1: USB disconnect, device number 61 [ 1944.118604][ T1503] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1944.219157][T11513] MTD: Couldn't look up './cgroup': -15 [ 1944.225305][T11513] ./cgroup: Can't lookup blockdev [ 1944.328629][ T1503] usb 10-1: Using ep0 maxpacket: 16 [ 1944.390708][ T1503] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.494362][ T1503] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1944.628625][ T1503] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1944.807629][T11514] delete_channel: no stack [ 1944.858236][ T1503] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1944.908732][ T1503] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1944.966396][ T1503] usb 10-1: SerialNumber: syz [ 1945.191672][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5660'. [ 1945.239159][T11503] random: crng reseeded on system resumption [ 1945.251998][T30898] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1945.476429][T30898] usb 6-1: Using ep0 maxpacket: 8 [ 1946.067499][T30898] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1946.075859][T30898] usb 6-1: config 0 has no interface number 0 [ 1946.092727][T30898] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1946.104077][T30898] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1946.113695][T30898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.134373][T30898] usb 6-1: config 0 descriptor?? [ 1946.169211][T30898] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1946.356061][T21397] usb 10-1: USB disconnect, device number 7 [ 1946.463666][ T1503] usb 6-1: USB disconnect, device number 87 [ 1946.463828][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1947.647662][T11579] input: syz0 as /devices/virtual/input/input60 [ 1948.561643][T11593] binder: Bad value for 'max' [ 1948.987819][T11594] binder: Bad value for 'max' [ 1949.740920][T11603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1950.265493][T11599] MTD: Couldn't look up './cgroup': -15 [ 1950.279659][T11599] ./cgroup: Can't lookup blockdev [ 1950.766452][T11615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1950.796867][T21397] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1951.646595][T21397] usb 6-1: Using ep0 maxpacket: 16 [ 1951.659749][T21397] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1951.687994][T21397] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1951.719709][T21397] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1951.757801][T21397] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1951.805097][T21397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1951.836735][T21397] usb 6-1: SerialNumber: syz [ 1951.932873][T11627] veth1_macvtap: left promiscuous mode [ 1951.939369][T11627] macsec0: entered promiscuous mode [ 1951.944638][T11627] macsec0: entered allmulticast mode [ 1951.971029][T11627] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5676'. [ 1952.221821][T11605] random: crng reseeded on system resumption [ 1952.234555][T11638] netlink: 'syz.2.5679': attribute type 2 has an invalid length. [ 1952.297023][T11638] netlink: 51 bytes leftover after parsing attributes in process `syz.2.5679'. [ 1952.356461][T11638] netlink: 'syz.2.5679': attribute type 2 has an invalid length. [ 1952.381279][ T1503] usb 6-1: USB disconnect, device number 88 [ 1952.407518][T11638] netlink: 51 bytes leftover after parsing attributes in process `syz.2.5679'. [ 1953.088071][T11658] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5683'. [ 1953.141110][T11658] netlink: 'syz.5.5683': attribute type 27 has an invalid length. [ 1958.667372][T11723] JFS: charset not found [ 1959.900309][T30898] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1960.101361][T30898] usb 10-1: Using ep0 maxpacket: 16 [ 1960.266600][ T43] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1960.397317][T30898] usb 10-1: config 1 has an invalid interface number: 27 but max is 0 [ 1960.436691][T30898] usb 10-1: config 1 has no interface number 0 [ 1960.459182][T30898] usb 10-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1960.486664][T30898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1960.494980][T30898] usb 10-1: Product: syz [ 1960.522167][T30898] usb 10-1: Manufacturer: syz [ 1960.546403][T30898] usb 10-1: SerialNumber: syz [ 1960.617851][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1960.666646][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1960.668311][T11751] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1960.685008][ T43] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1960.754547][T11751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5699'. [ 1960.755564][ T43] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1961.210263][T30898] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1961.367267][ T43] usb 6-1: string descriptor 0 read error: -71 [ 1961.379804][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1961.406130][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.475563][ T43] usb 6-1: can't set config #1, error -71 [ 1961.516431][ T43] usb 6-1: USB disconnect, device number 89 [ 1961.533863][T30898] usb 10-1: USB disconnect, device number 8 [ 1963.461743][T11811] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1963.485790][T11811] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5706'. [ 1965.627421][T11831] FAULT_INJECTION: forcing a failure. [ 1965.627421][T11831] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.676598][T11831] CPU: 1 UID: 0 PID: 11831 Comm: syz.9.5711 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1965.676626][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1965.676638][T11831] Call Trace: [ 1965.676647][T11831] [ 1965.676657][T11831] dump_stack_lvl+0x189/0x250 [ 1965.676687][T11831] ? __pfx____ratelimit+0x10/0x10 [ 1965.676709][T11831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1965.676731][T11831] ? __pfx__printk+0x10/0x10 [ 1965.676775][T11831] ? __pfx___might_resched+0x10/0x10 [ 1965.676796][T11831] ? fs_reclaim_acquire+0x7d/0x100 [ 1965.676825][T11831] should_fail_ex+0x414/0x560 [ 1965.676854][T11831] should_failslab+0xa8/0x100 [ 1965.676879][T11831] __kmalloc_noprof+0xcb/0x4f0 [ 1965.676898][T11831] ? ethnl_default_notify+0x1cd/0x990 [ 1965.676933][T11831] ethnl_default_notify+0x1cd/0x990 [ 1965.676969][T11831] ? __pfx_ethnl_default_notify+0x10/0x10 [ 1965.677007][T11831] ? trace_kmalloc+0x1f/0xd0 [ 1965.677024][T11831] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1965.677050][T11831] ? mutex_is_locked+0x17/0x50 [ 1965.677071][T11831] ? rtnl_is_locked+0x15/0x20 [ 1965.677094][T11831] ethnl_default_set_doit+0x64e/0xa20 [ 1965.677135][T11831] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1965.677170][T11831] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1965.677202][T11831] genl_family_rcv_msg_doit+0x215/0x300 [ 1965.677232][T11831] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1965.677268][T11831] ? bpf_lsm_capable+0x9/0x20 [ 1965.677293][T11831] ? security_capable+0x7e/0x2e0 [ 1965.677325][T11831] genl_rcv_msg+0x60e/0x790 [ 1965.677355][T11831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1965.677373][T11831] ? ref_tracker_free+0x63a/0x7d0 [ 1965.677400][T11831] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1965.677431][T11831] ? __pfx_ref_tracker_free+0x10/0x10 [ 1965.677465][T11831] netlink_rcv_skb+0x205/0x470 [ 1965.677494][T11831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1965.677517][T11831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1965.677563][T11831] ? down_read+0x1ad/0x2e0 [ 1965.677591][T11831] genl_rcv+0x28/0x40 [ 1965.677610][T11831] netlink_unicast+0x75c/0x8e0 [ 1965.677665][T11831] netlink_sendmsg+0x805/0xb30 [ 1965.677704][T11831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1965.677749][T11831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1965.677768][T11831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1965.677797][T11831] __sock_sendmsg+0x21c/0x270 [ 1965.677825][T11831] ____sys_sendmsg+0x505/0x830 [ 1965.677862][T11831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1965.677909][T11831] ? import_iovec+0x74/0xa0 [ 1965.677941][T11831] ___sys_sendmsg+0x21f/0x2a0 [ 1965.677973][T11831] ? __pfx____sys_sendmsg+0x10/0x10 [ 1965.678044][T11831] ? __fget_files+0x2a/0x420 [ 1965.678065][T11831] ? __fget_files+0x3a0/0x420 [ 1965.678100][T11831] __x64_sys_sendmsg+0x19b/0x260 [ 1965.678133][T11831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1965.678174][T11831] ? __pfx_ksys_write+0x10/0x10 [ 1965.678191][T11831] ? rcu_is_watching+0x15/0xb0 [ 1965.678226][T11831] ? do_syscall_64+0xbe/0x3b0 [ 1965.678253][T11831] do_syscall_64+0xfa/0x3b0 [ 1965.678274][T11831] ? lockdep_hardirqs_on+0x9c/0x150 [ 1965.678295][T11831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.678315][T11831] ? clear_bhb_loop+0x60/0xb0 [ 1965.678340][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.678359][T11831] RIP: 0033:0x7f940eb8ebe9 [ 1965.678379][T11831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1965.678396][T11831] RSP: 002b:00007f940fa18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1965.678418][T11831] RAX: ffffffffffffffda RBX: 00007f940edb5fa0 RCX: 00007f940eb8ebe9 [ 1965.678434][T11831] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1965.678448][T11831] RBP: 00007f940fa18090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.678461][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1965.678472][T11831] R13: 00007f940edb6038 R14: 00007f940edb5fa0 R15: 00007fff6ac69758 [ 1965.678507][T11831] [ 1966.976461][ T5928] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1967.203574][ T5928] usb 10-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1967.224292][ T5928] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.239870][T21397] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1967.266177][ T5928] usb 10-1: config 0 descriptor?? [ 1967.293690][ T5928] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1967.406915][T21397] usb 3-1: Using ep0 maxpacket: 16 [ 1967.778030][T21397] usb 3-1: config 1 has an invalid interface number: 27 but max is 0 [ 1967.786621][T21397] usb 3-1: config 1 has no interface number 0 [ 1967.796238][T21397] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1967.809973][T21397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1967.826165][T21397] usb 3-1: Product: syz [ 1967.831329][T21397] usb 3-1: Manufacturer: syz [ 1967.836073][T21397] usb 3-1: SerialNumber: syz [ 1968.175527][T21397] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1968.875967][ T5928] gspca_spca508: reg_read err -110 [ 1968.881775][ T5928] gspca_spca508: reg_read err -32 [ 1968.905477][ T5928] gspca_spca508: reg_read err -32 [ 1968.911754][ T5928] gspca_spca508: reg_read err -32 [ 1968.920437][ T5928] gspca_spca508: reg write: error -32 [ 1968.926226][ T5928] spca508 10-1:0.0: probe with driver spca508 failed with error -32 [ 1969.121027][T21397] usb 3-1: USB disconnect, device number 62 [ 1970.803093][T11911] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5724'. [ 1972.736742][ T5928] usb 10-1: USB disconnect, device number 9 [ 1973.257463][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5733'. [ 1976.058085][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.728776][T11996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1977.862971][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5744'. [ 1979.511451][T12027] x_tables: duplicate underflow at hook 1 [ 1979.829933][T12034] smb3: Unexpected value for 'rdma' [ 1982.951400][ T5910] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1983.738917][ T5910] usb 9-1: Using ep0 maxpacket: 32 [ 1983.753678][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1984.047239][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1984.270720][ T5910] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1984.280250][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.326956][ T5910] usb 9-1: config 0 descriptor?? [ 1984.668894][T12081] nfs4: Unexpected value for 'acl' [ 1984.677648][T12085] delete_channel: no stack [ 1984.685695][ T5910] hub 9-1:0.0: USB hub found [ 1984.938172][ T5910] hub 9-1:0.0: 2 ports detected [ 1986.063368][ T5910] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 1986.092818][ T5910] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 1987.036169][ T5910] usbhid 9-1:0.0: can't add hid device: -71 [ 1987.062891][ T5910] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1987.279602][ T5910] usb 9-1: USB disconnect, device number 24 [ 1987.964552][T12137] nfs4: Unexpected value for 'acl' [ 1989.457080][T12161] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5778'. [ 1990.052010][T12171] loop4: detected capacity change from 0 to 524255232 [ 1990.186588][T12173] Bluetooth: MGMT ver 1.23 [ 1992.196515][ T1209] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1992.267192][ T1503] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1992.304227][T12201] nfs4: Unexpected value for 'acl' [ 1992.587333][ T1209] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1992.606978][ T1209] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1992.629455][ T1503] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1992.646997][ T1503] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1992.666606][ T1209] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1992.696375][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.709868][ T1503] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1992.738644][ T1503] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.898315][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5788'. [ 1992.953621][ T1209] usb 9-1: GET_CAPABILITIES returned 0 [ 1992.966378][ T1209] usbtmc 9-1:16.0: can't read capabilities [ 1992.980469][ T1503] usb 10-1: GET_CAPABILITIES returned 0 [ 1992.992461][ T1503] usbtmc 10-1:16.0: can't read capabilities [ 1993.279105][T12195] FAULT_INJECTION: forcing a failure. [ 1993.279105][T12195] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.301433][T12195] CPU: 0 UID: 0 PID: 12195 Comm: syz.9.5786 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1993.301463][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1993.301477][T12195] Call Trace: [ 1993.301486][T12195] [ 1993.301496][T12195] dump_stack_lvl+0x189/0x250 [ 1993.301525][T12195] ? __pfx____ratelimit+0x10/0x10 [ 1993.301547][T12195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1993.301569][T12195] ? __pfx__printk+0x10/0x10 [ 1993.301599][T12195] ? __pfx___might_resched+0x10/0x10 [ 1993.301628][T12195] ? fs_reclaim_acquire+0x7d/0x100 [ 1993.301657][T12195] should_fail_ex+0x414/0x560 [ 1993.301685][T12195] should_failslab+0xa8/0x100 [ 1993.301708][T12195] __kmalloc_noprof+0xcb/0x4f0 [ 1993.301726][T12195] ? kfree+0x4d/0x440 [ 1993.301751][T12195] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1993.301782][T12195] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1993.301809][T12195] ? tomoyo_domain+0xda/0x130 [ 1993.301840][T12195] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1993.301861][T12195] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1993.301885][T12195] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1993.301926][T12195] ? __lock_acquire+0xab9/0xd20 [ 1993.301968][T12195] ? __fget_files+0x2a/0x420 [ 1993.301994][T12195] ? __fget_files+0x2a/0x420 [ 1993.302015][T12195] ? __fget_files+0x3a0/0x420 [ 1993.302035][T12195] ? __fget_files+0x2a/0x420 [ 1993.302062][T12195] security_file_ioctl+0xcb/0x2d0 [ 1993.302088][T12195] __se_sys_ioctl+0x47/0x170 [ 1993.302121][T12195] do_syscall_64+0xfa/0x3b0 [ 1993.302145][T12195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.302163][T12195] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1993.302183][T12195] ? clear_bhb_loop+0x60/0xb0 [ 1993.302208][T12195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.302227][T12195] RIP: 0033:0x7f940eb8ebe9 [ 1993.302246][T12195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1993.302264][T12195] RSP: 002b:00007f940fa18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1993.302286][T12195] RAX: ffffffffffffffda RBX: 00007f940edb5fa0 RCX: 00007f940eb8ebe9 [ 1993.302302][T12195] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 000000000000000a [ 1993.302315][T12195] RBP: 00007f940fa18090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.302329][T12195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.302341][T12195] R13: 00007f940edb6038 R14: 00007f940edb5fa0 R15: 00007fff6ac69758 [ 1993.302373][T12195] [ 1993.302383][T12195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1993.552520][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1993.960262][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1994.379116][T30898] usb 10-1: USB disconnect, device number 10 [ 1994.610603][T12232] delete_channel: no stack [ 1994.628887][ T5910] usb 9-1: USB disconnect, device number 25 [ 1995.881242][T12269] cgroup: none used incorrectly [ 1996.155385][T12284] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 1996.401025][T12281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5798'. [ 1996.627788][T12289] sctp: [Deprecated]: syz.5.5800 (pid 12289) Use of int in max_burst socket option. [ 1996.627788][T12289] Use struct sctp_assoc_value instead [ 1997.308792][ T1209] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1997.753459][ T1209] usb 10-1: Using ep0 maxpacket: 16 [ 1997.841853][ T1209] usb 10-1: config 1 has an invalid interface number: 27 but max is 0 [ 1997.866341][ T1209] usb 10-1: config 1 has no interface number 0 [ 1997.885172][ T1209] usb 10-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 1997.901671][ T1209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 1997.922487][ T1209] usb 10-1: Product: syz [ 1997.931437][ T1209] usb 10-1: Manufacturer: syz [ 1997.936264][ T1209] usb 10-1: SerialNumber: syz [ 1998.221870][ T1209] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 1998.244824][T12326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1998.422243][ T1209] usb 10-1: USB disconnect, device number 11 [ 1998.891244][T12339] FAULT_INJECTION: forcing a failure. [ 1998.891244][T12339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1998.933149][T12339] CPU: 0 UID: 0 PID: 12339 Comm: syz.8.5807 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1998.933178][T12339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1998.933191][T12339] Call Trace: [ 1998.933200][T12339] [ 1998.933210][T12339] dump_stack_lvl+0x189/0x250 [ 1998.933239][T12339] ? __pfx____ratelimit+0x10/0x10 [ 1998.933261][T12339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1998.933284][T12339] ? __pfx__printk+0x10/0x10 [ 1998.933309][T12339] ? __might_fault+0xb0/0x130 [ 1998.933340][T12339] should_fail_ex+0x414/0x560 [ 1998.933365][T12339] _copy_from_iter+0x1db/0x16f0 [ 1998.933394][T12339] ? rcu_is_watching+0x15/0xb0 [ 1998.933416][T12339] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1998.933438][T12339] ? __pfx__copy_from_iter+0x10/0x10 [ 1998.933464][T12339] ? __build_skb_around+0x257/0x3e0 [ 1998.933495][T12339] ? netlink_sendmsg+0x642/0xb30 [ 1998.933519][T12339] ? skb_put+0x11b/0x210 [ 1998.933568][T12339] netlink_sendmsg+0x6b2/0xb30 [ 1998.933604][T12339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1998.933640][T12339] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1998.933658][T12339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1998.933686][T12339] __sock_sendmsg+0x21c/0x270 [ 1998.933714][T12339] ____sys_sendmsg+0x505/0x830 [ 1998.933750][T12339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1998.933795][T12339] ? import_iovec+0x74/0xa0 [ 1998.933826][T12339] ___sys_sendmsg+0x21f/0x2a0 [ 1998.933859][T12339] ? __pfx____sys_sendmsg+0x10/0x10 [ 1998.933928][T12339] ? __fget_files+0x2a/0x420 [ 1998.933949][T12339] ? __fget_files+0x3a0/0x420 [ 1998.933984][T12339] __x64_sys_sendmsg+0x19b/0x260 [ 1998.934016][T12339] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1998.934057][T12339] ? __pfx_ksys_write+0x10/0x10 [ 1998.934074][T12339] ? rcu_is_watching+0x15/0xb0 [ 1998.934101][T12339] ? do_syscall_64+0xbe/0x3b0 [ 1998.934126][T12339] do_syscall_64+0xfa/0x3b0 [ 1998.934141][T12339] ? lockdep_hardirqs_on+0x9c/0x150 [ 1998.934158][T12339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1998.934178][T12339] ? clear_bhb_loop+0x60/0xb0 [ 1998.934201][T12339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1998.934220][T12339] RIP: 0033:0x7f07f6b8ebe9 [ 1998.934237][T12339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1998.934254][T12339] RSP: 002b:00007f07f792f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1998.934274][T12339] RAX: ffffffffffffffda RBX: 00007f07f6db5fa0 RCX: 00007f07f6b8ebe9 [ 1998.934288][T12339] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1998.934301][T12339] RBP: 00007f07f792f090 R08: 0000000000000000 R09: 0000000000000000 [ 1998.934314][T12339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1998.934326][T12339] R13: 00007f07f6db6038 R14: 00007f07f6db5fa0 R15: 00007ffe4cbe2238 [ 1998.934359][T12339] [ 2001.404163][T12366] cramfs: Unknown parameter 'discard' [ 2003.271837][T12383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2003.402540][T12381] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2003.608989][ T30] audit: type=1326 audit(1755802782.184:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2003.630680][ C0] vkms_vblank_simulate: vblank timer overrun [ 2003.643095][T12383] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2003.764985][ T30] audit: type=1326 audit(1755802782.184:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2003.833555][T12399] tipc: Enabled bearer , priority 0 [ 2003.892229][ T30] audit: type=1326 audit(1755802782.184:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2003.914291][ C0] vkms_vblank_simulate: vblank timer overrun [ 2003.933389][ T30] audit: type=1326 audit(1755802782.184:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2003.961355][T12399] tipc: Resetting bearer [ 2004.044202][ T30] audit: type=1326 audit(1755802782.184:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2004.065995][ C0] vkms_vblank_simulate: vblank timer overrun [ 2004.111833][T12396] tipc: Disabling bearer [ 2004.123901][ T30] audit: type=1326 audit(1755802782.184:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2004.153083][ T30] audit: type=1326 audit(1755802782.184:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2004.185652][ T30] audit: type=1326 audit(1755802782.184:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2004.283914][ T30] audit: type=1326 audit(1755802782.184:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2004.284001][ T30] audit: type=1326 audit(1755802782.184:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12379 comm="syz.2.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa4c78ebe9 code=0x7ffc0000 [ 2008.777097][T12480] tipc: Enabled bearer , priority 0 [ 2008.802433][T12480] syzkaller0: entered promiscuous mode [ 2008.825219][T12480] syzkaller0: entered allmulticast mode [ 2008.859751][T12480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5833'. [ 2008.986546][T30898] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2009.005359][T12480] veth1_virt_wifi: mtu less than device minimum [ 2009.026772][T12478] tipc: Resetting bearer [ 2009.137961][T12478] tipc: Disabling bearer [ 2009.156548][T30898] usb 10-1: Using ep0 maxpacket: 16 [ 2009.167031][T30898] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.188025][T30898] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2009.203306][T30898] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2009.218971][T30898] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2009.229034][T30898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2009.238733][T30898] usb 10-1: SerialNumber: syz [ 2009.251554][ T6603] Bluetooth: hci6: command 0x0406 tx timeout [ 2009.281949][T12475] netlink: 'syz.2.5831': attribute type 3 has an invalid length. [ 2009.325654][T12475] netlink: 'syz.2.5831': attribute type 1 has an invalid length. [ 2009.334829][T12475] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5831'. [ 2009.429144][T12475] xt_CT: No such helper "syz0" [ 2010.196768][T12503] random: crng reseeded on system resumption [ 2010.958557][ T1209] usb 10-1: USB disconnect, device number 12 [ 2012.268195][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5839'. [ 2013.769251][T12557] netlink: 'syz.2.5844': attribute type 4 has an invalid length. [ 2013.777239][T12557] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5844'. [ 2014.666432][T12561] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2015.932872][T12583] tmpfs: Bad value for 'mpol' [ 2015.949141][T12579] netlink: 'syz.8.5849': attribute type 1 has an invalid length. [ 2015.986400][T12579] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5849'. [ 2015.995998][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5849'. [ 2016.005308][T12585] xt_hashlimit: max too large, truncated to 1048576 [ 2018.440594][T12616] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2019.090904][ T5928] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2019.680461][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2020.506434][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.516489][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2020.529904][ T5928] usb 6-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 2020.539630][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.551271][ T5928] usb 6-1: config 0 descriptor?? [ 2020.992833][ T5928] viewsonic 0003:2133:0018.0020: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.5-1/input0 [ 2022.583529][T17988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2022.595358][T12676] tipc: Started in network mode [ 2022.611809][T12676] tipc: Node identity 5279b96a43ce, cluster identity 4711 [ 2022.619065][T17988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2023.110304][T12680] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2023.158577][T12676] tipc: Enabled bearer , priority 0 [ 2023.234656][T12666] tipc: Resetting bearer [ 2023.442672][ T1209] usb 6-1: USB disconnect, device number 90 [ 2023.648795][T12665] tipc: Disabling bearer [ 2023.925726][T12701] netlink: 'syz.5.5874': attribute type 30 has an invalid length. [ 2024.140201][T12701] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2024.150762][T12701] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2024.159967][T12701] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2024.169200][T12701] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2024.562384][T12701] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2024.571633][T12701] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2024.581033][T12701] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2024.590472][T12701] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2026.056969][T12744] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 2026.135701][T12744] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5879'. [ 2026.654996][T12749] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2029.526485][ T5928] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2029.716490][ T5928] usb 9-1: Using ep0 maxpacket: 16 [ 2029.919620][ T5928] usb 9-1: config 1 has an invalid interface number: 27 but max is 0 [ 2030.264035][ T5928] usb 9-1: config 1 has no interface number 0 [ 2030.314801][ T5928] usb 9-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 3.d5 [ 2030.331395][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=246 [ 2030.343613][ T5928] usb 9-1: Product: syz [ 2030.351737][ T5928] usb 9-1: Manufacturer: syz [ 2030.357653][ T5928] usb 9-1: SerialNumber: syz [ 2030.610622][ T5928] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 2030.957118][ T5928] usb 9-1: USB disconnect, device number 26 [ 2032.585031][T12831] 9pnet: Could not find request transport: fd0x0000000000000003000000000000000000040xffffffffffffffff01777777777777777777777 [ 2032.787731][T12825] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5893'. [ 2033.676565][T21397] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2033.846713][T21397] usb 10-1: Using ep0 maxpacket: 8 [ 2033.867325][T21397] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2033.924936][T21397] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2033.935920][T21397] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2033.953984][T21397] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2034.007739][T30898] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2034.457391][T21397] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2034.486349][T21397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.589597][T30898] usb 9-1: Using ep0 maxpacket: 32 [ 2034.611553][T30898] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2034.623019][T30898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.662671][T30898] usb 9-1: Product: syz [ 2034.695981][T30898] usb 9-1: Manufacturer: syz [ 2034.708449][T30898] usb 9-1: SerialNumber: syz [ 2034.746011][T30898] usb 9-1: config 0 descriptor?? [ 2034.746821][T21397] usb 10-1: GET_CAPABILITIES returned 0 [ 2034.766600][T21397] usbtmc 10-1:16.0: can't read capabilities [ 2035.211203][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.345072][T21397] usb 10-1: USB disconnect, device number 13 [ 2035.399995][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.758861][T12895] fuse: blksize only supported for fuseblk [ 2036.275886][T30898] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 2036.350470][T30898] peak_usb 9-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 2036.857127][T30898] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -32 [ 2037.727834][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.784375][T21397] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2037.797451][ T1209] usb 9-1: USB disconnect, device number 27 [ 2037.968882][T21397] usb 6-1: too many configurations: 163, using maximum allowed: 8 [ 2037.986327][T21397] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2038.034835][T21397] usb 6-1: can't read configurations, error -61 [ 2038.493000][T21397] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2039.027082][T21397] usb 6-1: too many configurations: 163, using maximum allowed: 8 [ 2039.071736][T21397] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2039.150849][T21397] usb 6-1: can't read configurations, error -61 [ 2039.158033][T21397] usb usb6-port1: attempt power cycle [ 2039.786391][T21397] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2039.808169][T21397] usb 6-1: too many configurations: 163, using maximum allowed: 8 [ 2039.827246][T21397] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2039.841914][T21397] usb 6-1: can't read configurations, error -61 [ 2040.461234][T12945] delete_channel: no stack [ 2041.339535][T12967] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2041.451854][ T1209] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2041.777174][ T1209] usb 10-1: Using ep0 maxpacket: 8 [ 2041.792022][ T1209] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2041.907657][T12975] befs: (nullb0): No write support. Marking filesystem read-only [ 2041.920751][T12975] befs: (nullb0): invalid magic header [ 2041.936147][ T1209] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2042.206977][T12978] befs: (nullb0): No write support. Marking filesystem read-only [ 2042.217608][T12978] befs: (nullb0): invalid magic header [ 2042.707964][ T1209] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2042.734200][ T1209] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2042.749907][ T1209] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2042.759674][ T1209] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.204978][ T1209] usb 10-1: GET_CAPABILITIES returned 0 [ 2043.211143][ T1209] usbtmc 10-1:16.0: can't read capabilities [ 2043.716627][ T43] usb 10-1: USB disconnect, device number 14 [ 2047.455429][T13028] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2047.684421][T13048] binder: Bad value for 'max' [ 2047.819555][T13050] program syz.1.5941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2048.207056][T13055] FAULT_INJECTION: forcing a failure. [ 2048.207056][T13055] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.219731][T13055] CPU: 0 UID: 0 PID: 13055 Comm: syz.8.5940 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2048.219747][T13055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2048.219754][T13055] Call Trace: [ 2048.219760][T13055] [ 2048.219766][T13055] dump_stack_lvl+0x189/0x250 [ 2048.219782][T13055] ? __pfx____ratelimit+0x10/0x10 [ 2048.219794][T13055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2048.219806][T13055] ? __pfx__printk+0x10/0x10 [ 2048.219823][T13055] ? __pfx___might_resched+0x10/0x10 [ 2048.219834][T13055] ? fs_reclaim_acquire+0x7d/0x100 [ 2048.219850][T13055] should_fail_ex+0x414/0x560 [ 2048.219865][T13055] should_failslab+0xa8/0x100 [ 2048.219877][T13055] __kmalloc_noprof+0xcb/0x4f0 [ 2048.219887][T13055] ? kfree+0x4d/0x440 [ 2048.219901][T13055] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2048.219922][T13055] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2048.219937][T13055] ? tomoyo_domain+0xda/0x130 [ 2048.219954][T13055] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2048.219965][T13055] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2048.219978][T13055] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2048.219999][T13055] ? __lock_acquire+0xab9/0xd20 [ 2048.220021][T13055] ? __fget_files+0x2a/0x420 [ 2048.220034][T13055] ? __fget_files+0x2a/0x420 [ 2048.220045][T13055] ? __fget_files+0x3a0/0x420 [ 2048.220056][T13055] ? __fget_files+0x2a/0x420 [ 2048.220069][T13055] security_file_ioctl+0xcb/0x2d0 [ 2048.220083][T13055] __se_sys_ioctl+0x47/0x170 [ 2048.220100][T13055] do_syscall_64+0xfa/0x3b0 [ 2048.220112][T13055] ? lockdep_hardirqs_on+0x9c/0x150 [ 2048.220123][T13055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.220134][T13055] ? clear_bhb_loop+0x60/0xb0 [ 2048.220146][T13055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.220156][T13055] RIP: 0033:0x7f07f6b8ebe9 [ 2048.220167][T13055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2048.220177][T13055] RSP: 002b:00007f07f792f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2048.220189][T13055] RAX: ffffffffffffffda RBX: 00007f07f6db5fa0 RCX: 00007f07f6b8ebe9 [ 2048.220197][T13055] RDX: 0000200000000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 2048.220205][T13055] RBP: 00007f07f792f090 R08: 0000000000000000 R09: 0000000000000000 [ 2048.220211][T13055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2048.220218][T13055] R13: 00007f07f6db6038 R14: 00007f07f6db5fa0 R15: 00007ffe4cbe2238 [ 2048.220235][T13055] [ 2048.220241][T13055] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2050.176590][T30898] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2050.996396][T30898] usb 9-1: Using ep0 maxpacket: 8 [ 2051.147350][T30898] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2051.189814][T30898] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2051.231337][T30898] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2051.631453][T13090] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2052.055558][T30898] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2052.133156][T30898] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2052.170579][T30898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.412242][T13100] FAULT_INJECTION: forcing a failure. [ 2052.412242][T13100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2052.451976][T30898] usb 9-1: GET_CAPABILITIES returned 0 [ 2052.461642][T13100] CPU: 0 UID: 0 PID: 13100 Comm: syz.1.5951 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2052.461671][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2052.461685][T13100] Call Trace: [ 2052.461694][T13100] [ 2052.461704][T13100] dump_stack_lvl+0x189/0x250 [ 2052.461732][T13100] ? __pfx____ratelimit+0x10/0x10 [ 2052.461758][T13100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2052.461780][T13100] ? __pfx__printk+0x10/0x10 [ 2052.461805][T13100] ? __might_fault+0xb0/0x130 [ 2052.461837][T13100] should_fail_ex+0x414/0x560 [ 2052.461863][T13100] _copy_from_user+0x2d/0xb0 [ 2052.461892][T13100] ___sys_sendmsg+0x158/0x2a0 [ 2052.461925][T13100] ? __pfx____sys_sendmsg+0x10/0x10 [ 2052.461992][T13100] ? __fget_files+0x2a/0x420 [ 2052.462013][T13100] ? __fget_files+0x3a0/0x420 [ 2052.462044][T13100] __x64_sys_sendmsg+0x19b/0x260 [ 2052.462077][T13100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2052.462115][T13100] ? __pfx_ksys_write+0x10/0x10 [ 2052.462132][T13100] ? rcu_is_watching+0x15/0xb0 [ 2052.462164][T13100] ? do_syscall_64+0xbe/0x3b0 [ 2052.462188][T13100] do_syscall_64+0xfa/0x3b0 [ 2052.462205][T13100] ? lockdep_hardirqs_on+0x9c/0x150 [ 2052.462224][T13100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2052.462244][T13100] ? clear_bhb_loop+0x60/0xb0 [ 2052.462267][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2052.462285][T13100] RIP: 0033:0x7f081e38ebe9 [ 2052.462302][T13100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2052.462320][T13100] RSP: 002b:00007f081f24f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2052.462342][T13100] RAX: ffffffffffffffda RBX: 00007f081e5b5fa0 RCX: 00007f081e38ebe9 [ 2052.462357][T13100] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 2052.462370][T13100] RBP: 00007f081f24f090 R08: 0000000000000000 R09: 0000000000000000 [ 2052.462381][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2052.462392][T13100] R13: 00007f081e5b6038 R14: 00007f081e5b5fa0 R15: 00007ffde68979a8 [ 2052.462423][T13100] [ 2052.481574][T30898] usbtmc 9-1:16.0: can't read capabilities [ 2052.862589][ T43] 0: reclassify loop, rule prio 0, protocol 800 [ 2053.254944][T30898] usb 9-1: USB disconnect, device number 28 [ 2053.685576][T13128] sctp: [Deprecated]: syz.8.5956 (pid 13128) Use of int in max_burst socket option. [ 2053.685576][T13128] Use struct sctp_assoc_value instead [ 2056.293763][T13162] FAULT_INJECTION: forcing a failure. [ 2056.293763][T13162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2056.348154][T13162] CPU: 0 UID: 0 PID: 13162 Comm: syz.5.5962 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2056.348182][T13162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2056.348195][T13162] Call Trace: [ 2056.348203][T13162] [ 2056.348213][T13162] dump_stack_lvl+0x189/0x250 [ 2056.348241][T13162] ? __pfx____ratelimit+0x10/0x10 [ 2056.348263][T13162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2056.348286][T13162] ? __pfx__printk+0x10/0x10 [ 2056.348311][T13162] ? __might_fault+0xb0/0x130 [ 2056.348344][T13162] should_fail_ex+0x414/0x560 [ 2056.348370][T13162] _copy_from_user+0x2d/0xb0 [ 2056.348400][T13162] kstrtouint_from_user+0xc4/0x170 [ 2056.348426][T13162] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2056.348468][T13162] proc_fail_nth_write+0x88/0x240 [ 2056.348491][T13162] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2056.348522][T13162] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2056.348548][T13162] vfs_write+0x27e/0xa90 [ 2056.348578][T13162] ? __pfx_vfs_write+0x10/0x10 [ 2056.348599][T13162] ? __fget_files+0x2a/0x420 [ 2056.348626][T13162] ? __fget_files+0x3a0/0x420 [ 2056.348648][T13162] ? __fget_files+0x2a/0x420 [ 2056.348679][T13162] ksys_write+0x145/0x250 [ 2056.348702][T13162] ? __pfx_ksys_write+0x10/0x10 [ 2056.348719][T13162] ? rcu_is_watching+0x15/0xb0 [ 2056.348746][T13162] ? do_syscall_64+0xbe/0x3b0 [ 2056.348772][T13162] do_syscall_64+0xfa/0x3b0 [ 2056.348796][T13162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.348815][T13162] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2056.348834][T13162] ? clear_bhb_loop+0x60/0xb0 [ 2056.348869][T13162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.348888][T13162] RIP: 0033:0x7f8bffd8d69f [ 2056.348906][T13162] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2056.348924][T13162] RSP: 002b:00007f8c00b0f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2056.348946][T13162] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8bffd8d69f [ 2056.348961][T13162] RDX: 0000000000000001 RSI: 00007f8c00b0f0a0 RDI: 0000000000000006 [ 2056.348982][T13162] RBP: 00007f8c00b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 2056.348995][T13162] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2056.349008][T13162] R13: 00007f8bfffb6038 R14: 00007f8bfffb5fa0 R15: 00007ffe21081d38 [ 2056.349042][T13162] [ 2057.332456][T13178] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2057.719755][T13190] sctp: [Deprecated]: syz.9.5967 (pid 13190) Use of int in max_burst socket option. [ 2057.719755][T13190] Use struct sctp_assoc_value instead [ 2060.132225][ T5910] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 2060.756491][ T43] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 2061.037908][ T5910] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 2061.095927][ T5910] usb 3-1: config 0 has no interface number 0 [ 2061.268036][ T5910] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 2061.281908][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.306518][ T5910] usb 3-1: Product: syz [ 2061.310756][ T5910] usb 3-1: Manufacturer: syz [ 2061.315378][ T5910] usb 3-1: SerialNumber: syz [ 2061.328553][ T5910] usb 3-1: config 0 descriptor?? [ 2061.467657][T13238] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2061.648574][ T5910] qmi_wwan 3-1:0.207: bogus CDC Union: master=0, slave=1 [ 2061.681382][ T43] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2061.705348][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.734651][ T43] usb 9-1: config 0 descriptor?? [ 2061.765519][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2061.966556][ T43] gp8psk: usb in 128 operation failed. [ 2062.579632][T31251] 0: reclassify loop, rule prio 0, protocol 800 [ 2062.593865][T30898] 0: reclassify loop, rule prio 0, protocol 800 [ 2063.131243][ T5910] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22 [ 2063.187656][ T43] gp8psk: usb in 137 operation failed. [ 2063.224640][ T5910] usb 3-1: USB disconnect, device number 63 [ 2063.241754][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2063.279567][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2063.300961][ T43] usb 9-1: USB disconnect, device number 29 [ 2069.779812][T13349] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 2069.786549][T13349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2069.821778][T13349] vhci_hcd vhci_hcd.0: Device attached [ 2069.827394][T13359] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(13) [ 2069.827453][T13359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2069.827497][T13359] vhci_hcd vhci_hcd.0: Device attached [ 2069.835986][T13359] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(15) [ 2069.854648][T13359] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2070.249996][T13376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2070.306504][ T43] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 2070.314081][T13359] vhci_hcd vhci_hcd.0: Device attached [ 2070.364576][T13349] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(12) [ 2070.371636][T13349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2070.407811][T13349] vhci_hcd vhci_hcd.0: Device attached [ 2070.504267][T13349] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(20) [ 2070.511046][T13349] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2070.576034][T13349] vhci_hcd vhci_hcd.0: Device attached [ 2070.628449][T13359] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2070.648171][T13349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2070.673708][T13349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2070.715760][T13349] vhci_hcd vhci_hcd.0: port 0 already used [ 2071.470956][T13394] vhci_hcd: connection closed [ 2071.471367][T13391] vhci_hcd: connection closed [ 2071.476583][T29958] vhci_hcd: stop threads [ 2071.490490][T13354] vhci_hcd: connection reset by peer [ 2071.495919][T13362] vhci_hcd: connection closed [ 2071.502229][T13360] vhci_hcd: connection closed [ 2071.520892][T29958] vhci_hcd: release socket [ 2071.617323][T29958] vhci_hcd: disconnect device [ 2071.626811][T29958] vhci_hcd: stop threads [ 2071.639801][T29958] vhci_hcd: release socket [ 2071.648200][T29958] vhci_hcd: disconnect device [ 2071.692649][T29958] vhci_hcd: stop threads [ 2071.699864][T29958] vhci_hcd: release socket [ 2071.710546][T29958] vhci_hcd: disconnect device [ 2071.721664][T29958] vhci_hcd: stop threads [ 2071.734282][T29958] vhci_hcd: release socket [ 2071.844073][T29958] vhci_hcd: disconnect device [ 2071.849253][T29958] vhci_hcd: stop threads [ 2071.854396][T29958] vhci_hcd: release socket [ 2071.859218][T29958] vhci_hcd: disconnect device [ 2071.916718][T30898] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2072.047375][ T5910] 0: reclassify loop, rule prio 0, protocol 800 [ 2072.423041][T30898] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2072.535443][T30898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.651578][T30898] usb 9-1: config 0 descriptor?? [ 2072.671271][T30898] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2073.681994][T30898] gspca_spca508: reg_read err -110 [ 2073.789482][T30898] gspca_spca508: reg_read err -32 [ 2073.812514][T30898] gspca_spca508: reg_read err -32 [ 2073.846518][T30898] gspca_spca508: reg_read err -32 [ 2073.862513][T30898] gspca_spca508: reg write: error -32 [ 2073.882118][T30898] spca508 9-1:0.0: probe with driver spca508 failed with error -32 [ 2074.396638][ T1503] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2074.645158][T13458] veth0_to_team: entered promiscuous mode [ 2074.651276][T13458] veth0_to_team: entered allmulticast mode [ 2074.918883][ T1503] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2074.933193][ T1503] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2074.944337][ T1503] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2074.958136][ T1503] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2074.978684][ T1503] usb 10-1: SerialNumber: syz [ 2075.486511][ T43] vhci_hcd: vhci_device speed not set [ 2075.487150][ T1503] usb 10-1: 0:2 : does not exist [ 2075.543203][ T1503] usb 10-1: USB disconnect, device number 15 [ 2075.785314][T13031] udevd[13031]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2076.424439][T13485] tipc: Enabling of bearer rejected, failed to enable media [ 2076.458884][T21397] usb 9-1: USB disconnect, device number 30 [ 2077.465482][T31251] usb usb52-port1: attempt power cycle [ 2079.677992][T31251] usb usb52-port1: unable to enumerate USB device [ 2080.586614][T13534] binder: Bad value for 'max' [ 2081.272875][T13536] delete_channel: no stack [ 2082.468012][T30898] 0: reclassify loop, rule prio 0, protocol 800 [ 2082.474843][T30898] 0: reclassify loop, rule prio 0, protocol 800 [ 2082.926451][T13569] xt_TCPMSS: Only works on TCP SYN packets [ 2085.657259][T13599] FAULT_INJECTION: forcing a failure. [ 2085.657259][T13599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2085.672097][T13599] CPU: 1 UID: 0 PID: 13599 Comm: syz.1.6037 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2085.672123][T13599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2085.672136][T13599] Call Trace: [ 2085.672144][T13599] [ 2085.672153][T13599] dump_stack_lvl+0x189/0x250 [ 2085.672180][T13599] ? __pfx____ratelimit+0x10/0x10 [ 2085.672201][T13599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2085.672223][T13599] ? __pfx__printk+0x10/0x10 [ 2085.672260][T13599] should_fail_ex+0x414/0x560 [ 2085.672286][T13599] _copy_to_user+0x31/0xb0 [ 2085.672313][T13599] video_usercopy+0xeb2/0x14f0 [ 2085.672351][T13599] ? __pfx___video_do_ioctl+0x10/0x10 [ 2085.672375][T13599] ? __pfx_video_usercopy+0x10/0x10 [ 2085.672397][T13599] ? smack_file_ioctl+0x2a9/0x340 [ 2085.672427][T13599] ? __fget_files+0x2a/0x420 [ 2085.672445][T13599] ? __fget_files+0x3a0/0x420 [ 2085.672467][T13599] v4l2_ioctl+0x18a/0x1e0 [ 2085.672490][T13599] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2085.672513][T13599] __se_sys_ioctl+0xfc/0x170 [ 2085.672539][T13599] do_syscall_64+0xfa/0x3b0 [ 2085.672557][T13599] ? lockdep_hardirqs_on+0x9c/0x150 [ 2085.672574][T13599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2085.672591][T13599] ? clear_bhb_loop+0x60/0xb0 [ 2085.672611][T13599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2085.672627][T13599] RIP: 0033:0x7f081e38ebe9 [ 2085.672642][T13599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2085.672657][T13599] RSP: 002b:00007f081f24f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2085.672675][T13599] RAX: ffffffffffffffda RBX: 00007f081e5b5fa0 RCX: 00007f081e38ebe9 [ 2085.672688][T13599] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 2085.672700][T13599] RBP: 00007f081f24f090 R08: 0000000000000000 R09: 0000000000000000 [ 2085.672711][T13599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2085.672721][T13599] R13: 00007f081e5b6038 R14: 00007f081e5b5fa0 R15: 00007ffde68979a8 [ 2085.672747][T13599] [ 2085.978593][T13597] FAULT_INJECTION: forcing a failure. [ 2085.978593][T13597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2086.186521][T13597] CPU: 1 UID: 0 PID: 13597 Comm: syz.9.6036 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2086.186550][T13597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2086.186563][T13597] Call Trace: [ 2086.186572][T13597] [ 2086.186581][T13597] dump_stack_lvl+0x189/0x250 [ 2086.186608][T13597] ? __pfx____ratelimit+0x10/0x10 [ 2086.186630][T13597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2086.186652][T13597] ? __pfx__printk+0x10/0x10 [ 2086.186677][T13597] ? __might_fault+0xb0/0x130 [ 2086.186709][T13597] should_fail_ex+0x414/0x560 [ 2086.186736][T13597] _copy_from_user+0x2d/0xb0 [ 2086.186764][T13597] kstrtouint_from_user+0xc4/0x170 [ 2086.186791][T13597] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2086.186834][T13597] proc_fail_nth_write+0x88/0x240 [ 2086.186858][T13597] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2086.186888][T13597] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2086.186914][T13597] vfs_write+0x27e/0xa90 [ 2086.186944][T13597] ? __pfx_vfs_write+0x10/0x10 [ 2086.186965][T13597] ? __fget_files+0x2a/0x420 [ 2086.186992][T13597] ? __fget_files+0x3a0/0x420 [ 2086.187012][T13597] ? __fget_files+0x2a/0x420 [ 2086.187042][T13597] ksys_write+0x145/0x250 [ 2086.187075][T13597] ? __pfx_ksys_write+0x10/0x10 [ 2086.187091][T13597] ? rcu_is_watching+0x15/0xb0 [ 2086.187118][T13597] ? do_syscall_64+0xbe/0x3b0 [ 2086.187145][T13597] do_syscall_64+0xfa/0x3b0 [ 2086.187165][T13597] ? lockdep_hardirqs_on+0x9c/0x150 [ 2086.187186][T13597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.187206][T13597] ? clear_bhb_loop+0x60/0xb0 [ 2086.187231][T13597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.187250][T13597] RIP: 0033:0x7f940eb8d69f [ 2086.187269][T13597] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2086.187286][T13597] RSP: 002b:00007f940fa18030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2086.187307][T13597] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f940eb8d69f [ 2086.187321][T13597] RDX: 0000000000000001 RSI: 00007f940fa180a0 RDI: 0000000000000005 [ 2086.187334][T13597] RBP: 00007f940fa18090 R08: 0000000000000000 R09: 0000000000000000 [ 2086.187347][T13597] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2086.187358][T13597] R13: 00007f940edb6038 R14: 00007f940edb5fa0 R15: 00007fff6ac69758 [ 2086.187392][T13597] [ 2086.613872][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6039'. [ 2088.200068][T13617] JFS: charset not found [ 2089.353954][T12437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2089.369018][T12437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2089.380707][T12437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2089.391396][T12437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2089.410062][T12437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2090.383487][ T7076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2090.509147][T13626] vlan2: entered promiscuous mode [ 2090.515354][T13626] macvtap0: entered promiscuous mode [ 2090.713269][ T7076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2090.843663][ T7076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2091.036419][ T43] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2091.419832][ T7076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2091.450134][T13724] binder: Bad value for 'max' [ 2091.486783][T12437] Bluetooth: hci1: command tx timeout [ 2091.509525][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2091.534885][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2091.576977][ T43] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2091.591618][ T43] usb 6-1: config 1 interface 0 has no altsetting 1 [ 2091.671344][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 2091.718564][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.796360][ T43] usb 6-1: Product: syz [ 2091.820938][ T43] usb 6-1: Manufacturer: syz [ 2091.838535][ T43] usb 6-1: SerialNumber: syz [ 2091.870788][ T43] smsusb:smsusb_probe: board id=8, interface number 0 [ 2091.886668][T31251] 0: reclassify loop, rule prio 0, protocol 800 [ 2092.071019][T13689] cramfs: Unknown parameter 'discard@@ u $' [ 2092.322667][T13634] chnl_net:caif_netlink_parms(): no params data found [ 2092.462886][ T7076] bridge_slave_1: left allmulticast mode [ 2092.506407][ T7076] bridge_slave_1: left promiscuous mode [ 2092.530819][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.589647][ T7076] bridge_slave_0: left allmulticast mode [ 2092.614467][ T7076] bridge_slave_0: left promiscuous mode [ 2092.645536][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.531010][ T43] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 2093.566382][T12437] Bluetooth: hci1: command tx timeout [ 2093.607778][ T43] smsusb 6-1:1.0: probe with driver smsusb failed with error -71 [ 2093.628006][ T43] usb 6-1: USB disconnect, device number 95 [ 2094.075575][ T7076] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2094.198260][ T5928] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2094.397284][ T5928] usb 9-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 2094.423124][ T5928] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2094.434632][ T5928] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2094.474215][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2094.496812][ T5928] usb 9-1: SerialNumber: syz [ 2094.615525][ T7076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2094.637759][ T7076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2094.654058][ T7076] bond0 (unregistering): Released all slaves [ 2094.693503][ T7076] bond1 (unregistering): Released all slaves [ 2095.649720][T12437] Bluetooth: hci1: command tx timeout [ 2096.436041][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 2096.443609][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 2097.727961][T12437] Bluetooth: hci1: command tx timeout [ 2097.842923][T13850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2097.859910][T13850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2097.971538][T13850] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2097.982097][T13850] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2097.991407][T13850] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2098.000378][T13850] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2098.090992][ T5928] usb 9-1: 0:2 : does not exist [ 2098.124734][ T7076] tipc: Disabling bearer [ 2098.132442][ T7076] tipc: Left network mode [ 2098.219359][T13903] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2098.280789][ T5928] usb 9-1: USB disconnect, device number 31 [ 2098.310284][T13903] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2098.333353][T13903] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2098.622957][T13825] udevd[13825]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2098.652742][ T7076] [ 2098.655105][ T7076] ====================================================== [ 2098.662316][ T7076] WARNING: possible circular locking dependency detected [ 2098.669603][ T7076] 6.16.0-syzkaller #0 Not tainted [ 2098.674720][ T7076] ------------------------------------------------------ [ 2098.681763][ T7076] kworker/u8:11/7076 is trying to acquire lock: [ 2098.688112][ T7076] ffff888054324e00 (team->team_lock_key#11){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 2098.697876][ T7076] [ 2098.697876][ T7076] but task is already holding lock: [ 2098.705446][ T7076] ffff888052558768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 2098.716071][ T7076] [ 2098.716071][ T7076] which lock already depends on the new lock. [ 2098.716071][ T7076] [ 2098.726482][ T7076] [ 2098.726482][ T7076] the existing dependency chain (in reverse order) is: [ 2098.735500][ T7076] [ 2098.735500][ T7076] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 2098.743224][ T7076] lock_acquire+0x120/0x360 [ 2098.748334][ T7076] __mutex_lock+0x182/0xe80 [ 2098.753354][ T7076] ieee80211_open+0xed/0x1f0 [ 2098.758467][ T7076] __dev_open+0x470/0x880 [ 2098.763306][ T7076] netif_open+0xaa/0x170 [ 2098.768063][ T7076] dev_open+0x125/0x260 [ 2098.772756][ T7076] team_add_slave+0xb36/0x2840 [ 2098.778035][ T7076] do_set_master+0x530/0x6d0 [ 2098.783133][ T7076] do_setlink+0xcf0/0x41c0 [ 2098.788066][ T7076] rtnl_newlink+0x160b/0x1c70 [ 2098.793269][ T7076] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2098.798791][ T7076] netlink_rcv_skb+0x205/0x470 [ 2098.804093][ T7076] netlink_unicast+0x75c/0x8e0 [ 2098.809390][ T7076] netlink_sendmsg+0x805/0xb30 [ 2098.815038][ T7076] __sock_sendmsg+0x21c/0x270 [ 2098.820438][ T7076] ____sys_sendmsg+0x505/0x830 [ 2098.825805][ T7076] ___sys_sendmsg+0x21f/0x2a0 [ 2098.831035][ T7076] __x64_sys_sendmsg+0x19b/0x260 [ 2098.836504][ T7076] do_syscall_64+0xfa/0x3b0 [ 2098.841619][ T7076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2098.848018][ T7076] [ 2098.848018][ T7076] -> #0 (team->team_lock_key#11){+.+.}-{4:4}: [ 2098.856280][ T7076] validate_chain+0xb9b/0x2140 [ 2098.861678][ T7076] __lock_acquire+0xab9/0xd20 [ 2098.866886][ T7076] lock_acquire+0x120/0x360 [ 2098.871904][ T7076] __mutex_lock+0x182/0xe80 [ 2098.876927][ T7076] team_del_slave+0x32/0x1c0 [ 2098.882024][ T7076] team_device_event+0x285/0xa20 [ 2098.887554][ T7076] notifier_call_chain+0x1b3/0x3e0 [ 2098.893259][ T7076] unregister_netdevice_many_notify+0x15d8/0x2320 [ 2098.900205][ T7076] unregister_netdevice_queue+0x33c/0x380 [ 2098.906436][ T7076] _cfg80211_unregister_wdev+0x165/0x590 [ 2098.913366][ T7076] ieee80211_remove_interfaces+0x49a/0x6d0 [ 2098.920062][ T7076] ieee80211_unregister_hw+0x5d/0x2c0 [ 2098.926771][ T7076] mac80211_hwsim_del_radio+0x275/0x460 [ 2098.933026][ T7076] hwsim_exit_net+0x584/0x640 [ 2098.938350][ T7076] ops_undo_list+0x497/0x990 [ 2098.943493][ T7076] cleanup_net+0x4c5/0x800 [ 2098.948532][ T7076] process_scheduled_works+0xade/0x17b0 [ 2098.954708][ T7076] worker_thread+0x8a0/0xda0 [ 2098.959902][ T7076] kthread+0x70e/0x8a0 [ 2098.964481][ T7076] ret_from_fork+0x3fc/0x770 [ 2098.969577][ T7076] ret_from_fork_asm+0x1a/0x30 [ 2098.974868][ T7076] [ 2098.974868][ T7076] other info that might help us debug this: [ 2098.974868][ T7076] [ 2098.985201][ T7076] Possible unsafe locking scenario: [ 2098.985201][ T7076] [ 2098.992665][ T7076] CPU0 CPU1 [ 2098.998041][ T7076] ---- ---- [ 2099.003505][ T7076] lock(&rdev->wiphy.mtx); [ 2099.008006][ T7076] lock(team->team_lock_key#11); [ 2099.015810][ T7076] lock(&rdev->wiphy.mtx); [ 2099.023007][ T7076] lock(team->team_lock_key#11); [ 2099.028219][ T7076] [ 2099.028219][ T7076] *** DEADLOCK *** [ 2099.028219][ T7076] [ 2099.036464][ T7076] 5 locks held by kworker/u8:11/7076: [ 2099.041853][ T7076] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2099.052822][ T7076] #1: ffffc9000b7b7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2099.063370][ T7076] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2099.072831][ T7076] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 2099.082853][ T7076] #4: ffff888052558768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 2099.093646][ T7076] [ 2099.093646][ T7076] stack backtrace: [ 2099.099528][ T7076] CPU: 1 UID: 0 PID: 7076 Comm: kworker/u8:11 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2099.099542][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2099.099550][ T7076] Workqueue: netns cleanup_net [ 2099.099570][ T7076] Call Trace: [ 2099.099575][ T7076] [ 2099.099580][ T7076] dump_stack_lvl+0x189/0x250 [ 2099.099595][ T7076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2099.099606][ T7076] ? __pfx__printk+0x10/0x10 [ 2099.099620][ T7076] ? print_lock_name+0xde/0x100 [ 2099.099632][ T7076] print_circular_bug+0x2ee/0x310 [ 2099.099646][ T7076] check_noncircular+0x134/0x160 [ 2099.099659][ T7076] validate_chain+0xb9b/0x2140 [ 2099.099671][ T7076] ? finish_task_switch+0x266/0x950 [ 2099.099686][ T7076] ? lockdep_hardirqs_on+0x9c/0x150 [ 2099.099700][ T7076] __lock_acquire+0xab9/0xd20 [ 2099.099713][ T7076] ? team_del_slave+0x32/0x1c0 [ 2099.099727][ T7076] lock_acquire+0x120/0x360 [ 2099.099735][ T7076] ? team_del_slave+0x32/0x1c0 [ 2099.099751][ T7076] __mutex_lock+0x182/0xe80 [ 2099.099762][ T7076] ? team_del_slave+0x32/0x1c0 [ 2099.099774][ T7076] ? lockdep_hardirqs_on+0x9c/0x150 [ 2099.099786][ T7076] ? team_del_slave+0x32/0x1c0 [ 2099.099798][ T7076] ? rcu_is_watching+0x15/0xb0 [ 2099.099810][ T7076] ? __pfx___mutex_lock+0x10/0x10 [ 2099.099820][ T7076] ? preempt_schedule_irq+0xde/0x150 [ 2099.099830][ T7076] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2099.099839][ T7076] ? bond_netdev_event+0xd9/0xe80 [ 2099.099855][ T7076] ? irqentry_exit+0x74/0x90 [ 2099.099865][ T7076] ? lockdep_hardirqs_on+0x9c/0x150 [ 2099.099876][ T7076] team_del_slave+0x32/0x1c0 [ 2099.099890][ T7076] team_device_event+0x285/0xa20 [ 2099.099900][ T7076] notifier_call_chain+0x1b3/0x3e0 [ 2099.099916][ T7076] unregister_netdevice_many_notify+0x15d8/0x2320 [ 2099.099931][ T7076] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2099.099944][ T7076] ? __lock_acquire+0xab9/0xd20 [ 2099.099957][ T7076] unregister_netdevice_queue+0x33c/0x380 [ 2099.099968][ T7076] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2099.099981][ T7076] _cfg80211_unregister_wdev+0x165/0x590 [ 2099.099997][ T7076] ieee80211_remove_interfaces+0x49a/0x6d0 [ 2099.100010][ T7076] ? __pfx_synchronize_rcu+0x10/0x10 [ 2099.100022][ T7076] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 2099.100034][ T7076] ? rcu_is_watching+0x15/0xb0 [ 2099.100045][ T7076] ieee80211_unregister_hw+0x5d/0x2c0 [ 2099.100062][ T7076] mac80211_hwsim_del_radio+0x275/0x460 [ 2099.100079][ T7076] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 2099.100096][ T7076] hwsim_exit_net+0x584/0x640 [ 2099.100109][ T7076] ? __pfx_hwsim_exit_net+0x10/0x10 [ 2099.100122][ T7076] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 2099.100138][ T7076] ops_undo_list+0x497/0x990 [ 2099.100153][ T7076] ? __pfx_ops_undo_list+0x10/0x10 [ 2099.100169][ T7076] cleanup_net+0x4c5/0x800 [ 2099.100183][ T7076] ? __pfx_cleanup_net+0x10/0x10 [ 2099.100197][ T7076] ? _raw_spin_unlock_irq+0x23/0x50 [ 2099.100206][ T7076] ? process_scheduled_works+0x9ef/0x17b0 [ 2099.100216][ T7076] ? process_scheduled_works+0x9ef/0x17b0 [ 2099.100227][ T7076] process_scheduled_works+0xade/0x17b0 [ 2099.100243][ T7076] ? __pfx_process_scheduled_works+0x10/0x10 [ 2099.100257][ T7076] worker_thread+0x8a0/0xda0 [ 2099.100268][ T7076] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2099.100286][ T7076] ? __kthread_parkme+0x7b/0x200 [ 2099.100299][ T7076] kthread+0x70e/0x8a0 [ 2099.100313][ T7076] ? __pfx_worker_thread+0x10/0x10 [ 2099.100323][ T7076] ? __pfx_kthread+0x10/0x10 [ 2099.100336][ T7076] ? _raw_spin_unlock_irq+0x23/0x50 [ 2099.100345][ T7076] ? lockdep_hardirqs_on+0x9c/0x150 [ 2099.100354][ T7076] ? __pfx_kthread+0x10/0x10 [ 2099.100367][ T7076] ret_from_fork+0x3fc/0x770 [ 2099.100378][ T7076] ? __pfx_ret_from_fork+0x10/0x10 [ 2099.100388][ T7076] ? __switch_to_asm+0x39/0x70 [ 2099.100400][ T7076] ? __switch_to_asm+0x33/0x70 [ 2099.100411][ T7076] ? __pfx_kthread+0x10/0x10 [ 2099.100424][ T7076] ret_from_fork_asm+0x1a/0x30 [ 2099.100439][ T7076] [ 2099.482356][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2099.699264][ T7076] team0: Port device wlan1 removed [ 2100.487606][ T7076] hsr_slave_0: left promiscuous mode [ 2100.511760][ T7076] hsr_slave_1: left promiscuous mode [ 2100.521557][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2100.544822][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2100.568500][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2100.587393][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2100.605460][ T7076] veth1_macvtap: left promiscuous mode [ 2100.612734][ T7076] veth0_macvtap: left promiscuous mode [ 2100.619304][ T7076] veth1_vlan: left promiscuous mode [ 2100.624615][ T7076] veth0_vlan: left promiscuous mode [ 2100.754161][ T7076] team0 (unregistering): Port device team_slave_1 removed [ 2100.799761][ T7076] team0 (unregistering): Port device team_slave_0 removed [ 2100.994916][T13955] syz_tun (unregistering): left allmulticast mode [ 2101.634226][ T7076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.700960][ T7076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.751233][ T7076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.813383][ T7076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.894416][ T7076] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.952458][ T7076] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.011398][ T7076] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.062208][ T7076] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.185017][ T7076] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.230512][ T7076] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.301594][ T7076] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.350198][ T7076] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.429774][ T7076] bridge_slave_1: left allmulticast mode [ 2102.435456][ T7076] bridge_slave_1: left promiscuous mode [ 2102.441453][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.449612][ T7076] bridge_slave_0: left allmulticast mode [ 2102.455303][ T7076] bridge_slave_0: left promiscuous mode [ 2102.461639][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.470556][ T7076] bridge_slave_1: left allmulticast mode [ 2102.476710][ T7076] bridge_slave_1: left promiscuous mode [ 2102.482362][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.490753][ T7076] bridge_slave_0: left allmulticast mode [ 2102.496810][ T7076] bridge_slave_0: left promiscuous mode [ 2102.502461][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.511879][ T7076] bridge_slave_1: left allmulticast mode [ 2102.517955][ T7076] bridge_slave_1: left promiscuous mode [ 2102.523630][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.531901][ T7076] bridge_slave_0: left allmulticast mode [ 2102.537996][ T7076] bridge_slave_0: left promiscuous mode [ 2102.543680][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.662211][ T7076] bond0 (unregistering): Released all slaves [ 2103.028186][ T7076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2103.038237][ T7076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2103.048471][ T7076] bond0 (unregistering): Released all slaves [ 2103.123046][ T7076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2103.133243][ T7076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2103.143280][ T7076] bond0 (unregistering): Released all slaves [ 2103.191693][ T7076] bond2 (unregistering): (slave geneve3): Releasing active interface [ 2103.483559][ T7076] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2103.493898][ T7076] bond0 (unregistering): Released all slaves [ 2103.503200][ T7076] bond1 (unregistering): Released all slaves [ 2103.514144][ T7076] bond2 (unregistering): Released all slaves [ 2103.613978][ T7076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2103.624720][ T7076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2103.636030][ T7076] bond0 (unregistering): Released all slaves [ 2103.738379][ T7076] tipc: Left network mode [ 2103.752210][ T7076] tipc: Left network mode [ 2103.770549][ T7076] tipc: Left network mode [ 2103.775763][ T7076] tipc: Left network mode [ 2104.285127][ T7076] hsr_slave_0: left promiscuous mode [ 2104.291252][ T7076] hsr_slave_1: left promiscuous mode [ 2104.297203][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2104.304866][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2104.315767][ T7076] hsr_slave_0: left promiscuous mode [ 2104.321807][ T7076] hsr_slave_1: left promiscuous mode [ 2104.327982][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2104.335417][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2104.343124][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2104.350818][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2104.361234][ T7076] hsr_slave_0: left promiscuous mode [ 2104.367183][ T7076] hsr_slave_1: left promiscuous mode [ 2104.374933][ T7076] hsr_slave_0: left promiscuous mode [ 2104.382038][ T7076] hsr_slave_1: left promiscuous mode [ 2104.388116][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2104.395549][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2104.403357][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2104.411074][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2104.426765][ T7076] veth1_macvtap: left promiscuous mode [ 2104.432388][ T7076] veth0_macvtap: left promiscuous mode [ 2104.438041][ T7076] veth1_vlan: left promiscuous mode [ 2104.443692][ T7076] veth0_vlan: left promiscuous mode [ 2104.450084][ T7076] veth1_macvtap: left promiscuous mode [ 2104.455580][ T7076] veth0_macvtap: left promiscuous mode [ 2104.462456][ T7076] veth1_vlan: left promiscuous mode [ 2104.467927][ T7076] veth0_vlan: left promiscuous mode [ 2104.473831][ T7076] veth0_macvtap: left promiscuous mode [ 2104.479775][ T7076] veth1_vlan: left promiscuous mode [ 2104.485218][ T7076] veth0_vlan: left promiscuous mode [ 2105.059238][ T7076] team0 (unregistering): Port device team_slave_1 removed [ 2105.111674][ T7076] team0 (unregistering): Port device team_slave_0 removed [ 2105.711662][ T7076] team0 (unregistering): Port device team_slave_1 removed [ 2105.751472][ T7076] team0 (unregistering): Port device team_slave_0 removed [ 2106.383830][ T7076] team0 (unregistering): Port device team_slave_1 removed [ 2106.422805][ T7076] team0 (unregistering): Port device team_slave_0 removed [ 2107.559275][ T7076] IPVS: stop unused estimator thread 0...