last executing test programs: 17m19.905632111s ago: executing program 2 (id=486): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 17m19.698680158s ago: executing program 2 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003640)=@newtfilter={0x40, 0x2c, 0xd3f, 0x10bd31, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x14}], 0x1}, 0x4011) 17m19.145817053s ago: executing program 2 (id=491): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 17m18.296403514s ago: executing program 2 (id=492): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0}]) 17m17.994768088s ago: executing program 2 (id=493): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$alg(r1, 0x0, 0x80) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 17m17.008506841s ago: executing program 2 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x8000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 17m16.921031448s ago: executing program 32 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x8000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 10m22.354652575s ago: executing program 3 (id=2282): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) write$P9_RGETLOCK(r1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000040)={'wlan1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, "be2f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)="b0cfeb7ec119155ed4cf935993258786b98e7b6207b93a82a83871ae03d5a03bc3abfef0ad97c3dec2848706ff27373ebce00081e328d003d9dc99378b1a8faeb8650a5a560d6c40f4f12bf58a031da9e53a01a766d10858fdbbc3274b3e710e268e950286807371c4331c56189391dc516739f8d40d5e117b928d231b64af13888012195c7f3d5642dee59d0760d1d4097282559e15a234a4309d0e763c4d8a3832d7ebaeac76708cd8711acec4f78e5ce017386a7c786f372c5abd0d2ae5d681db7abd3ad3a05f7955eeeb0958d3a6d23093b83bebba50b56b82107df1d60e70eeef", 0xe3, r0}, 0x64) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)={[{0x2d, 'cpu'}]}, 0x5) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0xfffffffffffffffe, r8, 0x14, {0x1, 0x407}}, 0x1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18) 10m19.947207179s ago: executing program 3 (id=2288): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x549903) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 10m18.028241334s ago: executing program 3 (id=2294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='dummy_udc.0', 0xb) clock_nanosleep(0x0, 0x0, &(0x7f0000000640)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000740)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000780)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='\n', 0x1) 10m16.60584228s ago: executing program 3 (id=2296): pipe(&(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@ax25={{0x3, @null}, [@netrom, @rose, @rose, @remote, @null, @bcast, @null, @default]}, &(0x7f0000000340)=0x80) 10m13.947376751s ago: executing program 3 (id=2302): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000040000000400000021bf00006fc1f14a", @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = openat$full(0xffffff9c, &(0x7f0000000140), 0x214000, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtaction={0x18, 0x30, 0x100, 0x0, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) 9m58.842753416s ago: executing program 33 (id=2302): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000040000000400000021bf00006fc1f14a", @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = openat$full(0xffffff9c, &(0x7f0000000140), 0x214000, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtaction={0x18, 0x30, 0x100, 0x0, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) 4m48.264452591s ago: executing program 4 (id=3138): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x0) socket$unix(0x1, 0x1, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, 0x0, &(0x7f0000000100)='./file0/file0\x00') r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r4, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r3) 4m47.865064658s ago: executing program 0 (id=3139): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000280)={0x0, 0xa211, 0x80, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20a82, 0x1e) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008800) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000540)=@md0, 0x0, &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000), 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000, 0x6, 0x0) 4m46.949106804s ago: executing program 0 (id=3141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000009b80)=ANY=[@ANYRESDEC=r3], 0x18}], 0x1, 0x0, 0x0, 0x28048840}, 0x0) 4m46.947018298s ago: executing program 1 (id=3142): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2a5c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40087447, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setresgid(0x0, 0x0, 0xee01) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400d3010408"], 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r3 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r6, 0x0, 0x0, 0x1}}, 0x20) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) 4m46.946707718s ago: executing program 4 (id=3143): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) unshare(0x68040200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x24, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=[{0x2, 0x0, 0xc, 0xa}, {0x0, 0x4, 0x9, 0x4}, {0x0, 0x4, 0xe}, {0x3, 0x2, 0x7, 0x6}, {0x5, 0x1, 0x0, 0x6}], 0x10, 0x80}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd", 0x93, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r3}, &(0x7f0000000440)=""/183, 0xb7, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r6}, 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000180), &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(&(0x7f0000000500), 0x8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8927, &(0x7f0000000000)={'tunl0\x00', @ifru_names='nr0\x00'}) 4m46.565777384s ago: executing program 4 (id=3144): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rename(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0\x00') shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x1000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002e00090007000000000000000400000004001180"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4m46.519285887s ago: executing program 1 (id=3153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, &(0x7f0000000600)) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x10000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8c9030, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6d73f6f6653dadd0303030303030303030303030373962632c616e616d653d002c686173682c53707072616973652c6f626a5f747970653d706167656d6170002c00b9232bd77fbef7c9e25447aad78700dca96adcab50c065944b2a35ce876b02a8cbd10f382c76683c5cf8dfa612c964466f6cc61dd8426e52b6e1ffb29f633037decb89c20f3eb569ee"]) r9 = fcntl$getown(r1, 0x9) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r9) 4m44.098726768s ago: executing program 1 (id=3147): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x791b, &(0x7f00000003c0)={0x0, 0xef18, 0x1, 0x3, 0x30f}, &(0x7f0000000440), &(0x7f0000000780), &(0x7f00000007c0)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x8}, 0x50) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$pokeuser(0x6, r10, 0x118, 0xffffb453) ptrace$pokeuser(0x6, r10, 0x104, 0x7) io_uring_setup(0x14b6, &(0x7f00000002c0)={0x0, 0xf553, 0x8000, 0x1, 0x6e, 0x0, r3}) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 4m44.076661451s ago: executing program 4 (id=3148): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800) write(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r3, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x8}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0xffff11fa}, {0x0, 0xa}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x3, 0x1, 0x0, @tick=0x48, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x9a, 0x9, 0x8, 0x4, @time={0x2029, 0xa}, {0x8, 0x9}, {0xe, 0x5}, @quote={{0xd7, 0x5}, 0x3, &(0x7f0000000040)={0x3, 0x6, 0x0, 0x8, @time={0x80000001, 0x1}, {0x2, 0x2}, {0x7, 0xd9}, @raw32={[0x5, 0x4e9907a7, 0x1000]}}}}], 0x8c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m42.76558521s ago: executing program 0 (id=3150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, r0, 0x4007) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0xffffffff, 0x9, 0x7}) connect(r2, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x58}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000002}) recvfrom$unix(r1, &(0x7f0000000380)=""/209, 0xd1, 0x40002002, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 4m36.938477714s ago: executing program 0 (id=3151): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) sendmmsg(r8, &(0x7f0000004900)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000002540)=[{&(0x7f00000001c0)="4c85f375ffdda361d525f89fbdcf55098629ffbd276238b4f7b6e17cf2a85e3ad23a4629bf64d269de9c84db10f3c815b820d1197de33eb02a5c5b1db1b0178ca5064135bf319ef9c0c82c27071d10a871b477c63acdf9dd7a771ff556a0ea0d838422", 0x63}, {&(0x7f0000000240)="fd59a4cfdd5d7b0f4cfb4d6a546a170ee1fc4db513e3b9ee7801fb2e97dca90444b0a642aa7ef21002efb4e5c29a60ac695be768dd44eb81aa516b3858", 0x3d}, {&(0x7f0000000280)="72c485c9335921d6cfc3a8cebda38407941a", 0x12}, {&(0x7f0000004940)="583409928556ee28797feeca0e0fef586932c1b81294a1dd7cdab3ffdd51034c742d255132824f50872d82ed54d12e8cb9545877a78d610fabb922f5d75df5ec44cc6f2301d8b7c5aaa4e7b3dbee6927cfc31ccb64c6d2a17c252404dff35f371dc36343b495e25d2944ae51c75d059a4b330e", 0x73}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="b7c218985299964083fbe868845c2e5eb41b6776c1206d7e92103dcc016645ee63525ea77642bb4eda6583461fffe3eb73d0239572e5", 0x36}, {&(0x7f0000001440)="1c1fab0793969bc74d28b962a72b86ebc31ba7f4a16d8ca146c98d8c10ff1d2ec2172010b1b62b386e4d43da99d6", 0x2e}, {&(0x7f0000001480)="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", 0xe78}], 0x8}}], 0x1, 0x0) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000f40)="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", 0x584}], 0x2, 0x0, 0x0, 0x2c}, 0x880) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r6, 0x20000000) 4m36.917124824s ago: executing program 1 (id=3152): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x801) socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x87da, 0x200, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40000, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x6080, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2252, 0x10, 0x3, 0x1}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000d00)='nf 127.0.0.1 2000000000 l\\calhost\n', 0x24) 4m36.889657352s ago: executing program 4 (id=3154): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) socket(0x2, 0xa, 0x0) 4m36.720216198s ago: executing program 1 (id=3156): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 4m35.727807099s ago: executing program 0 (id=3158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, 0x0) connect(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 4m26.163555841s ago: executing program 0 (id=3159): socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4m26.046473284s ago: executing program 4 (id=3160): socket$nl_route(0x10, 0x3, 0x0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x31f, &(0x7f0000000040)={0xb0, 0x7, 0x7, 0x3}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) gettid() r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0xa) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m4.588024399s ago: executing program 1 (id=3161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = dup3(r2, r4, 0x80000) r6 = dup(r5) pwrite64(r2, &(0x7f0000000040)="46f4b58982ede3e19e", 0x9, 0x4) read(r6, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r1, 0x0, &(0x7f000009de80), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, 0x0, &(0x7f0000000600), &(0x7f0000000000)) io_uring_enter(r7, 0x67e, 0xa9e7, 0x3, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffffc, 0x2) 4m4.587277802s ago: executing program 34 (id=3159): socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4m4.460340221s ago: executing program 35 (id=3161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = dup3(r2, r4, 0x80000) r6 = dup(r5) pwrite64(r2, &(0x7f0000000040)="46f4b58982ede3e19e", 0x9, 0x4) read(r6, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r1, 0x0, &(0x7f000009de80), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, 0x0, &(0x7f0000000600), &(0x7f0000000000)) io_uring_enter(r7, 0x67e, 0xa9e7, 0x3, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffffc, 0x2) 4m4.130389696s ago: executing program 36 (id=3160): socket$nl_route(0x10, 0x3, 0x0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x31f, &(0x7f0000000040)={0xb0, 0x7, 0x7, 0x3}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) gettid() r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0xa) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 43.373157562s ago: executing program 5 (id=3632): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r5, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) close(r3) capset(0x0, &(0x7f0000000040)={0x240000, 0x200000}) 40.6812055s ago: executing program 5 (id=3636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0x5, 0xfe, 0x7, 0xfd}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0108ffff030000000000000000000200", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=0x0], 0x48}}, 0x4008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x800) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002303"], 0x48}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) 25.82288579s ago: executing program 5 (id=3639): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x10003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a", 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c) 22.878371909s ago: executing program 6 (id=3648): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r9, &(0x7f0000000700)='syzkaller%d', 0xb) 22.877636361s ago: executing program 8 (id=3650): kexec_load(0x5, 0x6, &(0x7f0000000480)=[{&(0x7f0000000000), 0x0, 0x0, 0x3}, {&(0x7f0000000040)="8f9b", 0x2, 0x7f, 0x5}, {&(0x7f0000000100)="4690d921ed257ab9956a77f6ba44e4459a518fe17f1a4381e2248855d0658a47395e4802c26b4720145ddaf072", 0x2d, 0x5, 0x671f}, {&(0x7f0000000140)="cecf30e51940cff1cdf084767d8e1808faa5121a7e0e4d6a2f57eb2ce72f9034adf8ed99f5c648a7024d5dc6c9638562205c4d8bfc919658628cea7528bf80b25bd1f6848c505e82f1ca9f1676af1317ddc07623a7ce94c20b91c44887168ac9aa2e2eb27403f545f6ceb7481a9bba9e9a3a32cac2472f6c2ebc42929fd61f9762a5dc5c97240bf5d09f1e44e373491f828e3c80c694e8cfde8d43d540fbf05e089252ebe5b8c2015532c938cf60919e55fcf4453c5fa76389f90852ab540d4a97e9a2bb41e31693ed08938f033bd744576a53d4dadfac8ad3b6ad80af2e", 0xde, 0x8, 0x6}, {&(0x7f0000000300)="8f19a9a3eb697d3986ee375ca792366e6db3220c7b991a452528e57c2e5cb02ae9d31fb50b9973398010e1f884f155b9816834d0f0a9d54619bca8f466e72d4e45c61a7f3cfe4894c4f1a99f8288c6a3c07ccc60c24771c990acd7fcf55c685f2649e473e3926b3ab5cf4a5c4020e7f3f44aca403afc1e0821f9bee13045c6d49b444d47bbd97a6d2e119048bd3aa9926f935092acba247292b9ee72f0176b7d7b306698d9a09ad2cebb938c4ec4bbcdcb32e63fd4ef9ea0799f849d010008079df1ebcb54670248c737", 0xca, 0x3db, 0xfffffd6b}, {&(0x7f0000000400)="fab92ac8864289bdd124ac75419d1651543a1cb21a05cb367fcdf1d5545d220dd2a78328b746ba21bd2517aa86d11fbe33a544ec0481936e898070b4034585d4bf7c61b567a651679639f51dd4c0b2a9446a2c2773fbbf6909fdf9a17f11e903e5a96c0e4fecdf2b8a358d1ae16a4c8973812aaf31694e6f4f", 0x79, 0x9, 0x5}], 0xa0000) socket$nl_generic(0x10, 0x3, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) 20.728139533s ago: executing program 8 (id=3654): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0x8}, {0x0, 0x1}, {0xffec, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0bf600004e00075d"], 0xfe33) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r7, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r8, &(0x7f0000000080)='y', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x52, 0xd8, 0xfffc, {0x4, 0x1}, {0x47, 0x2}, @rumble={0x46f2, 0x4}}) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800b000100736f636b657400001c0002800800030200000009080002400000000a0800014000000003"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044014) 20.124734914s ago: executing program 6 (id=3655): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$full(0xffffff9c, &(0x7f0000000140), 0x214000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0x4}, 0x3c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) 20.123668104s ago: executing program 8 (id=3656): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000019080)={0x0, 0x354, 0xf2, 0x9, 0xe1, 0x1, 0xc}, 0xc) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x4004) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004700070128bd700000000000017c000006000480"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 19.97190683s ago: executing program 7 (id=3657): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = socket(0x28, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xe0, 0x6, 0x8, 0x10, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7, 0x80, 0x7f}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8008640b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00000000", 0x25) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 1.524633947s ago: executing program 7 (id=3658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0xffec, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0bf600004e00075d"], 0xfe33) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r7, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r8, &(0x7f0000000080)='y', 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x52, 0xd8, 0xfffc, {0x4, 0x1}, {0x47, 0x2}, @rumble={0x46f2, 0x4}}) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800b000100736f636b657400001c0002800800030200000009080002400000000a0800014000000003"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044014) 1.44805929s ago: executing program 6 (id=3659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff2, 0x8}, {0x0, 0x1}, {0xffec, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r5}, 0xc) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0bf600004e00075d"], 0xfe33) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r8, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r9, &(0x7f0000000080)='y', 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x52, 0xd8, 0xfffc, {0x4, 0x1}, {0x47, 0x2}, @rumble={0x46f2, 0x4}}) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r10, &(0x7f0000000040)="e2", 0x12d8) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800b000100736f636b657400001c0002800800030200000009080002400000000a0800014000000003"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044014) 1.447468515s ago: executing program 7 (id=3660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0x8}, {0x0, 0x1}, {0xffec, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0bf600004e00075d"], 0xfe33) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r7, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r8, &(0x7f0000000080)='y', 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x52, 0xd8, 0xfffc, {0x4, 0x1}, {0x47, 0x2}, @rumble={0x46f2, 0x4}}) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800b000100736f636b657400001c0002800800030200000009080002400000000a0800014000000003"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044014) 1.414697984s ago: executing program 5 (id=3661): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@private2, 0x29}) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) bind$can_j1939(r0, 0x0, 0x0) 1.413573277s ago: executing program 6 (id=3662): socket$inet6(0xa, 0x80002, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x80000002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000100001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e9240e859ab1d16da4a6836139ddab7f483f87563a5f060467b0153673f08af5bb4c6d5d0fb79e3e3aa3b229d4aabd5b2c601933c13ba9d009b6c1d4a756a7047533b6b4ea0c12be66d324d99e0bcfe18d5ec27bcf3d7a6a098bc7f53264afa6f049fe78da5d942dddd968db42e689d33eb1a7f33e3dcb86f49b32389d1b00208c04d5efb523faf65469a6c8e9e669374465f09662f8adf6ea4bc22dff735f89ecf05900a8aebd65c71f185fd342fa5ed2969bbe2eebe64198dbb3b4a880c15856e4a5db83377832799adfc7fd413368e6d7d89fe09a4a72b226f47a0484d44a7cd3b469a495522080"], 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) ioctl$FE_DISEQC_SEND_MASTER_CMD(r2, 0x40076f3f, &(0x7f0000000040)={"824ca06c4e58", 0x6}) r4 = syz_open_dev$sg(&(0x7f0000000300), 0x4a38, 0x141000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x0, 0x20, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), 0x0, 0x1000000c, 0x0, 0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0cbc0abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507818231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e726aef83d9ff9281ab79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000010c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd19953603000000adeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016be64dc097982e23462392a0cd05afb2e060fd6424a942ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5d81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b1495213060000000000000049584655c4fce8c5bb7c54664aef6d780100358aa54bcb49926c4be9ee4659153d9fa95d07cc4efdab2c355efe8e8d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6122f572047ccf3c8edd82660e5d74c52be71d780c30000000000fd00000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f2def52394db3e9d8318bbb9baff3db95bfd69e08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d05b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0a832f5194ddfce51e5aff28f621bb2fd2a5ab719df823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c3348329b0ee77d93596e3f1287552e0c8cdb326c5118d2e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e26aa90c571fa3c07238697b13c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170e42f28cea4105541e11c8605628b9ca935bc252fee8b596a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babb8fa16f3182c5b98493a5aa943aa3a777a751f56e0c7a74f7f63d83ff119561acd5fe560563b051dc29ac586b21148ad5a5498369ac347d19660c132b1df58d65418bc824d8b88b699462c2ce6524eaf0905445413033f041a26b189f2553ef218eba22152a4dc979a0e37396ae1a2883b1e4d44c8af7973d5c1f286c26459209db5a9a51dc69d0ba3fb6c884e50be3598ac53295137c97dabe52d98fed0b352c0b68b7e75ed59931ef57bb5fc28d5b1f914fc8abbb444637a5dfbac5035eb0713efb823360a8da80e4265e599f76952a8082b8c5f7890275a922cd2ccaaf75dcca6849e89e1bab32fe9b598c61d7565dc6ab0a6d43b60f8d08ddf27a286807692d18973edaa6d5401c79b3cafaab4a8d6c946cbe5de350000000022e16a5f72c6d41dc9de8517fdcfa0c0efca880257443cfc3057c353569ffb1588b4bb261a6e99c5936e1b4339d87ec84db99e797f44451fc6b5da1950d24b3d4118f2288804740e605500c1f493c7dc42164cc6c1b01a329ce95272a07a355d4ba705b5e71ce5e1042a0c638e565881e5eedbc62f79407b73ae787c9cdb752eda44aeef962c93ab245f61e8ca5c0d41cc56124840f1b2b30be599fea0afaf905f90dd3e55fef0b94afbfd7144b7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x41}, 0x48) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_ABS_SETUP(r6, 0x401c5504, 0x0) futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, &(0x7f0000000580)=0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.412806353s ago: executing program 7 (id=3663): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x9, 0x2) r1 = msgget(0x3, 0x710) msgget(0x2, 0x624) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x8040) set_robust_list(&(0x7f00000000c0), 0xc) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) msgget(0x1, 0x240) msgctl$IPC_RMID(r1, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) socket$inet(0x2, 0xa, 0x8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 1.354965712s ago: executing program 8 (id=3664): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x300, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 1.281469478s ago: executing program 7 (id=3665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) 1.146872012s ago: executing program 6 (id=3666): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='4096', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1:1', 0x3) write(r4, &(0x7f0000000500)='1:2', 0x3) write(r4, &(0x7f0000000540)='1:3', 0x3) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f00000005c0)='0', 0x1) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000640)='1', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f00000007c0)='active', 0x6) 1.14656786s ago: executing program 7 (id=3667): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0\n', 0xc) 1.146312964s ago: executing program 8 (id=3668): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) 1.146110291s ago: executing program 5 (id=3669): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000003c0)={0xd2, 0x405, 0x87, "757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bfde9ba4956a744d2a33b938a9a4c73cb3cca453dd7340fd3e51ac63fbc7636be0027ae0f6"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1\x00', 0x1) 0s ago: executing program 8 (id=3670): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) kernel console output (not intermixed with test programs): st 1 RTC interrupts [ 796.627884][ C2] hpet: Lost 1 RTC interrupts [ 796.672230][ C2] hpet: Lost 2 RTC interrupts [ 797.370217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 798.692379][T23026] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2818'. [ 799.397828][T23033] bond1 (unregistering): Released all slaves [ 800.527799][ C2] hpet_rtc_timer_reinit: 18 callbacks suppressed [ 800.527821][ C2] hpet: Lost 1 RTC interrupts [ 801.495954][ C2] hpet: Lost 1 RTC interrupts [ 801.656225][ C2] hpet: Lost 6 RTC interrupts [ 801.727888][ C2] hpet: Lost 1 RTC interrupts [ 801.791991][ C2] hpet: Lost 3 RTC interrupts [ 802.156697][ C2] hpet: Lost 1 RTC interrupts [ 802.235907][ C2] hpet: Lost 2 RTC interrupts [ 802.384117][ C2] hpet: Lost 2 RTC interrupts [ 802.574164][ C2] hpet: Lost 1 RTC interrupts [ 802.627810][ C2] hpet: Lost 1 RTC interrupts [ 803.546730][T23375] atomic_op ffff888056ed2998 conn xmit_atomic 0000000000000000 [ 804.355089][T23386] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2830'. [ 804.363140][T23386] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 805.169478][T23396] netlink: 'syz.5.2836': attribute type 1 has an invalid length. [ 805.254004][T23396] bond1: entered promiscuous mode [ 805.256847][T23396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.266592][T23400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'. [ 805.284339][T23400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'. [ 805.327044][T23399] macvlan2: entered allmulticast mode [ 805.331114][T23399] batadv_slave_1: entered allmulticast mode [ 805.337155][T23399] batman_adv: batadv0: Adding interface: macvlan2 [ 805.342532][T23399] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.364352][T23399] batman_adv: batadv0: Interface activated: macvlan2 [ 805.764218][T23396] bond1: (slave bridge1): making interface the new active one [ 805.774226][T23396] bridge1: entered promiscuous mode [ 805.902057][ C2] hpet_rtc_timer_reinit: 13 callbacks suppressed [ 805.902083][ C2] hpet: Lost 1 RTC interrupts [ 805.920427][T23396] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 806.080063][ C2] hpet: Lost 1 RTC interrupts [ 806.150248][ C2] hpet: Lost 1 RTC interrupts [ 806.355897][ C2] hpet: Lost 2 RTC interrupts [ 806.490134][ C2] hpet: Lost 1 RTC interrupts [ 806.707793][ C2] hpet: Lost 1 RTC interrupts [ 806.729036][ C2] hpet: Lost 1 RTC interrupts [ 807.501704][ C2] hpet: Lost 2 RTC interrupts [ 807.879779][ C2] hpet: Lost 1 RTC interrupts [ 808.030426][ C2] hpet: Lost 1 RTC interrupts [ 808.303082][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.309177][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.041035][T23539] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 809.064960][T23541] Set syz0 is full, maxelem 0 reached [ 809.109581][T23539] bond18: entered promiscuous mode [ 809.114056][T23539] 8021q: adding VLAN 0 to HW filter on device bond18 [ 809.157956][T23539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 809.166583][T23539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 809.292646][T23539] bond18: (slave bridge7): making interface the new active one [ 809.296346][T23539] bridge7: entered promiscuous mode [ 809.316544][T23539] bond18: (slave bridge7): Enslaving as an active interface with an up link [ 810.372171][T23557] fuse: fd is not a fuse device [ 811.071718][ C2] hpet_rtc_timer_reinit: 8 callbacks suppressed [ 811.071740][ C2] hpet: Lost 1 RTC interrupts [ 811.107615][ C2] hpet: Lost 1 RTC interrupts [ 811.730735][ C2] hpet: Lost 1 RTC interrupts [ 811.788457][ C2] hpet: Lost 1 RTC interrupts [ 811.868726][ C2] hpet: Lost 1 RTC interrupts [ 811.995612][ C2] hpet: Lost 1 RTC interrupts [ 812.027677][ C2] hpet: Lost 1 RTC interrupts [ 812.158099][ C2] hpet: Lost 1 RTC interrupts [ 812.213830][ C2] hpet: Lost 1 RTC interrupts [ 812.267582][ C2] hpet: Lost 1 RTC interrupts [ 812.865522][T23787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 812.912296][T23789] Set syz0 is full, maxelem 0 reached [ 814.885391][T24008] netlink: 'syz.0.2865': attribute type 1 has an invalid length. [ 814.959148][T24008] bond13: entered promiscuous mode [ 814.980858][T24012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2865'. [ 815.008215][T24008] 8021q: adding VLAN 0 to HW filter on device bond13 [ 815.012758][T24012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2865'. [ 815.204687][T24013] fuse: Bad value for 'fd' [ 815.315917][T24008] bond13: (slave bridge7): making interface the new active one [ 815.334117][T24008] bridge7: entered promiscuous mode [ 815.451864][T24008] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 816.043718][T24023] bond13: Removing last arp target with arp_interval on [ 816.096168][T24023] netlink: 'syz.4.2873': attribute type 27 has an invalid length. [ 816.177019][T24023] vlan2: left promiscuous mode [ 816.181873][T24023] bond2: left promiscuous mode [ 816.186101][T24023] bridge1: left promiscuous mode [ 816.194400][T24023] vlan2: left allmulticast mode [ 816.200016][T24023] bond2: left allmulticast mode [ 816.203588][T24023] bridge1: left allmulticast mode [ 816.238851][T24023] veth3: left allmulticast mode [ 816.244037][T24023] bond5: left promiscuous mode [ 816.251843][T24023] bond5: left allmulticast mode [ 816.255739][T24023] gretap1: left promiscuous mode [ 816.266378][T24023] bond8: left promiscuous mode [ 816.277946][T24023] bridge3: left promiscuous mode [ 816.291513][ C2] hpet_rtc_timer_reinit: 23 callbacks suppressed [ 816.291534][ C2] hpet: Lost 2 RTC interrupts [ 816.296215][T24023] bond8: left allmulticast mode [ 816.387010][ C2] hpet: Lost 1 RTC interrupts [ 816.402687][T24023] bridge3: left allmulticast mode [ 816.405294][T24023] bridge5: left promiscuous mode [ 816.407573][T24023] bridge5: left allmulticast mode [ 816.471740][T24023] veth7: left allmulticast mode [ 816.481798][T24023] vlan3: left promiscuous mode [ 816.510427][ C2] hpet: Lost 2 RTC interrupts [ 816.639472][T24023] bond12: left promiscuous mode [ 816.642258][T24023] bridge0: left promiscuous mode [ 816.655288][T24023] batman_adv: batadv0: Interface deactivated: macvlan2 [ 816.690913][T24023] batadv_slave_1: left allmulticast mode [ 816.694703][T24023] macvlan2: left allmulticast mode [ 816.804253][T24031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.821075][T24031] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.836663][T24031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.953673][T24031] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 817.040980][ C2] hpet: Lost 1 RTC interrupts [ 817.292270][ C2] hpet: Lost 1 RTC interrupts [ 817.540152][ C2] hpet: Lost 1 RTC interrupts [ 817.797452][T24042] lo: Caught tx_queue_len zero misconfig [ 817.916966][ C2] hpet: Lost 1 RTC interrupts [ 817.952164][ C2] hpet: Lost 1 RTC interrupts [ 818.289546][ C2] hpet: Lost 1 RTC interrupts [ 818.349044][T24051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'. [ 818.732427][ C2] hpet: Lost 1 RTC interrupts [ 819.669502][T24060] netlink: 'syz.0.2881': attribute type 1 has an invalid length. [ 819.743109][T24060] bond14: entered promiscuous mode [ 819.748829][T24060] 8021q: adding VLAN 0 to HW filter on device bond14 [ 819.758130][T24062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'. [ 819.765666][T24062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'. [ 820.058484][T24060] bond14: (slave bridge8): making interface the new active one [ 820.062530][T24060] bridge8: entered promiscuous mode [ 820.079089][T24060] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 821.376580][ C2] hpet_rtc_timer_reinit: 9 callbacks suppressed [ 821.376602][ C2] hpet: Lost 1 RTC interrupts [ 821.407162][T24073] netlink: 'syz.0.2885': attribute type 2 has an invalid length. [ 821.855796][ C2] hpet: Lost 1 RTC interrupts [ 822.280939][ C2] hpet: Lost 1 RTC interrupts [ 822.620141][ C2] hpet: Lost 2 RTC interrupts [ 822.715001][ C2] hpet: Lost 1 RTC interrupts [ 823.216201][ C2] hpet: Lost 1 RTC interrupts [ 824.322243][ C2] hpet: Lost 1 RTC interrupts [ 825.281108][ C2] hpet: Lost 1 RTC interrupts [ 825.359951][T24097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 825.434194][T24097] vlan7: entered promiscuous mode [ 825.445143][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2889'. [ 825.458104][T24097] hsr0: entered promiscuous mode [ 825.458731][T24097] vlan7: entered allmulticast mode [ 825.458792][T24097] hsr0: entered allmulticast mode [ 825.458804][T24097] hsr_slave_0: entered allmulticast mode [ 825.458817][T24097] hsr_slave_1: entered allmulticast mode [ 825.475997][ C2] hpet: Lost 1 RTC interrupts [ 825.514854][ C2] hpet: Lost 2 RTC interrupts [ 826.790090][ C2] hpet_rtc_timer_reinit: 4 callbacks suppressed [ 826.790120][ C2] hpet: Lost 1 RTC interrupts [ 826.906476][T24108] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2894'. [ 826.919701][ C2] hpet: Lost 1 RTC interrupts [ 826.994365][ C2] hpet: Lost 4 RTC interrupts [ 827.061565][ C2] hpet: Lost 1 RTC interrupts [ 827.180009][T24113] ip6tnl0: Caught tx_queue_len zero misconfig [ 827.290030][ C2] hpet: Lost 1 RTC interrupts [ 827.359757][ C2] hpet: Lost 1 RTC interrupts [ 827.509988][ C2] hpet: Lost 1 RTC interrupts [ 827.651604][ C2] hpet: Lost 1 RTC interrupts [ 827.799819][ C2] hpet: Lost 1 RTC interrupts [ 828.417049][ C2] hpet: Lost 3 RTC interrupts [ 830.236643][T24153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2906'. [ 831.052228][T24144] netlink: 860 bytes leftover after parsing attributes in process `syz.0.2905'. [ 832.832503][ C2] hpet_rtc_timer_reinit: 22 callbacks suppressed [ 832.832526][ C2] hpet: Lost 1 RTC interrupts [ 832.854455][ C2] hpet: Lost 1 RTC interrupts [ 833.030748][ C2] hpet: Lost 1 RTC interrupts [ 833.111693][ C2] hpet: Lost 1 RTC interrupts [ 833.606175][ C2] hpet: Lost 1 RTC interrupts [ 833.761025][ C2] hpet: Lost 1 RTC interrupts [ 834.196809][ C2] hpet: Lost 1 RTC interrupts [ 834.229951][ C2] hpet: Lost 1 RTC interrupts [ 835.150061][ C2] hpet: Lost 1 RTC interrupts [ 835.516183][ C2] hpet: Lost 1 RTC interrupts [ 837.166085][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 838.016056][ C2] hpet_rtc_timer_reinit: 9 callbacks suppressed [ 838.016078][ C2] hpet: Lost 1 RTC interrupts [ 838.272277][ T6820] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 838.430987][ C2] hpet: Lost 1 RTC interrupts [ 838.434533][ T6820] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 838.438730][ T6820] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 838.443226][ T6820] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 838.457555][ T6820] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 838.472774][ T6820] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 838.493576][ C2] hpet: Lost 1 RTC interrupts [ 838.530729][ T6820] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 838.534872][ T6820] usb 10-1: Product: syz [ 838.558064][ T6820] usb 10-1: Manufacturer: syz [ 838.594051][ T6820] cdc_wdm 10-1:1.0: skipping garbage [ 838.597480][ T6820] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 838.739662][ C2] hpet: Lost 1 RTC interrupts [ 838.779621][ C2] hpet: Lost 1 RTC interrupts [ 838.947877][ C2] hpet: Lost 1 RTC interrupts [ 838.980068][ C2] hpet: Lost 1 RTC interrupts [ 839.011716][ C2] hpet: Lost 1 RTC interrupts [ 839.118505][ C2] hpet: Lost 1 RTC interrupts [ 839.134767][ T61] usb 10-1: USB disconnect, device number 4 [ 839.415677][ C2] hpet: Lost 2 RTC interrupts [ 842.220108][T14291] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 842.412666][T14291] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 842.447397][T14291] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 842.452859][T14291] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 842.456531][T14291] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 842.461708][T14291] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 842.471628][T14291] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 842.475450][T14291] usb 10-1: Product: syz [ 842.478235][T14291] usb 10-1: Manufacturer: syz [ 842.509912][T14291] cdc_wdm 10-1:1.0: skipping garbage [ 842.512582][T14291] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 842.773696][ T9] usb 10-1: USB disconnect, device number 5 [ 844.674735][T24359] bond1: left allmulticast mode [ 844.681474][T24359] bond2: left allmulticast mode [ 844.695055][T24359] veth3: left allmulticast mode [ 844.713815][T24359] macvtap1: left allmulticast mode [ 844.720673][T24359] bond6: left allmulticast mode [ 844.723227][T24359] bridge3: left allmulticast mode [ 844.725345][T24359] bridge3: left promiscuous mode [ 844.731072][T24359] macvtap2: left allmulticast mode [ 844.752078][T24359] bond0: left allmulticast mode [ 844.754163][T24359] bond0: left promiscuous mode [ 844.808452][T24359] tipc: Resetting bearer [ 844.844907][T24359] bond11: left allmulticast mode [ 844.854265][T24359] veth7: left allmulticast mode [ 845.011198][T24359] bond13: left promiscuous mode [ 845.013146][T24359] bridge7: left promiscuous mode [ 845.043888][T24359] bond14: left promiscuous mode [ 845.045564][T24359] bridge8: left promiscuous mode [ 845.054067][ T6820] lo speed is unknown, defaulting to 1000 [ 845.062465][ T6820] syz2: Port: 1 Link DOWN [ 845.070637][T10180] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.074281][T10180] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 54334 - 0 [ 845.079422][T10180] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.089897][T10180] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 54334 - 0 [ 845.093517][T10180] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.096994][T10180] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 54334 - 0 [ 845.105964][T10180] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.109493][T10180] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 54334 - 0 [ 846.974763][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 846.974780][ T42] audit: type=1800 audit(1786468183.970:29243): pid=24404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2951" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 850.570047][T24474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 850.573708][T24474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 852.365448][T24519] overlayfs: failed to resolve '/ile0': -2 [ 852.431800][T24513] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 853.478885][T24537] tipc: Started in network mode [ 853.480627][T24537] tipc: Node identity 7f000001, cluster identity 4711 [ 853.494529][T24537] tipc: Enabled bearer , priority 10 [ 854.610007][T14291] tipc: Node number set to 2130706433 [ 854.986958][T24563] bond15: Removing last arp target with arp_interval on [ 855.051328][T24563] netlink: 'syz.0.2978': attribute type 27 has an invalid length. [ 855.226836][T24565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.231390][T24565] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.265132][T24565] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 855.272302][T14291] lo speed is unknown, defaulting to 1000 [ 855.274839][T14291] syz2: Port: 1 Link ACTIVE [ 856.345868][T24577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2980'. [ 856.354159][T24577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2980'. [ 856.833079][T24580] overlayfs: failed to resolve '/ile0': -2 [ 858.108162][T24602] bond2: Removing last arp target with arp_interval on [ 858.127748][T24602] netlink: 'syz.5.2987': attribute type 27 has an invalid length. [ 858.202161][T24602] syz_tun: left promiscuous mode [ 858.227104][T24602] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.230689][T24602] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.357380][T24602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.373528][T24602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.483002][T24602] macvlan0: left promiscuous mode [ 858.643244][T24602] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 858.646964][T24602] ipvlan2: left allmulticast mode [ 858.648743][T24602] batadv_slave_1: left allmulticast mode [ 858.661984][T24602] vlan2: left promiscuous mode [ 858.663579][T24602] hsr0: left promiscuous mode [ 858.665207][T24602] vlan2: left allmulticast mode [ 858.666755][T24602] hsr0: left allmulticast mode [ 858.668328][T24602] hsr_slave_0: left allmulticast mode [ 858.672870][T24602] hsr_slave_1: left allmulticast mode [ 858.678411][T24602] bond1: left promiscuous mode [ 858.681673][T24602] bridge1: left promiscuous mode [ 858.689960][T10180] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.692807][T10180] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.696074][T10180] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.698967][T10180] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.790383][T24604] can0: slcan on ptm0. [ 858.811421][T24607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.814437][T24607] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.827316][T24607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.981552][T24607] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.983808][T24607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.988259][T24607] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.990572][T24607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.006398][T24607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.023493][T24607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.050830][T24607] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 859.271920][ T6653] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.275951][ T6653] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.296538][ T6653] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.306689][ T6653] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.317341][T24601] can0 (unregistered): slcan off ptm0. [ 859.718608][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 859.722506][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 859.754370][T24618] ceph: No mds server is up or the cluster is laggy [ 860.034792][ T852] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 860.200757][ T852] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 860.205806][ T852] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 860.211964][ T852] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 860.216106][ T852] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 860.219741][ T852] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 860.224655][ T852] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 860.231798][ T852] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 860.235029][ T852] usb 10-1: Product: syz [ 860.236748][ T852] usb 10-1: Manufacturer: syz [ 860.245442][ T852] cdc_wdm 10-1:1.0: skipping garbage [ 860.248044][ T852] cdc_wdm 10-1:1.0: skipping garbage [ 860.255645][ T852] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 860.258568][ T852] cdc_wdm 10-1:1.0: Unknown control protocol [ 861.467070][T24640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2996'. [ 862.329650][T24652] bond12: (slave bridge0): Releasing backup interface [ 862.409106][T24651] netlink: 860 bytes leftover after parsing attributes in process `syz.4.2998'. [ 862.565243][T14282] lo speed is unknown, defaulting to 1000 [ 862.567178][T14282] syz2: Port: 1 Link DOWN [ 862.784434][T14282] usb 10-1: USB disconnect, device number 6 [ 863.757100][T24678] atomic_op ffff888048d92198 conn xmit_atomic 0000000000000000 [ 865.664679][T24714] tipc: Enabled bearer , priority 10 [ 867.098465][T24731] atomic_op ffff88804db34998 conn xmit_atomic 0000000000000000 [ 869.731708][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.733746][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.174374][T24786] atomic_op ffff88802a11f998 conn xmit_atomic 0000000000000000 [ 870.729131][T24800] lo: Caught tx_queue_len zero misconfig [ 870.767638][T24800] batadv_slave_0: Caught tx_queue_len zero misconfig [ 870.781516][T24800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3038'. [ 871.971895][T24827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3046'. [ 871.974799][T24827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3046'. [ 871.998109][T24827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3046'. [ 872.001096][T24827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3046'. [ 872.043506][T24827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3046'. [ 872.047317][T24827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3046'. [ 872.289055][T24837] bond14: Removing last arp target with arp_interval on [ 872.304255][T24837] netlink: 'syz.4.3048': attribute type 27 has an invalid length. [ 872.522559][T24842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.527467][T24842] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.539482][T24842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.586267][T24842] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 874.031009][T24857] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3053'. [ 874.171342][T24871] bond16 (unregistering): Released all slaves [ 874.709966][T14291] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 874.870711][T14291] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 874.876701][T14291] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 874.880691][T14291] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 874.884939][T14291] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.889768][T14291] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.895479][T14291] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 874.900620][T14291] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 874.903834][T14291] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 874.908365][T14291] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.913627][T14291] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.918422][T14291] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 874.924459][T14291] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 874.927563][T14291] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 874.931714][T14291] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.935550][T14291] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.939237][T14291] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 874.948552][T14291] usb 10-1: string descriptor 0 read error: -22 [ 874.950716][T14291] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.974402][T14291] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 875.123295][T24891] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3059'. [ 876.152148][T24904] fuse: fd is not a fuse device [ 879.250849][T14282] usb 10-1: USB disconnect, device number 7 [ 879.327750][T24935] netlink: 'syz.5.3069': attribute type 2 has an invalid length. [ 880.572013][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 880.574120][T24956] ceph: No mds server is up or the cluster is laggy [ 880.578747][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 880.786079][T24961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.796805][T24961] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.815365][T24961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.860902][ T852] libceph: connect (1)[c::]:6789 error -101 [ 880.863674][ T852] libceph: mon0 (1)[c::]:6789 connect error [ 881.137682][T24961] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 882.995445][T14639] libceph: connect (1)[c::]:6789 error -101 [ 882.997472][T14639] libceph: mon0 (1)[c::]:6789 connect error [ 883.002686][T25007] ceph: No mds server is up or the cluster is laggy [ 886.445928][T25080] netlink: 'syz.1.3104': attribute type 2 has an invalid length. [ 886.604853][T25083] bond15 (unregistering): Released all slaves [ 886.752627][T14291] libceph: connect (1)[c::]:6789 error -101 [ 886.756495][T14291] libceph: mon0 (1)[c::]:6789 connect error [ 886.759993][T14291] libceph: connect (1)[c::]:6789 error -101 [ 886.762429][T14291] libceph: mon0 (1)[c::]:6789 connect error [ 886.781651][T25089] ceph: No mds server is up or the cluster is laggy [ 887.232866][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 889.349930][T25144] overlayfs: failed to clone upperpath [ 890.059113][T14291] libceph: connect (1)[c::]:6789 error -101 [ 890.062022][T14291] libceph: mon0 (1)[c::]:6789 connect error [ 890.064661][T14291] libceph: connect (1)[c::]:6789 error -101 [ 890.067286][T14291] libceph: mon0 (1)[c::]:6789 connect error [ 890.085175][T25158] ceph: No mds server is up or the cluster is laggy [ 891.435238][ T8228] libceph: connect (1)[c::]:6789 error -101 [ 891.438361][ T8228] libceph: mon0 (1)[c::]:6789 connect error [ 891.448521][ T8228] libceph: connect (1)[c::]:6789 error -101 [ 891.451477][ T8228] libceph: mon0 (1)[c::]:6789 connect error [ 891.482592][T25190] ceph: No mds server is up or the cluster is laggy [ 892.315121][T25203] fuse: fd is not a fuse device [ 894.326139][T25232] fuse: fd is not a fuse device [ 895.431974][T25240] lo speed is unknown, defaulting to 1000 [ 896.676204][ T42] audit: type=1800 audit(1786468230.670:29244): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3144" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 898.629021][T25274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 906.597039][T25314] bond19 (unregistering): Released all slaves [ 931.172493][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.174571][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.937240][T25355] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 937.988960][T25355] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.000823][T25355] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.017956][T25355] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.029511][T25355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.340796][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 938.354496][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 938.360630][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 938.370112][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 938.387363][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 938.493132][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 938.505241][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 938.521608][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 938.525561][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 938.532892][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 938.600870][T25354] lo speed is unknown, defaulting to 1000 [ 938.806161][T25374] lo speed is unknown, defaulting to 1000 [ 938.873705][T25381] lo speed is unknown, defaulting to 1000 [ 938.909667][T25354] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.912433][T25354] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.914828][T25354] bridge_slave_0: entered allmulticast mode [ 938.918003][T25354] bridge_slave_0: entered promiscuous mode [ 938.959473][T25354] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.961983][T25354] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.964298][T25354] bridge_slave_1: entered allmulticast mode [ 938.967127][T25354] bridge_slave_1: entered promiscuous mode [ 939.015200][ T5743] Bluetooth: hci4: unexpected event for opcode 0x0401 [ 939.022578][T25354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.031453][T25354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.107834][T10180] team0: left promiscuous mode [ 939.110152][T10180] bridge4: left promiscuous mode [ 939.112716][T10180] macvlan2: left promiscuous mode [ 939.115514][T10180] bridge0: port 2(team0) entered disabled state [ 939.149524][T10180] team0: left allmulticast mode [ 939.152819][T10180] bridge4: left allmulticast mode [ 939.155036][T10180] macvlan2: left allmulticast mode [ 939.157287][T10180] pim6reg: left allmulticast mode [ 939.160527][T10180] bridge1: left allmulticast mode [ 939.310918][T10180] bond7 (unregistering): (slave gretap1): Releasing active interface [ 939.331625][T10180] bond9 (unregistering): (slave gretap2): Releasing active interface [ 939.392332][T10180] bond6 (unregistering): (slave bridge3): Releasing active interface [ 939.401347][T10180] team0: Port device bridge4 removed [ 939.433368][T10180] bond13 (unregistering): (slave bridge7): Releasing backup interface [ 939.470758][T10180] bond14 (unregistering): (slave bridge8): Releasing backup interface [ 939.481454][T10180] team0: Port device macvlan2 removed [ 939.487830][T10180] bond0 (unregistering): Released all slaves [ 939.496850][T10180] bond1 (unregistering): Released all slaves [ 939.506555][T10180] bond2 (unregistering): Released all slaves [ 939.515784][T10180] bond3 (unregistering): Released all slaves [ 939.524308][T10180] bond4 (unregistering): Released all slaves [ 939.533979][T10180] bond5 (unregistering): Released all slaves [ 939.588697][T10180] bond6 (unregistering): Released all slaves [ 939.938627][T10180] bond7 (unregistering): Released all slaves [ 939.947828][T10180] bond8 (unregistering): (slave veth5): Releasing active interface [ 939.951649][T10180] bond8 (unregistering): Released all slaves [ 939.959698][T10180] bond9 (unregistering): Released all slaves [ 939.988542][T10180] bond10 (unregistering): Released all slaves [ 940.019254][T10180] bond11 (unregistering): Released all slaves [ 940.068707][T10180] bond12 (unregistering): Released all slaves [ 940.095940][T10180] bond13 (unregistering): Released all slaves [ 940.118592][T10180] bond14 (unregistering): Released all slaves [ 940.129956][ T5743] Bluetooth: hci1: command tx timeout [ 940.144643][T10180] bond15 (unregistering): Released all slaves [ 940.174168][T25354] team0: Port device team_slave_0 added [ 940.225694][T25354] team0: Port device team_slave_1 added [ 940.393654][T25354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.396697][T25354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.409415][T25354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.499492][T25354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.501932][T25354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.510197][T25354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.530059][ T5743] Bluetooth: hci0: command tx timeout [ 940.610359][ T5743] Bluetooth: hci3: command tx timeout [ 940.618550][T10180] tipc: Disabling bearer [ 940.622810][T10180] tipc: Disabling bearer [ 940.632265][T10180] tipc: Left network mode [ 940.633963][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 940.827657][T25354] hsr_slave_0: entered promiscuous mode [ 940.836921][T25354] hsr_slave_1: entered promiscuous mode [ 940.840165][T25354] debugfs: 'hsr0' already exists in 'hsr' [ 940.842382][T25354] Cannot create hsr debugfs directory [ 941.440167][T25374] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.443485][T25374] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.450176][T25374] bridge_slave_0: entered allmulticast mode [ 941.455694][T25374] bridge_slave_0: entered promiscuous mode [ 941.463596][T25374] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.480121][T25374] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.501588][T25374] bridge_slave_1: entered allmulticast mode [ 941.504461][T25374] bridge_slave_1: entered promiscuous mode [ 941.578617][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 941.632788][T25374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.660337][T25374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.776504][T25374] team0: Port device team_slave_0 added [ 941.779034][T25381] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.783346][T25381] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.786534][T25381] bridge_slave_0: entered allmulticast mode [ 941.791251][T25381] bridge_slave_0: entered promiscuous mode [ 941.827483][T25374] team0: Port device team_slave_1 added [ 941.855473][T25381] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.858716][T25381] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.862056][T25381] bridge_slave_1: entered allmulticast mode [ 941.866045][T25381] bridge_slave_1: entered promiscuous mode [ 941.919153][T25381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.925630][T25374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.928110][T25374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.936404][T25374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.940702][T25374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.942954][T25374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.951549][T25374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.966571][T25381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.210070][ T5743] Bluetooth: hci1: command tx timeout [ 942.427286][T25365] smbdirect: ib_dev[syz2] removed [ 942.464234][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 942.524985][T25481] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3170'. [ 942.527900][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3170'. [ 942.543880][T25381] team0: Port device team_slave_0 added [ 942.580774][T25374] hsr_slave_0: entered promiscuous mode [ 942.584137][T25374] hsr_slave_1: entered promiscuous mode [ 942.587222][T25374] debugfs: 'hsr0' already exists in 'hsr' [ 942.589691][T25374] Cannot create hsr debugfs directory [ 942.606868][T25381] team0: Port device team_slave_1 added [ 942.611204][ T5743] Bluetooth: hci0: command tx timeout [ 942.695591][ T5743] Bluetooth: hci3: command tx timeout [ 942.698593][T25381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.698611][T25381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.698634][T25381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.700553][T25381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.729269][T25381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.737758][T25381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.768237][T25354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 942.776958][T25354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 942.780820][T25354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 942.792322][T25354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 942.820449][T25354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 942.839549][T25354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 942.843823][T25354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 942.849035][T25354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 942.896738][T25381] hsr_slave_0: entered promiscuous mode [ 942.899414][T25381] hsr_slave_1: entered promiscuous mode [ 942.904898][T25381] debugfs: 'hsr0' already exists in 'hsr' [ 942.907384][T25381] Cannot create hsr debugfs directory [ 942.916973][T10180] IPVS: stop unused estimator thread 0... [ 942.989667][ T5446] 8021q: adding VLAN 0 to HW filter on device eth13 [ 943.093693][ T6653] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.144583][T25374] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 943.147712][T25500] netlink: 17780 bytes leftover after parsing attributes in process `syz.5.3171'. [ 943.149345][T25374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 943.156513][T25374] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 943.161322][T25374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.171656][T25374] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 943.179680][T25374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.184659][T25374] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 943.189214][T25374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 943.258701][ T6653] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.334038][T25354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.362014][ T6653] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.372146][T25381] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 943.378764][T25381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 943.389466][T25381] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 943.394544][T25381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.403493][T25381] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 943.409697][T25381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.413888][T25381] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 943.420987][T25381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 943.427912][T25354] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.450734][ T6653] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.470801][T25367] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.473180][T25367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.483441][T25367] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.486494][T25367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.583827][T25374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.653680][T25374] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.679136][T25367] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.681965][T25367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.691752][T25381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.715649][T25367] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.717977][T25367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.742579][ T6653] batman_adv: batadv0: Interface deactivated: gretap1 [ 943.824420][ T6653] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 943.906641][ T6653] batman_adv: batadv0: Removing interface: gretap1 [ 943.941527][ T6653] bond16 (unregistering): (slave gretap2): Releasing backup interface [ 943.986491][ T6653] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 943.995755][ T6653] bond7 (unregistering): (slave bridge2): Releasing active interface [ 944.018540][ T6653] team0: Port device bridge3 removed [ 944.108023][ T6653] bond18 (unregistering): (slave bridge7): Releasing backup interface [ 944.111715][ T6653] bridge7 (unregistering): left promiscuous mode [ 944.122437][ T6653] bond0 (unregistering): Released all slaves [ 944.128469][ T6653] bond1 (unregistering): Released all slaves [ 944.138498][ T6653] bond2 (unregistering): Released all slaves [ 944.148101][ T6653] bond3 (unregistering): (slave veth3): Releasing backup interface [ 944.152395][ T6653] bond3 (unregistering): Released all slaves [ 944.160471][ T6653] bond4 (unregistering): Released all slaves [ 944.168247][ T6653] bond5 (unregistering): Released all slaves [ 944.178259][ T6653] bond6 (unregistering): Released all slaves [ 944.197428][ T6653] bond7 (unregistering): Released all slaves [ 944.214514][ T6653] bond8 (unregistering): Released all slaves [ 944.228480][ T6653] bond9 (unregistering): (slave veth7): Releasing active interface [ 944.235367][ T6653] bond9 (unregistering): Released all slaves [ 944.243750][ T6653] bond10 (unregistering): (slave veth9): Releasing active interface [ 944.247942][ T6653] bond10 (unregistering): Released all slaves [ 944.255597][ T6653] bond11 (unregistering): Released all slaves [ 944.263384][ T6653] bond12 (unregistering): Released all slaves [ 944.271211][ T6653] bond13 (unregistering): Released all slaves [ 944.278455][ T6653] bond14 (unregistering): Released all slaves [ 944.286942][ T6653] bond15 (unregistering): Released all slaves [ 944.290648][ T5743] Bluetooth: hci1: command tx timeout [ 944.294914][ T6653] bond16 (unregistering): (slave bond17): Releasing backup interface [ 944.298200][ T6653] bond16 (unregistering): Released all slaves [ 944.309748][ T6653] bond17 (unregistering): Released all slaves [ 944.319672][ T6653] bond18 (unregistering): Released all slaves [ 944.358321][T25381] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.371675][T25365] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.374709][T25365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.391584][T25365] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.394489][T25365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.423143][T25374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 944.427234][T25374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 944.549019][ T6653] tipc: Disabling bearer [ 944.556470][ T6653] tipc: Left network mode [ 944.558692][T25354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.691673][ T5743] Bluetooth: hci0: command tx timeout [ 944.780258][ T5743] Bluetooth: hci3: command tx timeout [ 944.795189][ T5446] 8021q: adding VLAN 0 to HW filter on device eth14 [ 945.009543][T25354] veth0_vlan: entered promiscuous mode [ 945.052701][T25354] veth1_vlan: entered promiscuous mode [ 945.177101][T25354] veth0_macvtap: entered promiscuous mode [ 945.194906][T25374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.211167][T25354] veth1_macvtap: entered promiscuous mode [ 945.234426][T25354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.246522][T25381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.277917][T25354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.294078][ T6653] hsr_slave_0: left promiscuous mode [ 945.298985][ T6653] hsr_slave_1: left promiscuous mode [ 945.304874][ T6653] veth1_macvtap: left promiscuous mode [ 945.306756][ T6653] veth0_macvtap: left promiscuous mode [ 945.606959][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 945.711031][ T5809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.715910][ T5809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.747231][ T5809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.797794][T25370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.800746][T16202] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.801605][T25370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.837942][T25370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.843195][T25370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.873265][T25374] veth0_vlan: entered promiscuous mode [ 945.878516][T25374] veth1_vlan: entered promiscuous mode [ 945.914536][T25381] veth0_vlan: entered promiscuous mode [ 945.927769][T25381] veth1_vlan: entered promiscuous mode [ 945.937049][T25374] veth0_macvtap: entered promiscuous mode [ 945.944536][T25374] veth1_macvtap: entered promiscuous mode [ 945.956327][T25374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.962053][T25374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.002101][T25381] veth0_macvtap: entered promiscuous mode [ 946.046525][T25381] veth1_macvtap: entered promiscuous mode [ 946.069454][T25381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.104085][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 946.120530][T25381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.156960][ T6653] IPVS: stop unused estimator thread 0... [ 946.194452][T25370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.199894][T25370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.241842][ T5809] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.249423][T25370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.254269][T25370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.325832][T10180] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.370197][ T5743] Bluetooth: hci1: command tx timeout [ 946.390013][ T6653] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.400944][ T6653] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.408513][ T6653] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.444538][T25604] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 946.445470][T25366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.457417][T25366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.469071][T25345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.481855][T25345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.513112][T10180] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.525628][T10180] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.533161][T10180] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.689393][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17 [ 946.771545][ T5743] Bluetooth: hci0: command tx timeout [ 946.860541][ T5743] Bluetooth: hci3: command tx timeout [ 947.022193][ T1352] libceph: connect (1)[c::]:6789 error -101 [ 947.024740][ T1352] libceph: mon0 (1)[c::]:6789 connect error [ 947.052924][T25618] ceph: No mds server is up or the cluster is laggy [ 947.118446][T25620] comedi comedi3: pcl818: I/O base address or length out of range [ 948.369102][T25650] jffs2: notice: (25650) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 949.513103][T25661] xt_HMARK: proto mask must be zero with L3 mode [ 949.584502][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3185'. [ 949.597399][T25667] vlan2: entered allmulticast mode [ 949.599348][T25667] dummy0: entered allmulticast mode [ 949.605248][T25667] bridge0: port 3(vlan2) entered blocking state [ 949.607975][T25667] bridge0: port 3(vlan2) entered disabled state [ 949.615190][T25667] vlan2: entered promiscuous mode [ 949.617154][T25667] dummy0: entered promiscuous mode [ 949.826147][T25673] nbd: must specify at least one socket [ 950.020181][T25670] loop5: detected capacity change from 0 to 7 [ 950.045248][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.049394][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.079845][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.083897][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.089842][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.093901][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.099879][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.104243][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.108798][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.112884][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.121576][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.125559][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.129905][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.134355][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.141695][T25670] ldm_validate_partition_table(): Disk read failed. [ 950.145343][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.149977][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.175337][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.178487][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.181999][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 950.185105][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 950.191768][T25670] Dev loop5: unable to read RDB block 0 [ 950.201569][T25670] loop5: unable to read partition table [ 950.206235][T25670] loop5: partition table beyond EOD, truncated [ 950.219029][T25670] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 951.160247][T14294] e1000 0000:00:06.0 eth0: Reset adapter [ 951.343213][T14294] e1000 0000:00:06.0 eth0: Reset adapter [ 951.717624][T25706] binder: BINDER_SET_CONTEXT_MGR already set [ 951.724122][T25706] binder: 25705:25706 ioctl 4018620d 80000100 returned -16 [ 951.730583][T25706] binder: BINDER_SET_CONTEXT_MGR already set [ 951.734407][T25706] binder: 25705:25706 ioctl 4018620d 80004a80 returned -16 [ 951.761627][T25708] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3192'. [ 953.392106][T25730] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.581494][T14294] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 953.613298][T25730] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.283620][T25730] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.391032][T25730] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.532850][ T6653] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.609941][ T6653] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.720484][T10180] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.730056][T10180] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.079900][T14291] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 962.243078][T14291] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 962.249741][T14291] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.256070][T14291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.269154][T14291] usb 10-1: config 0 descriptor?? [ 964.742538][T14291] usbhid 10-1:0.0: can't add hid device: -71 [ 964.744959][T14291] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 964.753425][T14291] usb 10-1: USB disconnect, device number 8 [ 965.259024][T25843] comedi comedi3: pcl818: I/O base address or length out of range [ 966.737037][T25856] overlayfs: upper fs does not support file handles, falling back to index=off. [ 966.767024][T25856] evm: overlay not supported [ 967.655500][T25876] batman_adv: batadv0: Adding interface: veth0 [ 967.658736][T25876] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.674922][T25876] batman_adv: batadv0: Interface activated: veth0 [ 967.760219][T25876] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3220'. [ 967.813379][T25875] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.897250][T25878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.900703][T25878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.925046][T25878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.928585][T25878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.939119][T25878] batman_adv: batadv0: Interface deactivated: veth0 [ 967.943281][T25878] batman_adv: batadv0: Removing interface: veth0 [ 968.079608][T25875] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.176554][T25875] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.294467][T25875] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.000131][T10180] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.003479][T10180] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.007108][T10180] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.011039][T10180] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.050034][ T852] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 970.260675][ T852] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 970.264908][ T852] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.268879][ T852] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.290348][ T852] usb 11-1: config 0 descriptor?? [ 970.337193][T25923] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 971.052077][ T852] usbhid 11-1:0.0: can't add hid device: -71 [ 971.069964][ T852] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 971.110190][ T852] usb 11-1: USB disconnect, device number 2 [ 971.555508][ T42] audit: type=1326 audit(1786468304.554:29245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25953 comm="syz.6.3235" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x0 [ 974.277587][T26009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3242'. [ 974.574705][T26009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3242'. [ 974.967432][T26009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3242'. [ 975.352791][T26030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 975.639937][T26030] md/raid:md0: not clean -- starting background reconstruction [ 975.646357][T26030] md/raid:md0: device ram0 operational as raid disk 0 [ 975.684819][T26030] md/raid:md0: not enough operational devices (3/4 failed) [ 975.847359][T26030] md/raid:md0: failed to run raid set. [ 975.849168][T26030] md: pers->run() failed ... [ 978.018112][T26034] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 978.018152][T26034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 978.020169][T26034] vhci_hcd vhci_hcd.0: Device attached [ 978.401967][ T1037] usb 48-1: SetAddress Request (2) to port 0 [ 978.402020][ T1037] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 978.559484][T26057] vhci_hcd: connection reset by peer [ 978.562835][T10180] vhci_hcd vhci_hcd.5: stop threads [ 978.564469][T10180] vhci_hcd vhci_hcd.5: release socket [ 978.565873][T10180] vhci_hcd vhci_hcd.5: disconnect device [ 979.063802][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3258'. [ 979.126677][T26083] batadv_slave_1: entered promiscuous mode [ 979.132675][T26083] macvlan2: entered allmulticast mode [ 979.135374][T26083] batadv_slave_1: entered allmulticast mode [ 982.278035][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 982.283793][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 982.360080][T26137] ceph: No mds server is up or the cluster is laggy [ 983.115773][T26148] pim6reg: entered allmulticast mode [ 983.229281][T26148] pim6reg: left allmulticast mode [ 983.691718][ T1037] usb 48-1: device descriptor read/8, error -110 [ 984.100453][ T1037] usb usb48-port1: attempt power cycle [ 984.350021][T24366] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 984.519910][T24366] usb 13-1: Using ep0 maxpacket: 8 [ 984.526050][T24366] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 984.534845][T24366] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 984.542335][T24366] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 984.550074][T24366] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 984.558750][T24366] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.569867][T24366] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.777760][ T1037] usb usb48-port1: unable to enumerate USB device [ 984.808042][T24366] usb 13-1: GET_CAPABILITIES returned 0 [ 984.811864][T24366] usbtmc 13-1:16.0: can't read capabilities [ 985.178898][ T5898] usb 13-1: USB disconnect, device number 2 [ 986.321388][ T9] libceph: connect (1)[c::]:6789 error -101 [ 986.324000][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 986.364850][T26203] ceph: No mds server is up or the cluster is laggy [ 986.584232][T24661] libceph: connect (1)[c::]:6789 error -101 [ 986.586818][T24661] libceph: mon0 (1)[c::]:6789 connect error [ 988.713851][ T42] audit: type=1326 audit(1786468321.714:29246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26243 comm="syz.8.3303" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 989.025594][T26264] batman_adv: batadv0: Adding interface: veth0 [ 989.028371][T26264] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.039228][T26264] batman_adv: batadv0: Interface activated: veth0 [ 989.046054][T26264] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3309'. [ 989.053044][T26264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.055906][T26264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.059516][T26264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.062930][T26264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.066713][T26264] batman_adv: batadv0: Interface deactivated: veth0 [ 989.069417][T26264] batman_adv: batadv0: Removing interface: veth0 [ 990.154933][T26284] fuse: fd is not a fuse device [ 990.728927][T26304] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 990.835958][T26305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 990.851255][T26305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 990.854170][T26305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 990.872552][T26305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 990.883706][T26307] md: could not open device unknown-block(1,0). [ 990.892634][T26305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 990.896076][T26305] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 990.933020][T26304] md: could not open device unknown-block(1,2). [ 990.964532][T26313] Invalid ELF header magic: != ELF [ 991.064088][T26305] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 991.084156][T26305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 991.088179][T26305] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 991.105329][T26305] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 991.110734][T26304] md/raid:md0: not clean -- starting background reconstruction [ 991.114340][T26304] md/raid:md0: device ram0 operational as raid disk 0 [ 991.162071][T26304] md/raid:md0: not enough operational devices (3/4 failed) [ 991.409146][T26304] md/raid:md0: failed to run raid set. [ 991.415080][T26304] md: pers->run() failed ... [ 991.489742][T26305] syz.7.3318: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 991.785124][T26331] fuse: fd is not a fuse device [ 991.800890][T26330] fuse: fd is not a fuse device [ 992.544760][T26350] loop5: detected capacity change from 0 to 7 [ 992.548015][ C0] blk_print_req_error: 5 callbacks suppressed [ 992.548032][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.554433][ C0] buffer_io_error: 5 callbacks suppressed [ 992.554450][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 992.562073][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.566224][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 992.570042][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.573838][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 992.577409][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.582038][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 992.588519][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.592536][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 992.598046][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.602481][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 992.612218][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.614961][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.765532][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.769631][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 992.776217][T26350] ldm_validate_partition_table(): Disk read failed. [ 992.779025][T26353] loop5: detected capacity change from 7 to 0 [ 992.781382][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.781435][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 992.788238][T26350] Dev loop5: unable to read RDB block 0 [ 992.793116][T26350] loop5: unable to read partition table [ 992.798421][T26350] loop5: partition table beyond EOD, truncated [ 992.803992][T26350] loop_reread_partitions: partition scan of loop5 (õðÉÔn/C>|ª×n˜èªÐ˨“Ò,l¤-"@Iy}˜“cŸ) failed (rc=-5) [ 992.949998][ T5743] Bluetooth: hci4: command 0x0c1a tx timeout [ 992.951990][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 992.954015][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 993.042391][T26364] fuse: fd is not a fuse device [ 993.092818][T25355] Bluetooth: hci3: command 0x0c1a tx timeout [ 993.691846][T26388] fuse: fd is not a fuse device [ 994.155513][T26391] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 994.171679][T26391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 994.184615][T26391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 994.195152][T26391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 994.407975][T26397] fuse: fd is not a fuse device [ 994.820695][T25355] Bluetooth: hci0: unexpected event for opcode 0x202d [ 995.102064][T26407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3340'. [ 995.140398][T26407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3340'. [ 995.206813][T26391] syz.6.3337: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 995.387220][T26407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3340'. [ 996.210147][T25355] Bluetooth: hci3: command 0x0c1a tx timeout [ 996.212209][T25355] Bluetooth: hci1: command 0x0c1a tx timeout [ 996.224324][T25355] Bluetooth: hci4: command 0x0c1a tx timeout [ 997.518680][T26435] fuse: fd is not a fuse device [ 998.290207][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 998.292166][T25355] Bluetooth: hci3: command 0x0c1a tx timeout [ 999.001287][ T42] audit: type=1800 audit(1786468331.994:29247): pid=26453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3350" name="file0" dev="overlay" ino=343 res=0 errno=0 [ 999.463751][T26457] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3352'. [ 1000.154199][T26459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3353'. [ 1000.342339][T26459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3353'. [ 1000.592920][T26459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3353'. [ 1001.031260][T26479] fuse: fd is not a fuse device [ 1001.365957][T26477] netlink: 'syz.8.3355': attribute type 10 has an invalid length. [ 1001.700462][T26477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.705610][T26483] nbd0: detected capacity change from 0 to 63 [ 1001.721358][T26477] team0: Port device bond0 added [ 1001.937259][T26492] netlink: 'syz.7.3358': attribute type 1 has an invalid length. [ 1001.950712][T26492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3358'. [ 1001.957372][T26478] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1002.039398][T26478] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1002.103274][T26478] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1002.167797][T26478] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1002.406208][T26502] fuse: fd is not a fuse device [ 1003.037829][T26509] comedi comedi3: pcl818: I/O base address or length out of range [ 1003.241075][T26517] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3364'. [ 1003.296077][ T65] block nbd0: Receive control failed (result -104) [ 1003.605446][T24366] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1003.760234][T14294] e1000 0000:00:06.0 eth0: Reset adapter [ 1003.849934][T24366] usb 10-1: Using ep0 maxpacket: 32 [ 1003.862951][T24366] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1003.938032][T24366] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.944216][T24366] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1004.015533][T24366] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.020404][T24366] usb 10-1: Product: syz [ 1004.022259][T24366] usb 10-1: Manufacturer: syz [ 1004.028585][T24366] usb 10-1: SerialNumber: syz [ 1004.209933][T25516] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1004.304216][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3365'. [ 1004.392685][T25516] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1004.400727][T25516] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.409458][T25516] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.418613][T25516] usb 12-1: config 0 descriptor?? [ 1004.880688][ T852] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 1005.045388][ T852] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1005.056571][ T852] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1005.071980][ T852] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1005.085445][ T852] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1005.093683][ T852] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1005.100624][ T852] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1005.122280][ T852] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1005.129199][ T852] usb 13-1: Product: syz [ 1005.134349][ T852] usb 13-1: Manufacturer: syz [ 1005.158277][ T852] cdc_wdm 13-1:1.0: skipping garbage [ 1005.160754][ T852] cdc_wdm 13-1:1.0: skipping garbage [ 1005.165482][ T852] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 1005.174055][T25516] usbhid 12-1:0.0: can't add hid device: -71 [ 1005.179726][ T852] cdc_wdm 13-1:1.0: Unknown control protocol [ 1005.182510][T25516] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 1005.200073][T25516] usb 12-1: USB disconnect, device number 2 [ 1005.980977][ T8228] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1006.225705][T26565] futex_wake_op: syz.8.3370 tries to shift op by 144; fix this program [ 1006.237511][T26565] futex_wake_op: syz.8.3370 tries to shift op by 144; fix this program [ 1006.914145][T24366] usb 10-1: USB disconnect, device number 9 [ 1006.934571][T26580] fuse: fd is not a fuse device [ 1007.609685][T24661] usb 13-1: USB disconnect, device number 3 [ 1020.921668][ T42] audit: type=1326 audit(1786468353.924:29248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1020.930359][ T42] audit: type=1326 audit(1786468353.934:29249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1020.938836][ T42] audit: type=1326 audit(1786468353.934:29250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1020.947524][ T42] audit: type=1326 audit(1786468353.944:29251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1020.956994][ T42] audit: type=1326 audit(1786468353.954:29252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1020.966394][ T42] audit: type=1326 audit(1786468353.964:29253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1020.978836][ T42] audit: type=1326 audit(1786468353.974:29254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1020.987496][ T42] audit: type=1326 audit(1786468353.984:29255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1020.999748][ T42] audit: type=1326 audit(1786468353.994:29256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1021.009685][ T42] audit: type=1326 audit(1786468354.004:29257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.7.3375" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1021.654811][T26600] netlink: 'syz.8.3376': attribute type 4 has an invalid length. [ 1022.074151][T26610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3378'. [ 1023.073506][T26618] Invalid ELF header magic: != ELF [ 1025.863032][T26659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3387'. [ 1025.900369][T26659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3387'. [ 1026.106262][T26659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3387'. [ 1026.210825][ T8228] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1027.285961][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 1027.285972][ T42] audit: type=1326 audit(1786468360.284:29277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26674 comm="syz.5.3390" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0 [ 1027.369698][T26678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3390'. [ 1028.187976][ T42] audit: type=1800 audit(1786468361.184:29278): pid=26684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3393" name="file0" dev="overlay" ino=1294 res=0 errno=0 [ 1028.291885][T26686] netlink: 'syz.6.3394': attribute type 4 has an invalid length. [ 1032.291245][T17041] block nbd0: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 30 seconds [ 1032.304453][T17041] block nbd0: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 30 seconds [ 1032.309166][T17041] block nbd0: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 30 seconds [ 1032.314440][T17041] block nbd0: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 30 seconds [ 1042.363941][ T42] audit: type=1326 audit(1786468375.364:29279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.7.3396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1042.422528][ T42] audit: type=1326 audit(1786468375.364:29280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.7.3396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1042.431411][ T42] audit: type=1326 audit(1786468375.424:29281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.7.3396" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1042.440743][ T42] audit: type=1326 audit(1786468375.424:29282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.7.3396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1042.457188][ T42] audit: type=1326 audit(1786468375.444:29283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.7.3396" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1042.691938][ T42] audit: type=1326 audit(1786468375.684:29284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.7.3396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1042.704142][ T42] audit: type=1326 audit(1786468375.694:29285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.7.3396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1044.170523][T21608] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 1044.320815][T21608] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1044.327866][T21608] usb 13-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1044.336414][T21608] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1044.343908][T21608] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1044.350713][T21608] usb 13-1: Product: syz [ 1044.354789][T21608] usb 13-1: Manufacturer: syz [ 1044.359264][T21608] usb 13-1: SerialNumber: syz [ 1044.370874][T21608] usb 13-1: config 0 descriptor?? [ 1044.381954][T21608] usb 13-1: selecting invalid altsetting 0 [ 1045.045122][T24366] usb 13-1: USB disconnect, device number 4 [ 1045.755416][T25355] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1047.977656][T26785] Invalid ELF header magic: != ELF [ 1048.049834][T26790] fuse: fd is not a fuse device [ 1048.792396][T25355] Bluetooth: hci4: unexpected event for opcode 0x202d [ 1049.152397][ T5898] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 1049.340364][ T5898] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1049.345998][ T5898] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.350730][ T5898] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.355708][ T5898] usb 13-1: config 0 descriptor?? [ 1050.110932][ T5898] usbhid 13-1:0.0: can't add hid device: -71 [ 1050.119001][ T5898] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 1050.185263][ T5898] usb 13-1: USB disconnect, device number 5 [ 1050.973655][T26839] fuse: fd is not a fuse device [ 1054.052389][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.055869][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.472128][T25355] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1056.159890][ T852] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1056.315675][ T852] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1056.326821][ T852] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.332137][ T852] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.346011][ T852] usb 11-1: config 0 descriptor?? [ 1056.685980][T26894] fuse: Bad value for 'fd' [ 1057.188596][ T852] usbhid 11-1:0.0: can't add hid device: -71 [ 1057.191554][ T852] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1057.197071][ T852] usb 11-1: USB disconnect, device number 3 [ 1057.922782][T26904] fuse: fd is not a fuse device [ 1061.120474][T21608] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 1061.328061][T21608] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1061.332309][T21608] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.336858][T21608] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.343532][T21608] usb 13-1: config 0 descriptor?? [ 1062.144260][T26962] fuse: fd is not a fuse device [ 1062.238465][T21608] usbhid 13-1:0.0: can't add hid device: -71 [ 1062.241522][T21608] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 1062.245422][T21608] usb 13-1: USB disconnect, device number 6 [ 1062.382609][T17041] block nbd0: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 60 seconds [ 1062.387207][T17041] block nbd0: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 60 seconds [ 1062.393286][T17041] block nbd0: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 60 seconds [ 1062.397980][T17041] block nbd0: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 60 seconds [ 1063.182183][T26977] jffs2: notice: (26977) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1063.611856][T26987] autofs4:pid:26987:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 1064.041017][ T42] audit: type=1800 audit(1786468397.034:29286): pid=26969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3463" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 1064.125469][T25516] IPVS: starting estimator thread 0... [ 1064.133658][T26993] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3468'. [ 1064.239975][T26998] IPVS: using max 44 ests per chain, 105600 per kthread [ 1064.313959][T27006] netlink: 'syz.7.3469': attribute type 10 has an invalid length. [ 1064.709019][T27006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.722970][T27006] team0: Port device bond0 added [ 1064.744709][ T42] audit: type=1326 audit(1786468397.744:29287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27008 comm="syz.6.3471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x7ffc0000 [ 1064.764339][ T42] audit: type=1326 audit(1786468397.744:29288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27008 comm="syz.6.3471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x7ffc0000 [ 1064.795443][ T42] audit: type=1326 audit(1786468397.784:29289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27008 comm="syz.6.3471" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fe3fec code=0x7ffc0000 [ 1064.828064][ T42] audit: type=1326 audit(1786468397.824:29290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27008 comm="syz.6.3471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x7ffc0000 [ 1064.845479][ T42] audit: type=1326 audit(1786468397.834:29291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27008 comm="syz.6.3471" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fe3fec code=0x7ffc0000 [ 1064.865491][ T42] audit: type=1326 audit(1786468397.834:29292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27008 comm="syz.6.3471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x7ffc0000 [ 1064.889854][ T42] audit: type=1326 audit(1786468397.854:29293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27008 comm="syz.6.3471" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7fe3fec code=0x7ffc0000 [ 1064.914517][ T42] audit: type=1326 audit(1786468397.864:29294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27008 comm="syz.6.3471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x7ffc0000 [ 1064.934170][ T42] audit: type=1326 audit(1786468397.874:29295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27008 comm="syz.6.3471" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3fec code=0x7ffc0000 [ 1065.057739][T26999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3466'. [ 1065.450102][ T40] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 1065.600766][ T40] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1065.615301][ T40] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1065.619514][ T40] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1065.625918][ T40] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1065.639413][ T40] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1065.654719][ T40] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1065.669379][ T40] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1065.676486][ T40] usb 12-1: Product: syz [ 1065.683854][ T40] usb 12-1: Manufacturer: syz [ 1065.780212][T25355] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1065.997776][ T40] cdc_wdm 12-1:1.0: skipping garbage [ 1066.000525][ T40] cdc_wdm 12-1:1.0: skipping garbage [ 1066.004784][ T40] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 1066.006684][ T40] cdc_wdm 12-1:1.0: Unknown control protocol [ 1067.084237][T27015] futex_wake_op: syz.7.3472 tries to shift op by 144; fix this program [ 1067.088099][T27015] futex_wake_op: syz.7.3472 tries to shift op by 144; fix this program [ 1068.134890][T21608] usb 12-1: USB disconnect, device number 3 [ 1068.442344][T27050] Invalid ELF header magic: != ELF [ 1068.451953][T27050] overlayfs: overlapping lowerdir path [ 1068.523063][T25355] Bluetooth: unknown link type 116 [ 1068.528161][T25355] Bluetooth: hci4: connection err: -111 [ 1068.644482][T27056] binder: 27055:27056 ioctl c00c6211 0 returned -14 [ 1070.879925][ T8228] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 1071.057127][ T8228] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1071.062030][ T8228] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1071.065702][ T8228] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1071.069887][ T8228] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1071.074676][ T8228] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1071.079094][ T8228] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1071.085433][ T8228] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1071.089467][ T8228] usb 11-1: Product: syz [ 1071.092583][ T8228] usb 11-1: Manufacturer: syz [ 1071.157293][ T8228] cdc_wdm 11-1:1.0: skipping garbage [ 1071.159508][ T8228] cdc_wdm 11-1:1.0: skipping garbage [ 1071.171499][ T8228] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 1071.207259][ T8228] cdc_wdm 11-1:1.0: Unknown control protocol [ 1071.456474][T27103] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1071.462825][T27103] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1071.469506][T27103] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1071.490190][T27103] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1071.509421][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 1071.509433][ T42] audit: type=1800 audit(1786468404.504:29309): pid=27104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3493" name="attr_allow_any_host" dev="configfs" ino=74824 res=0 errno=0 [ 1071.521373][T27104] nvmet: adding nsid 1 to subsystem testnqn [ 1071.538836][ T42] audit: type=1800 audit(1786468404.534:29310): pid=27104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3493" name="addr_trtype" dev="configfs" ino=74831 res=0 errno=0 [ 1071.564566][ T42] audit: type=1800 audit(1786468404.534:29311): pid=27104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3493" name="addr_adrfam" dev="configfs" ino=74832 res=0 errno=0 [ 1071.574423][ T42] audit: type=1800 audit(1786468404.564:29312): pid=27104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3493" name="addr_traddr" dev="configfs" ino=73525 res=0 errno=0 [ 1071.591445][T27103] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 1071.597433][ T42] audit: type=1800 audit(1786468404.584:29313): pid=27103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3493" name="addr_trsvcid" dev="configfs" ino=74833 res=0 errno=0 [ 1071.659213][T27103] nvme nvme0: rdma connection establishment failed (-104) [ 1071.953442][T27091] futex_wake_op: syz.6.3489 tries to shift op by 144; fix this program [ 1071.956677][T27091] futex_wake_op: syz.6.3489 tries to shift op by 144; fix this program [ 1072.896975][T27119] netlink: 'syz.5.3495': attribute type 10 has an invalid length. [ 1072.905881][T27119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.909624][T27119] team0: Port device bond0 added [ 1072.996303][T27119] veth1_vlan: left promiscuous mode [ 1073.095861][T27119] veth0_vlan: left promiscuous mode [ 1073.099641][T27119] veth0_vlan: entered promiscuous mode [ 1073.109100][T27119] veth1_vlan: entered promiscuous mode [ 1073.130842][T27119] veth1_macvtap: left promiscuous mode [ 1073.134156][T27119] veth0_macvtap: left promiscuous mode [ 1073.140742][T27119] veth0_macvtap: entered promiscuous mode [ 1073.150023][T27119] veth1_macvtap: entered promiscuous mode [ 1073.166260][T27119] batman_adv: batadv0: Interface activated: ipvlan2 [ 1073.176097][T27119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1073.182796][T27119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1073.186935][T27119] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1073.193087][T27119] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1073.198615][T27119] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1073.205001][T27119] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1073.229902][ T6653] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.232512][ T6653] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.235095][ T6653] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.237673][ T6653] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.246161][ T6653] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.249337][T24366] openvswitch: cpu_id mismatch with handler threads [ 1073.251845][ T6653] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.259838][ T6653] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.262500][ T6653] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.640057][T10180] openvswitch: cpu_id mismatch with handler threads [ 1074.212127][ T8228] openvswitch: cpu_id mismatch with handler threads [ 1074.378710][ T8228] usb 11-1: USB disconnect, device number 4 [ 1074.602095][T27142] jffs2: notice: (27142) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1074.700196][T10180] openvswitch: cpu_id mismatch with handler threads [ 1074.700428][T10180] openvswitch: cpu_id mismatch with handler threads [ 1074.809674][T27145] bond1 (unregistering): Released all slaves [ 1075.270326][T14291] openvswitch: cpu_id mismatch with handler threads [ 1075.400166][ C2] hpet: Lost 1 RTC interrupts [ 1076.287210][ T42] audit: type=1326 audit(1786468409.284:29314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27162 comm="syz.5.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1076.295744][ T42] audit: type=1326 audit(1786468409.294:29315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27162 comm="syz.5.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1076.306639][ T42] audit: type=1326 audit(1786468409.304:29316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27162 comm="syz.5.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1076.316494][ T42] audit: type=1326 audit(1786468409.314:29317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27162 comm="syz.5.3514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1076.868561][T27179] netlink: 'syz.6.3507': attribute type 10 has an invalid length. [ 1076.991344][T27179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.001861][T27179] team0: Port device bond0 added [ 1077.215326][T27183] bridge0: port 3(vlan2) entered blocking state [ 1077.217492][T27183] bridge0: port 3(vlan2) entered forwarding state [ 1078.690747][ C3] openvswitch: cpu_id mismatch with handler threads [ 1080.132985][T27215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3517'. [ 1081.027537][T27228] netlink: 'syz.6.3520': attribute type 10 has an invalid length. [ 1081.158485][T27228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.266481][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 1082.266498][ T42] audit: type=1326 audit(1786468415.264:29345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1082.299071][ T42] audit: type=1326 audit(1786468415.294:29346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1082.323153][ T42] audit: type=1326 audit(1786468415.294:29347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1082.332600][ T42] audit: type=1326 audit(1786468415.294:29348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1082.346015][ T42] audit: type=1326 audit(1786468415.344:29349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1082.356855][ T42] audit: type=1326 audit(1786468415.354:29350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1082.369439][ T42] audit: type=1326 audit(1786468415.364:29351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1082.383354][ T42] audit: type=1326 audit(1786468415.384:29352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1082.391685][ T42] audit: type=1326 audit(1786468415.394:29353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1082.410130][ T42] audit: type=1326 audit(1786468415.404:29354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27239 comm="syz.8.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1085.754248][T27296] fuse: fd is not a fuse device [ 1086.047249][T27302] ip6t_rpfilter: unknown options [ 1086.690194][ C3] openvswitch: cpu_id mismatch with handler threads [ 1088.209995][ T852] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1088.236997][T27333] program syz.8.3546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1088.372404][ T852] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1088.382150][ T852] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1088.385898][ T852] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1088.390189][ T852] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1088.393846][ T852] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1088.397485][ T852] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1088.405683][ T852] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1088.408533][ T852] usb 10-1: Product: syz [ 1088.410177][ T852] usb 10-1: Manufacturer: syz [ 1088.452532][ T852] cdc_wdm 10-1:1.0: skipping garbage [ 1088.454504][ T852] cdc_wdm 10-1:1.0: skipping garbage [ 1088.471277][ T852] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1088.473320][ T852] cdc_wdm 10-1:1.0: Unknown control protocol [ 1089.064262][ C0] cdc_wdm 10-1:1.0: Unexpected error -71 [ 1089.071910][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1089.074303][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1089.077747][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1089.078722][ T852] usb 10-1: USB disconnect, device number 10 [ 1089.080419][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1089.080436][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1089.987356][T27341] fuse: fd is not a fuse device [ 1091.197333][T27365] Bluetooth: MGMT ver 1.23 [ 1092.243506][T27382] fuse: fd is not a fuse device [ 1092.331190][T27383] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1092.334203][T27383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1092.345655][T27383] vhci_hcd vhci_hcd.0: Device attached [ 1092.589969][ T5898] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 1092.606329][T17041] block nbd0: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 90 seconds [ 1092.612319][T17041] block nbd0: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 90 seconds [ 1092.616400][T17041] block nbd0: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 90 seconds [ 1092.621756][T17041] block nbd0: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 90 seconds [ 1092.668150][T27383] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1092.700530][ T852] usb 52-1: SetAddress Request (2) to port 0 [ 1092.703467][ T852] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1092.741254][ T5898] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1092.748162][ T5898] usb 11-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.753957][ T5898] usb 11-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1092.757044][ T5898] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.850636][T27384] vhci_hcd: connection reset by peer [ 1092.857060][T10180] vhci_hcd vhci_hcd.7: stop threads [ 1092.858852][T10180] vhci_hcd vhci_hcd.7: release socket [ 1092.860705][T10180] vhci_hcd vhci_hcd.7: disconnect device [ 1093.159837][ T8228] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1093.321191][ T8228] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1093.327776][ T8228] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1093.334574][ T8228] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1093.339318][ T8228] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1093.342440][ T8228] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1093.345911][ T8228] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1093.354359][ T8228] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1093.358703][ T8228] usb 10-1: Product: syz [ 1093.362030][ T8228] usb 10-1: Manufacturer: syz [ 1093.373466][ T8228] cdc_wdm 10-1:1.0: skipping garbage [ 1093.375211][ T8228] cdc_wdm 10-1:1.0: skipping garbage [ 1093.378693][ T8228] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1093.380639][ T8228] cdc_wdm 10-1:1.0: Unknown control protocol [ 1093.682651][T27406] pim6reg: entered allmulticast mode [ 1093.687312][T27406] pim6reg: left allmulticast mode [ 1094.357063][T27415] fuse: fd is not a fuse device [ 1094.742947][T27407] futex_wake_op: syz.5.3560 tries to shift op by 144; fix this program [ 1094.747001][T27407] futex_wake_op: syz.5.3560 tries to shift op by 144; fix this program [ 1094.924320][T27424] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1094.927093][T27424] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1094.949091][T27424] vhci_hcd vhci_hcd.0: Device attached [ 1095.357432][ T5898] usb 11-1: USB disconnect, device number 5 [ 1095.411139][T25366] wlan0: Trigger new scan to find an IBSS to join [ 1095.477558][T27432] fuse: fd is not a fuse device [ 1095.690400][T27425] vhci_hcd: connection closed [ 1095.691917][T10180] vhci_hcd vhci_hcd.7: stop threads [ 1095.695945][T10180] vhci_hcd vhci_hcd.7: release socket [ 1095.702358][T10180] vhci_hcd vhci_hcd.7: disconnect device [ 1095.836855][ T5898] usb 10-1: USB disconnect, device number 11 [ 1097.739958][ T852] usb 52-1: device descriptor read/8, error -110 [ 1097.894816][T27453] fuse: fd is not a fuse device [ 1098.142199][ T852] usb usb52-port1: attempt power cycle [ 1098.283163][T27458] fuse: fd is not a fuse device [ 1098.459903][T25364] wlan0: Trigger new scan to find an IBSS to join [ 1098.766348][ T852] usb usb52-port1: unable to enumerate USB device [ 1100.069998][ T40] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 1100.225618][ T40] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1100.230662][ T40] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1100.234304][ T40] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1100.238153][ T40] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1100.243160][ T40] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1100.248012][ T40] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1100.254757][ T40] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1100.257399][ T40] usb 12-1: Product: syz [ 1100.259240][ T40] usb 12-1: Manufacturer: syz [ 1100.269898][ T40] cdc_wdm 12-1:1.0: skipping garbage [ 1100.271703][ T40] cdc_wdm 12-1:1.0: skipping garbage [ 1100.276276][ T40] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 1100.278256][ T40] cdc_wdm 12-1:1.0: Unknown control protocol [ 1100.947595][T27476] futex_wake_op: syz.7.3580 tries to shift op by 144; fix this program [ 1100.953089][T27476] futex_wake_op: syz.7.3580 tries to shift op by 144; fix this program [ 1101.221024][T27493] fuse: fd is not a fuse device [ 1101.499926][T25366] wlan0: Trigger new scan to find an IBSS to join [ 1101.529416][T27497] fuse: fd is not a fuse device [ 1101.787752][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 1101.787769][ T42] audit: type=1326 audit(1786468434.784:29371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1101.798752][ T42] audit: type=1326 audit(1786468434.794:29372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1101.807173][ T42] audit: type=1326 audit(1786468434.804:29373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1101.817434][ T42] audit: type=1326 audit(1786468434.814:29374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1101.825402][ T42] audit: type=1326 audit(1786468434.814:29375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1101.835661][ T42] audit: type=1326 audit(1786468434.814:29376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1101.846732][ T42] audit: type=1326 audit(1786468434.814:29377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1101.858367][ T42] audit: type=1326 audit(1786468434.814:29378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1101.870392][ T42] audit: type=1326 audit(1786468434.814:29379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1101.884951][ T42] audit: type=1326 audit(1786468434.814:29380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.8.3587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1102.418805][T25345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.690058][ C3] openvswitch: cpu_id mismatch with handler threads [ 1103.008464][ T1352] usb 12-1: USB disconnect, device number 4 [ 1104.153327][T27527] fuse: fd is not a fuse device [ 1104.919131][T27533] fuse: fd is not a fuse device [ 1105.359990][T27543] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3606'. [ 1106.060289][T14294] e1000 0000:00:06.0 eth0: Reset adapter [ 1107.619926][T25516] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 1107.772213][T25516] usb 12-1: Using ep0 maxpacket: 32 [ 1107.777437][T25516] usb 12-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1107.782986][T25516] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.787797][T25516] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1107.796152][T25516] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.799533][T25516] usb 12-1: Product: syz [ 1107.801847][T25516] usb 12-1: Manufacturer: syz [ 1107.803885][T25516] usb 12-1: SerialNumber: syz [ 1107.834540][T27585] fuse: fd is not a fuse device [ 1108.020442][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3604'. [ 1108.291142][T24366] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1108.452667][T27593] binder: 27592:27593 ioctl c00c6211 0 returned -14 [ 1110.141726][T25516] usb 12-1: USB disconnect, device number 5 [ 1114.061084][ T5144] udevd[5144]: worker [25801] /devices/virtual/block/nbd0 is taking a long time [ 1115.491950][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.494116][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.479220][T27626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3612'. [ 1117.192140][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 1117.192158][ T42] audit: type=1326 audit(1786468450.184:29422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27630 comm="syz.7.3615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1117.216890][T27637] fuse: fd is not a fuse device [ 1117.225161][ T42] audit: type=1326 audit(1786468450.214:29423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27630 comm="syz.7.3615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1117.266448][ T42] audit: type=1326 audit(1786468450.234:29424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27630 comm="syz.7.3615" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1117.354625][ T42] audit: type=1326 audit(1786468450.354:29425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27630 comm="syz.7.3615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1117.365459][ T42] audit: type=1326 audit(1786468450.354:29426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27630 comm="syz.7.3615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1117.560944][T27642] binder: 27641:27642 ioctl c00c6211 0 returned -14 [ 1119.420298][T14294] e1000 0000:00:06.0 eth0: Reset adapter [ 1119.504079][T27657] veth0: entered promiscuous mode [ 1119.507470][T27659] veth0: left promiscuous mode [ 1119.543626][T27660] pim6reg: entered allmulticast mode [ 1119.560081][T27662] pim6reg: left allmulticast mode [ 1119.746684][T27682] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3622'. [ 1120.983004][T27703] fuse: fd is not a fuse device [ 1120.992305][T25516] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 1121.027119][T27704] fuse: fd is not a fuse device [ 1121.150648][T25516] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1121.155362][T25516] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1121.158385][T25516] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1121.161699][T25516] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1121.164537][T25516] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1121.167928][T25516] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1121.175857][T25516] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1121.178397][T25516] usb 13-1: Product: syz [ 1121.179690][T25516] usb 13-1: Manufacturer: syz [ 1121.187440][T25516] cdc_wdm 13-1:1.0: skipping garbage [ 1121.189584][T25516] cdc_wdm 13-1:1.0: skipping garbage [ 1121.194550][T25516] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 1121.196573][T25516] cdc_wdm 13-1:1.0: Unknown control protocol [ 1121.805342][ C1] cdc_wdm 13-1:1.0: Unexpected error -71 [ 1121.807169][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.809175][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.811029][ T8228] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1121.811453][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.816464][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.818690][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.820848][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.823369][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.825592][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.827804][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.829939][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.832094][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.834179][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.836523][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.839338][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.844012][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.846789][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.852091][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.854247][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.856374][ C1] cdc_wdm 13-1:1.0: nonzero urb status received: -71 [ 1121.858491][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - 0 bytes [ 1121.862493][T25516] usb 13-1: USB disconnect, device number 7 [ 1121.862565][ C1] cdc_wdm 13-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1123.170595][T17041] block nbd0: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 120 seconds [ 1123.175150][T17041] block nbd0: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 120 seconds [ 1123.180048][T17041] block nbd0: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 120 seconds [ 1123.184702][T17041] block nbd0: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 120 seconds [ 1134.690356][T25345] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1135.980242][ C3] openvswitch: cpu_id mismatch with handler threads [ 1136.327424][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.342847][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.355493][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.384763][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.399623][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.418567][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.455093][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.460951][T27729] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1136.463232][T27729] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1136.478076][T27729] vhci_hcd vhci_hcd.0: Device attached [ 1136.572037][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.585583][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.589653][T27725] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1136.835742][T25516] usb 54-1: SetAddress Request (2) to port 0 [ 1136.843669][T25516] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1137.136698][T27730] vhci_hcd: connection reset by peer [ 1137.161479][T10180] vhci_hcd vhci_hcd.8: stop threads [ 1137.164509][T10180] vhci_hcd vhci_hcd.8: release socket [ 1137.168946][T10180] vhci_hcd vhci_hcd.8: disconnect device [ 1137.992313][ T42] audit: type=1326 audit(1786468470.984:29427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27737 comm="syz.7.3631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1138.007786][ T42] audit: type=1326 audit(1786468470.984:29428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27737 comm="syz.7.3631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1138.031472][ T42] audit: type=1326 audit(1786468470.994:29429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27737 comm="syz.7.3631" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1138.049404][ T42] audit: type=1326 audit(1786468470.994:29430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27737 comm="syz.7.3631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1138.070454][ T42] audit: type=1326 audit(1786468470.994:29431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27737 comm="syz.7.3631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1138.104041][ T42] audit: type=1326 audit(1786468471.024:29432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27737 comm="syz.7.3631" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1138.136520][ T42] audit: type=1326 audit(1786468471.024:29433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27737 comm="syz.7.3631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1138.155993][ T42] audit: type=1326 audit(1786468471.064:29434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27737 comm="syz.7.3631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1138.979389][T27746] binder: 27745:27746 ioctl c00c6211 0 returned -14 [ 1141.696412][T27766] fuse: fd is not a fuse device [ 1141.830923][T27768] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3634'. [ 1141.889909][T25516] usb 54-1: device descriptor read/8, error -110 [ 1142.300925][T25516] usb usb54-port1: attempt power cycle [ 1142.903991][T25516] usb usb54-port1: unable to enumerate USB device [ 1142.955857][T25355] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1142.959627][T27786] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1142.986614][T27786] input: syz0 as /devices/virtual/input/input18 [ 1143.067474][T27795] pim6reg: entered allmulticast mode [ 1143.117437][T27795] pim6reg: left allmulticast mode [ 1143.692967][T27806] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3643'. [ 1144.610899][ T8228] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1153.251144][ T1304] block nbd0: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 150 seconds [ 1153.254963][ T1304] block nbd0: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 150 seconds [ 1153.259002][ T1304] block nbd0: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 150 seconds [ 1153.262734][ T1304] block nbd0: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 150 seconds [ 1159.397754][T27836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3651'. [ 1159.404984][T27835] netlink: 'syz.6.3648': attribute type 11 has an invalid length. [ 1159.457675][T27840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1159.479321][T27840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1159.540114][T27842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.738057][T27857] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3652'. [ 1160.754310][T27857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3652'. [ 1162.285703][T27889] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3655'. [ 1162.840253][T24366] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 1163.000176][T24366] usb 13-1: Using ep0 maxpacket: 32 [ 1163.024362][T24366] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1163.031229][T24366] usb 13-1: config 0 has no interfaces? [ 1163.038203][T24366] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1163.045974][T24366] usb 13-1: Product: syz [ 1163.047501][T24366] usb 13-1: Manufacturer: syz [ 1163.049451][T24366] usb 13-1: SerialNumber: syz [ 1163.083505][T24366] usb 13-1: config 0 descriptor?? [ 1164.321282][T14291] usb 13-1: USB disconnect, device number 8 [ 1164.564018][T27945] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3662'. [ 1164.574759][T27942] netlink: 'syz.7.3663': attribute type 1 has an invalid length. [ 1164.582986][T27942] netlink: 756 bytes leftover after parsing attributes in process `syz.7.3663'. [ 1164.647220][T27949] input: syz0 as /devices/virtual/input/input19 [ 1164.759507][ T42] audit: type=1326 audit(1786468497.754:29435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1164.769031][ T42] audit: type=1326 audit(1786468497.764:29436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1164.779084][ T42] audit: type=1326 audit(1786468497.764:29437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1164.788477][ T42] audit: type=1326 audit(1786468497.764:29438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1164.797965][ T42] audit: type=1326 audit(1786468497.764:29439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1164.817893][ T42] audit: type=1326 audit(1786468497.764:29440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1164.835589][ T42] audit: type=1326 audit(1786468497.764:29441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1164.850865][ T42] audit: type=1326 audit(1786468497.764:29442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1164.859520][ T42] audit: type=1326 audit(1786468497.764:29443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1164.861161][T24366] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1164.871424][ T42] audit: type=1326 audit(1786468497.764:29444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27938 comm="syz.5.3661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1166.052729][T25365] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1173.540177][ C2] hpet_rtc_timer_reinit: 18 callbacks suppressed [ 1173.540213][ C2] hpet: Lost 1 RTC interrupts [ 1176.931570][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.885414][T27970] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1181.008500][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3668'. [ 1181.306143][T27983] program syz.5.3669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1181.337072][T27982] Console: switching to colour dummy device 80x25 [ 1181.959516][T27986] md/raid:md0: not clean -- starting background reconstruction [ 1181.962454][T27986] md/raid:md0: device ram0 operational as raid disk 0 [ 1182.017536][T27986] md/raid:md0: not enough operational devices (3/4 failed) [ 1182.426761][T25516] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1182.482343][T27983] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1182.511098][ C2] hpet: Lost 1 RTC interrupts [ 1182.518846][T27983] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 1182.522150][T27983] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 1182.526072][T27983] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1182.545672][T27983] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1182.575286][T25516] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1182.579325][T25516] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.583003][T25516] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1182.586553][T25516] usb 5-1: Dual-Role OTG device on HNP port [ 1182.588782][T25516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.597327][T27986] md/raid:md0: failed to run raid set. [ 1182.600576][T27986] md: pers->run() failed ... [ 1182.601377][ C1] ------------[ cut here ]------------ [ 1182.603945][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 1182.606437][ C1] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#1: swapper/1/0 [ 1182.609878][ C1] Modules linked in: [ 1182.612171][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.615608][ C1] Tainted: [L]=SOFTLOCKUP [ 1182.616986][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1182.620137][ C1] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 1182.621867][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 5a df 63 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 e0 35 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 80 28 b7 8c [ 1182.627782][ C1] RSP: 0000:ffffc90000590a10 EFLAGS: 00010046 [ 1182.629713][ C1] RAX: dffffc0000000000 RBX: ffff888021e800e0 RCX: ffffffff8cb76c80 [ 1182.632209][ C1] RDX: 0000000000000081 RSI: ffffffff8cb735e0 RDI: ffffffff912f76b0 [ 1182.634880][ C1] RBP: 0000000000000081 R08: ffffffff8cb728c0 R09: 0000000000000000 [ 1182.637561][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cb728c0 [ 1182.640180][ C1] R13: 0000000000000000 R14: ffff888021e800e0 R15: ffff888013115120 [ 1182.642744][ C1] FS: 0000000000000000(0000) GS:ffff888096cf3000(0000) knlGS:0000000000000000 [ 1182.645585][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1182.647639][ C1] CR2: 00000000800c4018 CR3: 000000007874e000 CR4: 0000000000352ef0 [ 1182.650358][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1182.653082][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1182.655850][ C1] Call Trace: [ 1182.656936][ C1] [ 1182.657884][ C1] hidg_set_alt+0x190/0xa10 [ 1182.659399][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1182.661130][ C1] ? rcu_is_watching+0x12/0xc0 [ 1182.662791][ C1] composite_setup+0x2ccf/0x9290 [ 1182.664644][ C1] ? __pfx_composite_setup+0x10/0x10 [ 1182.666368][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1182.668155][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1182.669777][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1182.671623][ C1] ? configfs_composite_setup+0xfb/0x130 [ 1182.673499][ C1] configfs_composite_setup+0xfb/0x130 [ 1182.675275][ C1] dummy_timer+0x2045/0x36f0 [ 1182.676819][ C1] ? posix_cpu_timers_work+0x11b0/0x1270 [ 1182.678593][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1182.680229][ C1] ? find_held_lock+0x2b/0x80 [ 1182.681753][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1182.683779][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1182.685697][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1182.687788][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1182.689635][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1182.691610][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1182.693469][ C1] ? rcu_is_watching+0x12/0xc0 [ 1182.695081][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1182.697003][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1182.698619][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1182.700308][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1182.701947][ C1] handle_softirqs+0x1ea/0x9b0 [ 1182.703566][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1182.705240][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1182.706865][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1182.708636][ C1] __irq_exit_rcu+0x162/0x210 [ 1182.710226][ C1] irq_exit_rcu+0x9/0x30 [ 1182.711614][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1182.713459][ C1] [ 1182.714432][ C1] [ 1182.715382][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1182.717331][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1182.719187][ C1] Code: 65 8e 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 7d 13 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1182.725293][ C1] RSP: 0000:ffffc9000046fe00 EFLAGS: 00000202 [ 1182.727325][ C1] RAX: 0000000000e119ef RBX: ffff88801c73a540 RCX: ffffffff8bb82335 [ 1182.729874][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a2c56 RDI: ffffffff8c3fe580 [ 1182.732465][ C1] RBP: ffffed10038e74a8 R08: 0000000000000001 R09: ffffed100566678d [ 1182.734975][ C1] R10: ffff88802b333c6b R11: 0000000000000000 R12: 0000000000000000 [ 1182.737471][ C1] R13: 0000000000000000 R14: 1ffff9200008dfc4 R15: dffffc0000000000 [ 1182.740014][ C1] ? ct_kernel_exit+0x125/0x180 [ 1182.741609][ C1] default_idle+0x9/0x10 [ 1182.743024][ C1] default_idle_call+0x6c/0xb0 [ 1182.744584][ C1] do_idle+0x3a7/0x5b0 [ 1182.745902][ C1] ? __pfx_do_idle+0x10/0x10 [ 1182.747371][ C1] ? do_idle+0x10/0x5b0 [ 1182.748720][ C1] cpu_startup_entry+0x4f/0x60 [ 1182.750291][ C1] start_secondary+0x21d/0x2d0 [ 1182.751834][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1182.753577][ C1] common_startup_64+0x13e/0x158 [ 1182.755169][ C1] [ 1182.756229][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1182.758632][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.762115][ C1] Tainted: [L]=SOFTLOCKUP [ 1182.763566][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1182.766798][ C1] Call Trace: [ 1182.767885][ C1] [ 1182.768835][ C1] dump_stack_lvl+0x100/0x190 [ 1182.770407][ C1] vpanic+0x552/0x970 [ 1182.771693][ C1] ? __pfx_vpanic+0x10/0x10 [ 1182.773428][ C1] panic+0xd1/0xe0 [ 1182.774978][ C1] ? __pfx_panic+0x10/0x10 [ 1182.776433][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1182.778106][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1182.779820][ C1] ? usb_ep_enable+0x3e6/0x490 [ 1182.781287][ C1] __warn.cold+0x191/0x318 [ 1182.782858][ C1] __report_bug+0x30f/0x440 [ 1182.784416][ C1] ? usb_ep_enable+0x3e6/0x490 [ 1182.786070][ C1] ? __pfx___report_bug+0x10/0x10 [ 1182.787812][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1182.789778][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 1182.791446][ C1] report_bug_entry+0xe1/0x290 [ 1182.793026][ C1] ? usb_ep_enable+0x3f8/0x490 [ 1182.794570][ C1] handle_bug+0x1cd/0x2a0 [ 1182.795976][ C1] exc_invalid_op+0x17/0x50 [ 1182.797453][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1182.799042][ C1] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 1182.800772][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 5a df 63 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 e0 35 b7 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 80 28 b7 8c [ 1182.806900][ C1] RSP: 0000:ffffc90000590a10 EFLAGS: 00010046 [ 1182.808875][ C1] RAX: dffffc0000000000 RBX: ffff888021e800e0 RCX: ffffffff8cb76c80 [ 1182.811381][ C1] RDX: 0000000000000081 RSI: ffffffff8cb735e0 RDI: ffffffff912f76b0 [ 1182.814090][ C1] RBP: 0000000000000081 R08: ffffffff8cb728c0 R09: 0000000000000000 [ 1182.816662][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cb728c0 [ 1182.819270][ C1] R13: 0000000000000000 R14: ffff888021e800e0 R15: ffff888013115120 [ 1182.821873][ C1] hidg_set_alt+0x190/0xa10 [ 1182.823299][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1182.824927][ C1] ? rcu_is_watching+0x12/0xc0 [ 1182.826499][ C1] composite_setup+0x2ccf/0x9290 [ 1182.828079][ C1] ? __pfx_composite_setup+0x10/0x10 [ 1182.829797][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1182.831513][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1182.833208][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1182.834936][ C1] ? configfs_composite_setup+0xfb/0x130 [ 1182.836808][ C1] configfs_composite_setup+0xfb/0x130 [ 1182.838610][ C1] dummy_timer+0x2045/0x36f0 [ 1182.840096][ C1] ? posix_cpu_timers_work+0x11b0/0x1270 [ 1182.841938][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1182.843570][ C1] ? find_held_lock+0x2b/0x80 [ 1182.845089][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1182.846945][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1182.848827][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1182.850712][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1182.852682][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1182.855149][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1182.857083][ C1] ? rcu_is_watching+0x12/0xc0 [ 1182.858812][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1182.861071][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1182.863200][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1182.865350][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1182.867491][ C1] handle_softirqs+0x1ea/0x9b0 [ 1182.869416][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1182.871404][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1182.873227][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1182.875079][ C1] __irq_exit_rcu+0x162/0x210 [ 1182.876590][ C1] irq_exit_rcu+0x9/0x30 [ 1182.877945][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1182.879733][ C1] [ 1182.880850][ C1] [ 1182.881832][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1182.884224][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1182.886417][ C1] Code: 65 8e 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 7d 13 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1182.894229][ C1] RSP: 0000:ffffc9000046fe00 EFLAGS: 00000202 [ 1182.896771][ C1] RAX: 0000000000e119ef RBX: ffff88801c73a540 RCX: ffffffff8bb82335 [ 1182.900149][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a2c56 RDI: ffffffff8c3fe580 [ 1182.903397][ C1] RBP: ffffed10038e74a8 R08: 0000000000000001 R09: ffffed100566678d [ 1182.906704][ C1] R10: ffff88802b333c6b R11: 0000000000000000 R12: 0000000000000000 [ 1182.910101][ C1] R13: 0000000000000000 R14: 1ffff9200008dfc4 R15: dffffc0000000000 [ 1182.913464][ C1] ? ct_kernel_exit+0x125/0x180 [ 1182.915596][ C1] default_idle+0x9/0x10 [ 1182.917380][ C1] default_idle_call+0x6c/0xb0 [ 1182.919455][ C1] do_idle+0x3a7/0x5b0 [ 1182.921228][ C1] ? __pfx_do_idle+0x10/0x10 [ 1182.923258][ C1] ? do_idle+0x10/0x5b0 [ 1182.925038][ C1] cpu_startup_entry+0x4f/0x60 [ 1182.927081][ C1] start_secondary+0x21d/0x2d0 [ 1182.929168][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1182.931432][ C1] common_startup_64+0x13e/0x158 [ 1182.933564][ C1] [ 1182.935700][ C1] Kernel Offset: disabled [ 1182.937477][ C1] Rebooting in 86400 seconds..